On Wed, Feb 22, 2023 at 05:38:23AM +0100, Kevin Kofler via devel wrote:
> Kevin Fenzi wrote:
> > I fear the only way to fix it is to get pungi to merge entire repos, and
> > I don't think thats anything that pungi wants to be on the hook for
> > doing.
> 
> But there are more things than just DeltaRPMs it could be useful for. E.g., 
> I remember that in ancient times (pre Core-Extras Merge), some Fedora 
> repository (IIRC, the old Fedora Extras) used to ship not only the latest 
> build for each package, but the TWO latest builds, so that if the latest 
> build was broken, you could easily downgrade to the previous one. That 
> should really be done in all the rolling repositories (updates, updates-
> testing, Rawhide).

It does have advantages for sure. 

Pros:
* can dnf downgrade easily.
* can choose not to upgrade something thats a big change you aren't
ready for.

Cons:
* It takes a bunch more mirror space.
* It would make composes take longer.
* It will allow for more easily tricking people into downgrading to a
version that has serious security problems so they could be exploited.

kevin

Attachment: signature.asc
Description: PGP signature

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to