[CentOS-mirror] Mirroring the vault

Wed Apr 15 13:18:09 UTC 2015
Konstantin Ryabitsev <ftpadmin at kernel.org>

On 15/04/15 07:32 AM, Fabian Arrotin wrote:
> OTOH, I (personally) think that vault is like giving a gun for people
> to shoot themselves in the foot : using
> deprecated/unpatched/unsecured/unmaintained packages on a distro is
> not what I'd consider best practice. There are a *few* corner cases
> where it can be handy, but those are already mirroring internally
> those versions, for specific usage, and don't rely on vault.centos.org

Primary goal for us is preserving for archival and forensic purposes.
Every now and again people have a need to compare pristine binaries with
those that came from a compromised system -- in which case having
something like vault.centos.org is invaluable.