Re: [gentoo-dev] net-dns/dnssec-root: Blind stable on arm, critical bug 667774

[Alec Warner <antarus@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1686 bytes --]

On Thu, Oct 11, 2018 at 11:10 AM Thomas Deutschmann <whissi@gentoo.org>
wrote:

> Let me quote
> https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f6f6bb91b7f134a121ef9fa1dd504b9ca52c5aa8
> :
>

This thread is missing a bunch of context...so I'll try to add it I guess.


>
> > net-dns/dnssec-root: Blind stable on arm, critical bug 667774
> >
> > Note that this is a major fail for a stable architecture.
> > In addition, all arm devboxes are currently offline.
> >
> > Bug: https://bugs.gentoo.org/667774
> > Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
> > Package-Manager: Portage-2.3.49, Repoman-2.3.11
>
> ...and now let's all sit down and enjoy how stable ARM users lose access
> to the Internet and have to figure out how to deactivate DNSSEC to get
> back online. ;]
>

I can't tell if the complaint is that:

1) Someone blind-stabled something on arm and it broke (doesn't build?)
2) The arm team failed to mark a package stable before a hard deadline
(DNSSEC key rotation)

I presume its the latter? Whats the impact? All DNS, or only DNSSEC
validated entries?


> Maybe it is time to destabilize ARM on Gentoo to stop the impression
> that we really support ARM.
>

I'm not really sure I buy this as an argument; but then again I think there
is a general expectation that Gentoo users using 'are paying attention'[0]
so stable arm users would have unmasked the ~arch version of the keys long
before today.

[0] Particularly people using DNSSEC...but maybe I'm just a curmudgeon.


>
>
> --
> Regards,
> Thomas Deutschmann / Gentoo Linux Developer
> C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5
>
>

[-- Attachment #2: Type: text/html, Size: 2808 bytes --]