Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 634100 - Reevaluate status of old GLEPs
Summary: Reevaluate status of old GLEPs
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Council
Classification: Unclassified
Component: unspecified (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Council
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-10-12 14:09 UTC by Michał Górny
Modified: 2022-06-21 17:44 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-12 14:09:30 UTC
Given the workflow changes approved in GLEP 1, and the fact that a lot of old GLEPs are quite obsolete, we should iterate through them and decide what to do about particular GLEPs. I will paste a list here soonish.
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-12 14:23:22 UTC
A quick list with statuses and creation dates:

 1 Acti 2003-05-31 GLEP Purpose and Guidelines
 2 Acti 2003-05-31 Sample ReStructuredText GLEP Template
 3 Defe 2003-06-09 Ebuild maintainter extension GLEP
 4 Repl 2003-06-24 Gentoo top-level management structure proposal
 5 Defe 2003-07-02 Extending metadata.xml
 6 Fina 2003-07-02 Gentoo Linux monthly bug day
 7 Fina 2003-07-06 New ombudsman position
 8 Fina 2003-07-02 Adopt-A-Developer
 9 Defe 2003-07-19 Gentoo Package Update System
10 Defe 2003-08-04 Localized Gentoo Sites
11 Fina 2003-08-02 Web Application Installation
12 Reje 2003-08-10 Gentoo.org Finger Daemon
13 Fina 2003-08-15 Providing the users with a Gentoo Handbook
14 Acce 2003-08-18 security updates based on GLSA
15 Acce 2003-09-30 Gentoo Script Repository
16 Defe 2003-09-09 Gentoo Menu System
17 Defe 2003-11-21 Resolution for Aging EBuilds
18 Defe 2003-11-21 Gentoo Bimonthly Publication
19 With 2004-01-26 Gentoo Stable Portage Tree
20 Acce 2004-02-09 /srv - Services Home Directory Support
21 Fina 2004-02-22 User-defined Package Sets
22 Fina 2004-03-06 New "keyword" system to incorporate various userlands/kernels/archs
23 Fina 2004-03-09 Handling of ACCEPT_LICENSE
24 Defe 2004-03-16 Consistent Gentoo tool naming scheme
25 Defe 2004-03-06 Distfile Patching Support
26 Defe 2004-05-02 Handling kernels with portage
27 Acce 2004-05-29 Portage Management of UIDs/GIDs
28 Fina 2004-06-02 Expiration of inactive GLEPs
29 With 2004-08-19 USE flag groups
30 Fina 2004-10-24 Planet Gentoo web log aggregator
31 Fina 2004-10-27 Character Sets for Portage Tree Items
32 Defe 2004-11-03 Maildir Location
33 Defe 2005-01-29 Eclass Restructure/Redesign
34 Fina 2005-03-11 Per-Category metadata.xml Files
35 Defe 2005-03-12 Automated consistency check for ebuilds
36 Fina 2004-11-11 Subversion/CVS for Gentoo Hosted Projects
37 Defe 2005-04-30 Virtuals Deprecation
38 Fina 2005-05-06 Status of forum moderators in the Gentoo project
39 Fina 2005-09-01 An "old-school" metastructure proposal with "boot for being a slacker"
40 Fina 2005-09-03 Standardizing "arch" keywording across all archs.
41 Reje 2005-09-07 Making Arch Testers official Gentoo Staff
42 Fina 2005-10-31 Critical News Reporting
43 Fina 2005-11-07 GLEP File Hosting
44 Fina 2005-12-04 Manifest2 format
45 Fina 2005-12-13 GLEP date format
46 Acce 2005-12-26 Allow upstream tags in metadata.xml
47 Reje 2005-10-14 Creating 'safe' environment variables
48 Fina 2006-04-24 QA Team's Role and Purpose
49 Reje 2006-05-18 Alternative Package Manager requirements
50 Reje 2006-05-22 Supporting alternative package managers
51 With 2006-05-30 Gentoo Knowledge Base
52 With 2006-10-13 RESTRICT=unattended
53 Fina 2005-12-11 Keywording scheme
54 Defe 2007-12-09 scm package version suffix
55 Reje 2007-12-17 Use EAPI-suffixed ebuilds (.ebuild-EAPI)
56 Fina 2008-06-03 USE flag descriptions in metadata
57 Fina 2008-10-22 Security of distribution of Gentoo software - Overview
58 Draf 2008-10-22 Security of distribution of Gentoo software - Infrastructure to User distribution - MetaManifest
59 Draf 2008-10-22 Manifest2 hash policies and security implications
60 Draf 2008-10-22 Manifest2 filetypes
61 Draf 2008-10-22 Manifest2 compression
62 Draf 2012-06-17 Optional runtime dependencies via runtime-switchable USE flags
63 Fina 2013-02-18 Gentoo GPG key policies
64 Fina 2014-07-31 Export PMS's cached VDB information
65 Draf 2014-10-26 Post-install QA checks
66 Draf 2017-07-24 Gentoo Git Workflow
67 Fina 2015-12-13 Package maintenance structure
68 Fina 2016-03-14 Package and category metadata
69 Draf 2015-03-29 File installation masks
70 Draf 2016-12-15 Addition of distribution environment variables
71 Draf 2017-01-19 Require Projects to report to Council Monthly
72 Draf 2017-05-06 Architecture stability status file
73 Draf 2017-06-11 Automated enforcing of REQUIRED_USE constraints
Comment 2 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-12 14:36:26 UTC
(In reply to Michał Górny from comment #1)
>  3 Defe 2003-06-09 Ebuild maintainter extension GLEP

