From owner-freebsd-pkg@FreeBSD.ORG Wed Mar 20 15:20:35 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id EEEE7C7; Wed, 20 Mar 2013 15:20:34 +0000 (UTC) (envelope-from mgamsjager@gmail.com) Received: from mail-la0-x22d.google.com (mail-la0-x22d.google.com [IPv6:2a00:1450:4010:c03::22d]) by mx1.freebsd.org (Postfix) with ESMTP id BBC46E37; Wed, 20 Mar 2013 15:20:33 +0000 (UTC) Received: by mail-la0-f45.google.com with SMTP id er20so3126129lab.4 for ; Wed, 20 Mar 2013 08:20:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=1mBaIUo79xEB7r0O6QXCcZttSx2kmgEbIhi7ZP6Ytmg=; b=DvOVC0wvJM16ssRnNbKw05oU4/UseL7ESlNwj6ixOrx24XtAf/cCfngdtR1DW+blJe Q7WJxYhkQahCryRktwcPK+UvOuA0vLFQ720oCwT82zsYdzM7KUfBnLqK8tHodSqaZQ6x 2U31KwS/f6soGfF0U6YwA4GWeviifAbFfmVcuazZcgl1jsThAGtcO+03tVEQq82EYfuQ /HxWlfKCgxSddvWJqfQ5itZVvwre51eqLLoDZ1Rb6cFSwba4E4bQriAvUv1hNw3hvN1H v4xm5/y/IDhmgfSu6CP61G+hD7zuTJv7VAv5xStRNjHmHMJth7e3HY5zQJW7imrlmdpR yJRA== X-Received: by 10.152.46.131 with SMTP id v3mr5641905lam.57.1363792832581; Wed, 20 Mar 2013 08:20:32 -0700 (PDT) MIME-Version: 1.0 Received: by 10.152.21.226 with HTTP; Wed, 20 Mar 2013 08:20:02 -0700 (PDT) In-Reply-To: <5141B491.1010800@FreeBSD.org> References: <5141B491.1010800@FreeBSD.org> From: Matthias Gamsjager Date: Wed, 20 Mar 2013 16:20:02 +0100 Message-ID: Subject: Re: [HEADS UP] pkgng binary packages regression in 1.0.9. Fixed in 1.0.9_1 To: Bryan Drewery Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 Cc: FreeBSD Ports , FreeBSD Current , freebsd-stable@freebsd.org, freebsd-pkg@freebsd.org X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2013 15:20:35 -0000 > Due to the security incident, there are still no official FreeBSD > packages. > Do you know what the status is on that issue? From owner-freebsd-pkg@FreeBSD.ORG Wed Mar 20 16:29:32 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 1C658B6A for ; Wed, 20 Mar 2013 16:29:32 +0000 (UTC) (envelope-from jdc@koitsu.org) Received: from qmta13.emeryville.ca.mail.comcast.net (qmta13.emeryville.ca.mail.comcast.net [IPv6:2001:558:fe2d:44:76:96:27:243]) by mx1.freebsd.org (Postfix) with ESMTP id ECDE22CB for ; Wed, 20 Mar 2013 16:29:31 +0000 (UTC) Received: from omta04.emeryville.ca.mail.comcast.net ([76.96.30.35]) by qmta13.emeryville.ca.mail.comcast.net with comcast id Dr8Y1l0030lTkoCADsVX1F; Wed, 20 Mar 2013 16:29:31 +0000 Received: from koitsu.strangled.net ([67.180.84.87]) by omta04.emeryville.ca.mail.comcast.net with comcast id DsVW1l00K1t3BNj8QsVWTR; Wed, 20 Mar 2013 16:29:30 +0000 Received: by icarus.home.lan (Postfix, from userid 1000) id 5732B73A1C; Wed, 20 Mar 2013 09:29:30 -0700 (PDT) Date: Wed, 20 Mar 2013 09:29:30 -0700 From: Jeremy Chadwick To: Matthias Gamsjager Subject: Re: [HEADS UP] pkgng binary packages regression in 1.0.9. Fixed in 1.0.9_1 Message-ID: <20130320162930.GA5230@icarus.home.lan> References: <5141B491.1010800@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.net; s=q20121106; t=1363796971; bh=SDfLa+6JNcfYqWmz7ahlU5fycNVEh8kb5Zr318srBl0=; h=Received:Received:Received:Date:From:To:Subject:Message-ID: MIME-Version:Content-Type; b=k4cKqLCHOkPOOCDDRZBcfjidtIkRFQujJIbfZwC14qvea4fkzRxNnCMtY7ixWxJeC SiWtmV2zy3rNkfpm9AKgwuQiGkToYqjZsOVl2x2AG+F7dNkCWLuJOos1ahMVlb+0OY PFMt2n0+8tYnjbOi85H+CjIKIEkCMNhBd5BgVcGec/e+Lia8Du443DMy9ckQHJU2vN 7rC6/+TAqieZkvWes8ENgAziz7diL0GaqHhI+CWTelYGUTx28rWujE7enJT8u/ZU3I EwY9IQ+n61NmijTqr7R8tyW6Rei1QmXPKReNZIB9p+zOHzfoYjRQgqVgl86XVEHsCg Bdzn8viVmxhmA== Cc: FreeBSD Ports , FreeBSD Current , freebsd-stable@freebsd.org, freebsd-pkg@freebsd.org, Bryan Drewery X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2013 16:29:32 -0000 On Wed, Mar 20, 2013 at 04:20:02PM +0100, Matthias Gamsjager wrote: > > Due to the security incident, there are still no official FreeBSD > > packages. > > Do you know what the status is on that issue? I'd also like to find out what the status of this is. The packages at: ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9-stable/ Are still circa October 2012 -- that's 4-5 months ago. While I truly and deeply understand that proper engineering design and infrastructure changes take time, there has been absolutely no communication presented to the community as to what has (or hasn't) transpired, if there is (or isn't) a plan, or if people are simply waiting until future in-person BSD* events to work things out. freebsd-ops-announce has been silent on this matter as well: http://lists.freebsd.org/mailman/listinfo/freebsd-ops-announce At this point users and administrators do not