From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E9458138334 for ; Fri, 12 Oct 2018 00:40:59 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2678FE097E; Fri, 12 Oct 2018 00:40:56 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id AD8EAE097A for ; Fri, 12 Oct 2018 00:40:55 +0000 (UTC) Received: from [IPv6:2001:4dd3:894d:0:bcee:5e53:df58:eb81] (2001-4dd3-894d-0-bcee-5e53-df58-eb81.ipv6dyn.netcologne.de [IPv6:2001:4dd3:894d:0:bcee:5e53:df58:eb81]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: whissi) by smtp.gentoo.org (Postfix) with ESMTPSA id 3537C335CF9; Fri, 12 Oct 2018 00:40:51 +0000 (UTC) Subject: Re: [gentoo-dev] net-dns/dnssec-root: Blind stable on arm, critical bug 667774 To: gentoo-dev@lists.gentoo.org Cc: arm@gentoo.org References: <673fa7bc-c3f6-9c76-5675-783754ce3e9a@gentoo.org> <20181012003801.61bae709@sf> From: Thomas Deutschmann Openpgp: preference=signencrypt Autocrypt: addr=whissi@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFc4iggBEACg/drq2pkXyE0mO7cqfaH5UX9D2A8uaBWHcgVPZdf+bVlc7gT1b/TJgFBO yCecB1j9ReWWAE55nwraFL7+5XofRnwVzC3PglN/M/F02fudCeEkFfDtH65DZ67LV0QqXOZ7 e2aqD1NxJM1ydcehIoxgESiv8ctMCcb5Jui2A7vddxEBouQqJKDVqXqANEiBrtd0x4+noRC3 07BN80SgUiwuSJp8Y9+LSdKWGxiDxFAQygDlLWu1QIOg2PUjrM1ZtKCii8IcbnhsEPZj0jcQ f/omIHaksyfMdx6lHfSUZzzLQm41nhWlgYUxzW4D8Nh+ka51FIIWRWwNJTXQNpU8s32AT+rr K2hyNY0F+hnCRc0gUJtAACPZYNYNMlTCIb5yLKo5qoRKcHkAI3vAPEsPO8nmpYaxhI+9PwWJ 9BMaOZ0PjN5P5p0ierOd3yjuu0CIx+yirAvZMZYLx3HylFmuIke5GfcfzTuZhgRL1yoaftCH B0zTc1Rmfgk5dLOPeApgH4E8k3K7OIagzpMXjPsyvdBdI2z/j8unZNvPT5uMCAA9yP7TxijH JeNa6MZyDebzfF+QTK1tOL5pWZolCFKOULHIWK9nX2B3/JJ4r7+5wUmob5UCjKCxjK9xunY5 8TzbpaV517MaLVk1kYuFRptqwRYRJ45l1+qcYwkhUcC+qg06PQARAQABzStUaG9tYXMgRGV1 dHNjaG1hbm4gPHRob21hc0BkZXV0c2NobWFubi5iaXo+wsGABBMBCgAqAhsAAh4BAheABQkH hiUCBQsJCAcDBRUKCQgLBRYDAgEABQJXOfYKAhkBAAoJEFhJfuUdXXSlwnQQAIDi4tsMwzw5 ZY3wSs+E6c37W6i2WGgHvN6MOCxR6qthV3fVL3Q4E4EV8DoGHLLA8rs/OYbJs1aSxF8Omlys +sFiVysrMz1NNL7MGbZ/Ov1CpQqRH+6LFzVVcf3dBGqsI3kXg9aUNw2zETIj0ZyCb+VKZ3yC 1DOVFlmGjaH3DtPCJrfEGfcaweFyn2Azljaot9Dg0ExzmAqwohESQNCfSBYhUC0Mc0HiRtzd 1pTIVSmFDTToztnofsLrkMpciNGaj6D7Mm1hZpI41K4IQ6ZKcJDtWduisYNzgafVWvxtGhpY oAVWmO353WafGpbeoP6IVbHQhIcS1JuN1Sn+lM4QtV0GgSgL5j3OtKmRKNiAcZpHX800TX2V 8yUZN3dj2PMU7fzdnVM0MXNwAvOdcckco5zVExn3OHfTxyrUIyEysj01EKCQdZerWjRLnQ7B QR4ff851B+Sl92tVMPBch8WYVZNTwDzsqzKROAe2UnOCTQoVY7OXh6gRblqGuzllMyQ2bZUP V5XLKDpmysb/y43QKSY5aeO8SOKOv+b8kWAXSKzzXnteErhKeAlDm1PKuAfkjq4swOe3nci4 r1r34Ss03Xgt3cJ6Ep3K87qjlLLDwRVyGEgyDiDItHdyEyLGA44pmWLAJzttHMSt3d9/FsTI 2jwwH9GRFg3oMS9PsEURYIU8zsFNBFc4ixMBEADHHlLOkftcSY+jWd9Vb3uHpPGIpztqU/jd 4mPZvrQGIlZYMO+uGtJuDQVdohQHugNvvnr9hfBYDGlhyAYlRIGkFLdZbsim+An+FGr5+f/P tHikILc0X+FbO8bAc0OjNfUlFaTXeKdEBTtdNiO+0WYWw8CtgTEpng+178q4UnTBae1QiBh5 3YmW0H4t8HQEN/NDuVXEREQXwOtJcP9fxDVdP/ynwHbGajx+qbWaQhcHo57XXIsojH5XoEr9 yvviQW6F2tzp/i88YQ1snTVI0G39TzQO2EJbSQpYUptI0PGSUlMbkm4i46XHFO0q15aQSfAg Eh5NWWzwVel7qDO1YmXb49nhg60MmceAhk+1VGxpuA3RNl6hebYzYdQplDo8EJp1MCt+Z4Lt /tzb+smTFRMyE80QzehOSyvIWCSoGmWY4Njc90AV/P/hSXYQqbuRb3sB3PlPGda7ZwPsoh2A WZU331jeBWwB9YnUJFXP4jGbnpXjHO3+RkRL2A39ZzFki751sPpC3jv0sxJhLBOkJlC+VI/7 