On Fri, Jun 21, 2024 at 08:27:56PM +0200, Helmut Grohne wrote: > For these reasons, I propose changing section 10.1 and encoding the > avoidance of symlink vs directory conflicts into policy. To get a > discussion going, I suggest the following update. > > - To support merged-/usr systems, packages must not install files in both > - /path and /usr/path. For example, a package must not install both > - /bin/example and /usr/bin/example. > + Since base-files implements mandatory merged-/usr by installing the > + aliasing symbolic links, other packages must not install files into > + aliased paths such as /bin, /lib, /lib* or /sbin. The package manager is > + not prepared to deal with such aliasing and in prohibiting the > + installation into aliased locations, we avoid triggering undefined > + behaviour. Conversely, packages may assume that /bin, /lib and /sbin are > + symlinks at all times and that their files below /usr/bin, /usr/lib and > + /usr/sbin are also accessible via their aliased locations. seconded.
> I suspect that this is not perfect, but it is hopefully good enough for
> entering the discussion.
I think it is also good enough to second it.
> Questions:
> 1. Do you agree that policy should be changed?
yes
> If yes:
>
> 2. Do you agree that policy should prohibit installing into aliased
> paths?
yes
> 3. Do you agree that the current progress is sufficient for changing
> policy? If not, when can we change policy?
now is fine
> 4. Do you agree with the proposed wording? Can you suggest
> improvements?
yes and I pass.
> 5. Given earlier disagreement on this matter, should we discuss this
> matter in a wider setting such as d-devel?
no, thanks. We have discussed this enough and we have *implemented* the
changes, why should we again discuss whether we want that change?
> Thanks for considering
Many thanks for all your fantastic work here, Helmut!
--
cheers,
Holger
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄
Suppose a single covid infection takes only two years off your life on average.
signature.asc
Description: PGP signature
