Re: Fedora Source-git SIG report #1 (June 2021)

2021-07-02 Thread Randy Barlow via devel
On Wed, 2021-06-30 at 14:31 +0200, Tomas Tomecek wrote: > After reading your explanation of how gentoo does packaging, it > indeed makes a lot of sense and feels like that most of the > concerns I pointed out have solutions or could be mitigated. > > The biggest problem I personally see is the

Re: Fedora Source-git SIG report #1 (June 2021)

2021-07-02 Thread Tomas Tomecek
Zbyszek, thank you for your detailed feedback. I agree with you that the step to serialize patches into dist-git complicates things heavily and is error-prone. I say this as a person who wrote a ton of code [1] in packit to achieve this. Would be awesome if we could build from the git checkout

Re: Fedora Source-git SIG report #1 (June 2021)

2021-07-01 Thread Josh Boyer
On Fri, Jun 25, 2021, 8:52 AM Neal Gompa wrote: > On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: > > > > > > > > > On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" > wrote: > > > >On 24. 06. 21 23:07,

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jun 30, 2021 at 08:11:38AM -0500, Justin Forbes wrote: > On Wed, Jun 30, 2021 at 3:40 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Tue, Jun 29, 2021 at 03:13:10PM +0200, Tomas Tomecek wrote: > > > On Thu, Jun 24, 2021 at 8:09 PM Zbigniew Jędrzejewski-Szmek > > > wrote: > > > > > >

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Jun 30, 2021 at 02:03:22PM +0200, Tomas Tomecek wrote: > On Wed, Jun 30, 2021 at 10:40 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > > Our definition of source-git is: > > > * upstream release tarball > > > * downstream code changes applied as patches during %prep > > > * additional

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Justin Forbes
On Wed, Jun 30, 2021 at 3:40 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Tue, Jun 29, 2021 at 03:13:10PM +0200, Tomas Tomecek wrote: > > On Thu, Jun 24, 2021 at 8:09 PM Zbigniew Jędrzejewski-Szmek > > wrote: > > > > > > On Thu, Jun 24, 2021 at 03:48:54PM +0200, Tomas Tomecek wrote: > > > > On

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Tomas Tomecek
Randy, thank you for providing such detailed information! A few comments inline. On Wed, Jun 30, 2021 at 3:01 AM Randy Barlow via devel < devel@lists.fedoraproject.org> wrote: > On Tue, 2021-06-29 at 15:36 +0200, Tomas Tomecek wrote: > > > On the "uni-repo" counter proposal: there's a bunch of

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Tomas Tomecek
On Wed, Jun 30, 2021 at 10:40 AM Zbigniew Jędrzejewski-Szmek wrote: > > > Our definition of source-git is: > > * upstream release tarball > > * downstream code changes applied as patches during %prep > > * additional configs for sake of building and testing > > But that describes dist-git

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Alexander Sosedkin
On Tue, Jun 29, 2021 at 3:38 PM Tomas Tomecek wrote: > * Can you imagine maintaining Fedora's 30k+ packages in a single repo? > Without some git-fetch magic it would be unbearable to perform a > git-pull. I cannot imagine *not* doing this, maintaining a distro and preserving any sanity in the

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Jun 29, 2021 at 03:13:10PM +0200, Tomas Tomecek wrote: > On Thu, Jun 24, 2021 at 8:09 PM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Thu, Jun 24, 2021 at 03:48:54PM +0200, Tomas Tomecek wrote: > > > On Thu, Jun 24, 2021 at 12:41 PM Miro Hrončok wrote: > > > > > > > > On 24. 06. 21

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-30 Thread Leigh Griffin
This is a super update report, thanks for sharing CPE have activated an open source license for Gitlab to trial out some of the workflows and features. This is their top level SaaS offering which they grant to all open source projects so it has all the features we would need for testing. Stephen

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-29 Thread Randy Barlow via devel
On Wed, 2021-06-30 at 01:01 +, Randy Barlow via devel wrote: > An example of this is gstreamer - in Gentoo I just have > gstreamer installed, and the various plugin packs like good bad and > ugly are just USE variables on that one package. Ooops, I was wrong on this example. They do package

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-29 Thread Randy Barlow via devel
On Tue, 2021-06-29 at 15:36 +0200, Tomas Tomecek wrote: > > On the "uni-repo" counter proposal: there's a bunch of real-world > > examples here of distributions using this successfully: > >

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-29 Thread Justin Forbes
On Fri, Jun 25, 2021 at 7:52 AM Neal Gompa wrote: > > On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek > wrote: > > > > On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: > > > > > > > > > On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" > > > wrote: > > > >On 24. 06. 21

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-29 Thread Tomas Tomecek
On Tue, Jun 29, 2021 at 12:48 AM Colin Walters wrote: > > > > On Thu, Jun 24, 2021, at 5:16 AM, Tomas Tomecek wrote: > > Greetings from the Fedora source-git SIG! We are planning to start > > publishing reports of what we are working on so everyone can easily > > pay attention and get involved if

