Re: [gentoo-project] Call for agenda items for upcoming council meeting (2022-05-08)

[Sam James <sam@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 2458 bytes --]



> On 6 May 2022, at 07:30, Arthur Zamarin <arthurzam@gentoo.org> wrote:
> 
> On 05/05/2022 23.08, Rich Freeman wrote:
>> On Thu, May 5, 2022 at 3:27 PM Arthur Zamarin <arthurzam@gentoo.org> wrote:
>>> 
>>> This change will force all users to change their flow, or set the
>>> configuration part - meaning it is a semi-breaking change.
>> 
>> Since commits to the main repo without the signoff are going to get
>> rejected anyway, if we decide to go ahead with this would it make
>> sense to just have it abort by default if the config item or command
>> line parameter is missing?
>> 
>> If a user really wants to commit without a signoff they can just set
>> --signoff=false, or the equivalent in the config file.
>> 
>> Basically make it a non-optional parameter.
> 
> Just a small addition. Sign-off is a "must" only for gentoo repo.
> Overlays and other sources can have other policies. Meaning there is
> value for having it an optional argument.
> 
>> If this weren't a gentoo-specific tool I'd see making the behavior
>> more generic, but it seems like if the default is going to be to help
>> the user to shoot themself in the foot, it should just output some
>> kind of explanation of the need for the parameter and what it means if
>> it is not provided.
> 
> But I do like the idea of showing a warning if gentoo repo is detected
> and without signoff, with short explanation how to add or configure it.
> 

I think I get both sides here and while I don't think it's ideal, I need to
keep aside any reservations or hesitations I may have with the DCO model,
as it's not the topic at hand.

I think a decent compromise is a news item, warning on first use of some sort (news item
kind of accomplishes this, but pkg_postinst maybe), and updated
documentation. The config option to enable it is needed but that's already there
so it works for me.

Next step is to try figure out a way to make the contribution experience easier
for users by not forcing them to use PGP (or making errors from gpg more visible
in pkgdev commit). repoman suffered from the same issue where you'd write a commit
message then it'd bail out.

Thank you for reaching out and asking the community. I think you're handling
the responsibility of maintenance well, and thank you for the work!

> --
> Arthur Zamarin
> arthurzam@gentoo.org
> Gentoo Linux developer (Python, Arch Teams, pkgcore stack, GURU)

Best,
sam

[-- Attachment #2: Message signed with OpenPGP --]
[-- Type: application/pgp-signature, Size: 618 bytes --]