Shawn Walker wrote:
Darren J Moffat wrote:
Shawn Walker wrote:
As far as I'm aware, other than the publisher, there should only be
one FMRI for each package. I don't believe it is desirable to have
multiple namespace resolutions for a single package.
That makes sense to me too and I was just checking I wasn't missing
something.
It some how feels "wrong" at the moment to me to have the pkg.fmri
omitted from the signature. I can't yet articulate what it is that is
making me feel it is "wrong" and it might well be okay. I'll think
about it for a bit and get back to you.
So, there are a few paths here:
1) the "identity" (FMRI including publisher prefix) is part of signature
2) signatures (in the original proposal) include all actions in the
manifest (a set pkg.fmri action would then be inherently part of a
signature); of course this creates a problem if you want to change
identity based on signature ...
3) set pkg.fmri is used now, and when signatures are delivered, they
have an optional pkg.publisher attribute to allow overriding publisher
identity
Is pkg.fmri where this install got a given package from or is it some
canonical name that never changes ?
eg if I install SUNWzsh from http://ipkg.sfbay/dev is pkg.fmri
different than if I installed it from http://pkg.opensolaris.org/dev/ ?
If it is different then it should be omitted from the signature as where
it came from isn't relevant to the signature.
--
Darren J Moffat
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
