From owner-freebsd-pkg@freebsd.org Sat Jul 16 15:13:44 2016 Return-Path: Delivered-To: freebsd-pkg@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 07709B9B626 for ; Sat, 16 Jul 2016 15:13:44 +0000 (UTC) (envelope-from baptiste.daroussin@gmail.com) Received: from mail-lf0-x229.google.com (mail-lf0-x229.google.com [IPv6:2a00:1450:4010:c07::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 76C1111CB for ; Sat, 16 Jul 2016 15:13:43 +0000 (UTC) (envelope-from baptiste.daroussin@gmail.com) Received: by mail-lf0-x229.google.com with SMTP id b199so106164689lfe.0 for ; Sat, 16 Jul 2016 08:13:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=j9aXVhV4UzQ8X5dZaRpy3RdKfobhSEdvto1xDd+NiU0=; b=xQE/xGRk321JqNamM5vopuBbkUgO4lgUL0BNWCID0sV1utguyRr/3M5uZOrc058uPb N2D6RfzTHC5ckSYyYCt62OonmR15PUBNrpd8tdAPGa+WJsecV1Q6Ks5LAg4GVS/euCGH 1ko+iNmj06LFzDJtlg1+QT9Gk06vevnj7GeJP9F/BfYEBDaNrAnzgfDkxcAZAzgcI97g T99OBYe+unblm6FBNbs6UPFQEXODu4dO7cfBx7YbqgIwDmeerJnCczdVqfG0Ok3YnnAT /FuBR8som9R1SwfoNmCaWSApQDNw7MJMSIBKZeWFOKtZAxXSi/+GVvyAhbWmB8noQkup vePQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:sender:date:from:to:cc:subject:message-id :references:mime-version:content-disposition:in-reply-to:user-agent; bh=j9aXVhV4UzQ8X5dZaRpy3RdKfobhSEdvto1xDd+NiU0=; b=e7Uhq8wmqRYLrQIsrqTlOQ2W1gcysdPdUVCVoIsxNd9vMzsfOukrPUOXZ9hXOpMOMs epEb7eWN2o8Ktyc1qZpftCt8X5m4g+BeTIejT1da6T+/Jc//BWo/C1gsxvxSlms/YjkK epwfGsuftj3PvY1DAoljHXHJj6at7Bh7m38v2d8cxJ0ywZKuiH5cVdpijhD1wzaKeah2 WXpmKkY9KQZkmBr87tiUvQTeGei011jvBEsAddT+1Rccfi9qymMWkzchX0/XdFHSmDIs BugQ+jy3lUkH7mKQo57vbOH2B6Y9DV3F/vRSjL5OZQgiaGMBrmwfJGdS2mEqD5pNn7hW zOLw== X-Gm-Message-State: ALyK8tKc7JgNhLFldJl6BqfbePmBVKYIWnA0lfjaocqLoJJ0e/R/SqmTAEwCQI0K2wY1Eg== X-Received: by 10.46.1.222 with SMTP id f91mr12487631lji.1.1468682021589; Sat, 16 Jul 2016 08:13:41 -0700 (PDT) Received: from ivaldir.etoilebsd.net ([2001:41d0:8:db4c::1]) by smtp.gmail.com with ESMTPSA id a3sm2145040lfa.19.2016.07.16.08.13.40 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 16 Jul 2016 08:13:40 -0700 (PDT) Sender: Baptiste Daroussin Date: Sat, 16 Jul 2016 17:13:39 +0200 From: Baptiste Daroussin To: Atomic Beef Cc: freebsd-pkg@freebsd.org Subject: Re: State of Provides/Requires Message-ID: <20160716151339.lvco3nmctrrk6h7s@ivaldir.etoilebsd.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="no3k4ezuqm3l23n5" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.6.1-neo (2016-06-11) X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 15:13:44 -0000 --no3k4ezuqm3l23n5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jul 11, 2016 at 03:47:18PM -0400, Atomic Beef wrote: > Hello, >=20 > I was wondering what the state of provides/requires was. I found a couple > of issues on Github that mentioned the feature, ( > https://github.com/freebsd/pkg/issues/1276 and > https://github.com/freebsd/pkg/issues/805) but they are both over a year > old at this point. This is a crucial feature to binary package management, > not only because it saves disk space, but because it enhances security. F= or > example, any package depending on MySQL will usually choose to install > mysql56-client which is marked as vulnerable and will never be patched. Is > anyone currently working on implementing this? >=20 Provides/Requires has been added in pkg around 1.4 (iirc) They are not perfect and we would prefer to use what we call flexible dependencies instead. that said flexible dependencies are not any close to = be implemented. So I think we should use current provides/requires mechanism i= n the mean time. To use them the only issue in on the ports tree itself Best regards, Bapt --no3k4ezuqm3l23n5 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJXik8jAAoJEGOJi9zxtz5aBBQQAJAl9cJvDFbEQu1W013yKBYe qEvfTsm50C8+QhS7XrfXfvy4QHwf1rik6sxzeaWbu9n3dnMZr+qL3vusNuWsDO7w 2Yb5W9/JqM7hZnttlZfCYXSuRrx0PlGNpdlZPF6dcYMVRrAlTIQjwvh5/lnm4DMt MsHkNjXCSflmup2Dre5etJjUxbuNHjVnzGQeZ4o0b5BRxqQsBzoSdW9AOYgXiW38 cKb3nBgCgk9Hwwt9G6DhBKqK+P808v6XOcQ8PfkfzcV3K5BA3q8Cu6EPRdVU9kKP +xj9XDhrTxXpakCOUhUc67IBaoXomzrF7cyiXr5Yazc0Y1fJLgYddNjCzz1mHKps M69wg+to4rHs5/waNGqXF1BeeGbnsddHvenhjpaZRuErYUFz0SKKOoRef4MfmHYj jMbzhwlLVV7/60jPJoXex7vRcsWnPStcN0W/dZvdvm/d2GH6+Ms6y+Ux5qb6fT6Y dSVkDVSTqAbMihQ/eX8l7U8ARLQkW9bMwdVPnM+VYiIH/onFKEyVGaUj5tl/+Ply DKJqULzYfTXP7QphDllN1BS2CCFvAv6Ng2y3rB4PCC0tzfOIB3evg228MYx+JQwM eY+p8Js46UHpFHSq/80eS13a8LAYMmzX1LK2CNTrRf9kq9HmSkr3K2h3Rx4rL1xJ mdjJy7pG4M4A0NN17JMs =4yh/ -----END PGP SIGNATURE----- --no3k4ezuqm3l23n5--