[opensuse-factory] Thoughts About the "Contrib" repository
Hi: Even though I decided to contribute to the "Contrib" repository as a reviewer and indeed think there is a sproblem with the repository layout I still have a number of bad feelings, it smells bad for me, sorry! Im going to summarize what I think is wrong with this idea. From the organization point of view, it persist in the wrong way of seeing community contributors as "second class" citizens, that needs a separate repository, isolated from the main distribution, this is by far my biggest concern. Technically, it has mayor issues - No clear submission process - No security policies - No maintenance policies - No timeframe to get things done ( no, we cannot keep going forever, it would be impossible to test) - there is no QA team. - the contrib list does not show any noticeable activity - Due to the previous problems, It may become the "abandonware" repository. - No specific bugzilla component. - Possible many other "details" Im missing because Im not kinda the "process" kid on the block. No, things said here http://en.opensuse.org/Contrib are not enough ;-) So far, I fail to see this going anywhere and while I think the existance of this repository is fundamentally flawed Im still willing to help because it may provide us some lessons to learn the hard way before moving to a different approach. Any thoughts out there ? -- "A computer is like an Old Testament god, with a lot of rules and no mercy. " Cristian Rodríguez R. Platform/OpenSUSE - Core Services SUSE LINUX Products GmbH Research & Development http://www.opensuse.org/
Le mercredi 29 octobre 2008, à 01:45 -0300, Cristian Rodríguez a écrit :
Hi:
Even though I decided to contribute to the "Contrib" repository as a reviewer and indeed think there is a sproblem with the repository layout I still have a number of bad feelings, it smells bad for me, sorry! Im going to summarize what I think is wrong with this idea.
From the organization point of view, it persist in the wrong way of seeing community contributors as "second class" citizens, that needs a separate repository, isolated from the main distribution, this is by far my biggest concern.
Technically, it has mayor issues
- No clear submission process - No security policies - No maintenance policies - No timeframe to get things done ( no, we cannot keep going forever, it would be impossible to test) - there is no QA team. - the contrib list does not show any noticeable activity - Due to the previous problems, It may become the "abandonware" repository. - No specific bugzilla component. - Possible many other "details" Im missing because Im not kinda the "process" kid on the block.
No, things said here http://en.opensuse.org/Contrib are not enough ;-)
So far, I fail to see this going anywhere and while I think the existance of this repository is fundamentally flawed Im still willing to help because it may provide us some lessons to learn the hard way before moving to a different approach.
Any thoughts out there ?
FWIW, the GNOME team is (maybe a bit slowly) working towards pushing packages from GNOME:Community to Contrib so that those packages get more exposure (and are easier to find for users). We'd like to use G:C as a staging area for Contrib, like we use GNOME:Factory as a staging area for openSUSE:Factory. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
Cristian Rodríguez
Hi:
Even though I decided to contribute to the "Contrib" repository as a reviewer and indeed think there is a sproblem with the repository layout I still have a number of bad feelings, it smells bad for me, sorry! Im going to summarize what I think is wrong with this idea.
From the organization point of view, it persist in the wrong way of seeing community contributors as "second class" citizens, that needs a separate repository, isolated from the main distribution, this is by far my biggest concern.
I would love to have contribution for factory itself as well. What I don't know yet is how the interaction should work. We currently need to have a Novell packager to answer these questions: * how to handle security updates? Some of these are confidential when they get reported? How to ensure delivery? * how to handle maintenance for enterprise products for these packages? What kind of model could work here? Nevertheless I think contrib is a good idea - it would allow some loser rules than we have in factory and a full ownership by the community. I think we want both ;)
[...]
Andreas -- Andreas Jaeger, Director Platform / openSUSE, aj@suse.de SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) Maxfeldstr. 5, 90409 Nürnberg, Germany GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
Andreas Jaeger escribió:
What I
don't know yet is how the interaction should work.
Same here, In case I figure it out will suggest some steps ;)
We currently need to have a Novell packager to answer these questions: * how to handle security updates?
Im my opinion, these packages should go in _regular_ security maintenance using the same process except for some changes * We add some community man power to the security and maintenance team (how? dunno) * We either open SWAMP or create an alternative process to actually deliver the updates (again, how ? no idea..) * Packages get minor version updates when security issues appear, if there is no minor version update and major version update are incompatible or there are other dependant packages that will break, create "backports" of fixes.
Some of these are confidential when they get reported?
Issues are sometimes confidential for a while in order to allow vendors to release fixes before it goes public... I think is not possible to force volunteers to deliver a fix in a certain number of days/weeks, considering they work in their spare time..
* how to handle maintenance for enterprise products for these packages?
Awww.. this getting tricky.. :-) -- "Divinity and Lust Are forever forbidden to meet" Cristian Rodríguez R. Platform/OpenSUSE - Core Services SUSE LINUX Products GmbH Research & Development http://www.opensuse.org/
participants (3)
-
Andreas Jaeger
-
Cristian Rodríguez
-
Vincent Untz