On Thu, Oct 11, 2018 at 11:10 AM Thomas Deutschmann <whissi@gentoo.org> wrote:

Let me quote https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f6f6bb91b7f134a121ef9fa1dd504b9ca52c5aa8:

This thread is missing a bunch of context...so I'll try to add it I guess.

> net-dns/dnssec-root: Blind stable on arm, critical bug 667774
>
> Note that this is a major fail for a stable architecture.
> In addition, all arm devboxes are currently offline.
>
> Bug: https://bugs.gentoo.org/667774
> Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
> Package-Manager: Portage-2.3.49, Repoman-2.3.11

...and now let's all sit down and enjoy how stable ARM users lose access
to the Internet and have to figure out how to deactivate DNSSEC to get
back online. ;]

I can't tell if the complaint is that:

1) Someone blind-stabled something on arm and it broke (doesn't build?)

2) The arm team failed to mark a package stable before a hard deadline (DNSSEC key rotation)

I presume its the latter? Whats the impact? All DNS, or only DNSSEC validated entries?

Maybe it is time to destabilize ARM on Gentoo to stop the impression
that we really support ARM.

I'm not really sure I buy this as an argument; but then again I think there is a general expectation that Gentoo users using 'are paying attention'[0] so stable arm users would have unmasked the ~arch version of the keys long before today.

[0] Particularly people using DNSSEC...but maybe I'm just a curmudgeon.

--
Regards,
Thomas Deutschmann / Gentoo Linux Developer
C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5