summaryrefslogtreecommitdiffstats
path: root/zarb-ml/mageia-dev/2012-December/020736.html
diff options
context:
space:
mode:
authorNicolas Vigier <boklm@mageia.org>2013-04-14 13:46:12 +0000
committerNicolas Vigier <boklm@mageia.org>2013-04-14 13:46:12 +0000
commit1be510f9529cb082f802408b472a77d074b394c0 (patch)
treeb175f9d5fcb107576dabc768e7bd04d4a3e491a0 /zarb-ml/mageia-dev/2012-December/020736.html
parentfa5098cf210b23ab4f419913e28af7b1b07dafb2 (diff)
downloadarchives-master.tar
archives-master.tar.gz
archives-master.tar.bz2
archives-master.tar.xz
archives-master.zip
Add zarb MLs html archivesHEADmaster
Diffstat (limited to 'zarb-ml/mageia-dev/2012-December/020736.html')
-rw-r--r--zarb-ml/mageia-dev/2012-December/020736.html134
1 files changed, 134 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2012-December/020736.html b/zarb-ml/mageia-dev/2012-December/020736.html
new file mode 100644
index 000000000..2ac4a00c2
--- /dev/null
+++ b/zarb-ml/mageia-dev/2012-December/020736.html
@@ -0,0 +1,134 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
+<HTML>
+ <HEAD>
+ <TITLE> [Mageia-dev] Package drop request: ruby-ParseTree
+ </TITLE>
+ <LINK REL="Index" HREF="index.html" >
+ <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Package%20drop%20request%3A%20ruby-ParseTree&In-Reply-To=%3C50C70DA7.9050304%40colin.guthr.ie%3E">
+ <META NAME="robots" CONTENT="index,nofollow">
+ <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
+ <LINK REL="Previous" HREF="020735.html">
+ <LINK REL="Next" HREF="020733.html">
+ </HEAD>
+ <BODY BGCOLOR="#ffffff">
+ <H1>[Mageia-dev] Package drop request: ruby-ParseTree</H1>
+ <B>Colin Guthrie</B>
+ <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Package%20drop%20request%3A%20ruby-ParseTree&In-Reply-To=%3C50C70DA7.9050304%40colin.guthr.ie%3E"
+ TITLE="[Mageia-dev] Package drop request: ruby-ParseTree">mageia at colin.guthr.ie
+ </A><BR>
+ <I>Tue Dec 11 11:40:39 CET 2012</I>
+ <P><UL>
+ <LI>Previous message: <A HREF="020735.html">[Mageia-dev] Package drop request: ruby-ParseTree
+</A></li>
+ <LI>Next message: <A HREF="020733.html">[Mageia-dev] The &#171;task-obsolete&#187; debate [Was: Package drop request: ruby-ParseTree]
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#20736">[ date ]</a>
+ <a href="thread.html#20736">[ thread ]</a>
+ <a href="subject.html#20736">[ subject ]</a>
+ <a href="author.html#20736">[ author ]</a>
+ </LI>
+ </UL>
+ <HR>
+<!--beginarticle-->
+<PRE>'Twas brillig, and Remy CLOUARD at 11/12/12 06:38 did gyre and gimble:
+&gt;<i> On Mon, Dec 10, 2012 at 11:41:38PM +0000, Colin Guthrie wrote:
+</I>&gt;&gt;<i> So what if we provide this library and someone uses it as a component in
+</I>&gt;&gt;<i> some other app they write.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> They likely have an expectation that it will continue to be supported
+</I>&gt;&gt;<i> and that any security vulnerabilities in it are detected and fixed.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> If we don't have a mechanism to remove (or at least very strongly
+</I>&gt;&gt;<i> recommend to remove) package we no longer support, then we are leaving
+</I>&gt;&gt;<i> users vulnerable.
+</I>&gt;&gt;<i>
+</I>&gt;&gt;<i> The orphans system is fine, but it's certainly not as strong a mechanism
+</I>&gt;&gt;<i> as I think is needed.