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-29 Thread Tomas Tomecek
On Thu, Jun 24, 2021 at 8:09 PM Zbigniew Jędrzejewski-Szmek wrote: > > On Thu, Jun 24, 2021 at 03:48:54PM +0200, Tomas Tomecek wrote: > > On Thu, Jun 24, 2021 at 12:41 PM Miro Hrončok wrote: > > > > > > On 24. 06. 21 11:16, Tomas Tomecek wrote: > > > > ## Choosing git forge to host source-git

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-28 Thread Neal Gompa
On Mon, Jun 28, 2021 at 6:48 PM Colin Walters wrote: > > > > On Thu, Jun 24, 2021, at 5:16 AM, Tomas Tomecek wrote: > > Greetings from the Fedora source-git SIG! We are planning to start > > publishing reports of what we are working on so everyone can easily > > pay attention and get involved if

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-28 Thread Colin Walters
On Thu, Jun 24, 2021, at 5:16 AM, Tomas Tomecek wrote: > Greetings from the Fedora source-git SIG! We are planning to start > publishing reports of what we are working on so everyone can easily > pay attention and get involved if interested. If you have any ideas, > comments or requests, don’t

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-28 Thread Miroslav Suchý
Dne 25. 06. 21 v 16:19 Peter Pentchev napsal(a): FWIW, pristine-tar (http://joeyh.name/code/pristine-tar/) can handle almost all upstream tarballs, and it also has support for storing detached signatures alongside its metadata. I keep hearing people say that there are cases when it fails, but it

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jun 25, 2021 at 10:43:17AM -0400, Neal Gompa wrote: > On Fri, Jun 25, 2021 at 9:04 AM Frédéric Pierret > wrote: > > > > > > > > Le 6/25/21 à 2:51 PM, Neal Gompa a écrit : > > > On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek > > > wrote: > > >> > > >> On Fri, Jun 25, 2021 at

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Neal Gompa
On Fri, Jun 25, 2021 at 9:04 AM Frédéric Pierret wrote: > > > > Le 6/25/21 à 2:51 PM, Neal Gompa a écrit : > > On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek > > wrote: > >> > >> On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: > >>> > >>> > >>> On June 24, 2021 9:22:51

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Peter Pentchev
On Fri, Jun 25, 2021 at 02:40:22PM +0200, Miroslav Suchý wrote: > Dne 24. 06. 21 v 23:22 Miro Hrončok napsal(a): > > AFAIK git does not grantee to produce byte2byte identical archives > > across different versions of git, zlib, gzip etc. So even if upstream > > signs the git generated archive,

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Frédéric Pierret
Le 6/25/21 à 2:51 PM, Neal Gompa a écrit : On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek wrote: On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" wrote: On 24. 06. 21 23:07, Miroslav Suchý wrote: Dne 24. 06. 21 v

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Miro Hrončok
On 25. 06. 21 14:54, Miroslav Suchý wrote: Dne 25. 06. 21 v 14:50 Miro Hrončok napsal(a): AFAIK git does not grantee to produce byte2byte identical archives across different versions of git, zlib, gzip etc. So even if upstream signs the git generated archive, generating a byte2byte identical

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Miroslav Suchý
Dne 25. 06. 21 v 14:50 Miro Hrončok napsal(a): AFAIK git does not grantee to produce byte2byte identical archives across different versions of git, zlib, gzip etc. So even if upstream signs the git generated archive, generating a byte2byte identical one might be tricky. Neither git nor tar

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Neal Gompa
On Fri, Jun 25, 2021 at 3:43 AM Zbigniew Jędrzejewski-Szmek wrote: > > On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: > > > > > > On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" wrote: > > >On 24. 06. 21 23:07, Miroslav Suchý wrote: > > >> Dne 24. 06. 21 v 15:48 Tomas Tomecek

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Miro Hrončok
On 25. 06. 21 14:40, Miroslav Suchý wrote: Dne 24. 06. 21 v 23:22 Miro Hrončok napsal(a): AFAIK git does not grantee to produce byte2byte identical archives across different versions of git, zlib, gzip etc. So even if upstream signs the git generated archive, generating a byte2byte identical

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Miroslav Suchý
Dne 24. 06. 21 v 23:22 Miro Hrončok napsal(a): AFAIK git does not grantee to produce byte2byte identical archives across different versions of git, zlib, gzip etc. So even if upstream signs the git generated archive, generating a byte2byte identical one might be tricky. Neither git nor tar

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jun 25, 2021 at 10:51:11AM +0200, Florian Weimer wrote: > * Zbigniew Jędrzejewski-Szmek: > > > I think we should try to push upstream to sign git tags, instead or in > > addition to tarballs. For upstreams, this is actually much easier > > (just 'git tag' → 'git tag -s' and you're done)

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Florian Weimer
* Zbigniew Jędrzejewski-Szmek: > I think we should try to push upstream to sign git tags, instead or in > addition to tarballs. For upstreams, this is actually much easier > (just 'git tag' → 'git tag -s' and you're done) compared to e.g. signing > a tarball on github which requires some

