Jaroslav Reznik wrote, on behalf of Matthias Clasen:
The Software Collections repositories will be enabled by default.
So we now allow shipping the configuration for third-party repositories, even enabled by default? Is April 1st still not over yet?
If you want those packages in Fedora, they need to get into the Fedora repository.
Kevin Kofler
On Sun, 2014-04-20 at 18:56 +0200, Kevin Kofler wrote:
Jaroslav Reznik wrote, on behalf of Matthias Clasen:
The Software Collections repositories will be enabled by default.
So we now allow shipping the configuration for third-party repositories, even enabled by default? Is April 1st still not over yet?
If you want those packages in Fedora, they need to get into the Fedora repository.
THREAD NECRO ALERT
I wouldn't put it as strongly as Kevin, but I do have some concerns about the implications here. Notably, https://www.softwarecollections.org/en/docs/licensing/ states:
"We do not review source or packages for suitability of purpose, quality, or licensing"
Fedora provides rather stronger guarantees on that front in our 'official' repositories. It seems like SCL has more or less the same policies and intents as Fedora, but is explicitly less proactive about 'policing' them. It therefore seems like this feature increases the risk to Fedora as a whole of 'blessing' badly broken or incorrectly licensed software.
It would be nice to emphasize the distinction between software from the Fedora repositories and software from the SCL project, at least. yum and dnf do this to at least a limited extent already (you can see what repo a package is coming from, when you install it), but have we considered whether that's sufficient, and if it would be worthwhile to try and improve on it?
2014-06-03 22:46 GMT+02:00 Adam Williamson awilliam@redhat.com:
On Sun, 2014-04-20 at 18:56 +0200, Kevin Kofler wrote:
Jaroslav Reznik wrote, on behalf of Matthias Clasen:
The Software Collections repositories will be enabled by default.
So we now allow shipping the configuration for third-party repositories, even enabled by default? Is April 1st still not over yet?
If you want those packages in Fedora, they need to get into the Fedora repository.
THREAD NECRO ALERT
I wouldn't put it as strongly as Kevin, but I do have some concerns about the implications here.
Note that there was a lot of discussion about this ( https://fedorahosted.org/fesco/ticket/1297 and meeting logs), resulting in “merging” this Change proposal into the main SCL one in a way that makes the original text of this proposal no longer relevant. (In particular, AFAIK the full story is that SCLs will be available through Playground, and Playground requires an explicit action to enable.)
That does not *entirely* dismiss your concern, though. Mirek
On Wed, 2014-06-04 at 16:51 +0200, Miloslav Trmač wrote:
2014-06-03 22:46 GMT+02:00 Adam Williamson awilliam@redhat.com:
On Sun, 2014-04-20 at 18:56 +0200, Kevin Kofler wrote:
Jaroslav Reznik wrote, on behalf of Matthias Clasen:
The Software Collections repositories will be enabled by default.
So we now allow shipping the configuration for third-party repositories, even enabled by default? Is April 1st still not over yet?
If you want those packages in Fedora, they need to get into the Fedora repository.
THREAD NECRO ALERT
I wouldn't put it as strongly as Kevin, but I do have some concerns about the implications here.
Note that there was a lot of discussion about this ( https://fedorahosted.org/fesco/ticket/1297 and meeting logs), resulting in “merging” this Change proposal into the main SCL one in a way that makes the original text of this proposal no longer relevant. (In particular, AFAIK the full story is that SCLs will be available through Playground, and Playground requires an explicit action to enable.)
That does not *entirely* dismiss your concern, though.
Thanks. I missed the follow-up in other locations.
----- Original Message -----
On Sun, 2014-04-20 at 18:56 +0200, Kevin Kofler wrote:
Jaroslav Reznik wrote, on behalf of Matthias Clasen:
The Software Collections repositories will be enabled by default.
So we now allow shipping the configuration for third-party repositories, even enabled by default? Is April 1st still not over yet?
If you want those packages in Fedora, they need to get into the Fedora repository.
THREAD NECRO ALERT
I wouldn't put it as strongly as Kevin, but I do have some concerns about the implications here. Notably, https://www.softwarecollections.org/en/docs/licensing/ states:
"We do not review source or packages for suitability of purpose, quality, or licensing"
This is SCL !upstream!, Fedora SCLs will undergo the same review as any other packages (actually even more strict as in many cases almost the same packages would have to go through the review for two times).
See https://fedorahosted.org/rel-eng/ticket/5894
Jaroslav
devel@lists.stg.fedoraproject.org
-
Adam Williamson -
Jaroslav Reznik -
Kevin Kofler -
Miloslav Trmač