Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 596670 - Repoman tries to download metadata.dtd to DISTDIR, might not be accessible
Summary: Repoman tries to download metadata.dtd to DISTDIR, might not be accessible
Status: RESOLVED WONTFIX
Alias: None
Product: Portage Development
Classification: Unclassified
Component: Repoman (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Portage team
URL:
Whiteboard:
Keywords:
: 602948 (view as bug list)
Depends on:
Blocks:
 
Reported: 2016-10-09 11:57 UTC by Diego Elio Pettenò (RETIRED)
Modified: 2022-07-12 03:18 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Diego Elio Pettenò (RETIRED) gentoo-dev 2016-10-09 11:57:55 UTC
It would be nice if repoman actually used an XDG_CACHE_DIR path instead, so that there is no reason for the user running repoman to have access to distdir at all.
Comment 1 Zac Medico gentoo-dev 2016-10-09 20:37:28 UTC
(In reply to Diego Elio Pettenò from comment #0)
> It would be nice if repoman actually used an XDG_CACHE_DIR path instead, so
> that there is no reason for the user running repoman to have access to
> distdir at all.

That seems reasonable, but I guess we should go with XDG_CACHE_HOME (the XDG Base Directory Specification refers to XDG_CACHE_HOME, though some things have used XDG_CACHE_DIR historically).

This raises some questions:

* Should XDG_CACHE_HOME be used for fetching distfiles if the global DISTDIR is not writable and `repoman manifest` needs to fetch distfiles?

* Should we support user-specific repoman and/or portage configuration in XDG_CONFIG_HOME?
Comment 2 Zac Medico gentoo-dev 2016-12-17 20:59:29 UTC
*** Bug 602948 has been marked as a duplicate of this bug. ***
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-12 03:18:26 UTC
repoman support has been removed per bug 835013.

Please file a new bug (or, I suppose, reopen this one) if you feel this check is still applicable to pkgcheck and doesn't already exist.