On Mon, Sep 14, 2009 at 01:06:24PM -0700, Brock Pytlik wrote: > Shawn Walker wrote: > >For example, the stream concept works well with a set of packages that > >all move together (e.g. dev, release). But, it doesn't work so well > >for packages that merely exist together (e.g. contrib, pending). > One possibility is that pending and contrib should really be streams as > well (under a more general "community" publisher or something like that).
I strongly agree that pending and contrib should be published by a different publisher than release and dev. I see the choices that users will make as: - High-level choice: publishers to accept contents from Here I don't see enough of a difference between /dev and /release to warrant their having different publishers. But /contrib, to say nothing of /pending, definitely should require a high-level choice. Publishers should have URLs, preferably https URLs. Publisher meta-data should include the publisher's certficate and recommended display name (possibly including localizations). This, incidentally, is the main place where any interaction w.r.t. certificates and trust chains come in. - Mid-level choice: streams from any given publisher Interestingly, this could allow us to have /dev and /release streams for the base OS, and also have /dev and /release streams for the community contributed, non-ARCed/integrated content. Thus /pending could disappear and become instead the /dev stream of the "OpenSolaris Contrib Community" publisher. Streams should have URIs and should include the name of the publisher, to which they are related, in the stream URI. There's no need for HTTPS here. - Low-level choice: repository mirrors These would be URLs and should correspond directly to depotd. There should be no need for HTTPS here either (unless the contents is to be protected from eavesdropping, and the users to be authenticated). By default OpenSolaris releases should have the OpenSolaris publisher installed and enabled. On upgrade the user gets to pick which stream to use (/dev or /release). By default OpenSolaris releases should have the official mirrors installed and enabled. Nico -- _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
