From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1HXjEg-00077e-RC for garchives@archives.gentoo.org; Sat, 31 Mar 2007 19:27:39 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.14.0/8.14.0) with SMTP id l2VJQfXG018996; Sat, 31 Mar 2007 19:26:41 GMT Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by robin.gentoo.org (8.14.0/8.14.0) with ESMTP id l2VJNekX014442 for ; Sat, 31 Mar 2007 19:23:41 GMT Received: from [192.168.1.138] (c-66-30-3-184.hsd1.ma.comcast.net [66.30.3.184]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTP id E75706494C for ; Sat, 31 Mar 2007 19:23:39 +0000 (UTC) Subject: Re: [gentoo-dev] [soc] Python bindings for Paludis From: Seemant Kulleen To: gentoo-dev@lists.gentoo.org In-Reply-To: <20070331201602.3e50b815@Kacian2.emea.hpqcorp.net> References: <200703240028.15461.peper@gentoo.org> <200703271519.29674.vapier@gentoo.org> <20070327211510.0b426e09@snowflake> <200703301404.16400.vapier@gentoo.org> <20070331201602.3e50b815@Kacian2.emea.hpqcorp.net> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-Te1QF8tAy7JNSoOIvHhS" Organization: Gentoo Foundation Date: Sat, 31 Mar 2007 15:24:03 -0400 Message-Id: <1175369043.5961.30.camel@localhost> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.8.3 X-Archives-Salt: f47b4f5d-e799-4103-a059-fdb16fd9ea4f X-Archives-Hash: d6f03ca13db270f6f44b69d5c6b3ad32 --=-Te1QF8tAy7JNSoOIvHhS Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Sat, 2007-03-31 at 20:16 +0200, Andrej Kacian wrote: > On Sat, 31 Mar 2007 20:02:28 +0200 > "Christopher Covington" wrote: >=20 > > The first condition you list is a sort of nativism that I for one > > would expect not to find in a successful copyleft project created on > > the Internet. Why should the code Gentoo uses be written by Gentoo > > developers? Nobody seems to have a problem with using someone else's C > > compiler and installation tools (gcc, autoconf, automake). Resistance > > to a package manager on the grounds that, "It wasn't originally > > written by us!" could perhaps push technical arguments that actually > > matter into the background. That's not what he's saying. All those other things you mention are critical to a linux system -- ANY linux system, EVERY linux system, ANY distro, ALL distros, ANY BSD system, ALL BSD system, ANY BSD distro, ALL BSD distros, and more. They are, in other words, shared resources. RPM is another example of a shared resource. Apt might well be considered to be so as well. Portage, on the other hand, is not. It is, you see, part of the very identity of *this* distribution, and isn't quite shared by other major distributions. If portage, or a tool very much like it, becomes part of the larger community and shared by 2 or more *major* distributions, then your argument starts to hold water. Until then, I'm afraid it's a straw man. > It seems to me that this is just vapier's way of saying "I don't want cia= ranm > anywhere near an official package manager". Far be it from me to read spanky's mind, and may I say: far be it from you too. However, given my paragraph above (and prior emails in this thread from both vapier and me), I would say that your statement is inaccurate, at worse, but incomplete at best. The point being made, then, is that for an official package manager to exist *for Gentoo*, it needs to be under *Gentoo's* control. To make it more clear. If the gcc developers decided to stick some malicious code into gcc, it affects the entire linux community, the entire BSD community and would take out a few other communities as well. The effects are far reaching and shared by everyone. If an official package manager is outside of Gentoo's control, and the maintainer(s) of that piece of software decide to do anything malicious (examples: inject some dodgy code, remove documentation, take out access to the repository, etc) for whatever reason (say, they get pissed off at a few Gentoo people and decide that the entire Gentoo community can be painted that way), then Gentoo has now become a slave to those people. That, I'm sure you'll agree, is unacceptable. So, no, what vapier was saying (at least in prior emails) is that regardless of what package manager is deemed to be official, it needs to meet a minimum set of criteria, and one of those is that it needs to be housed on gentoo infrastructure and maintained by gentoo developers (and thus be accountable for their code). Please don't read anything into what I've said other than what I've said. Thanks, Seemant --=-Te1QF8tAy7JNSoOIvHhS Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.3 (GNU/Linux) iD8DBQBGDrVTiUTIoXwgiI0RApIcAKDP2uOfG7lC901ZQifX6auFoxzG2wCgh2s4 Tn4N9w6lmQFwl6G+DZdLl7s= =Erva -----END PGP SIGNATURE----- --=-Te1QF8tAy7JNSoOIvHhS-- -- gentoo-dev@gentoo.org mailing list