Re: [gentoo-dev] My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Kent Fredric
On 18 September 2014 13:01, Rich Freeman wrote: > With git a revbump is: > cp foo-1.ebuild foo-2.ebuild > git add foo-2.ebuild > git commit > > (I left out changelogs, repoman, etc, since there is no change with > any of these, and I left out syncing the git repo.) > > There really is nothing new

[gentoo-dev] Request for help with jpeg-9a porting, bug 479818

2014-09-17 Thread Samuli Suominen
I could use some help with bugs at, http://bugs.gentoo.org/showdependencytree.cgi?id=479818&hide_resolved=1 Specifically with x11-libs/fox bug https://bugs.gentoo.org/show_bug.cgi?id=520674 because it's an library, I'm almost ashamed my patch efforts to it have failed, I keep running from one err

Re: [gentoo-dev] My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Rich Freeman
On Wed, Sep 17, 2014 at 4:02 PM, Diamond wrote: > On Mon, 15 Sep 2014 14:51:56 -0400 > Rich Freeman wrote: >> >> In general you want each commit to represent a single "change." That >> might be a revbump in a single package, or it might be a package move >> that involves touching 300 packages in

Re: [gentoo-dev] My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Kent Fredric
On 18 September 2014 08:02, Diamond wrote: > Git doesn't do this by default and it > will might be a nightmare to compare such revbumps by hand. > git diff -M1 -C1 ^ is usually sufficient to show new files as differences between similar files that were already there, including revbumps. --

[gentoo-dev] PowerPC status

2014-09-17 Thread Jack Morgan
Hello, The PowerPC development team has had our 2nd monthly meeting and I wanted to provide an update on where we are. 1) Active Developers The following are activly working on PPC/PPC64 as far as I know. If I've listed you in error, please let me know. Agostino Sarubbo (ago) - stablereq Ant

[gentoo-dev] Re: git security (SHA-1)

2014-09-17 Thread Duncan
Ciaran McCreesh posted on Wed, 17 Sep 2014 12:36:16 +0100 as excerpted: > On Wed, 17 Sep 2014 07:21:08 -0400 Tim Boudreau > wrote: >> If someone wants to commit malicious code into Gentoo, they're far more >> likely to take the ugly but pragmatic approach of, say, forcing someone >> to commit mal

[gentoo-dev] Re: Mix-in Support Tracker

2014-09-17 Thread Duncan
Rich Freeman posted on Wed, 17 Sep 2014 09:58:46 -0400 as excerpted: > [Mix-in support] For the most part we just need to do the work, and the > first step is identifying blockers. If some end up involving PMS/etc > then we may need to get the Council involved. > > Rather than hijacking every @s

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Michał Górny
Dnia 2014-09-17, o godz. 12:36:16 Ciaran McCreesh napisał(a): > On Wed, 17 Sep 2014 07:21:08 -0400 > Tim Boudreau wrote: > > If someone wants to commit malicious code into Gentoo, they're far > > more likely to take the ugly but pragmatic approach of, say, forcing > > someone to commit malicious

Re: [gentoo-dev] Mix-in Support Tracker

2014-09-17 Thread Rich Freeman
On Wed, Sep 17, 2014 at 3:25 PM, Rick "Zero_Chaos" Farina wrote: > > The funtoo mixin system has absolutely nothing to do with adding > packages to stage3 that are not in @system. > > Primarily adding packages to stage3 (or stage4 if we choose to call it > that) would only need us to agree on the

Re: [gentoo-dev] My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Diamond
On Mon, 15 Sep 2014 14:51:56 -0400 Rich Freeman wrote: > > In general you want each commit to represent a single "change." That > might be a revbump in a single package, or it might be a package move > that involves touching 300 packages in a single commit. Is it right that you are going to mo

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Piotr Szymaniak
On Wed, Sep 17, 2014 at 07:21:08AM -0400, Tim Boudreau wrote: > If someone wants to commit malicious code into Gentoo, they're far more > likely to take the ugly but pragmatic approach of, say, forcing someone to > commit malicious code at gunpoint and then shooting them, than to go to the > vast e