This one looks like some primitive form of proxy-maint. Doubt anything's ever going to happen with this GLEP, and I don't think it has any purpose anymore. I'd reject it.

>  5 Defe 2003-07-02 Extending metadata.xml

It's about moving DESCRIPTION, HOMEPAGE and LICENSE to metadata.xml. This comes up repeatedly from time to time, with no progress whatsoever. I don't think it's going to happen, given the strong arguments against it and the resulting incompatibility.

>  6 Fina 2003-07-02 Gentoo Linux monthly bug day

Do we still do that?

>  7 Fina 2003-07-06 New ombudsman position

This one even explicitly mentions it's obsolete. We should probably mark it 'Moribund' wrt new GLEP 1 statuses.

>  8 Fina 2003-07-02 Adopt-A-Developer

This one's probably dead, I don't see any traces of that project anymore. Moribund?

>  9 Defe 2003-07-19 Gentoo Package Update System

This one seems to cover hosting deltup patches for distfiles. I don't really recall what's the state with this. We might keep it deferred, I suppose, unless it was actually implemented somehow.

> 10 Defe 2003-08-04 Localized Gentoo Sites

This one's strictly bound to old gentoo sites and CVS. I suppose we should reject it.
Comment 3 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-12 15:33:52 UTC
(In reply to Michał Górny from comment #1)
> 14 Acce 2003-08-18 security updates based on GLSA

I think this one should be marked Final.

> 15 Acce 2003-09-30 Gentoo Script Repository

This hasn't been moved forward. Can we do anything with this, or do we have to alter GLEP 1 first?

> 16 Defe 2003-09-09 Gentoo Menu System

It seems that the purpose of this is to add XDG specs support to different WMs. I'm not convinced this is really GLEP-able, so maybe Reject it?

> 17 Defe 2003-11-21 Resolution for Aging EBuilds

This is basically saying 'close new package requests after N days'. I think we should reject it.

> 18 Defe 2003-11-21 Gentoo Bimonthly Publication

Looks like it's about sending *printed* Gentoo paper every 2 months to subscribers. Doubt anything's ever going to happen. Reject?

> 20 Acce 2004-02-09 /srv - Services Home Directory Support

No progress for a long time. I don't think it should stay Accepted.

> 22 Fina 2004-03-06 New "keyword" system to incorporate various userlands/kernels/archs

I don't think this one is implemented as speced, see 53 below.

> 24 Defe 2004-03-16 Consistent Gentoo tool naming scheme

This one's unlikely to ever happen.

> 25 Defe 2004-03-06 Distfile Patching Support

Seems to supersede GLEP 9. Maybe it's still technically valid.

> 26 Defe 2004-05-02 Handling kernels with portage

At a first glance, it's not horrible, so we might keep it as-is.

> 27 Acce 2004-05-29 Portage Management of UIDs/GIDs

This one is actually horrible, and shouldn't be left Accepted.

> 29 With 2004-08-19 USE flag groups

Seems to cover selecting USE flags by sets instead of individually, e.g.:

 USE="@desktop"

to select flags typical for a desktop. Looks sane at a first glance, so we might keep it.

> 32 Defe 2004-11-03 Maildir Location

I would reject it. It looks convoluted, and the implementation has never been accepted.

> 33 Defe 2005-01-29 Eclass Restructure/Redesign

This is outdated and doesn't account for EAPIs. We should probably mark it rejected.