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Daniel P . Berrangé
On Thu, Jun 24, 2021 at 11:07:45PM +0200, Miroslav Suchý wrote: > Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): > > > One thing to consider is that the upstream tarballs might be > > > cryptographically > > > signed and packages should verify the signature in %prep. > > This is a very good

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-25 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jun 25, 2021 at 03:49:23AM +, Dan Čermák wrote: > > > On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" wrote: > >On 24. 06. 21 23:07, Miroslav Suchý wrote: > >> Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): > One thing to consider is that the upstream tarballs might be >

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Dan Čermák
On June 24, 2021 6:08:17 PM UTC, "Zbigniew Jędrzejewski-Szmek" wrote: >On Thu, Jun 24, 2021 at 03:48:54PM +0200, Tomas Tomecek wrote: >> On Thu, Jun 24, 2021 at 12:41 PM Miro Hrončok >wrote: >> > >> > On 24. 06. 21 11:16, Tomas Tomecek wrote: >> > > ## Choosing git forge to host source-git

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Dan Čermák
On June 24, 2021 9:22:51 PM UTC, "Miro Hrončok" wrote: >On 24. 06. 21 23:07, Miroslav Suchý wrote: >> Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): One thing to consider is that the upstream tarballs might be >cryptographically signed and packages should verify the signature in

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Colin Walters
On Thu, Jun 24, 2021, at 5:22 PM, Miro Hrončok wrote: > On 24. 06. 21 23:07, Miroslav Suchý wrote: > > Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): > >>> One thing to consider is that the upstream tarballs might be > >>> cryptographically > >>> signed and packages should verify the signature

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Miro Hrončok
On 24. 06. 21 23:07, Miroslav Suchý wrote: Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): One thing to consider is that the upstream tarballs might be cryptographically signed and packages should verify the signature in %prep. This is a very good point - in such a case, we should always pull

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Miroslav Suchý
Dne 24. 06. 21 v 15:48 Tomas Tomecek napsal(a): One thing to consider is that the upstream tarballs might be cryptographically signed and packages should verify the signature in %prep. This is a very good point - in such a case, we should always pull the official upstream tarball instead of

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Zbigniew Jędrzejewski-Szmek
On Thu, Jun 24, 2021 at 03:48:54PM +0200, Tomas Tomecek wrote: > On Thu, Jun 24, 2021 at 12:41 PM Miro Hrončok wrote: > > > > On 24. 06. 21 11:16, Tomas Tomecek wrote: > > > ## Choosing git forge to host source-git repositories > > > We need to find a home for all the source-git repositories.

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Tomas Tomecek
On Thu, Jun 24, 2021 at 1:01 PM PGNet Dev wrote: > > On 6/24/21 6:40 AM, Miro Hrončok wrote: > > On 24. 06. 21 11:16, Tomas Tomecek wrote: > >> ## Choosing git forge to host source-git repositories > >> We need to find a home for all the source-git repositories. This is > >> actually a really

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Tomas Tomecek
On Thu, Jun 24, 2021 at 12:41 PM Miro Hrončok wrote: > > On 24. 06. 21 11:16, Tomas Tomecek wrote: > > ## Choosing git forge to host source-git repositories > > We need to find a home for all the source-git repositories. This is > > actually a really hard task because we have many options

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Tomas Tomecek
On Thu, Jun 24, 2021 at 3:39 PM Ben Cotton wrote: > > Hi Tomas, > > This is great. Do you mind if I republish this in the Fedora Community > Blog? https://communityblog.fedoraproject.org Go for it, Ben :) My inspiration for the report comes from the Q1 update of the CentOS Hyperscale SIG:

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Ben Cotton
Hi Tomas, This is great. Do you mind if I republish this in the Fedora Community Blog? https://communityblog.fedoraproject.org (Replying on-list to encourage others to submit this kind of content to the CommBlog and to read it, too) -- Ben Cotton He / Him / His Fedora Program Manager Red Hat

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Matthew Miller
On Thu, Jun 24, 2021 at 11:16:11AM +0200, Tomas Tomecek wrote: > Greetings from the Fedora source-git SIG! We are planning to start > publishing reports of what we are working on so everyone can easily > pay attention and get involved if interested. If you have any ideas, > comments or requests,

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread PGNet Dev
On 6/24/21 6:40 AM, Miro Hrončok wrote: On 24. 06. 21 11:16, Tomas Tomecek wrote: ## Choosing git forge to host source-git repositories We need to find a home for all the source-git repositories. This is actually a really hard task because we have many options (github.com, gitlab.com,

Re: Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Miro Hrončok
On 24. 06. 21 11:16, Tomas Tomecek wrote: ## Choosing git forge to host source-git repositories We need to find a home for all the source-git repositories. This is actually a really hard task because we have many options (github.com, gitlab.com, pagure.io, src.fedoraproject.org, something custom

Fedora Source-git SIG report #1 (June 2021)

2021-06-24 Thread Tomas Tomecek
Greetings from the Fedora source-git SIG! We are planning to start publishing reports of what we are working on so everyone can easily pay attention and get involved if interested. If you have any ideas, comments or requests, don’t be shy and let us know :) Here’s a short list of things which we