2:53 a.m.
I'm not a fan of the 1-click. If you want it in the repo, then package it
and put it in the repo. If it can't be in the repo for legal reasons then
package it and submit it to rpmfusion.
If you have an outside rpm, then yum localinstall it.
-Adam
(From my G1)
On Apr 4, 2009 2:45 AM, "Debayan Banerjee" <debayanin(a)gmail.com> wrote:
2009/4/4 Debayan Banerjee <debayanin(a)gmail.com>:
> Ok. My only aim was to make package installations an easier
task. I am
Infact the application period for gsoc is over and the proposal that I
submitted has many things that this llist hates. I still want to know
what this list thinks would be a useful addition. I also added a point
about modifying Koji to generate these catalog files if possible.
-- Be Intelligent, Use GNU/Linux http://debayanin.googlepages.com/
http://debayan.wordpress.com...
4:36 p.m.
New subject: Need advice pertaining to GSoC proposal
On Sat, 2009-04-04 at 02:53 -0500, Adam Miller wrote:
I'm not a fan of the 1-click. If you want it in the repo, then
package
it and put it in the repo. If it can't be in the repo for legal
reasons then package it and submit it to rpmfusion.
If you have an outside rpm, then yum localinstall it.
Of course, there's another type of '1-click' install that really ought
to be implemented: a URI that'll be handled by packagekit.
Something like:
package://firefox
should call out (via packagekit) for the package named 'firefox' to be
installed, from the available repositories.
--
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Fedora Talk: adamwill AT fedoraproject DOT org
http://www.happyassassin.net
4:41 p.m.
New subject: Need advice pertaining to GSoC proposal
2009/4/7 Adam Williamson <awilliam(a)redhat.com>:
Something like:
package://firefox
should call out (via packagekit) for the package named 'firefox' to be
installed, from the available repositories.
That already exists in Package-kit catalog schema
<http://www.packagekit.org/pk-faq.html#catalogs>;.
I wonder why catalogs are such an under-utilised feature. Or are they
used a lot and I just havent seen them around?
In any case, why not have a URI like other official Fedora
repositories like extras, rawhide, fedora10 etc? That can solve inter
repository dependencies.
--
Adam Williamson
--
Be Intelligent, Use GNU/Linux
http://debayanin.googlepages.com/
http://debayan.wordpress.com
http://lug.nitdgp.ac.in
4:47 p.m.
New subject: Need advice pertaining to GSoC proposal
I understood this till now:
1) 1 click install is BAD if it starts adding repositories (especially
3rd party)
2) A normal Fedora user adds 3rd party repositories all the time to
install normal stuff like media codecs etc
3) Fedora developers want to shield users from adding 3rd party
repositories. Users already do that all the time. But Fedora
developers dont want to make it any easier for them, else they may
open "gates to hell".
4) Hence the only thing that is keeping Fedora users from hell is the
difficult (ok lets call it secure?) process of repository addition and
their inability to grasp it quickly and use Google.
Right?
--
Be Intelligent, Use GNU/Linux
http://debayanin.googlepages.com/
http://debayan.wordpress.com
http://lug.nitdgp.ac.in
7:44 p.m.
New subject: Need advice pertaining to GSoC proposal
Debayan Banerjee wrote:
I understood this till now:
1) 1 click install is BAD if it starts adding repositories (especially
3rd party)
True.
2) A normal Fedora user adds 3rd party repositories all the time to
install normal stuff like media codecs etc
At least partially true.
3) Fedora developers want to shield users from adding 3rd party
repositories. Users already do that all the time. But Fedora
developers dont want to make it any easier for them, else they may
open "gates to hell".
This is where your argument breaks down. There are third party
repositories that work well with Fedora and third party repositories
that don't work well with Fedora. Of the ones that work well, some are
illegal for us to point people at. Of the ones that are left, we don't
control any of them so there's no guarantee that even if they work well
with Fedora today, have good security, etc, they'll be the same
tomorrow. Fedora doesn't review the practices of third party
repositories and doing so could be seen as micromanaging.
So I think the majority of opinions here is that such a service would
not be a big help to Fedora users. And it could be a big headache.
This might be a service that could be done outside of Fedora... but I
think a discussion of that would be a bit offtopic.
-Toshio
2:19 a.m.
New subject: Need advice pertaining to GSoC proposal
2009/4/7 Toshio Kuratomi <a.badger(a)gmail.com>:
> 3) Fedora developers want to shield users from adding 3rd party
> repositories. Users already do that all the time. But Fedora
> developers dont want to make it any easier for them, else they may
> open "gates to hell".
This is where your argument breaks down. There are third party
repositories that work well with Fedora and third party repositories
that don't work well with Fedora.
So I think the majority of opinions here is that such a service would
not be a big help to Fedora users. And it could be a big headache.
