From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 4D9651389E2 for ; Wed, 17 Dec 2014 23:04:33 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 93646E08B5; Wed, 17 Dec 2014 23:04:32 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 1C355E08A5 for ; Wed, 17 Dec 2014 23:04:32 +0000 (UTC) Received: from big_daddy.dol-sen.ca (S010634bdfa9ecf80.vc.shawcable.net [96.49.31.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: dolsen) by smtp.gentoo.org (Postfix) with ESMTPSA id 5109F340622 for ; Wed, 17 Dec 2014 23:04:31 +0000 (UTC) Date: Wed, 17 Dec 2014 15:03:59 -0800 From: Brian Dolbec To: gentoo-portage-dev@lists.gentoo.org Subject: Re: [gentoo-portage-dev] [RFC] Add 'emerge --sync-glsa' action and 'emaint sync-glsa' command Message-ID: <20141217150359.695f3e73.dolsen@gentoo.org> In-Reply-To: <54920894.6090106@gentoo.org> References: <5491E7FD.2080203@gentoo.org> <20141217143255.387e52f5.dolsen@gentoo.org> <54920894.6090106@gentoo.org> Organization: Gentoo Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-portage-dev@lists.gentoo.org Reply-to: gentoo-portage-dev@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: b91d2262-dd2b-4e6b-a2b9-d085786fffc4 X-Archives-Hash: 97d1f75ea6ff818945b6fbaa8b354c12 On Wed, 17 Dec 2014 17:49:56 -0500 Michael Orlitzky wrote: > On 12/17/2014 05:32 PM, Brian Dolbec wrote: > > > > Only code changes I see to portage, pkgcore (I know nothing about > > paludis) are to look for the glsa's in the 2 possible locations. > > The standalone glsa repo, failing that, backup to the gentoo tree. > > > > Could we ship a GLSA overlay enabled by default, regardless of what we > do with the main repo? Then for simplicity, we update the tools to > check metadata/glsa in overlays as well. No need to special-case a > fallback location. > > glsa-check would of course want to sync the GLSA repo before running. > > yes, that is a very simple edit to the default repos.conf file adding the glsa repo. Yes, I forgot that glsa-check needed changes so it would/could be configured to sync the repo too. Pkgcore does not have the capability (yet) to read/use extended repos.conf repo attributes. So, would need more code changes. I think pkgcore does not yet handle repos.conf files... I'm not sure. -- Brian Dolbec