Re: [gentoo-dev] GLEP59 - Manifest2 hashes

["Robin H. Johnson" <robbat2@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 2248 bytes --]

On Mon, Feb 01, 2010 at 11:06:15PM -0700, Denis Dupeyron wrote:
> Agreed. I would suggest to use this series of GLEPs as examples of
> what to do for future GLEP writers.
I've actual considered breaking them up even further.

> replace
> "We should be prepared to add stronger checksums wherever possible,
> and to remove those that have been defeated."
> with:
> "Stronger checksums shall be added as soon as an implementation is
> available in Portage. Weak checksums may be removed as long as the
> depreciation process is followed (see below)."
+1 on that wording, I'll commit when I am next able to. Do see already
how I partially adapted for Cardoe's requests.

> And then, in "Checksum depreciation timing" I would prefer that the
> description of what needs to be done in the present situation was used
> as an example after a more general rule is stated. Something like:
I'd propose the following variant:
=====
A minimum set of depreciated checksums shall be maintained only to
support old package manager versions where needed by historically used
trees: 
- New package manager versions should NOT use depreciated checksums in
  Manifests when newer checksums are available.
- New trees with that have never used the depreciated checksums may omit
  them for reasons of size, but are still strongly suggested to include
  them.
- Removal of depreciated checksums shall happen after no less than 18
  months or one major Portage version cycle, whichever is greater.
=====

I'm not editing these into the checksum GLEP right now, as I'm sitting
in the food court at the airport, with my flight boarding shortly.
Most probably will be committed from my hotel room tomorrow night in
Brussels.

Signing off now, from an airport with bizarre wireless:
More than 45% of connections fail to start, but when they do, they're
good for more than 20Mbit. That's after you deal with the their broken
DNS in the auth mechanism (I'm probably the only person with working
wireless right now, so it's all the bandwidth to myself).

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85

[-- Attachment #2: Type: application/pgp-signature, Size: 330 bytes --]