Re: [gentoo-dev] Revisiting GLEP 19

[aeriksson@fastmail.fm]

weeve@gentoo.org said:
> I personally would very much like to leave ChangeLogs as they are.
> We  already have tools to make sure they are in the right format
> (though  repoman doesn't check for it and yes developers can choose
> not to use  these tools).  I think changing them over to XML would
> be  more overhead in file size and in required tools to parse them
> than is  really necessary.  If the problem is that people can't
> follow directions,  then don't punish those of us who do. 

I second that feeling. If what we're trying to achieve is to have a
way to signal to the sysadmins that a security update is present, why
not just add a [S] entry to 'emerge -pv'? That way the community
packaging gentoo can stay on step with the development of the upstream
project (low cost), and the sysadmin was to decide (and take the cost)
for doing the upgrade of his installed packages with security holes.

Doing this would put some stress on the ability to run different
packages from different eras together on the same box. The flexible
dependency system we have today _should_ prove useful to make that
happen, and if there are packages with too tight requirements on
versions of other packages it uses, we should bring that issue up with
the upstream project. Taking it upon ourselves to do backports etc is
just to costly, imho.

/A


--
gentoo-dev@gentoo.org mailing list