t5ODzWElimA8Py1VmZfd2C9eBHYU4Eeay1EN7nl75Hsj2436dH9O45uIl838KNXWd4S+7/P5 NqWir9HjnhQwbaLZdJwJKjzDE9u4JvnAP0gmkqYIaNSAM9WfCA11LavNKJjaJNCc4Zkr2+w4 OQARAQABwsF8BBgBCgAmAhsMFiEExN1pX6cTjyQqoVY4WEl+5R1ddKUFAlrJMcoFCQWj8zcA CgkQWEl+5R1ddKW+Qw/+O/saVmYgBdWDc6Y2BzaOA3kRwixAGjMU2VMO5WifG2WkA1zd0kcY 1nR5XKosu/yLWX1WWde8Wh57BDD418JYMSnNyG976OXAeAgWuzmn+xtM8Tw2bHHCNVfCEqBl yS+lAdrXR3kIiJ/Ebr5EogsEZvVW9gowPoNIrzeXFYKqGGVc5Z4dQDgVRq7jgta6LJgOVYdP z6mrLTdjo4lIlC7U/w/dPBWUd0sn8XmtU5vbAfvgf9dfZtXGYnyI64EGr6I6oVyFj8QO/Ffo G/r+glBettColfcT7IiHUMb9i11Sd/FPsL/0EIHWG+a4JTg3QzAODMHF14BLpuqDElV5HlzX e9LafsH45PH/EvAxCNuOj6P1E4bPOHwD0Fhgia7YXi2OJVes9hWy8IrEgwUEDQQIFtECxdFa nkWlKiYyb9v+nqrjtugh6s6OicvAhnvhESky/QSr747tEnOAFTNYXXtz1BRvTu/tcyBK0m51 jW1Gwax+9ooGCnNEF2KknaW/NyLo4mFdvSOJOehcwOHn73G04GHSQSs6+f8Oy7GOriQCdwao aGduFUuKKOR05r5tstZHpuIW9mlL44LXzGQEEt6INpS0ha2XD28+ojXko2hPt7YgbTqOsFnT 34feWglZ58mWE7UyHEVXYeMIWqtQptgCf5fNc36jGay6gt0aLFlgy48= Organization: Gentoo Foundation, Inc Message-ID: Date: Fri, 12 Oct 2018 02:40:38 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:21.0) Gecko/20100101 Thunderbird/52.9.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: <20181012003801.61bae709@sf> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="gcIrvzxBtitH15NGp5TAA5ZmACfFhlqWP" X-Archives-Salt: d4ba2e63-4954-429e-9750-299282802c57 X-Archives-Hash: 6a179be35ad78b4c613e0861b13b96ab This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --gcIrvzxBtitH15NGp5TAA5ZmACfFhlqWP Content-Type: multipart/mixed; boundary="E7E1tLsWjzrJ28y7gV3smAnWfrxSpZ4NU"; protected-headers="v1" From: Thomas Deutschmann To: gentoo-dev@lists.gentoo.org Cc: arm@gentoo.org Message-ID: Subject: Re: [gentoo-dev] net-dns/dnssec-root: Blind stable on arm, critical bug 667774 References: <673fa7bc-c3f6-9c76-5675-783754ce3e9a@gentoo.org> <20181012003801.61bae709@sf> In-Reply-To: <20181012003801.61bae709@sf> --E7E1tLsWjzrJ28y7gV3smAnWfrxSpZ4NU Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 2018-10-12 01:38, Sergei Trofimovich wrote: >> Maybe it is time to destabilize ARM on Gentoo to stop the impression >> that we really support ARM. >=20 > [ CC: arm@ ] >=20 > A few points to think about: >=20 > 1. I have read this as a direct statement that ARM is not maintained. > I don't think it is a fair (or constructive) assessment of team's wo= rk > on ARM front. See the ARM bug queue for stable requests. ARM is always last and behind since we dropped HPPA. > 2. The bug was created less than a week ago and was not communicated > explicitly as urgent on #gentoo-arm. I see failure to handle the bug= > as a communication failure and not a team's death signal. >=20 > Were there any attempts to reach out to the teams or just arm users?