[Mageia-dev] Mirror layout, round two

Michael Scherer misc at zarb.org
Tue Nov 30 04:09:16 CET 2010


Le lundi 29 novembre 2010 à 20:54 -0500, andre999 a écrit :
> Yann Ciret a écrit :
>       
> > I dislike the main/contrib separation in some case.
> > The first example is with Mozilla Thunderbird packages. Some extension
> > packages are in contrib. So each time thunderbird received security
> > update, the update cannot be installed because of non automatically
> > rebuild of his contrib package. And each time I see a bug report of user
> > asking a manual rebuilt. With only one core media, this situation will
> > disapear (I hope).
> >    
> Unlikely.  This problem is not at all related to separate repositories.

It is. It is exactly related to the fact that thunderbird is supported,
and that extension are not despites depending on it.

That precisely because we tell "security and bugfixes occurs only on
main" that contribs got broken, since the security team do not care to
not break contribs packages.

> Rather that one package was updated, and an optional installed module 
> was not.
> The fact that the module is optional is the key point.
> The installer should be flexible enough to give a warning in this case, 
> and ask if you wish to continue the installation.

So basically, you want a --nodeps ? 
If there is a requires, there is usually a good reason. Engineering is
not randomly adding line to a file until it work.

> As well, in the case of Thunderbird, it is almost certain that the 
> installed module was in fact compatible with newer version of 
> Thunderbird.  (A security problem may directly impact Thunderbird or the 
> module, but highly unlikely both packages.)
> Rpm tags should have been set so that Thunderbird would recognize that 
> the module was appropriate in the newer version.

No. If there is stricter dependency, it is precisely because there is no
guarantee of any kind of ABI between thunderbird versions. The same goes
for firefox.

> So in sum, this was probably only a packaging problem.  Whatever the 
> repository.

No. Not at all. 
The problem is linked to the difference of support between main and
contribs.
-- 
Michael Scherer



More information about the Mageia-dev mailing list