Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 590972 - repoman should prevent people from adding a new package with a metadata.xml pointing to maintained-needed directly
Summary: repoman should prevent people from adding a new package with a metadata.xml p...
Status: RESOLVED WONTFIX
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Repoman (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Portage team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-08-10 19:16 UTC by Pacho Ramos
Modified: 2022-07-12 03:18 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Pacho Ramos gentoo-dev 2016-08-10 19:16:26 UTC
It seems that some people is adding new packages to the tree directly to maintainer-needed (i.e, with metadatas containing no maintainer at all).

If I don't misremember, this is not allowed (and if this starts to be allowed I will probably stop caring at all about this packages that are, already, a lot to maintain). Hence, I would like to know if it would be technically possible to make repoman die when people tries to commit this things

Thanks a lot :)
Comment 1 Brian Dolbec (RETIRED) gentoo-dev 2016-08-10 20:07:24 UTC
Sure it's possible!  kill them with fire! ;)

Just get a nod at least from council or consensus from -dev ml (like that is likely to ever happen)  otherwise we'll probably not hear the end of the bitching why it is suddenly rejecting...
Comment 2 Pacho Ramos gentoo-dev 2016-08-11 18:38:01 UTC
I have just mailed council alias to try to know what do they think about the best option :/
Comment 3 Michael Palimaka (kensington) gentoo-dev 2016-08-11 18:39:40 UTC
If I understand correctly, this is already generally accepted as not allowed (see bug #591062 for example).
Comment 4 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2016-08-11 19:01:26 UTC
Two notes:

1. This is probably unwanted for overlays where presumably packages don't have separate maintainers but all packages are handled by overlay owner.

2. The commit in question was not committed using repoman.
Comment 5 Pacho Ramos gentoo-dev 2016-08-14 08:20:20 UTC
Another note about the policies:
https://bugs.gentoo.org/show_bug.cgi?id=591062#c5
Comment 6 Kristian Fiskerstrand (RETIRED) gentoo-dev 2016-08-14 20:27:07 UTC
(In reply to Brian Dolbec from comment #1)
> Just get a nod at least from council 

We discussed this briefly during today's council meeting and agree that such a check is fine in repoman within existing policies.
Comment 7 Pacho Ramos gentoo-dev 2016-08-15 07:36:45 UTC
Thanks a lot for the really fast reply :)
Comment 8 Justin Lecher (RETIRED) gentoo-dev 2016-09-11 19:40:04 UTC
Please implement, removing council.
Comment 9 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-12 03:18:23 UTC
repoman support has been removed per bug 835013.

Please file a new bug (or, I suppose, reopen this one) if you feel this check is still applicable to pkgcheck and doesn't already exist.