On Thu, Sep 10, 2009 at 06:08:59PM -0500, Shawn Walker wrote:
> Nicolas Williams wrote:
> >The fact that the notion of publisher that the UIs deal with is local
> >makes it difficult to use such metadata.  The UIs themselves need to
> >change, not just client code.
> 
> The changing of the UI has always been implied.  In fact, I've responded 
> multiple times to this list, and even posted about one or two of these 
> changes in a blog post [1].

OK.

> The fact that users can specify their own publisher prefixes has also 
> been set to change for a long time (it's simply a matter of time and 
> resourcing).

OK.

> >My vision, if you'll allow me, is this:
> >
> > - Publishers are defined by files installed by packages.  Those files
> 
> At this time, I don't believe packages are the right solution; it 
> creates a nasty boot-strapping problem and doesn't bring much benefit.

The specific details of how publishers are added are not as important as
the UI details.  The UI should require users to point at publisher
definitions, and then should require users to "validate" any publishers
which are not signed by others.  The nice thing about using pkgs is that
you'll get the "publisherd spec signatures" for free via manifest
signatures, but whatever.

What boot-strapping issues?  The CD image would have the relevant files
installed already, therefore it'd trust the initial set of publishers.

> > - Users don't define publishers.
> 
> This has been intended for a long time now as mentioned multiple times 
> previously on this list and other places.
> 
> Yes, there's no central document for this, sorry.  But there's really 
> nothing different here you're proposing except delivery by packages, 
> which currently seems like overkill to me (as well as problematic).

That's not the only UI detail though.  What becomes of /release and /dev
in a world in which we have named streams rather than just named
repositories?  "Streams", or whatever you want to call them, need to be
first class objects in the UI.
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to