Re: [gentoo-portage-dev] [RFC] Add 'emerge --sync-glsa' action and 'emaint sync-glsa' command

[Brian Dolbec <dolsen@gentoo.org>]

On Wed, 17 Dec 2014 17:49:56 -0500
Michael Orlitzky <mjo@gentoo.org> wrote:

> On 12/17/2014 05:32 PM, Brian Dolbec wrote:
> > 
> > Only code changes I see to portage, pkgcore (I know nothing about
> > paludis) are to look for the glsa's in the 2 possible locations.
> > The standalone glsa repo, failing that, backup to the gentoo tree.
> > 
> 
> Could we ship a GLSA overlay enabled by default, regardless of what we
> do with the main repo? Then for simplicity, we update the tools to
> check metadata/glsa in overlays as well. No need to special-case a
> fallback location.
> 
> glsa-check would of course want to sync the GLSA repo before running.
> 
> 

yes, that is a very simple edit to the default repos.conf file adding
the glsa repo. Yes, I forgot that glsa-check needed changes
so it would/could be configured to sync the repo too.

Pkgcore does not have the capability (yet) to read/use extended
repos.conf repo attributes.  So, would need more code changes. I think
pkgcore does not yet handle repos.conf files... I'm not sure.
-- 
Brian Dolbec <dolsen>