This might be a service that could be done outside of Fedora... but I
think a discussion of that would be a bit offtopic.
And hence I have abandoned all ideas of supporting 3rd party 1 click installs.
I have instead focussed only on official repositories. We can still
add Fedora specific URIs in the package-kit catalog schema. This will
enable one-click-installs for all official Fedora packages with no
security threat at all.
-Toshio
--
fedora-devel-list mailing list
fedora-devel-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
--
Be Intelligent, Use GNU/Linux
http://debayanin.googlepages.com/
http://debayan.wordpress.com
http://lug.nitdgp.ac.in
2:41 a.m.
New subject: Need advice pertaining to GSoC proposal
Debayan Banerjee wrote:
And hence I have abandoned all ideas of supporting 3rd party 1 click
installs.
I have instead focussed only on official repositories. We can still
add Fedora specific URIs in the package-kit catalog schema. This will
enable one-click-installs for all official Fedora packages with no
security threat at all.
How is that different from
http://blogs.gnome.org/hughsie/2008/09/09/packagekit-web-plugin/
Rahul
3:16 a.m.
New subject: Need advice pertaining to GSoC proposal
2009/4/7 Rahul Sundaram <sundaram(a)fedoraproject.org>:
Debayan Banerjee wrote:
> And hence I have abandoned all ideas of supporting 3rd party 1 click installs.
> I have instead focussed only on official repositories. We can still
> add Fedora specific URIs in the package-kit catalog schema. This will
> enable one-click-installs for all official Fedora packages with no
> security threat at all.
How is that different from
http://blogs.gnome.org/hughsie/2008/09/09/packagekit-web-plugin/
Well it does not has the ability to add official repositories if
needed. It only installs a package if the repository is already added
to the system.
Rahul
--
fedora-devel-list mailing list
fedora-devel-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
--
Be Intelligent, Use GNU/Linux
http://debayanin.googlepages.com/
http://debayan.wordpress.com
http://lug.nitdgp.ac.in
5:09 a.m.
New subject: Need advice pertaining to GSoC proposal
On Tuesday 07 April 2009 03:16:38 Debayan Banerjee wrote:
Well it does not has the ability to add official repositories if
needed. It only installs a package if the repository is already added
to the system.
All official repositories are provided in the fedora-release package. If we
ever have reason to add or change the repository collection, we release an
update to that package. There should never be any need to initiate a change
to the Fedora repositories from a web browser. Even if we did want to offer
repository definitions outside of fedora-release, the configurations for them
would be added as separate packages to the Fedora repositories, and the
installation of those separate packages could be launched using the browser
plugin.
--
Patrick "The N-Man" Barnes
nman64(a)n-man.com
http://n-man.com/
LinkedIn:
http://linkedin.com/in/nman64
Have I been helpful? Rate my assistance!
http://rate.affero.net/nman64/
All messages cryptographically signed:
http://en.wikipedia.org/wiki/OpenPGP
--
2:32 a.m.
New subject: Need advice pertaining to GSoC proposal
Just to clarify,
2009/4/7 Toshio Kuratomi <a.badger(a)gmail.com>:
--
Be Intelligent, Use GNU/Linux
http://debayanin.googlepages.com/
http://debayan.wordpress.com
http://lug.nitdgp.ac.in
At least partially true.
Of the ones that work well, some are
illegal for us to point people at.
You are not pointing people anywhere. Fedora tells users absolutely
nothing about them. Infact, Fedora can explicitly tell them not to use
them at all.
But I am not pushing for an acceptance of the 3rd party enabled
package-kit 1 click install system. I understand the security risks,
Of the ones that are left, we don't
control any of them so there's no guarantee that even if they work well
with Fedora today, have good security, etc, they'll be the same
tomorrow. Fedora doesn't review the practices of third party
repositories and doing so could be seen as micromanaging.
Again, Fedora is not reviewing. Fedora has no say or opinion at all
about which 3rd party repository is better.
I followed Patrick's idea of the trust-vote system which would have
made it a user-advising-user thing. But that alsocan be compromised as
many believe.
So I think the majority of opinions here is that such a service would
not be a big help to Fedora users. And it could be a big headache.
This might be a service that could be done outside of Fedora... but I
think a discussion of that would be a bit offtopic.
I have no intention of doing it outside of Fedora. I wanted to work
with the community.
And I still want to know why no one uses PackageKit catalogs.
Of the various things i have suggested is there anything that does not
jeopardise the security of Fedora users but adds value?
5510
days inactive
5513
days old
9 comments
6 participants
participants (6)
-
Adam Miller -
Adam Williamson -
Debayan Banerjee -
Patrick W. Barnes -
Rahul Sundaram -
Toshio Kuratomi