Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 146677 - app-portage/layman - overlays missing a "contact" attribute
Summary: app-portage/layman - overlays missing a "contact" attribute
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gunnar Wrobel (RETIRED)
URL:
Whiteboard:
Keywords:
: 155318 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-09-07 04:47 UTC by Jimmy.Jazz
Modified: 2007-01-10 08:22 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jimmy.Jazz 2006-09-07 04:47:34 UTC
Hello,

i don't know if layman is still the best way to look for overlays... 
Anyway some of them are not recognized or are unfetchable.

# layman -a flameeyes-overlay
...
* Overlay "flameeyes-overlay" does not exist!

# layman -L
* Overlay "gentopia" is missing a "contact" attribute!
* Overlay "science" is missing a "contact" attribute!
* Overlay "gnome-experimental" is missing a "description" entry!
* Overlay "break-my-gentoo-main" is missing a "contact" attribute!
* ...
* Overlay "hanno-xgl" is missing a "contact" attribute!
* Overlay "openoffice-geki" is missing a "contact" attribute!
* Overlay "gentoo-taiwan" is missing a "contact" attribute!
* Overlay "postgresql-testing" is missing a "contact" attribute!
* Overlay "postgresql-experimental" is missing a "contact" attribute!
* Overlay "gentoojp" is missing a "contact" attribute!

(and a lot more)

Jj
Comment 1 Gunnar Wrobel (RETIRED) gentoo-dev 2006-09-07 06:48:41 UTC
This is a change in behaviour for the (currently unstable) layman-1.0.7.

It is now necessary to provide a contact address for each overlay so that users have a channel for questions/bugs etc. In the default configuration layman will reject overlays that do not have this contact attribute. The overlays team still needs to complete the global list with these attributes. Many overlays currently lack the attribute and thus layman issues many warnings.

If you find this kind of behaviour annoying you can simply set

nocheck:yes

in the /etc/layman/layman.cfg 

file or use the new "-k" flag. This will stop layman from complaining.
Comment 2 Jimmy.Jazz 2006-09-07 07:30:36 UTC
Thank you for your fast reply and sorry for the inconvenient. I didn't paid attention to this option.

Jj
Comment 3 Gunnar Wrobel (RETIRED) gentoo-dev 2006-09-07 08:01:58 UTC
I did absolutely expect people to comment on this new behaviour. This bug should stay open until we fix all the overlay entries so that people know what this is about.
Comment 4 Jakub Moc (RETIRED) gentoo-dev 2006-11-16 00:38:19 UTC
*** Bug 155318 has been marked as a duplicate of this bug. ***
Comment 5 cvill64 2006-11-16 10:25:32 UTC
Hello

You marked my bug as a duplicate of this one which to me doesn't make sense.  If you check the global txt file that layman looks for, you'll notice that the Sabayon overlay is correctly formated and has the necessary "contact" attribute.  What is the reason that its not being listed?  If its related to this I do not see the connection.

Thanks :)
Comment 6 Gunnar Wrobel (RETIRED) gentoo-dev 2006-11-17 00:09:07 UTC
Hi cvill64,

the reason for that is that the overlay is not hosted on offical gentoo hardware (meaning overlay.gentoo.org). The reason we made that change is that we want people to notice that they take a security risk when using overlays. The stuff on overlays.gentoo.org is controlled by gentoo devs so we feel there is a higher level of security if you use ebuilds from these overlays. But it is clear that even those could potentially harm your machine. Now if you move to overlays that are controlled by users there is a potentially higher risk that somebody writes a borked ebuild or just has a bad day and adds something that damages users of the overlay. I know this will probably never happen, but security to me means first and foremost to be aware of the potential risks you take.

So we decided that layman should only show the "official" overlays in its default configuration and added the "nocheck" option / the "-k" flag so that all will be shown. 

This might not be the best way to inform the user about the potential risks involved and I'm open to alternative suggestions for 1.0.9.

Cheers,

Gunnar
Comment 7 Gunnar Wrobel (RETIRED) gentoo-dev 2007-01-10 08:22:34 UTC
The following overlays have been commented out until contact addresses are provided:

fluidportage
xwing
ebuild-exchange
erazor
fantoo
kpex-media
nxsty
liferea_overlay
gentoojp