> * Paul Armstrong <sunsolve at otoh.org> [2007-09-12 > > One of the big issues in packaging is getting developers to sign on > > and be consistent. A demonstration of this going well is Debian. The > > bad flip side is RPM or companies like Oracle that just refuse to > > participate in packaging at all (and damn the Oracle installer is > > nasty). What ideas do you have that would get everyone doing something > > that's sane without having to have a controlling board like Debian > > does? > > That, I believe, is a distribution/adoption issue. Generally, > packaging standards would be proposed as a best practice to ARC, and > then enforced on new projects offering packages. Other distros (or > package repositories) might be more lax in following such practices.
What about encoding best practice so there's less room to do stupid stuff (for example, the way Python encodes indenting)? > > Converting the clusters into meta-packages would be another wonderful > > middle step (especially if combined with the ability to upgrade old > > style packages without doing the pkgrm/pkgadd dance). > > This is planned (if Danek hasn't already done it). I'm looking forward to seeing that. > Agreed. We have actually two planned mechanisms > for minimization: > package refactoring and content filtering. It would > be interesting to > get some ideas about what content types people tend > to remove, We don't remove, we build up. All builds start with SUNWCrnet and add the necessary stuff to make the system useful. Here's an example from our current Oracle Install (which thus includes stuff like SUNWCptoo which would otherwise not be installed) SUNWCbreg SUNWCcpc SUNWCdtrace SUNWCfwcmp SUNWCfwshl SUNWCjv SUNWCjvx SUNWClu SUNWCnfsc SUNWCntp SUNWCopenssl SUNWCmpapi SUNWCperl SUNWCpicl SUNWCpmgr SUNWCpool SUNWCptoo SUNWCsndm SUNWCssh SUNWCswup SUNWCwget SUNWCzone SUNWaccr SUNWaccu SUNWadmc SUNWadmfw SUNWadmfr SUNWadmj SUNWaudit SUNWarc SUNWarcr SUNWbart SUNWbind SUNWbindr SUNWbip SUNWcacaort SUNWctpls SUNWdoc SUNWdtbas SUNWfruid SUNWfruip SUNWfss SUNWgcmn SUNWgtar SUNWgss SUNWgssc SUNWgssdh SUNWgssk SUNWhea SUNWiopc SUNWi1of SUNWjdmk-base SUNWjsnmp SUNWless SUNWlibC SUNWman SUNWmc SUNWmcc SUNWmccom SUNWmdb SUNWmdu SUNWmfrun SUNWmga SUNWpcr SUNWpcu SUNWpsr SUNWpsu SUNWPython SUNWPython-share SUNWrsg SUNWrsgk SUNWspnego SUNWTcl SUNWTk SUNWter SUNWtnetc SUNWtoo SUNWwbapi SUNWwbmc SUNWwbcor SUNWwbcou SUNWwbpro SUNWxcu4 SUNWxcu6 SUNWxwcft SUNWxwfnt SUNWxwopt SUNWxwrtl SUNWxwice SUNWxwplt > as well as hearing about brokenly-large packages in the current distribution. Look at anything with a SUID/SGID binary in it. Probably broken from a minimization/security point of view. SUNWrcmdc comes to mind as particularly annoying. I shouldn't have to install RSH and it's related cruft to get snoop and whois (or re-package it and miss out on patches because SUID r* utilities are commonly banned from systems by security operations). You'll notice there are some missing dependencies in the list above, some of those choices also revolve around getting rid of unused SUID binaries which aren't actually required to meet the dependency (X11 is a bad offender here). Paul This message posted from opensolaris.org
