From owner-freebsd-arch Thu Jul 11 18: 9:22 2002 Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F0D337B400; Thu, 11 Jul 2002 18:09:20 -0700 (PDT) Received: from softweyr.com (softweyr.com [65.88.244.127]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0264143E6E; Thu, 11 Jul 2002 18:09:20 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from nextgig-9.customer.nethere.net ([209.132.102.169] helo=softweyr.com) by softweyr.com with esmtp (Exim 3.35 #1) id 17Sovo-000OgZ-00; Thu, 11 Jul 2002 19:09:12 -0600 Message-ID: <3D2E2D33.D09B8F16@softweyr.com> Date: Thu, 11 Jul 2002 18:13:23 -0700 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.78 [en] (X11; U; Linux 2.4.2 i386) X-Accept-Language: en MIME-Version: 1.0 To: Doug Barton Cc: Dag-Erling Smorgrav , Dan Moschuk , arch@FreeBSD.org Subject: Re: Package system flaws? References: <20020709233503.I5990-100000@master.gorean.org> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Doug Barton wrote: > > On Mon, 8 Jul 2002, Wes Peters wrote: > > > Doug Barton wrote: > > > > > > On Sun, 7 Jul 2002, Terry Lambert wrote: > > > > > > > > We want to be able to install a package from a non-rewindable source > > > > > without storing a temporary copy on disk. This means the metadata > > > > > must without fail be at the very beginning of the package. > > > > > > Ok, then what about storing the meta data as a seperate file? Why do they > > > have to be in the same package? > > > > So you can (md5, sign) them together and know that they "apply" to each > > other. > > If we limit the metadata properly (for my definition of "proper") there > won't be anything that needs to be verified. The metadata file should of > course include the md5 of the package(s) it applies to directly. I'm coming around to your viewpoint. We can write the metadata to have external references to binary filesets, and even to the source, patches, and Makefiles that make up the "port." Filesets can be signed so we can verify they are the correct contents and weren't tampered with in transmission. This would allow us to update the metadata files in the same way ports are updated now, using CVSup, keeping the packages system up to date. Only the filesets that have actually changed need be downloaded to upgrade to a newer package. This would also allow the user to skip filesets she doesn't need, such as support for languages not comprehended or binaries for platforms not present. This would even allow OpenBSD users to skip the installation of man pages, so long as the package creator is clever enough to package the man pages in a separate fileset. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC wes@softweyr.com http://softweyr.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message