Gentoo Archives: gentoo-dev

From: "Robin H. Johnson" <robbat2@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] GLEP59 - Manifest2 hashes
Date: Thu, 04 Feb 2010 02:58:00
In Reply to: Re: [gentoo-dev] GLEP59 - Manifest2 hashes by Denis Dupeyron
On Mon, Feb 01, 2010 at 11:06:15PM -0700, Denis Dupeyron wrote:
> Agreed. I would suggest to use this series of GLEPs as examples of > what to do for future GLEP writers.
I've actual considered breaking them up even further.
> replace > "We should be prepared to add stronger checksums wherever possible, > and to remove those that have been defeated." > with: > "Stronger checksums shall be added as soon as an implementation is > available in Portage. Weak checksums may be removed as long as the > depreciation process is followed (see below)."
+1 on that wording, I'll commit when I am next able to. Do see already how I partially adapted for Cardoe's requests.
> And then, in "Checksum depreciation timing" I would prefer that the > description of what needs to be done in the present situation was used > as an example after a more general rule is stated. Something like:
I'd propose the following variant: ===== A minimum set of depreciated checksums shall be maintained only to support old package manager versions where needed by historically used trees: - New package manager versions should NOT use depreciated checksums in Manifests when newer checksums are available. - New trees with that have never used the depreciated checksums may omit them for reasons of size, but are still strongly suggested to include them. - Removal of depreciated checksums shall happen after no less than 18 months or one major Portage version cycle, whichever is greater. ===== I'm not editing these into the checksum GLEP right now, as I'm sitting in the food court at the airport, with my flight boarding shortly. Most probably will be committed from my hotel room tomorrow night in Brussels. Signing off now, from an airport with bizarre wireless: More than 45% of connections fail to start, but when they do, they're good for more than 20Mbit. That's after you deal with the their broken DNS in the auth mechanism (I'm probably the only person with working wireless right now, so it's all the bandwidth to myself). -- Robin Hugh Johnson Gentoo Linux: Developer, Trustee & Infrastructure Lead E-Mail : robbat2@g.o GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85