| 1 |
Grant Goodyear wrote: |
| 2 |
> Over the years we've had a fairly consistent stream of suggestions that |
| 3 |
> we should open up the e-build maintaining process to users instead of |
| 4 |
> just devs. The main arguments against it are the security issues and an |
| 5 |
> expectation that it would add to developer workloads. The former is |
| 6 |
> certainly a real problem, although signing (assuming a reasonable |
| 7 |
> web-of-trust) could mitigate that some (at least we'd know who to |
| 8 |
> blame). The latter, however, is conjecture, and the only good way to |
| 9 |
> verify it would be to actually try it and see what happens. Oh, and |
| 10 |
> there's also a very real fear that if things go horribly wrong, that |
| 11 |
> Gentoo's reputation would suffer quite badly. Perhaps I'm naive, but I |
| 12 |
> tend to think that if we were to advertise project sunrise as |
| 13 |
> experimental, temporary, use-at-your-own-risk, and |
| 14 |
> might-break-your-system, |
| 15 |
That is already done. |
| 16 |
|
| 17 |
> and even put it on hardware without a |
| 18 |
> gentoo.org address and add |
| 19 |
Sorry, we cannot do that. gentoo.org is an essential part of Sunrise and |
| 20 |
even the reason it came into existance. Looking at the project page [1] I |
| 21 |
can see multiple goals that would become hard if not impossible on |
| 22 |
non-gentoo hardware. |
| 23 |
|
| 24 |
"provide a central home for contributed ebuilds that do not (yet) find a |
| 25 |
place in the portage tree" |
| 26 |
It is hard to make it look like a central place if it is not on .gentoo.org |
| 27 |
|
| 28 |
"get users to contribute their ebuilds to "gentoo" instead of a third-party |
| 29 |
overlay" |
| 30 |
This is particularly important to me, because I have delt with users having |
| 31 |
problems with overlays. If the overlay-maintainer is unreachable and the |
| 32 |
overlay is broken it harms gentoos reputation even if the overlay is not on |
| 33 |
gentoo hardware. Overlays should be on gentoo as much as possible so that |
| 34 |
we are able to fix breakage. |
| 35 |
Users will not contribute or will be hard to persuade for a not gentoo.org |
| 36 |
overlay. |
| 37 |
|
| 38 |
> a portage hook that warns whenever the |
| 39 |
> project sunrise overlay is used, |
| 40 |
This came up already at the beginning of Sunrise and has of course been |
| 41 |
taken care of [2} |
| 42 |
|
| 43 |
> then our reputation isn't really likely |
| 44 |
> to suffer even if it's a complete disaster. |
| 45 |
Sorry, I cannot see how this could turn into a complete disaster. It is all |
| 46 |
controlled, controllable and access can be restricted, removed, it can be |
| 47 |
modified, .. because it is on .gentoo.org even infra has the ability to |
| 48 |
shut it down if things go bad. |
| 49 |
|
| 50 |
[1] http://www.gentoo.org/proj/en/sunrise |
| 51 |
[2] http://bugs.gentoo.org/136031 |
| 52 |
|
| 53 |
Regards, |
| 54 |
Stefan |
| 55 |
|
| 56 |
|
| 57 |
-- |
| 58 |
gentoo-dev@g.o mailing list |
Archives