Gentoo Archives: gentoo-dev

From: Alexander Berntsen <bernalex@g.o>
To: gentoo-dev@l.g.o
Subject: Re: Facilitating user contributed ebuilds (Was: [gentoo-dev] The future of the Sunrise project)
Date: Fri, 10 Jun 2016 07:32:28
Message-Id: 575A6CFB.8010005@gentoo.org
In Reply to: Re: Facilitating user contributed ebuilds (Was: [gentoo-dev] The future of the Sunrise project) by Rich Freeman
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA512
3
4 On 09/06/16 12:20, Rich Freeman wrote:
5 > Perhaps you could explain how they actually prevent the issues I
6 > brought up?
7 You should probably ask the Exherbo developers, not me.
8 >
9 > Suppose you have 10 packages, and they each depend on zlib from a
10 > different repository? If they collide, that is one problem to
11 > solve. If they don't collide then you have 10 copies of zlib now,
12 > and good luck making sure they're all secure, and of course now
13 > you're multiplying the number of "shared" objects you keep in RAM.
14 I don't understand why this would happen. Perhaps I was not clear
15 enough.
16
17 If we support a central repository with core/base features, and curate
18 some useful repositories (with code review), the users would likely
19 mostly have programs from the curated repositories, and zlib from the
20 core/base repository. If they are using unreviewed things not
21 officially reviewed and supported by us, they would be on their own,
22 just like expert powerusers are today.
23 - --
24 Alexander
25 bernalex@g.o
26 https://secure.plaimi.net/~alexander
27 -----BEGIN PGP SIGNATURE-----
28 Version: GnuPG v2
29
30 iQIcBAEBCgAGBQJXWmz7AAoJENQqWdRUGk8BWJUQANvSzJ70cog6ybFBIhVf/+bn
31 FX9BYpH6rPkkr1Ve9+XGJviq3d1hOh8TAwBt+Qx3YkmRu6h4fVyXO1sPaqf+gs03
32 bvyvKHez2JT+KyJ1a2Mj61ojy7RYOaVOn2cSGQasD39yPfl+57qJbIDLzGTK8a1D
33 Upo+MrKuxSFm31JM4XsQJ0BtYl7SysVJW+5ztdOcRgDvg+pGae1U9Hwep3yEaRiV
34 zuxuALrPtvUdAB8j71dSawf80j0DSh1VP3mfZeqmj7ghvTfUbi/RzOpmf6qZpFLo
35 3vc4pMiSh0PB7bjgffPRDnTdgu/ecm2Coms8n3OlMDCQ0rihkLmd+P0OibyfQKmu
36 fH1+2PYcXRE6cs5ogiuWs845KZ6FNUxbNwCHBfRm4N3x/59NPXmXSWBUcYSdFFss
37 WDoBf2A08J2As0OEJv1DV2+Qn0hM6GjtOv/fhMoO+58rP8cKvFhfPMezSNPf8SFO
38 NQGbAW4TzotwHbBREoQcJtl+lOa4+U/Tv80H0RlSyOwaINI6hf/YjLd3Xukwftk6
39 Sti+vPiZIj7esvJmE0XvfPI8XHUWkFmojTyZuTIPyjYQbNU1psEt7KnQ+2+oahbc
40 qcPq4FfNQ7QO65q5nyzQjTgPj0Hqy2X/xCoZLtcxMKEfqObWGR38Z2+Coqsil7tD
41 Q9NWG94PTpAq3G+oG6tn
42 =246a
43 -----END PGP SIGNATURE-----