tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: pkgin idea: warning about service restarts and database migrations



On Sat, Sep 23, 2023 at 10:23:09AM +0200, Manuel Bouyer wrote:
> Some time ago we discussed about how to deal with obsolete packages that
> will be removed from pkgsrc in the near future.
> Maybe it would be the opportunity to implement something like an
> OBSOLETE variable, to be displayed when a user install or upgrades
> to an obsolete package ?
> 
> something like
> OBSOLETE+= "this package is EOL upstream and will be removed after 2023Q2"

We already have a method for handling this.
Add an entry to the pkg-vulnerabilities file like this:

python36-[0-9]* eol     http://ftp.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages

and in the eol-packages file, add an entry describing the reason:

Package: python36
eol date: December 31, 2021
URL: https://devguide.python.org/versions/#versions
Description: eol December 2021 by vendor.  Update to newer version.

The daily insecurity output script will then have lines like this:

Package python36-3.6.10 has reached end-of-life (eol), see http://cdn.NetBSD.org/pub/NetBSD/packages/vulns/eol-packages

Cheers,
 Thomas


Home | Main Index | Thread Index | Old Index