Re: [gentoo-dev] Mix-in Support Tracker

2014-09-17 Thread Rick "Zero_Chaos" Farina
On 09/17/2014 09:58 AM, Rich Freeman wrote: > There was a thread a while back about mix-in support and I think there > was genuine interest. For the most part we just need to do the work, > and the first step is identifying blockers. If some end up involving > PMS/etc then we may need to get the

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread W. Trevor King
On Wed, Sep 17, 2014 at 10:36:45AM +0200, Michał Górny wrote: > Dnia 2014-09-16, o godz. 10:52:13 > W. Trevor King napisał(a): > > $ git pull --depth=1 > > > > for subsequent syncs. pym/_emerge/actions.py currently hardcodes > > ‘git pull’ for the latter, and doesn't seem to have any code for >

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Anthony G. Basile
On 09/17/14 10:13, Samuli Suominen wrote: On 17/09/14 16:29, Alan McKinnon wrote: On 17/09/2014 14:49, Aaron W. Swenson wrote: On 2014-09-17 14:20, viv...@gmail.com wrote: Il 17/09/2014 14:09, Jorge Manuel B. S. Vicetto ha scritto: On Wed, 17 Sep 2014, Luca Barbato wrote: The bc utility is

Re: [gentoo-dev] gentoo git step by step guide

2014-09-17 Thread Rich Freeman
On Wed, Sep 17, 2014 at 11:28 AM, hasufell wrote: > NOTE: you may skip running repoman another time if you have manually > verified that the commits you are missing are totally unrelated to your > work (e.g. only affect a package that is not in the dependency chain of > yours). You can do so via:

Re: [gentoo-dev] gentoo git step by step guide

2014-09-17 Thread hasufell
Daniel Campbell: > As a prospective Gentoo developer, having a guide around meant > specifically for Gentoo's practices would be incredibly helpful. I use > git in my own hobby development and learned from Pro Git, et al, but > it'd still be really nice to have, and give developers a place to > poi

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Samuli Suominen
On 17/09/14 16:29, Alan McKinnon wrote: > On 17/09/2014 14:49, Aaron W. Swenson wrote: >> On 2014-09-17 14:20, viv...@gmail.com wrote: >>> Il 17/09/2014 14:09, Jorge Manuel B. S. Vicetto ha scritto: On Wed, 17 Sep 2014, Luca Barbato wrote: > The bc utility is part of the posix tools

[gentoo-dev] Mix-in Support Tracker

2014-09-17 Thread Rich Freeman
There was a thread a while back about mix-in support and I think there was genuine interest. For the most part we just need to do the work, and the first step is identifying blockers. If some end up involving PMS/etc then we may need to get the Council involved. Rather than hijacking every @syst

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Rich Freeman
On Wed, Sep 17, 2014 at 9:29 AM, Alan McKinnon wrote: > On 17/09/2014 14:49, Aaron W. Swenson wrote: > > Agreed. I've been on -user for 10+ years and only a very few fetch their > kernels directly from upstream. The vast majority of users who have > described how they do it simply emerge one of th

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread hasufell
Aaron W. Swenson: > > This is what's been driving me batty. None of you verified my identity > before letting me be an official Gentoo Developer. Yet I have access to > the repo. All I had to do was complete the quizzes. > The only way to improve security in the sense of random collaborators is

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Alan McKinnon
On 17/09/2014 14:49, Aaron W. Swenson wrote: > On 2014-09-17 14:20, viv...@gmail.com wrote: >> Il 17/09/2014 14:09, Jorge Manuel B. S. Vicetto ha scritto: >>> On Wed, 17 Sep 2014, Luca Barbato wrote: >>> The bc utility is part of the posix tools and it might be used to build linux among t

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Aaron W. Swenson
On 2014-09-17 14:20, viv...@gmail.com wrote: > Il 17/09/2014 14:09, Jorge Manuel B. S. Vicetto ha scritto: > > On Wed, 17 Sep 2014, Luca Barbato wrote: > > > >> The bc utility is part of the posix tools and it might be used to build > >> linux among the other stuff. > > > > Luca, > > > > bc is not

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread viv...@gmail.com
Il 17/09/2014 14:09, Jorge Manuel B. S. Vicetto ha scritto: > On Wed, 17 Sep 2014, Luca Barbato wrote: > >> The bc utility is part of the posix tools and it might be used to build >> linux among the other stuff. > > Luca, > > bc is not in the system set and is a dependency of the kernel or any > ot

