1 |
-----BEGIN PGP SIGNED MESSAGE----- |
2 |
Hash: SHA512 |
3 |
|
4 |
On 09/06/16 12:20, Rich Freeman wrote: |
5 |
> Perhaps you could explain how they actually prevent the issues I |
6 |
> brought up? |
7 |
You should probably ask the Exherbo developers, not me. |
8 |
> |
9 |
> Suppose you have 10 packages, and they each depend on zlib from a |
10 |
> different repository? If they collide, that is one problem to |
11 |
> solve. If they don't collide then you have 10 copies of zlib now, |
12 |
> and good luck making sure they're all secure, and of course now |
13 |
> you're multiplying the number of "shared" objects you keep in RAM. |
14 |
I don't understand why this would happen. Perhaps I was not clear |
15 |
enough. |
16 |
|
17 |
If we support a central repository with core/base features, and curate |
18 |
some useful repositories (with code review), the users would likely |
19 |
mostly have programs from the curated repositories, and zlib from the |
20 |
core/base repository. If they are using unreviewed things not |
21 |
officially reviewed and supported by us, they would be on their own, |
22 |
just like expert powerusers are today. |
23 |
- -- |
24 |
Alexander |
25 |
bernalex@g.o |
26 |
https://secure.plaimi.net/~alexander |
27 |
-----BEGIN PGP SIGNATURE----- |
28 |
Version: GnuPG v2 |
29 |
|
30 |
iQIcBAEBCgAGBQJXWmz7AAoJENQqWdRUGk8BWJUQANvSzJ70cog6ybFBIhVf/+bn |
31 |
FX9BYpH6rPkkr1Ve9+XGJviq3d1hOh8TAwBt+Qx3YkmRu6h4fVyXO1sPaqf+gs03 |
32 |
bvyvKHez2JT+KyJ1a2Mj61ojy7RYOaVOn2cSGQasD39yPfl+57qJbIDLzGTK8a1D |
33 |
Upo+MrKuxSFm31JM4XsQJ0BtYl7SysVJW+5ztdOcRgDvg+pGae1U9Hwep3yEaRiV |
34 |
zuxuALrPtvUdAB8j71dSawf80j0DSh1VP3mfZeqmj7ghvTfUbi/RzOpmf6qZpFLo |
35 |
3vc4pMiSh0PB7bjgffPRDnTdgu/ecm2Coms8n3OlMDCQ0rihkLmd+P0OibyfQKmu |
36 |
fH1+2PYcXRE6cs5ogiuWs845KZ6FNUxbNwCHBfRm4N3x/59NPXmXSWBUcYSdFFss |
37 |
WDoBf2A08J2As0OEJv1DV2+Qn0hM6GjtOv/fhMoO+58rP8cKvFhfPMezSNPf8SFO |
38 |
NQGbAW4TzotwHbBREoQcJtl+lOa4+U/Tv80H0RlSyOwaINI6hf/YjLd3Xukwftk6 |
39 |
Sti+vPiZIj7esvJmE0XvfPI8XHUWkFmojTyZuTIPyjYQbNU1psEt7KnQ+2+oahbc |
40 |
qcPq4FfNQ7QO65q5nyzQjTgPj0Hqy2X/xCoZLtcxMKEfqObWGR38Z2+Coqsil7tD |
41 |
Q9NWG94PTpAq3G+oG6tn |
42 |
=246a |
43 |
-----END PGP SIGNATURE----- |