Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Oct 2015 21:13:50 +0200
From:      Rainer Duffner <rainer@ultra-secure.de>
To:        Mark Felder <feld@freebsd.org>
Cc:        freebsd-pkg@freebsd.org
Subject:   Re: locked packages got upgraded anyway
Message-ID:  <BC0B6E03-96DA-4ABD-991C-C2D9F1E1C4D9@ultra-secure.de>
In-Reply-To: <1444834799.3166860.410090913.6644022C@webmail.messagingengine.com>
References:  <561D8634.40103@electricembers.coop> <D632CC59-E6E8-4856-A00D-6228448EDF82@ultra-secure.de> <1444834799.3166860.410090913.6644022C@webmail.messagingengine.com>

next in thread | previous in thread | raw e-mail | index | archive | help

> Am 14.10.2015 um 16:59 schrieb Mark Felder <feld@freebsd.org>:
>=20
>=20
>=20
> He has a valid use case and I don't know why it was upgraded. Sounds
> like a bug. Perhaps because it was a dependency? Hmm...
>=20
> A planned* feature is for a user to be permitted to have packages with
> custom build options and "pkg upgrade" will handle fetching the =
required
> parts of the ports tree and building the updated package so you don't
> have to play this "lock your package, manually upgrade it later" game.
> Not everyone should be forced to run poudriere just so they can change
> one option on one package...



Well, I feel the reality is different.
=E2=80=9EShould have=E2=80=9C or =E2=80=9EShould not have=E2=80=9C =
doesn=E2=80=99t buy you anything in the end ;-)

It=E2=80=99s probably not a problem locking a package with no =
dependencies.
But do you have to lock the dependencies, too?
I=E2=80=99m too afraid of the outcome, so I don=E2=80=99t even try.
And if you=E2=80=99re running poudriere for a couple of packages =
already, you can just let it build the rest, too.
IMO.

The only thing I found useful was locking pkg itself.
That way, I could downgrade everything to an earlier cut of the =
ports-tree (except for pkg, which would probably have had problems =
reading the newer version of the pkg-db created by a more recent version =
of pkg).

I realize not everyone wants to run their own repo - but in practice, =
this is currently the best way to do it if you=E2=80=99re not 100% happy =
with what you get from the official repo, with the least possible ways =
to totally F-U.
I, too, would be glad if there were =E2=80=9Eflavors=E2=80=9C, so I =
could stop running my own build-server and just mirror the official =
repo, like we do for Ubuntu and CentOS.
But in the end of the day, I live in reality, not in la-la-land.

I appreciate all the work done by the committers on the ports-tree and =
packages - I save an absurd amount of time just by walking in these =
foot-steps.







Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BC0B6E03-96DA-4ABD-991C-C2D9F1E1C4D9>