Re: PR/48194 CVS commit: pkgsrc/pkgtools/pkg_install/files/lib

[Pierre Pronchery <khorben%netbsd.org@localhost>]

The following reply was made to PR pkg/48194; it has been noted by GNATS.

From: Pierre Pronchery <khorben%netbsd.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>, 
agc%NetBSD.org@localhost, 
 gnats-admin%netbsd.org@localhost, pkgsrc-bugs%netbsd.org@localhost
Subject: Re: PR/48194 CVS commit: pkgsrc/pkgtools/pkg_install/files/lib
Date: Mon, 16 Sep 2013 11:31:42 +0200

 On 11/09/2013 19:20, Joerg Sonnenberger wrote:
 > The following reply was made to PR pkg/48194; it has been noted by GNATS.
 > 
 > From: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
 > To: gnats-bugs%NetBSD.org@localhost
 > Cc: 
 > Subject: Re: PR/48194 CVS commit: pkgsrc/pkgtools/pkg_install/files/lib
 > Date: Wed, 11 Sep 2013 19:15:49 +0200
 > 
 >  On Wed, Sep 11, 2013 at 05:05:00PM +0000, Pierre Pronchery wrote:
 >  > The following reply was made to PR pkg/48194; it has been noted by GNATS.
 >  > 
 >  > From: Pierre Pronchery <khorben%netbsd.org@localhost>
 >  > To: Joerg Sonnenberger <joerg%britannica.bec.de@localhost>
 >  > Cc: gnats-bugs%NetBSD.org@localhost, agc%NetBSD.org@localhost, 
 > gnats-admin%netbsd.org@localhost, 
 >  >  pkgsrc-bugs%netbsd.org@localhost
 >  > Subject: Re: PR/48194 CVS commit: pkgsrc/pkgtools/pkg_install/files/lib
 >  > Date: Wed, 11 Sep 2013 19:00:56 +0200
 >  > 
 >  >  On 11/09/2013 18:41, Joerg Sonnenberger wrote:
 >  >  > On Wed, Sep 11, 2013 at 02:30:01PM +0000, Pierre Pronchery wrote:
 >  >  >>  now that I have pushed the change to both pkgsrc and src, I would 
 > like
 >  >  >>  to ask about version handling and the PKGTOOLS_REQD variable. I 
 > believe
 >  >  >>  the "latest version required for correct pkgsrc operation" includes 
 > this
 >  >  >>  patch, since it was impossible so far to even simply extract signed
 >  >  >>  packages reliably.
 >  >  > 
 >  >  > Given that noone has used signed binary as evident by the lack of bug
 >  >  > reports, I object to the bump at this point in time.
 >  >  
 >  >  ...which in turn, means that it blocks people from even trying it. If we
 >  >  keep going that pace, it will never be used ever.
 >  
 >  You can always just install a newer pkg_install. The point is that
 >  PKGTOOL_REQD *forces* you to update.
 
 ...which is necessary to be able to install signed packages in the first
 place. So if we want the possibility to provide signed packages in
 2013Q4, we need to force an update in 2013Q3 already.
 
 -- 
 khorben