From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 0F9681381FA for ; Sat, 31 May 2014 22:21:22 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 74103E087E; Sat, 31 May 2014 22:21:17 +0000 (UTC) Received: from baptiste.telenet-ops.be (baptiste.telenet-ops.be [195.130.132.51]) by pigeon.gentoo.org (Postfix) with ESMTP id 5EC4DE084C for ; Sat, 31 May 2014 22:21:16 +0000 (UTC) Received: from gentoo.org ([94.226.51.153]) by baptiste.telenet-ops.be with bizsmtp id 8mMF1o0023JKcCE01mMFD0; Sun, 01 Jun 2014 00:21:15 +0200 Date: Sun, 1 Jun 2014 00:20:29 +0200 From: Tom Wijsman To: gentoo-dev@lists.gentoo.org Cc: lxnay@gentoo.org Subject: Re: [gentoo-dev] Anyone with access to genkernel repository? Or should genkernel be p.masked on amd64 profiles? Message-ID: <20140601002029.0a2f60aa@gentoo.org> In-Reply-To: References: <53889F70.1090404@gentoo.org> X-Mailer: Claws Mail 3.9.0 (GTK+ 2.24.23; x86_64-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=PGP-SHA1; boundary="Sig_/z/qZgaiBkC5_O8mvYqxZfzu"; protocol="application/pgp-signature" X-Archives-Salt: b87219c2-b7e8-4c62-8418-77a178545dde X-Archives-Hash: 41e5f5094cf0ae00291f6e46ed7dc065 --Sig_/z/qZgaiBkC5_O8mvYqxZfzu Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sat, 31 May 2014 22:42:17 +0100 Fabio Erculiani wrote: > On Sat, May 31, 2014 at 9:06 PM, Robin H. Johnson > wrote: > > No, I don't agree that kernel configs "belong" to kernel packages. > > In general, barring the crazy option explosion, these are meant to > > be stock working configs that should in combination with ANY kernel > > package, produce a working kernel. > > >=20 > Then you are just moving the problem around. > I believe that kernel configs should be provided by their own kernel > packages (and there are some, not just gentoo-sources) because it is > much easier to keep them in sync on every new release and deal with > each version separately if/as needed (including testing!). How are you > dealing with config var name changes between different kernel versions > or just different pkgs then? Different packages is not a problem; since the difference in terms of config between separate packages is small enough, a dozen of options. Different version may be a problem, a rather small one; nothing prevents one from keeping config options around for both versions. > You cannot possibly support all kernel versions for all kernel pkgs > available in tree with just one single config file in a sane, clean > and maintainable way, hoping that a change in this file will not > affect previous or future kernel releases. How are you going to test > your config changes against old kernel pkgs? Each test is quite > expensive to run. >=20 > Good luck with that :-) Does it really need to be sane, clean and maintainable for it to work? Yes, maybe; but how sane, clean and maintainable? We can do better... A fork (eg. hardened-sources config, geek-sources config) where needed might still be a way out; however, one should consider to look into a better architecture than plain forks. For example, a config that sources a generic config and adds hardened changes on top of that; kind of like the way GRUB 2's /etc/grub.d/ config generation works. We should introduce this only when needed to avoid to over-design it. --=20 With kind regards, Tom Wijsman (TomWij) Gentoo Developer E-mail address : TomWij@gentoo.org GPG Public Key : 6D34E57D GPG Fingerprint : C165 AF18 AB4C 400B C3D2 ABF0 95B2 1FCD 6D34 E57D --Sig_/z/qZgaiBkC5_O8mvYqxZfzu Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBAgAGBQJTilWtAAoJEPWZc8roOL/QNZoH/iiPHdQ16Nodm/PRI3HafQux MsvqE3a352M/svZLD5x5HASqMEDZmbCzkf7YJjhMQT6FmmbJUO8jST0qEWhL17Yn F7ZoIfjgfQMbFpfwAqIhmHl6RKUYPph48mZwepQlOzhZjuu7zPo/NqaYzPpBvj1Y g+rqUsSlcSKvcf96MFLe+frIYbG1BT/7uG2lXqLkeU7lgAPM0/GZN2RxdcgjMThW 5JO8LB4vYa5fn03BpSfiL53wNQXVondHOMrGsz6c2RCXZBpUAaOs3r4HtdU86ga/ t5yn2pDjFgIc/M2Euts5Ujnwbkbd+6bIU091j7alAwvETcp0Ic3XnvsS/znzHfU= =+vzy -----END PGP SIGNATURE----- --Sig_/z/qZgaiBkC5_O8mvYqxZfzu--