On Wed, Apr 14, 2021 at 8:52 PM Thorsten Leemhuis <fed...@leemhuis.info> wrote:
>
>
> On 14.04.21 10:45, Tomas Tomecek wrote:
> > Good morning, I'd like to announce the creation of Fedora Source-git SIG:
> > https://fedoraproject.org/wiki/SIGs/Source-git
> >
> > Our main goal in the SIG right now is to establish a development
> > workflow for Fedora Linux packages using repositories with sources and
> > upstream history (this is what we call source-git), instead of just
> > distribution files with links to tarballs (dist-git).
>
> Just wondering: will there be some coordination with the Fedora kernel
> developers that are relying on a git based workflow since a few
> weeks now (for rawhide even longer)?
>
> To those who don't know: all the stuff in dist-git kernel is
> generated from https://gitlab.com/cki-project/kernel-ark these days
> afaik, so it might be wise to make sure the solution you work out works
> for them as well. Especially as I find find some parts of how they do it
> a bit questionable. The main tarball they use as Source0 for example
> doesn't match the tarball downloadable from kernel.org(¹); all the
> patches are stashed into one(²); patches for fedora specific stuff (like
> the configs needed for building the kernel) are in the same branch as
> the patches(³). I think that makes things quite confusing, especially
> for outsiders. Sometimes I wonder if some of what the kernel people do
> violates the Fedora Packaging Guidelines(⁴), but the kernel-ark people
> ensured me it's fine.
>
> CU, knurd
>
> (¹)
> https://src.fedoraproject.org/rpms/kernel/blob/f33/f/sources for example
> states:
> > SHA512 (linux-5.11.14.tar.xz) = 
> > ccf0eaf6df0dacd2984c361621f67a3d16cf7a7174155ebdf646f1acfec43e19ff942e6c17e5bc3b5dc7a300c32bdc6ee37877162c099f5bd9924244f9445467
> But:
> $ wget --quiet
> https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.11.14.tar.xz
> $ sha512sum linux-5.11.14.tar.xz
> 8dfc7ff184e5cb33fff74686071f1605f3a834669e201d272f3047aa00657339ec1a3cfd605d8761b8a0f335b8488c02c701e72ed30031856e9c154aa1ff2d88
>  linux-5.11.14.tar.xz
>
>
> (²)
> https://src.fedoraproject.org/rpms/kernel/blob/f33/f/patch-5.11-redhat.patch
> FWIW, links to the individual patches can be found here:
> https://src.fedoraproject.org/rpms/kernel/blob/f33/f/Patchlist.changelog
>
> (³) for example
> https://gitlab.com/cki-project/kernel-ark/-/commits/fedora-5.11
>
> (⁴) like this part "sources used to build a package should be the
> vanilla sources available from upstream. To help reviewers and QA
> scripts verify this, the packager needs to indicate where a reviewer can
> find the source that was used to make the rpm". The quote is from here:
> https://docs.fedoraproject.org/en-US/packaging-guidelines/SourceURL/

Thorsten, thank you for pointing those out. I spoke with Don Zickus,
one of the leads behind the kernel-ark project (or probably the lead
:) and he confirmed to join the SIG. My hope is to create a platform
that would unify all the different source-git implementations being
used right now into one, which would have clear documentation, tooling
and infra support. Dreaming big :)


Tomas
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to