[Mageia-dev] Mirror layout, round two

Tue Nov 30 04:09:16 CET 2010

Le lundi 29 novembre 2010 à 20:54 -0500, andre999 a écrit :
+> Yann Ciret a écrit :
+>       
+> > I dislike the main/contrib separation in some case.
+> > The first example is with Mozilla Thunderbird packages. Some extension
+> > packages are in contrib. So each time thunderbird received security
+> > update, the update cannot be installed because of non automatically
+> > rebuild of his contrib package. And each time I see a bug report of user
+> > asking a manual rebuilt. With only one core media, this situation will
+> > disapear (I hope).
+> >    
+> Unlikely.  This problem is not at all related to separate repositories.
+
+It is. It is exactly related to the fact that thunderbird is supported,
+and that extension are not despites depending on it.
+
+That precisely because we tell "security and bugfixes occurs only on
+main" that contribs got broken, since the security team do not care to
+not break contribs packages.
+
+> Rather that one package was updated, and an optional installed module 
+> was not.
+> The fact that the module is optional is the key point.
+> The installer should be flexible enough to give a warning in this case, 
+> and ask if you wish to continue the installation.
+
+So basically, you want a --nodeps ? 
+If there is a requires, there is usually a good reason. Engineering is
+not randomly adding line to a file until it work.
+
+> As well, in the case of Thunderbird, it is almost certain that the 
+> installed module was in fact compatible with newer version of 
+> Thunderbird.  (A security problem may directly impact Thunderbird or the 
+> module, but highly unlikely both packages.)
+> Rpm tags should have been set so that Thunderbird would recognize that 
+> the module was appropriate in the newer version.
+
+No. If there is stricter dependency, it is precisely because there is no
+guarantee of any kind of ABI between thunderbird versions. The same goes
+for firefox.
+
+> So in sum, this was probably only a packaging problem.  Whatever the 
+> repository.
+
+No. Not at all. 
+The problem is linked to the difference of support between main and
+contribs.
+-- 
+Michael Scherer
+
+