[Yum-devel] [UG] CTRL-C wierdness revisited

[seth vidal]

> the problems:
> 1. repacking the transaction set for non-install/update events
> 2. checking the gpg signature of the packages w/o opening and closing a
> ts (over and over and over again)
> 
> #2 might cost us a lot of time.
> 

to answer my own question - and hell, code I wrote, actually :)

#2 isn't a problem. We do the sigchecking once all the pkgs have been
downloaded. We verify the pkg against its sha1 or md5 checksum in the
xml metadata.

so maybe this is easier than it seems. I'll try a couple of simple
tricks around the package download part.

however, we're going to get caught out in the cold when it comes to
downloading the package headers. Opening, closing and rebuilding the
packages on every header download would be kinda expensive.

We could get a list of what headers we need, tear down the ts, download
them, repack the ts, test, wash, rinse, repeat.

Wouldn't take _too_ _too_ much code restructuring.

alternatively we might could ask someone about keeping rpm from grabbing
this signal.

-sv