Efficent batch fetching with verification?

Robin H. Johnson robbat2 at gentoo.org
Fri Nov 3 21:06:13 CET 2017


On Fri, Nov 03, 2017 at 12:50:06PM +0100, Peter Lebbing wrote:
> On 03/11/17 06:20, Robin H. Johnson wrote:
> > Presently, the code is effectively this:
> > ...cat-list-of-fingerprints... | xargs gpg --recv
> > 
> > This has the downside of causing many exec
...
> Anyway, I didn't look any further, but what is exec'ing much here then?
> Which version of GnuPG are you using? I'm using the Debian stretch
> provided 2.1.18 with a systemd supervised dirmngr. I can't readily think
> of which process would be starting often here... am I completey
> forgetting about something? :-)
You missed xargs itself, this mostly centers around the command-line
length limit. I can get in about ~3200 fingerprints per GPG call.

GnuPG 2.2.1, findutils/xargs 4.6.0.

Thanks for the idea of --no-auto-check-trustdb, I did miss that and it
helps for speedups.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Asst. Treasurer
E-Mail   : robbat2 at gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1113 bytes
Desc: Digital signature
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20171103/3f375176/attachment-0001.sig>


More information about the Gnupg-users mailing list