[Distutils] bandersnatch update

[Ralf Schmitt]

Christian Theune <ct at gocept.com> writes:

> Hi,
>
> On 2013-04-06 19:56:19 +0000, Ralf Schmitt said:
>> does bandersnatch support some kind of "selective mirroring"? e.g. only
>> mirror sdists or only a certain list of packages?
>
> At the moment it does not. My primary goal is currently to provide a
> stable solution to reliably run mirrors in the sense of PEP 381.
>
> The internal mechanisms of PEP 381 and the way that clients can
> authenticate the mirrored packages is not compatible with a partial
> mirror as the index pages are not generated but taken byte-by-byte so
> they can be verified with PyPIs cryptographic signature on them.
>
> I can see that this would be useful. However, my current knowledge is
> that the way to authenticate the packages will change in the "near"
> future: Richard Jones mentioned that "the update framework" would be
> interesting for this. I do not know yet what the implications for the
> mirrors will be, but I don't want to invest too much time into
> complexity that I need to rework in the near future.
>

thanks for the explanation!

-- 
cheers
ralf