Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 914658 - Requesting access to GURU
Summary: Requesting access to GURU
Status: RESOLVED FIXED
Alias: None
Product: GURU
Classification: Unclassified
Component: Access requests (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: GURU project: Gentoo devs
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-25 12:06 UTC by filip.stamcar
Modified: 2023-09-25 18:55 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
OpenPGP Public Key (public.key,11.67 KB, application/pgp-keys)
2023-09-25 12:06 UTC, filip.stamcar
Details

Note You need to log in before you can comment on or make changes to this bug.
Description filip.stamcar 2023-09-25 12:06:14 UTC
Created attachment 871380 [details]
OpenPGP Public Key

I would like to get access to GURU overlay. I am the author of the PWAsForFirefox project and would like to maintain its GURU package (www-plugins/firefoxpwa).

I want to automatically submit changes to GURU (to dev branch) when a new release is created using GitHub Actions, so users will get new versions quicker and won't have to wait until third-party contributors manually update the package. I would also like to know if such automatic updates are allowed.

I agree to the regulations. My GPG key is in the attachment.

Name: Filip Štamcar
Email: filip.stamcar@hotmail.com
SSH: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPXG6a36998dzym03q3zgmjoLX6E5Qr27S8w2G8lu6eX filips
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-09-25 15:54:14 UTC
(In reply to filip.stamcar from comment #0)
> I want to automatically submit changes to GURU (to dev branch) when a new
> release is created using GitHub Actions, so users will get new versions
> quicker and won't have to wait until third-party contributors manually
> update the package. I would also like to know if such automatic updates are
> allowed.

I don't think it's appropriate to do automated commits to GURU, or to give access to Gentoo systems to third-party services such as GHA runners.
Comment 2 filip.stamcar 2023-09-25 16:06:23 UTC
Yeah, this makes sense. Is there any other way to submit automated updates to GURU? Main Gentoo repo supports submitting updates through GitHub PRs, which shouldn't cause issues from a security perspective, so is it possible to also do this for GURU?

Or, could www-plugins/firefoxpwa be moved into the main repo and then have updates submitted via my automated PRs? What are the criteria for including a package in the main repo, and how approximately long would it then take after the PR is submitted before the update is available to users?
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-09-25 16:13:19 UTC
(In reply to filip.stamcar from comment #2)
> Yeah, this makes sense. Is there any other way to submit automated updates
> to GURU? Main Gentoo repo supports submitting updates through GitHub PRs,
> which shouldn't cause issues from a security perspective, so is it possible
> to also do this for GURU?

I don't see a problem with submitting PRs, as long as a human reviews them before merging.

> Or, could www-plugins/firefoxpwa be moved into the main repo and then have
> updates submitted via my automated PRs? What are the criteria for including
> a package in the main repo, and how approximately long would it then take
> after the PR is submitted before the update is available to users?

The criteria is that it's in good shape and someone is willing to maintain it.  It also needs someone to review and proxy the commits.  The proxy-maint project could serve the latter need but we're a bit overburdened, so it could take a while for things to get merged.
Comment 4 filip.stamcar 2023-09-25 18:24:54 UTC
(In reply to Michał Górny from comment #3)

> I don't see a problem with submitting PRs, as long as a human reviews them
> before merging.

For GURU, PR can be submitted to github.com/gentoo/guru, right?

Also, in case I need to manually push changes to dev at some point, please still add me to GURU, but with the following SSH key:

ssh-rsa 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 filips

> The criteria is that it's in good shape and someone is willing to maintain
> it.  It also needs someone to review and proxy the commits.  The proxy-maint
> project could serve the latter need but we're a bit overburdened, so it
> could take a while for things to get merged.

In this case, I will probably be submitting PRs to GURU, and package can be moved to the main repository if that becomes feasable in the future.
Comment 5 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2023-09-25 18:55:34 UTC
Welcome!