[Distutils] bandersnatch update

[Christian Theune]

Hi,

On 2013-04-06 19:56:19 +0000, Ralf Schmitt said:
> does bandersnatch support some kind of "selective mirroring"? e.g. only
> mirror sdists or only a certain list of packages?

At the moment it does not. My primary goal is currently to provide a 
stable solution to reliably run mirrors in the sense of PEP 381.

The internal mechanisms of PEP 381 and the way that clients can 
authenticate the mirrored packages is not compatible with a partial 
mirror as the index pages are not generated but taken byte-by-byte so 
they can be verified with PyPIs cryptographic signature on them.

I can see that this would be useful. However, my current knowledge is 
that the way to authenticate the packages will change in the "near" 
future: Richard Jones mentioned that "the update framework" would be 
interesting for this. I do not know yet what the implications for the 
mirrors will be, but I don't want to invest too much time into 
complexity that I need to rework in the near future.

Christian