> 35 Defe 2005-03-12 Automated consistency check for ebuilds

Looks like tinderboxing. I'd normally even consider accepting this. However, it lacks any copyright header and the author doesn't seem around, so I think we should reject it.

> 36 Fina 2004-11-11 Subversion/CVS for Gentoo Hosted Projects

Moribund?

> 37 Defe 2005-04-30 Virtuals Deprecation

It's incompatible with how virtuals were removed (i.e. it still keeps some 'virtual' features). I'd say we should reject it, since keeping it deferred forever makes no sense.

> 40 Fina 2005-09-03 Standardizing "arch" keywording across all archs.

This is the famous x86 arch GLEP. With updated GLEP 1, we can mark it Moribund if we don't want to provide a replacement GLEP for now.

> 46 Acce 2005-12-26 Allow upstream tags in metadata.xml

This one should be marked Replaced.

> 52 With 2006-10-13 RESTRICT=unattended

Sounds like the 'interactive' flag we have now. We should probably reject it with an explanation.

> 53 Fina 2005-12-11 Keywording scheme

If I understand correctly, this one replaces GLEP 22.

> 54 Defe 2007-12-09 scm package version suffix

Rejected? ;-)

> 56 Fina 2008-06-03 USE flag descriptions in metadata

Replaced.

> 58 Draf 2008-10-22 Security of distribution of Gentoo software -
> Infrastructure to User distribution - MetaManifest
> 59 Draf 2008-10-22 Manifest2 hash policies and security implications
> 60 Draf 2008-10-22 Manifest2 filetypes
> 61 Draf 2008-10-22 Manifest2 compression

We should probably look into all of them, and either accept or reject them.

> 62 Draf 2012-06-17 Optional runtime dependencies via runtime-switchable USE
> flags

This one's now part of EAPI 7, so we'll probably accept it along with it.

> 65 Draf 2014-10-26 Post-install QA checks

I think this one's been practically Accepted, pending GLEP 58 verification.

> 69 Draf 2015-03-29 File installation masks

I haven't found the motivation to move this forward, so I suppose we should defer it.

> 70 Draf 2016-12-15 Addition of distribution environment variables

The idea makes sense, the implementation did not and the author didn't update it. Deferred, I suppose.

> 71 Draf 2017-01-19 Require Projects to report to Council Monthly

This one doesn't make sense at all. I'd say mark it Rejected.
Comment 4 Ulrich Müller gentoo-dev 2017-10-12 19:47:34 UTC
(In reply to Michał Górny from comment #2)
(In reply to Michał Górny from comment #3)

Reordering your list by status, so it's easier for me to comment on the different groups.

> >  3 Defe 2003-06-09 Ebuild maintainter extension GLEP
> >  5 Defe 2003-07-02 Extending metadata.xml
> >  9 Defe 2003-07-19 Gentoo Package Update System
> > 10 Defe 2003-08-04 Localized Gentoo Sites
> > 16 Defe 2003-09-09 Gentoo Menu System
> > 17 Defe 2003-11-21 Resolution for Aging EBuilds
> > 18 Defe 2003-11-21 Gentoo Bimonthly Publication
> > 24 Defe 2004-03-16 Consistent Gentoo tool naming scheme
> > 25 Defe 2004-03-06 Distfile Patching Support
> > 26 Defe 2004-05-02 Handling kernels with portage
> > 29 With 2004-08-19 USE flag groups
> > 32 Defe 2004-11-03 Maildir Location
> > 33 Defe 2005-01-29 Eclass Restructure/Redesign
> > 35 Defe 2005-03-12 Automated consistency check for ebuilds
> > 37 Defe 2005-04-30 Virtuals Deprecation
> > 52 With 2006-10-13 RESTRICT=unattended
> > 54 Defe 2007-12-09 scm package version suffix

As I understand GLEP 1, "Deferred" is perfectly fine as ultimate state of a GLEP and requires no further action. Also, it transports the right information, namely that the proposal quietly died, because its champion lost interest and never brought it to a vote, or because it was accepted but never implemented.

A similar argument holds for "Withdrawn".

==> IMHO no action is required for any of the above.

> > 15 Acce 2003-09-30 Gentoo Script Repository
> > 20 Acce 2004-02-09 /srv - Services Home Directory Support
> > 27 Acce 2004-05-29 Portage Management of UIDs/GIDs

GLEP 28 says that "if a Draft GLEP is inactive for more than 60 days or an Accepted GLEP is inactive for more than six months" then it can be marked as Deferred. More than 60 days of inactivity have passed for all three of the above.

