On Wed, Oct 1, 2014 at 6:07 PM, Dimstar / Dominique Leuenberger
On Wed, 2014-10-01 at 18:00 -0300, Claudio Freire wrote:
openSUSE Factory and embargoes just do not fit together, as it is fully open.
Local package testbuilds are possible, but not much more.
OBS has private projects, so it can be kept private and link/aggregate the results at embargo finish time.
The problem I think currently is openQA, which would need a separate instance working on the private repo - not even sure if it can do that.
It has 'OPEN' in the name.. making it private makes it anything BUT 'open'. I for one do NOT want to be part of a 'halfway openSUSE' project. We came a long way to get where we are now.
Embargos are temporary and a necessary thing for critical, easily exploitable security patches. I'm sure openSUSE, even though totally open, already respects the embargo and does security patching for those patches (not all are embargoed) in private already.
Instead of investing all the energy on all those different fronts, I think it's much better invested to find out HOW this issue could slip into Factory and only be noticed once it was too late. with our without this bash timing conflict: THIS is the problem ACTUALLY at hand (just that shellshock made it more visible).
True, but not totally true. You can never fix this timing issue. Eventually, snapshots will be delayed for whichever reason. You don't want a rolling distro that gets no security patches. If anything, a rolling distro should be more up-to-date than released versions, and yet releases got the security patch a few days before Factory. That makes it a show-stopper for many potential users of rolling distros.
Considering that Factory now IS published, I think we can assume that the problem was identified (let's hope so)... identifying the problem is always the first right step in the direction of getting a proper solution.
Indeed, if openQA could be taught to detect this particular (or similar) issue, it would be great. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org