Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 282501 - net-analyzer/metasploit: stop using scm to fetch non-live ebuilds!
Summary: net-analyzer/metasploit: stop using scm to fetch non-live ebuilds!
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Eclasses (show other bugs)
Hardware: All All
: Highest QA (vote)
Assignee: Gentoo Netmon project
URL:
Whiteboard:
Keywords: PMASKED
Depends on:
Blocks:
 
Reported: 2009-08-23 21:36 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2010-03-02 10:23 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2009-08-23 21:36:56 UTC
You're getting this semi-automated bug report because your package was found to use scm eclasses to download a fixed source file, instead of using proper tarballs in SRC_URI.

This is a violation of QA to keep the package unmasked; please do convert your package to proper tarball. If neither upstream nor the scm service provide downloads, you might have to create the tarball yourself and upload it on the mirrors (scp it to dev.gentoo.org:/space/distfiles-local), then using mirror:// .

If the download system does not allow for arbitrarily named tarballs, you can also use the redirection/rename feature of EAPI=2 (-> operator in SRC_URI).

If you're not going to act in one week time (at least by getting the bug assigned), the QA team reserves the right of masking your package.

Note: the exception here is that we spared the straight mask because it's not a live ebuild; live ebuilds _are_ to be masked and have been masked already.

Thank you for your collaboration.
Comment 1 Peter Volkov (RETIRED) gentoo-dev 2009-12-10 13:52:52 UTC
This is done on pupose, per upstream request. If it's possible to suggest better solution, please, reopen bug 195924.

*** This bug has been marked as a duplicate of bug 195924 ***
Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-12-10 14:00:39 UTC
Upstream request cannot breach Gentoo QA policy.

Find a solution or the package cannot be present unmasked in Portage.
Comment 3 Anton Bolshakov 2009-12-10 14:47:32 UTC
I understand gentoo's policy. There is a risk that if upstream version control get hacked then gentoo's users will be effected.

Sorry Peter, it seems more work for you shell you decided to checkout each revision and create a tar ball.  Feel free to mask it otherwise.

The latest brach is 3.3.1 btw.
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-12-29 18:44:27 UTC
Masked, either somebody will fix this or it'll be masked.
Comment 5 Erwin Paternotte 2010-01-04 10:24:24 UTC
Could you at least restrict the block to versions that are actual in the main portage tree? I'm using an ebuild from an overlay and that gets blocked as well.
Comment 6 Samuli Suominen (RETIRED) gentoo-dev 2010-01-04 10:29:53 UTC
(In reply to comment #5)
> Could you at least restrict the block to versions that are actual in the main
> portage tree? I'm using an ebuild from an overlay and that gets blocked as
> well.
> 

Done.
Comment 7 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2010-02-13 05:43:47 UTC
qa team: It looks like you masked 2.7 on accident, it doesn't use subversion eclass and has a tar.gz SRC_URI
Comment 8 Samuli Suominen (RETIRED) gentoo-dev 2010-03-01 12:01:26 UTC
Note: The package will be removed in 30 days unless the SCM abuse is fixed. Adding treecleaners.
Comment 9 Patrick Lauer gentoo-dev 2010-03-01 12:53:28 UTC
+  01 Mar 2010; Patrick Lauer <patrick@gentoo.org> +files/msfweb3.3.confd,
+  -metasploit-3.2_p6750.ebuild, +files/msfweb3.3.initd,
+  +metasploit-3.3.3.ebuild:
+  Bump to 3.3.3, fixes #277405 #282501 #296157
Comment 10 Anton Bolshakov 2010-03-02 10:23:20 UTC
(In reply to comment #9)
> +  +metasploit-3.3.3.ebuild:
> +  Bump to 3.3.3, fixes #277405 #282501 #296157
> 

Thank you, Patrick. Much appreciated for fixing it and keeping in the tree.