==> Mark 15, 20, 27 as "Deferred".

> >  7 Fina 2003-07-06 New ombudsman position
> > 36 Fina 2004-11-11 Subversion/CVS for Gentoo Hosted Projects

==> "Moribund"

> > 22 Fina 2004-03-06 New "keyword" system to incorporate various userlands/kernels/archs

==> "Replaced" (by GLEP 53 which explicitly says so)

>   34 Fina 2005-03-11 Per-Category metadata.xml Files
> > 46 Acce 2005-12-26 Allow upstream tags in metadata.xml
> > 56 Fina 2008-06-03 USE flag descriptions in metadata

==> "Replaced" (by GLEP 68)


> >  6 Fina 2003-07-02 Gentoo Linux monthly bug day
> 
> Do we still do that?

At least https://wiki.gentoo.org/wiki/Bugday is actively maintained. No action, when in doubt?

> >  8 Fina 2003-07-02 Adopt-A-Developer
> 
> This one's probably dead, I don't see any traces of that project anymore.
> Moribund?

Moribund, or no action.

> > 14 Acce 2003-08-18 security updates based on GLSA
> 
> I think this one should be marked Final.

+1

> > 40 Fina 2005-09-03 Standardizing "arch" keywording across all archs.
> 
> This is the famous x86 arch GLEP. With updated GLEP 1, we can mark it
> Moribund if we don't want to provide a replacement GLEP for now.

Not sure. Parts of these policies are still in force.

> > 58 Draf 2008-10-22 Security of distribution of Gentoo software -
> > Infrastructure to User distribution - MetaManifest
> > 59 Draf 2008-10-22 Manifest2 hash policies and security implications
> > 60 Draf 2008-10-22 Manifest2 filetypes
> > 61 Draf 2008-10-22 Manifest2 compression
> 
> We should probably look into all of them, and either accept or reject them.

Note that GLEP 57 has been accepted already.

> > 62 Draf 2012-06-17 Optional runtime dependencies via runtime-switchable USE
> > flags
> 
> This one's now part of EAPI 7, so we'll probably accept it along with it.

+1

> > 65 Draf 2014-10-26 Post-install QA checks
> 
> I think this one's been practically Accepted, pending GLEP 58 verification.

So bring it up to vote again.

> > 69 Draf 2015-03-29 File installation masks
> 
> I haven't found the motivation to move this forward, so I suppose we should
> defer it.

+1 (alternatively, you could withdraw it)

> > 70 Draf 2016-12-15 Addition of distribution environment variables
> 
> The idea makes sense, the implementation did not and the author didn't
> update it. Deferred, I suppose.

+1

> > 71 Draf 2017-01-19 Require Projects to report to Council Monthly
> 
> This one doesn't make sense at all. I'd say mark it Rejected.

More than 60 days of inactivity have passed, so (by GLEP 28) it can be marked as Deferred.
Comment 5 Ulrich Müller gentoo-dev 2017-10-12 19:51:52 UTC
(In reply to Ulrich Müller from comment #4)
> > > 15 Acce 2003-09-30 Gentoo Script Repository
> > > 20 Acce 2004-02-09 /srv - Services Home Directory Support
> > > 27 Acce 2004-05-29 Portage Management of UIDs/GIDs
> 
> GLEP 28 says that "if a Draft GLEP is inactive for more than 60 days or an
> Accepted GLEP is inactive for more than six months" then it can be marked as
> Deferred. More than 60 days of inactivity have passed for all three of the
> above.

Correction: These are in Accepted state, so it is six months of inactivity. The conclusion still holds, though:

> ==> Mark 15, 20, 27 as "Deferred".
Comment 6 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-12 20:52:37 UTC
Not that I disagree with you, those 'Deferred' states can indeed by given by GLEP editors alone. However, I'm not sure if it wouldn't be better if we proactively looked into those GLEPs to give a clearer message.

'Deferred' suggests that the GLEP can be accepted once the work is resumed. 'Withdrawn' suggests that somebody else can take the GLEP. Both states clearly indicate that the GLEP needs work but it has a chance of success. Which makes sense if the GLEP just needs some changes.

