From owner-freebsd-pkgbase@freebsd.org Tue Mar 3 14:24:45 2020 Return-Path: Delivered-To: freebsd-pkgbase@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 86F282516FA for ; Tue, 3 Mar 2020 14:24:45 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 48WzmY1RHSz4L73; Tue, 3 Mar 2020 14:24:45 +0000 (UTC) (envelope-from gjb@freebsd.org) Received: from FreeBSD.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by freefall.freebsd.org (Postfix) with ESMTPS id 7698E12E75; Tue, 3 Mar 2020 14:24:44 +0000 (UTC) (envelope-from gjb@freebsd.org) Date: Tue, 3 Mar 2020 14:24:41 +0000 From: Glen Barber To: Ben Woods Cc: "freebsd-pkgbase@freebsd.org" Subject: Re: Pkgbase repo for 13-CURRENT Message-ID: <20200303142441.GA26796@FreeBSD.org> References: <20200302150413.GC9584@FreeBSD.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="6c2NcOVqGQ03X4Wi" Content-Disposition: inline In-Reply-To: X-BeenThere: freebsd-pkgbase@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Packaging the FreeBSD base system." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Mar 2020 14:24:45 -0000 --6c2NcOVqGQ03X4Wi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Mar 03, 2020 at 06:31:28PM +0800, Ben Woods wrote: > On Mon, 2 Mar 2020 at 23:04, Glen Barber wrote: >=20 > > On Sat, Feb 29, 2020 at 09:44:22AM +0800, Ben Woods wrote: > > > Just wanted to ask if there is a pkgbase repo for 13-CURRENT snapshots > > yet? > > > > There is not yet. > > >=20 > Hi Glen, >=20 > Thanks for clarifying. >=20 > Out of curiosity (thanks for all your hard work), how much has release > engineering been involved in the final efforts to get pkgbase across the > line? Obviously there are some final features that are still being added, > but tasks such as creating a pkgbase repo which is in-sync with the > ports-latest pkg repo for 13-CURRENT would be a step towards making this a > reality. >=20 It has admittedly been a few months since I looked at anything pkgbase-related, but it is not completely off my radar. There are a few administrative items to address before making a public repository a reality, however. For instance, some discussion needs to take place within the admins team regarding how (as in what mechanism) we want to distribute packages for the base system. Notably, do we want to mimic what is done for ports, or use something else. In addition to that, we(tm) (admins, re, secteam) need to discuss if we want to use the same package signing mechanism that is in place for ports. Though these seem like they should be simple yes/no questions to answer, as someone with stained hands in these areas, I can assure you that it is not so simple. These are just two examples off of the top of my head, but there are a few other things that need serious and careful thought to do this the right way. Glen --6c2NcOVqGQ03X4Wi Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEjRJAPC5sqwhs9k2jAxRYpUeP4pMFAl5eaKkACgkQAxRYpUeP 4pO4nA//Y1tlvVg1afrumK3bCYmPH6d0WYaONv6T/7eLQg3p2MyXMHcadjSWmvW5 zCoWR+caw9dlcWnsTg5Xt3bA4bs/OV6EQvois2HyAWND6s1ZEpCnVlYgWvpnT4Ay 7rt3iO6cVl1qNiVzbUIxMzPBiXhtKb1eRf+qQd52vTAZE3LQCt4Bb/NBTcAiO5FC PBb7i5mUl0r6DLgW+/NA4HUV+8mrIiv/OL+seInskabAglpo1oxsUaSiAAVzVfer rJJpTsndk6+o8DI6nOT6PTnazY2EArI8zTElgdbaycbGQXzTNmfkcETYI6dqPHZJ VKkHsVQKyBK2cTSHQ+rJedmtOAqUB4JiMJGt5sTB+SAuqdQdo4MWOcPBxUZu7+DD fa8JuB/77zWUGcDfZKXGOOs6rWS+MqYJpS7os9cTGGeg2gUVKH8oEKgnqHBmwtrW ZdeyNMtmtQBXm+GV/3b30N++S2IdFFau0WFvP6QfWY+4vQ0zus4U097OIu0zIZor HCFzNpHcaiPe+6rL3NyhnbHQEmphva/oJx9t4TzW8eG6lEOiq0Z1Zbq5ukVnZmtu l/B/0kch8XR6WxS/HYjDDAw9fHyuZ+tBNH0C6ukG0suFWAm+GmNgZW51pDsvdLdY dfgZU/zKLBixYDjvTA06efh/zNVz82+fYulg3tnuf5cTDph1wG4= =JNS9 -----END PGP SIGNATURE----- --6c2NcOVqGQ03X4Wi--