Re: [gentoo-server] Portage Maintenance

[Jason Stubbs]

On Wednesday 08 September 2004 03:14, Kurt Lieber wrote:
> On Tue, Sep 07, 2004 at 07:09:27PM +0200 or thereabouts, Christian Parpart
wrote:
> > Some questions remain anyway. WHO exactly may submit (have write access),
> > and, how to get into this new idea to get a bit more attention in public?
>
> Well, ideally, everyone would have write access.  If that freaks people out
> a bit too much, then you could have some sort of cursory review process
> where a group of people review ebuilds to make sure they don't have any
> nastiness in them.
>
> If you restrict who can access the system too much, then you end up where
> we are now, with no net improvement.
>
> As for getting more attention to it -- start up threads on -dev asking for
> ideas.  Write a GLEP.  Make a fuss. :)
>
> BTW, one very real criticism of my original idea that will need to be
> addressed if anything is to be approved is ongoing maintainership of these
> user-submitted ebuilds.  It's one thing to submit an ebuild via this fancy
> new system, but when that package has a security problem, someone needs to
> be there to bump the ebuild.  You should not expect the current devs to
> take on this responsibility, nor should you expect the security team to.
> There will need to be some provisions made for ongoing support of these
> ebuilds.

Not really the correct place for this (at first I thought you were going to 
suggest super-stable as the fourth tier ;) but the other major concern is 
quality and affects on supported ebuilds. For example, a user-contributed 
gnome-libs-cvs breaks gnucash and then the gnucash dev has to stumble around 
trying to figure out what's wrong until the user finally says that they are 
using gnome-libs-cvs... I guess this could be worked around by disallowing 
contributed ebuilds for official packages.

Regards,
Jason Stubbs