+</I>&gt;<i> Well, that would be very lazy from that person not to test the app and
+</I>&gt;<i> release it. Actually, the ruby community has a strong focus on test
+</I>&gt;<i> driven development. Since that library is broken with ruby 1.9, it won&#8217;t
+</I>&gt;<i> pass the first test. So no worries here. Actually, I&#8217;m pretty sure it
+</I>&gt;<i> couldn&#8217;t even stay on the machine just because it is linked against
+</I>&gt;<i> libruby.so.1.8, and we provide libruby.so.1.9.
+</I>&gt;<i>
+</I>&gt;<i> In the ruby policy I added as a requirement a
+</I>&gt;<i> Requires: ruby(abi) = version
+</I>&gt;<i> I&#8217;m pleased to see this is now an automatic thing, meaning that a
+</I>&gt;<i> package that&#8217;s doesn&#8217;t build won&#8217;t stand a chance to stay on people&#8217;s
+</I>&gt;<i> machine.
+</I>
+Yes, but keep in mind that the task-obsolete thing is not just about
+ruby and it also shouldn't rely on people not being lazy and releasing
+something. Perhaps their app is not for public release anyway.
+
+So sadly, we can't design mechanisms around this structure.
+
+&gt;<i> That being said it still requires human intervention to remove it from
+</I>&gt;<i> the mirrors.
+</I>
+I wonder if we could have a helper that runs on svn commit hook when a
+package is moved to the old tree? That would avoid the task-obsolete
+&quot;abuse&quot; but still doesn't provide a mechanism to remove from users
+machines...
+
+&gt;<i> To me this is a rather sane way to deal with the problem, because it&#8217;s
+</I>&gt;<i> self-explanatory: the package can&#8217;t stay because its requirements are
+</I>&gt;<i> not met. If you add it to task-obsolete, you provide no reason to the
+</I>&gt;<i> user, most of the time the explanation is only a comment in
+</I>&gt;<i> task-obsolete&#8217;s spec file.
+</I>
+This only works when it's true :) Sometimes a package is dropped because
+it doesn't build with newer gcc and there is no maintainer or enough
+users to merit it being fixed. Lots of things other than &quot;requirements
+not met&quot; result in packages being dropped. And if they are dropped they
+are not supported and we do not accept bug reports etc. etc. These
+packages should, in theory, be removed from a users machine unless the
+user takes very specific action to block this.
+
+Personally I'd be more in favour of expanding the urpmq --not-available
+system. It could just be beefed up to allow exclusions (like skip.list,
+but rather a keep.list). Then a urpme --not-available could be added to
+remove any no longer available packages.
+
+This would require GUI enhancements but it might be a good compromise here.
+
+Col
+
+--
+
+Colin Guthrie
+colin(at)mageia.org
+<A HREF="http://colin.guthr.ie/">http://colin.guthr.ie/</A>
+
+Day Job:
+ Tribalogic Limited <A HREF="http://www.tribalogic.net/">http://www.tribalogic.net/</A>
+Open Source:
+ Mageia Contributor <A HREF="http://www.mageia.org/">http://www.mageia.org/</A>
+ PulseAudio Hacker <A HREF="http://www.pulseaudio.org/">http://www.pulseaudio.org/</A>
+ Trac Hacker <A HREF="http://trac.edgewall.org/">http://trac.edgewall.org/</A>
+</PRE>
+
+
+
+
+<!--endarticle-->
+ <HR>
+ <P><UL>
+ <!--threads-->
+ <LI>Previous message: <A HREF="020735.html">[Mageia-dev] Package drop request: ruby-ParseTree
+</A></li>
+ <LI>Next message: <A HREF="020733.html">[Mageia-dev] The &#171;task-obsolete&#187; debate [Was: Package drop request: ruby-ParseTree]
+</A></li>
+ <LI> <B>Messages sorted by:</B>
+ <a href="date.html#20736">[ date ]</a>
+ <a href="thread.html#20736">[ thread ]</a>
+ <a href="subject.html#20736">[ subject ]</a>
+ <a href="author.html#20736">[ author ]</a>
+ </LI>
+ </UL>
+
+<hr>
+<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
+mailing list</a><br>
+</body></html>