[gentoo-dev] Re: [RFC] News Item: Certbot rework and transition

[Duncan <1i5t5.duncan@cox.net>]

Thibaud CANALE posted on Tue, 4 Mar 2025 19:37:46 +0100 as excerpted:

> First iteration of news item about Certbot rework.

> For ease of maintenance and faster and more reliable delivery for
> Gentoo’s users, Certbot and its modules have been reworked into a single
> package.

I'd suggest putting (the more important) "what" first, then why:

Certbot and it modules are being reworked into a single package.  This 
should ease maintenance and make delivery faster and more reliable.

> Starting from app-crypt/certbot-3.2.0-r100, only this package is
> necessary to install Certbot and its modules thanks to the help of USE
> flags. Some block statements are enforced for modules packages to avoid
> collisions.

Good as-is...

> However this creates issues for users and requires them to take action
> to update their Portage configuration and world set. Hence why this news
> item and the introduction of transition packages.

(Concisify, omitting a bit as implied, and explicitly name the config 
changes:)

Action required: @world set and package.use changes.

> 
> Currently supported Certbot modules will have transition packages which
> are simply meta-package with their corresponding USE flag to the main
> package, but it still requires users to update their package.use, as
> describe below.

Temporary transition metapackages activate the appropriate USE flags to 
keep things working for now, but users must update package.use and their 
@world set to complete the transition before <date>, after which these 
temporary transition packages will be removed.

(Decide on and substitute the removal date as appropriate.)

> As a reminder, there is a Wiki page for Certbot:
> https://wiki.gentoo.org/wiki/Let%27s_Encrypt

:^)

> So this news item introduces step-by-step actions to ensure proper
> update:

Step by step:

> 1. Add an entry under package.use with the modules of your choice based
> on the list provided by this new package. Example:

1. In package.use:

(Should that be the full path, /etc/portage/package.use?)

Add an entry for the modules of your choice based on the USE flags of the 
new unified package.  Example:

>     app-crypt/certbot	certbot-apache certbot-dns-rfc2136

:^)

> 2. If you decide to go ahead of time by accepting "non stable" version
> from Gentoo’s main Portage tree, continue with the following steps, or
> simply stop here, your work is done for now. Step 3 will be done later.

If you wish to stick with stable you may stop here.  The below steps 
(skipping step 2) will be completed later once the unified package 
stabilizes.  Should you wish to complete the transition now:

(Note that the step number was removed.  New step 2, 
(path?)package.accept_keywords step.)

2. In package.accept_keywords (skip this step and continue with step 3 if 
completing after the unified package stabilizes):

Add a keyword entry for the new unified package.  Example:

     ~app-crypt/certbot-3.2.0     ~amd64

> 3. You can decide to clean now your world set, or other sets, of
> Certbot’s module packages:

3. Clean the old module packages out of your @world or other sets:

>     emerge --ask --deselect app-crypt/acme app-crypt/certbot-apache \
>         app-crypt/certbot-dns-cloudflare app-crypt/certbot-dns-desec \
>         app-crypt/certbot-dns-dnsimple app-crypt/certbot-dns-nsone \
>         app-crypt/certbot-dns-rfc2136 app-crypt/certbot-nginx
> 
> 4. Emerge or update app-crypt/certbot if necessary. This should remove
> previous packages:
> 
>     emerge --verbose --ask --changed-use --noreplace app-crypt/certbot

:^)

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman