From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Ncruq-0001DK-HX for garchives@archives.gentoo.org; Thu, 04 Feb 2010 02:58:00 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 0AD1BE09CD; Thu, 4 Feb 2010 02:57:44 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) by pigeon.gentoo.org (Postfix) with ESMTP id D592AE096B for ; Thu, 4 Feb 2010 02:57:10 +0000 (UTC) Received: from mail.isohunt.com (b01.ext.isohunt.com [208.71.112.51]) by smtp.gentoo.org (Postfix) with ESMTP id A07EA67799 for ; Thu, 4 Feb 2010 02:57:09 +0000 (UTC) Received: (qmail 1234 invoked from network); 4 Feb 2010 02:57:08 -0000 Received: from tsi-static.orbis-terrarum.net (HELO grubbs.orbis-terrarum.net) (76.10.188.108) by mail.isohunt.com (qpsmtpd/0.33-dev on beta01) with (CAMELLIA256-SHA encrypted) ESMTPS; Thu, 04 Feb 2010 02:57:08 +0000 Received: (qmail 1439 invoked by uid 10000); 4 Feb 2010 02:57:05 -0000 Date: Thu, 4 Feb 2010 02:57:05 +0000 From: "Robin H. Johnson" To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] GLEP59 - Manifest2 hashes Message-ID: References: <7c612fc61002012206n59c89f90rd3a0e780321a4c59@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="gKMricLos+KVdGMg" Content-Disposition: inline In-Reply-To: <7c612fc61002012206n59c89f90rd3a0e780321a4c59@mail.gmail.com> User-Agent: Mutt/1.5.20 (2009-06-14) X-Archives-Salt: beba792d-03f3-4b50-9198-0c326daa352b X-Archives-Hash: 506e7a7fd3147b49ce1394b88c67293b --gKMricLos+KVdGMg Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Feb 01, 2010 at 11:06:15PM -0700, Denis Dupeyron wrote: > Agreed. I would suggest to use this series of GLEPs as examples of > what to do for future GLEP writers. I've actual considered breaking them up even further. > replace > "We should be prepared to add stronger checksums wherever possible, > and to remove those that have been defeated." > with: > "Stronger checksums shall be added as soon as an implementation is > available in Portage. Weak checksums may be removed as long as the > depreciation process is followed (see below)." +1 on that wording, I'll commit when I am next able to. Do see already how I partially adapted for Cardoe's requests. > And then, in "Checksum depreciation timing" I would prefer that the > description of what needs to be done in the present situation was used > as an example after a more general rule is stated. Something like: I'd propose the following variant: =3D=3D=3D=3D=3D A minimum set of depreciated checksums shall be maintained only to support old package manager versions where needed by historically used trees:=20 - New package manager versions should NOT use depreciated checksums in Manifests when newer checksums are available. - New trees with that have never used the depreciated checksums may omit them for reasons of size, but are still strongly suggested to include them. - Removal of depreciated checksums shall happen after no less than 18 months or one major Portage version cycle, whichever is greater. =3D=3D=3D=3D=3D I'm not editing these into the checksum GLEP right now, as I'm sitting in the food court at the airport, with my flight boarding shortly. Most probably will be committed from my hotel room tomorrow night in Brussels. Signing off now, from an airport with bizarre wireless: More than 45% of connections fail to start, but when they do, they're good for more than 20Mbit. That's after you deal with the their broken DNS in the auth mechanism (I'm probably the only person with working wireless right now, so it's all the bandwidth to myself). --=20 Robin Hugh Johnson Gentoo Linux: Developer, Trustee & Infrastructure Lead E-Mail : robbat2@gentoo.org GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 --gKMricLos+KVdGMg Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Robbat2 @ Orbis-Terrarum Networks - The text below is a digital signature. If it doesn't make any sense to you, ignore it. iEYEARECAAYFAktqN4EACgkQPpIsIjIzwiylfQCg093Pai6pLBRVVCFgd3V1a5Wa P6gAnRn5+pZ7uX3U4tS6pNbqN5PLtCJl =T5Q9 -----END PGP SIGNATURE----- --gKMricLos+KVdGMg--