Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
MIME-Version: 1.0
In-Reply-To: <8238AF81-2BB2-4AEB-978E-906EA887BFCD@shapeblue.com>
References: <8238AF81-2BB2-4AEB-978E-906EA887BFCD@shapeblue.com>
From: Daan Hoogland <daan.hoogland@gmail.com>
Date: Thu, 26 Nov 2015 08:04:53 +0100
Message-ID: 
 <CAGQtxvZwxiF1f-NEfP7Y41sO7SrsEAYyukb=jZdjJ_cGC0J=sQ@mail.gmail.com>
Subject: Re: Package Repositories
To: dev <dev@cloudstack.apache.org>
Content-Type: multipart/alternative; boundary=001a11442c4a37a38905256c3241

--001a11442c4a37a38905256c3241
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Thu, Nov 26, 2015 at 7:52 AM, John Burwell <john.burwell@shapeblue.com>
wrote:

> All,
>
=E2=80=8B...=E2=80=8B

> In my opinion, favoring one 3rd-party repository over another is
> detrimental to the community.

=E2=80=8Bagree
=E2=80=8B


>   We should either list all maintained 3rd-party package repositories or
> we should list none at all.   By maintained, I mean a repository that mee=
ts
> the following criteria:
>
>
>   *   All contained packages are built from project release tags
>
=E2=80=8BI do not think it will be helpful to limit our listing to provider=
s
meeting this criteria; If anyone wants to distribute enhancements on the
projects deliverables and share them as packages, that's fine.
=E2=80=8B


>   *   The packages contained in the repository are up-to-date with latest
> release tags
>
=E2=80=8BThat will be hard to enforce, we will have to make sure all provid=
ers are
up to date ahead of time.
=E2=80=8B


> Some on the PR discussion asked about the purpose and composition of the
> packages in the ShapeBlue repository.  The packages in the ShapeBlue
> repository are noredist builds of community release tags.  They contain n=
o
> additional patches or changes.  This repository was created to provide
> users with an convenient/familiar way to install the noredist build of a
> release.
>
=E2=80=8BI don't know what has trumpted this ShapeBlue bashing nor what has=
 made
ShapeBlue decide to provide packages in a way that was already custom at
apt-get.eu, neither are a good sign.=E2=80=8B

Finally, as I have stated elsewhere, I think the project should build
> distribution packages signed by the project and distributed from official
> package repositories.  However, we must come to a consensus as community
> this change in deliverables and work out a variety of issues (e.g.
> supported platforms, repository management, signing, etc) to ensure that
> users receive well-tested, community voted packages.  Finally, it seems
> like there will be a role for 3rd-party repositories now and in the
> future.  Listing all available 3rd-party repos as I propose would be
> convenient for users, and ensure fairness to all contributors.
>
=E2=80=8B:+1:
=E2=80=8B

Your statement =E2=80=8Bsounds like a proposal=E2=80=8B. It is inteded so?


--=20
Daan

--001a11442c4a37a38905256c3241--