On Fr, Mär 18 2022 at 17:42:30 -0000, Sy retia simonizor@protonmail.com wrote:
I assume you're talking about 1-click installs here? I think this is more of a problem with yast-metapackage-handler. It should be checking if the repositories are compatible with the release the user is on, and it needs to offer an option to set the repo priority before installing anything. I think the 1-click installs are a really good idea, but yast-metapackage-handler needs improvement. Making yast-metapackage-handler more robust by adding the option for priorities, probably even defaulting to a lower priority for repos being added through 1-clicks, and making sure the repo being added matches the release the user is running fixes all of the problems for users that you mentioned above. I know a lot of users really like the 1-click installs, and I think abandoning them completely would be a huge mistake.
There's a small issue of packages like the kernel, which is built in a repo based on Factory, so there's no way to automatically tell the metapackage-handler to do the right thing in case of installing on Leap. I was thinking maybe it would be possible to provide a single ymp file for the package in obs instead of splitting them per output repository, which does have a potential to fix some issues there, but of course RPM specs are free to output packages with any name in any distribution, so that still ends up fragmented.
I understand the need to update the backend to something more secure, but I think pushing this discussion in the direction of getting rid of features is a mistake. It really shouldn't be super difficult to tweak yast-metapackage-handler so that it can be safer for users. Also, there are a few other instances where 1-click installs come in handy such as adding codecs from Packman easily. I really think improving yast-metapackage-handler is the better option over abandoning 1-click installs entirely.
Feel free to contribute to yast-metapackage-handler if it's not that hard, it hasn't gotten much maintenance over the past decade, and I can guarantee you the yast team will be happy to accept patches to it. Even a solution outside of yast would work, but the last try with that died quite quickly.
LCP [Sasi] https://lcp.world/