> * Paul Armstrong <sunsolve at otoh.org> [2007-09-12
> > One of the big issues in packaging is getting developers to sign on
> > and be consistent. A demonstration of this going well is Debian. The
> > bad flip side is RPM or companies like Oracle that just refuse to
> > participate in packaging at all (and damn the Oracle installer is
> > nasty). What ideas do you have that would get everyone doing something
> > that's sane without having to have a controlling board like Debian
> > does?
>
> That, I believe, is a distribution/adoption issue. Generally,
> packaging standards would be proposed as a best practice to ARC, and
> then enforced on new projects offering packages. Other distros (or
> package repositories) might be more lax in following such practices.

What about encoding best practice so there's less room to do stupid stuff
(for example, the way Python encodes indenting)?

> > Converting the clusters into meta-packages would be another wonderful
> > middle step (especially if combined with the ability to upgrade old
> > style packages without doing the pkgrm/pkgadd dance).
>
> This is planned (if Danek hasn't already done it).

I'm looking forward to seeing that.

> Agreed.  We have actually two planned mechanisms
>  for minimization:
> package refactoring and content filtering.  It would
>  be interesting to
> get some ideas about what content types people tend
>  to remove,

We don't remove, we build up.

All builds start with SUNWCrnet and add the necessary stuff to make the system 
useful.

Here's an example from our current Oracle Install (which thus includes stuff 
like SUNWCptoo which would otherwise not be installed)

  SUNWCbreg
  SUNWCcpc
  SUNWCdtrace
  SUNWCfwcmp
  SUNWCfwshl
  SUNWCjv
  SUNWCjvx
  SUNWClu
  SUNWCnfsc
  SUNWCntp
  SUNWCopenssl
  SUNWCmpapi
  SUNWCperl
  SUNWCpicl
  SUNWCpmgr
  SUNWCpool
  SUNWCptoo
  SUNWCsndm
  SUNWCssh
  SUNWCswup
  SUNWCwget
  SUNWCzone

  SUNWaccr
  SUNWaccu
  SUNWadmc
  SUNWadmfw
  SUNWadmfr
  SUNWadmj
  SUNWaudit
  SUNWarc
  SUNWarcr
  SUNWbart
  SUNWbind
  SUNWbindr
  SUNWbip
  SUNWcacaort
  SUNWctpls
  SUNWdoc
  SUNWdtbas
  SUNWfruid
  SUNWfruip
  SUNWfss
  SUNWgcmn
  SUNWgtar
  SUNWgss
  SUNWgssc
  SUNWgssdh
  SUNWgssk
  SUNWhea
  SUNWiopc
  SUNWi1of
  SUNWjdmk-base
  SUNWjsnmp
  SUNWless
  SUNWlibC
  SUNWman
  SUNWmc
  SUNWmcc
  SUNWmccom
  SUNWmdb
  SUNWmdu
  SUNWmfrun
  SUNWmga
  SUNWpcr
  SUNWpcu
  SUNWpsr
  SUNWpsu
  SUNWPython
  SUNWPython-share
  SUNWrsg
  SUNWrsgk
  SUNWspnego
  SUNWTcl
  SUNWTk
  SUNWter
  SUNWtnetc
  SUNWtoo
  SUNWwbapi
  SUNWwbmc
  SUNWwbcor
  SUNWwbcou
  SUNWwbpro
  SUNWxcu4
  SUNWxcu6
  SUNWxwcft
  SUNWxwfnt
  SUNWxwopt
  SUNWxwrtl
  SUNWxwice
  SUNWxwplt

> as well as hearing about brokenly-large packages in the  current distribution.

Look at anything with a SUID/SGID binary in it. Probably broken from a 
minimization/security point of view.

SUNWrcmdc comes to mind as particularly annoying. I shouldn't have to install 
RSH and it's related cruft to get snoop and whois (or re-package it and miss 
out on patches because SUID r* utilities are commonly banned from systems by 
security operations).

You'll notice there are some missing dependencies in the list above, some of 
those choices also revolve around getting rid of unused SUID binaries which 
aren't actually required to meet the dependency (X11 is a bad offender here).

Paul
 
 
This message posted from opensolaris.org

Reply via email to