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Rich Freeman
On Wed, Sep 17, 2014 at 5:56 AM, Ulrich Mueller wrote: > > So the research that needs to be done first is to find out how often > our ChangeLog entries differ from the commit log. If it turns out that > they are identical in 99 % of all cases, then it obviously makes no > sense to maintain the sam

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Jorge Manuel B. S. Vicetto
On Wed, 17 Sep 2014, Luca Barbato wrote: The bc utility is part of the posix tools and it might be used to build linux among the other stuff. Luca, bc is not in the system set and is a dependency of the kernel or any other package that needs it, so why do we need to include a package that ta

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Aaron W. Swenson
On 2014-09-17 12:08, Ciaran McCreesh wrote: > On Wed, 17 Sep 2014 07:04:08 -0400 > "Aaron W. Swenson" wrote: > > This is what's been driving me batty. None of you verified my identity > > before letting me be an official Gentoo Developer. > > Why does that matter? My argument is Git using SHA-1

Re: [gentoo-dev] Add bc back to the stage3

2014-09-17 Thread Rich Freeman
On Tue, Sep 16, 2014 at 7:47 PM, Luca Barbato wrote: > The bc utility is part of the posix tools and it might be used to build > linux among the other stuff. > I'm fine with including useful utilities in the stage3s, as long as they don't go into the system set. We really need to get beyond equa

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Ciaran McCreesh
On Wed, 17 Sep 2014 07:21:08 -0400 Tim Boudreau wrote: > If someone wants to commit malicious code into Gentoo, they're far > more likely to take the ugly but pragmatic approach of, say, forcing > someone to commit malicious code at gunpoint and then shooting them, > than to go to the vast effort

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Tim Boudreau
If someone wants to commit malicious code into Gentoo, they're far more likely to take the ugly but pragmatic approach of, say, forcing someone to commit malicious code at gunpoint and then shooting them, than to go to the vast effort it would take to come up with malicious code that conveniently h

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Ciaran McCreesh
On Wed, 17 Sep 2014 07:04:08 -0400 "Aaron W. Swenson" wrote: > This is what's been driving me batty. None of you verified my identity > before letting me be an official Gentoo Developer. Why does that matter? -- Ciaran McCreesh signature.asc Description: PGP signature

Re: [gentoo-dev] git security (SHA-1)

2014-09-17 Thread Aaron W. Swenson
On 2014-09-16 14:40, hasufell wrote: > Michael Orlitzky: > > To put things in perspective, all I had to do was ask for commit access > > and somebody eventually gave it to me. We should worry about this when > > breaking SHA1 becomes less expensive than the ebuild quizzes. > > Yep, that's what I'd

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Ulrich Mueller
> On Wed, 17 Sep 2014, Michał Górny wrote: > Dnia 2014-09-16, o godz. 10:18:35 > hasufell napisał(a): >> Ulrich Mueller: >> > >> > ChangeLogs are aimed at users >> >> Did any1 ask them if they care? > A bit off-topic but asking such a question usually makes some > developers point out that

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Michał Górny
Dnia 2014-09-16, o godz. 10:18:35 hasufell napisał(a): > Ulrich Mueller: > > > > ChangeLogs are aimed at users > > Did any1 ask them if they care? A bit off-topic but asking such a question usually makes some developers point out that they are users too and they do care :). However, in this p

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Michał Górny
Dnia 2014-09-16, o godz. 10:52:13 "W. Trevor King" napisał(a): > $ git pull --depth=1 > > for subsequent syncs. pym/_emerge/actions.py currently hardcodes ‘git > pull’ for the latter, and doesn't seem to have any code for the > former. On the other hand, it wouldn't be too terrible to force

Re: [gentoo-dev] Re: My masterplan for git migration (+ looking for infra to test it)

2014-09-17 Thread Michał Górny
Dnia 2014-09-16, o godz. 12:30:59 Alan McKinnon napisał(a): > On 16/09/2014 12:18, hasufell wrote: > > Ulrich Mueller: > >> > >> ChangeLogs are aimed at users > > > > Did any1 ask them if they care? > > I'm a user and I don't care. > > I use diff. I only go to the Changelog when I can't determ