= Bug was assigned highest priority in bugzilla. But it looks like ARM arch= team is ignoring set priority. *I* didn't asked in #gentoo-arm but I pinged project several times in #gentoo-dev channel. > 3. I do not believe arm boxes (or most of users' boxes) update @world w= eekly > and restart unbound automatically. Deadline of a few days is not fea= sible > to propagate to users quickly. There is frequently no order-of-days = response > from arch teams. It would be nice to have but it's not realistic (IM= O). >=20 > [...] >=20 > 6. If this package is so important it needs to be stable months before = keys expire. > Then users would have a chance to get the update during casual updat= e. Or > net-dns/unbound DNSSEC functionality should not be marked stable any= where > if package requires periodic manual intervention to just keep workin= g. Disclaimer: I am not the maintainer of unbound nor dnssec-root package. I= took action last week after I noticed that there was a time bomb ticking and nobody cared. I fully agree that an updated dnssec-root package could hav= e been made available one year ago giving everyone enough time... > 4. net-dns/dnssec-root is used by a single(ish) package in tree: net-dn= s/unbound >=20 > Which is: not a system package, not a default package, not suggested= by handbook > package, can operate without DNSSEC enabled. Unbound is a popular resolver and many Gentoo users are operating ARM-bas= ed routers. I don't get your point. Of course you could disable DNSSEC and D= NS will resume working. But is this really your point? > While annoying it's not going to lock users out or corrupt their dat= a. Right, it doesn't cause data corruption. But when your Gentoo-based route= r will stop working this can be a problem. Don't forget about remote system= s. Again, people who know how to deal with problems like that aren't the problem. But why do we care about stable packages if we assume that every= one knows what to do when experiencing problems? > 5. net-dns/dnssec-root is a plain-text file package. It should have bee= n ALLARCHES > stablewithout involvement of arm@. It wasn't about dnssec-root package. Of course this could have been stabi= lized under ALLARCHES policy. It wasn't because package has a new dependency (>=3Ddev-perl/XML-XPath-1.420.0 + deps) which was lacking stable keywords= , too. If ARM can keep up I am quiet. But please, be honest. We don't need anoth= er HPPA. Nobody will win something if we tell world "ARM is a first class ci= tizen in Gentoo" when it isn't (anymore). But if people would know it is ~ARCH,= we would not disappoint expectations. --=20 Regards, Thomas Deutschmann / Gentoo Linux Developer C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 --E7E1tLsWjzrJ28y7gV3smAnWfrxSpZ4NU-- --gcIrvzxBtitH15NGp5TAA5ZmACfFhlqWP Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQGTBAEBCgB9FiEEExKRzo+LDXJgXHuURObr3Jv2BVkFAlu/7YZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDEz MTI5MUNFOEY4QjBENzI2MDVDN0I5NDQ0RTZFQkRDOUJGNjA1NTkACgkQRObr3Jv2 BVkaUggAp0Bpfzh4lWFXtKZooXYH3rYNkAfMP5PsJm2/ANAs1DJbyBkDscTLtnBj 4oAPG7QO0cRTaA5lU3zrQZjwBSPZmtf/W5AoAFD8fuyKIQtZ2sEyMTykdRbamYn9 2y1rktbHRtfgQ2w432Vs2O36Ei9uEVkyG0MxOPXyjVLUuiwlnTWe9IvVq+KxlBkh 8oVJEhxEAz80oFfZsgmiUz+Z611GZosRbayk8T+p/UzocVhVUJG7/3HB2wRA2nkc nM6LSx1Zm8DTfnnQQNQMWXiOndAj7vgsSLILk7Al3xDqwIoMxuEJAY8jQyAvskc/ EBChDorkRYGTz4aKiBMXS6gRGQbS2g== =IpNr -----END PGP SIGNATURE----- --gcIrvzxBtitH15NGp5TAA5ZmACfFhlqWP--