However, if we clearly see that the whole idea is wrong and the GLEP couldn't be accepted unless it completely changed the topic (which we probably don't want to do), I'd say rejecting it straight away is better for potential users who might end up wasting their time on them.
Comment 7 Ulrich Müller gentoo-dev 2017-10-14 08:04:05 UTC
(In reply to Ulrich Müller from comment #4)
> > >  6 Fina 2003-07-02 Gentoo Linux monthly bug day
> > 
> > Do we still do that?
> 
> At least https://wiki.gentoo.org/wiki/Bugday is actively maintained.

@fturco: We are wondering if we should keep GLEP 6 in Final state, or change its status to Moribund. According to https://wiki.gentoo.org/index.php?title=Bugday&action=history you are regularly updating the Bugday wiki page. Is there any activity taking place on these dates?
Comment 8 Francesco Turco 2017-10-14 19:00:58 UTC
Unfortunately I just remembered updating the dates on the wiki without really partecipating to the event myself. So the answer is... I don't know. :-(
Comment 9 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-17 15:42:37 UTC
Ok, so consider all the above and the actions done or doable by GLEP editors, I think we can set a Council vote for the following:

1. Marking Final (i.e. accepting the implementation):

  14 Acce 2003-08-18 security updates based on GLSA

(note that there are some differences between the GLEP and reality, e.g. we no longer use CVS; so it might be better if someone updated and resubmitted the GLEP)

2. Marking Moribund:

   7 Fina 2003-07-06 New ombudsman position
   8 Fina 2003-07-02 Adopt-A-Developer
  36 Fina 2004-11-11 Subversion/CVS for Gentoo Hosted Projects


As for the Bugday GLEP, I think we can wait if it happens this year. If it doesn't, we should probably Moribund it as well.
Comment 10 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-17 15:43:11 UTC
(CC-ing security for GLEP 14)
Comment 11 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-10-20 08:02:01 UTC
Given the discovery that tree signing GLEPs were actually accepted, I'd like to add marking the following GLEP final:

59 Acce 2008-10-22 Manifest2 hash policies and security implications

The specific hash changes listed in the GLEP were actually implemented.
Comment 12 Larry the Git Cow gentoo-dev 2017-11-12 21:17:41 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glep.git/commit/?id=7d14c52af5c4abc429a85184a71f1360b1ba41a6

commit 7d14c52af5c4abc429a85184a71f1360b1ba41a6
Author:     Ulrich Müller <ulm@gentoo.org>
AuthorDate: 2017-11-12 21:14:39 +0000
Commit:     Ulrich Müller <ulm@gentoo.org>
CommitDate: 2017-11-12 21:14:39 +0000

    glep-0059: Mark as Final.
    
    Bug: https://bugs.gentoo.org/634100

 glep-0059.rst | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

https://gitweb.gentoo.org/data/glep.git/commit/?id=1fc314fbfc8678058f3d3bef534fed00435ff586

commit 1fc314fbfc8678058f3d3bef534fed00435ff586
Author:     Ulrich Müller <ulm@gentoo.org>
AuthorDate: 2017-11-12 21:14:18 +0000
Commit:     Ulrich Müller <ulm@gentoo.org>
CommitDate: 2017-11-12 21:14:18 +0000

    glep-0036: Mark as Moribund.
    
    Bug: https://bugs.gentoo.org/634100

 glep-0036.rst | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

https://gitweb.gentoo.org/data/glep.git/commit/?id=e0079a728e8eb4bd44015d7cc54b95ec8b0b226d

commit e0079a728e8eb4bd44015d7cc54b95ec8b0b226d
Author:     Ulrich Müller <ulm@gentoo.org>
AuthorDate: 2017-11-12 21:13:52 +0000
Commit:     Ulrich Müller <ulm@gentoo.org>
CommitDate: 2017-11-12 21:13:52 +0000

    glep-0008: Mark as Moribund.
    
    Bug: https://bugs.gentoo.org/634100

 glep-0008.rst | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

https://gitweb.gentoo.org/data/glep.git/commit/?id=0bf20d23d3b092ec5fde4738678b4bb9bec888e9

commit 0bf20d23d3b092ec5fde4738678b4bb9bec888e9
Author:     Ulrich Müller <ulm@gentoo.org>
AuthorDate: 2017-11-12 21:13:22 +0000
Commit:     Ulrich Müller <ulm@gentoo.org>
CommitDate: 2017-11-12 21:13:22 +0000

    glep-0007: Mark as Moribund.
    
    Bug: https://bugs.gentoo.org/634100

 glep-0007.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)}
Comment 13 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2017-11-13 16:00:36 UTC
I've split GLEP 14 into bug #637328. Given Bugday has been left as-is, we can close this one.