Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 172695 - Distfiles needed for latest release version should stay on the mirrors
Summary: Distfiles needed for latest release version should stay on the mirrors
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Release Media
Classification: Unclassified
Component: Everything (show other bugs)
Hardware: All Linux
: High enhancement
Assignee: Gentoo Release Team
URL: http://dev.gentoo.org/~zmedico/portag...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-03-29 18:12 UTC by Ian Stakenvicius
Modified: 2008-07-17 07:33 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
list distfiles for latest stable versions (distfiles-whitelist.py,2.02 KB, text/plain)
2007-04-04 01:39 UTC, Zac Medico
Details
list distfiles for latest stable versions (bug fix) (distfiles-whitelist.py,2.03 KB, text/plain)
2007-04-04 01:43 UTC, Zac Medico
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ian Stakenvicius 2007-03-29 18:12:10 UTC
The distfiles used by the tree on the last release medium should be available on the mirrors, and relevant ebuilds should also probably stay in the current portage tree as well.

What brought this up specifically was gentoo-sources-2.6.17 being removed from portage -- someone who performs LiveCD (networkless) install would be unable to emerge gentoo-sources to tweak their kernel, without doing a --sync (which means upgrading the whole system),because gentoo-sources-2.6.17-r5 (specifically the patch tarball) is no longer available on the mirrors.  (ref:  bug 155798, bug 156836#5)

[note, keeping the distfiles for the current stable gentoo-sources on the LiveCD media would solve this particular issue too, however it seems the release team is unwilling to do that -- ref: bug 169159]

Similar issues may also present themselves for other packages that need to be rebuilt, especially when a --sync and world-update are not (yet) feasible..  I'm wondering if this might be a cause for failures of non-networkless GLI installs?

A quick discussion in #gentoo-userrel mentioned that the functionality for whitelisting distfiles on the mirrors is already there, and doing this would fix the issue.
Comment 1 Chris Gianelloni (RETIRED) gentoo-dev 2007-04-02 13:58:06 UTC
Infra:  Do we have some easier way to do the whitelisting?  I surely don't want to have to locate and whitelist thousands of distfiles manually each release.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-04-03 01:39:53 UTC
wolf31o2: how about using the metadata/ from your portage snapshot to generate your additions to the whitelist?
make a file named whitelist-2007.0, and then we can get that into the distfiles mirroring process? that would also provide good seperation as to why the distfiles in question are whitelisted.
Comment 3 Chris Gianelloni (RETIRED) gentoo-dev 2007-04-03 14:44:47 UTC
I'm fine with that.  Is there a simple method of using the metadata that you're already aware of before I go investigating?
Comment 4 Zac Medico gentoo-dev 2007-04-04 01:39:38 UTC
Created attachment 115397 [details]
list distfiles for latest stable versions

This script will list distfiles for the latest stable versions in all slots.  It will take a list of keywords on the command line (or use those listed in arch.list if none are given).  This doesn't pay any attention to profiles or package.mask, it only looks at keywords.  That's probably a good approximation for what you want though.
Comment 5 Zac Medico gentoo-dev 2007-04-04 01:43:18 UTC
Created attachment 115399 [details]
list distfiles for latest stable versions (bug fix)
Comment 6 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2007-05-13 20:43:06 UTC
wolf31o2: do you have a generated whitelist file I can put into place?
Comment 7 Chris Gianelloni (RETIRED) gentoo-dev 2007-05-16 18:23:09 UTC
Not at this time.  I was going to generate one, but haven't had the time.  The actual portage tree made to make the snapshot for the release exists on poseidon at /release/portage-official, if you can run it.  Otherwise, I'll have to generate it when I find some time.
Comment 8 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-01-06 12:59:11 UTC
I have the script running to generate them for 200{6.{0,1},7.0} now, and I'll stick those whitelists up to start. When 2008.0 is close to ready, we need to run it again to generate a whitelist for that.
Comment 9 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-01-06 22:58:34 UTC
Ok, the 2007.0 ones are whitelisted now.
Comment 10 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-01-08 02:44:10 UTC
zmedico: just wondering about trimming the list down some.
rather than printing every single distfile, can we trim it down and only print the distfile if the ebuild is stable on ANY arch (so exclude distfiles where the ebuild is unstable only).
Comment 11 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2008-07-17 07:33:49 UTC
Final version at this URL:
http://dev.gentoo.org/~zmedico/portage/branches/2.2/bin/distfiles-whitelist.py

2008.0 whitelist is in place now.