know if newer packages will be made available or if they should stick to building purely from source. Deep down I'm worried that this will solicit a response of "switch to ports-mgmt/pkg and ports-mgmt/poudriere". While I'm not opposed to the tools themselves, I'm strongly opposed to that kind of response as I'm tired of seeing the security incident being used as a opportunistic crutch (as it was for the sudden cvsup/csup deprecation). -- | Jeremy Chadwick jdc@koitsu.org | | UNIX Systems Administrator http://jdc.koitsu.org/ | | Mountain View, CA, US | | Making life hard for others since 1977. PGP 4BD6C0CB | From owner-freebsd-pkg@FreeBSD.ORG Wed Mar 20 17:03:41 2013 Return-Path: Delivered-To: freebsd-pkg@freebsd.org Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115]) by hub.freebsd.org (Postfix) with ESMTP id 55490765 for ; Wed, 20 Mar 2013 17:03:41 +0000 (UTC) (envelope-from matthew@freebsd.org) Received: from smtp.infracaninophile.co.uk (smtp6.infracaninophile.co.uk [IPv6:2001:8b0:151:1:3cd3:cd67:fafa:3d78]) by mx1.freebsd.org (Postfix) with ESMTP id B0A5F655 for ; Wed, 20 Mar 2013 17:03:40 +0000 (UTC) Received: from rufus.webfusion.com (mail.heartinternet.co.uk [79.170.40.31]) (authenticated bits=0) by smtp.infracaninophile.co.uk (8.14.6/8.14.6) with ESMTP id r2KH3au4061914 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Wed, 20 Mar 2013 17:03:36 GMT (envelope-from matthew@freebsd.org) DKIM-Filter: OpenDKIM Filter v2.8.0 smtp.infracaninophile.co.uk r2KH3au4061914 Authentication-Results: smtp.infracaninophile.co.uk/r2KH3au4061914; dkim=none reason="no signature"; dkim-adsp=none (unprotected policy) X-Authentication-Warning: lucid-nonsense.infracaninophile.co.uk: Host mail.heartinternet.co.uk [79.170.40.31] claimed to be rufus.webfusion.com Message-ID: <5149EBE7.1040609@freebsd.org> Date: Wed, 20 Mar 2013 17:03:35 +0000 From: Matthew Seaman User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:17.0) Gecko/20130312 Thunderbird/17.0.4 MIME-Version: 1.0 To: freebsd-pkg@freebsd.org Subject: Re: [HEADS UP] pkgng binary packages regression in 1.0.9. Fixed in 1.0.9_1 References: <5141B491.1010800@FreeBSD.org> <20130320162930.GA5230@icarus.home.lan> In-Reply-To: <20130320162930.GA5230@icarus.home.lan> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.97.6 at lucid-nonsense.infracaninophile.co.uk X-Virus-Status: Clean X-Spam-Status: No, score=-1.6 required=5.0 tests=AWL,BAYES_00,SPF_SOFTFAIL autolearn=no version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on lucid-nonsense.infracaninophile.co.uk X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 20 Mar 2013 17:03:41 -0000 On 20/03/2013 16:29, Jeremy Chadwick wrote: > Deep down I'm worried that this will solicit a response of "switch to > ports-mgmt/pkg and ports-mgmt/poudriere". While I'm not opposed to the > tools themselves, I'm strongly opposed to that kind of response as I'm > tired of seeing the security incident being used as a opportunistic > crutch (as it was for the sudden cvsup/csup deprecation). While we would like everyone to switch to pkgng in the fullness of time, there's no way we're ready to completely ditch the old pkg_tools packages yet. Nor will we be until the last release using pkg_tools by default goes out of support -- and as part of the fallout from the security incident it's planned for the upcoming 8.4 and (I think) 9.2 to ship with pkg_tools as the default packaging system. That's a change to the original pkgng roadmap I really need to add to the Wiki page. Nor will poudriere become a de-facto necessity for anyone running a FreeBSD site. Firstly, alternatives like tinderbox or portmaster or portupgrade are still going to exist, and secondly, if pkgng does what it is supposed to do, then it should be perfectly viable for someone to maintain a FreeBSD system without actually having to build any packages themselves[*]. It certainly is not the case that pkgng is even being favoured over pkg_tools at the moment. Restoring the pkg_tools build systems was prioritised ahead of any pkgng building systems. The pkg_tools build cluster is (I believe) pretty much ready to swing into action for building the pkgs to go with the upcoming 8.4-RELEASE. Replacement pkgng building systems are on the way, but noting is available quite yet. Cheers, Matthew [*] Although building your own will be preferred by many, or simply building your own customized versions of the software that is central to what you are doing, and using pre-packaged stuff for anything else.