From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 46CB6138A1F for ; Fri, 8 Aug 2014 16:32:06 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CAAFBE09C4; Fri, 8 Aug 2014 16:32:01 +0000 (UTC) Received: from mail-vc0-f180.google.com (mail-vc0-f180.google.com [209.85.220.180]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 94C9FE09B7 for ; Fri, 8 Aug 2014 16:32:00 +0000 (UTC) Received: by mail-vc0-f180.google.com with SMTP id ij19so8576051vcb.39 for ; Fri, 08 Aug 2014 09:31:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:content-type; bh=GJ0CpUXpOrAl3FryhxPpqt5F3j7uABGMymgTE+G5SAU=; b=Ctk+pvcoy6L23c0+jvV65TxB6M0Ez9yMDmIocs+wMxizGx6oxkE3g2XBKuhIRA8TVt fcrWV1M/7GeJHPm8oTeSvXQFq6beLngIdb7wvNuqNIC6/iD/NdstpET24Ffbt4O9Kj2P mn5IwBszKBgTyWxjP1YnbLMyHuufnBKi2q5k03BvxDPsethLvl9W6xE1Xc3uwD/w+V10 vmRJ6HX4WF38DaM5xRsNOrMi3XeonjEoTn0s3qAjEVdoDVnZ+DUlLNUki3G9uuWUuVXK Jz43dCT1zNiZXoM4eVLSe3/uaFMYs8qiUFVu5Wplx+SmVFkwwz6p+V9FeUATJYQeoEPf fwrQ== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.220.105.201 with SMTP id u9mr22691597vco.11.1407515519659; Fri, 08 Aug 2014 09:31:59 -0700 (PDT) Sender: freemanrich@gmail.com Received: by 10.52.8.229 with HTTP; Fri, 8 Aug 2014 09:31:59 -0700 (PDT) In-Reply-To: <53E4F0B4.9000806@gentoo.org> References: <53e4ccbd.c2b4700a.3bec.2414@mx.google.com> <20140808142203.777a1818@googlemail.com> <53e4eb6b.0190700a.5f01.2a15@mx.google.com> <53E4F0B4.9000806@gentoo.org> Date: Fri, 8 Aug 2014 12:31:59 -0400 X-Google-Sender-Auth: IlArbpzngJXTscp9cnqSi4gxDwE Message-ID: Subject: Re: [gentoo-dev] minimalistic emerge From: Rich Freeman To: gentoo-dev Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: 422120a6-6365-472c-89e6-971cb6467963 X-Archives-Hash: d1accc0bdd31ade536971bbfd63a31e2 On Fri, Aug 8, 2014 at 11:45 AM, Ian Stakenvicius wrote: > However, if you don't want to do this, just "emerge -u > @world" -- that will only update packages in your world file, and will > only force dependency updates when the new version is required (based > on minimum versions in package dependencies). I'm not 100% certain, but I believe this will also update dependencies if the currently-installed version is dropped from the repository. On the testing branch that happens a lot more often, but it will probably happen on stable more often than perhaps Igor desires. Keeping around package-versions that have been removed from the tree is problematic for a few reasons: 1. They could have security flaws and you'll never know. Gentoo does not issue security bulletins/etc for versions of packages no longer in our repository. 2. They could have compatibility issues and you'll never know. If foo v1,2,3 are in the tree and foo v1 doesn't work with bar, then bar will have a >=foo-2 dependency. If only foo v2 and 3 are in the tree then the bar maintainer won't test it on v1, and won't exclude it from the dependencies most likely. This came up in the dynamic deps thread. Setting aside all those issues, suffice it to say that lots of bad things can go wrong when you start keeping around packages or package-versions which aren't in the tree. We don't do releases like other distros, so old data gets stale really fast. Rich