Hi Le 27/02/2017 à 17:50, Fabien Boucher a écrit : > Hello, > > As we have started the effort to have all components, bundled in the SF > image, packaged > we are figuring out that EPEL and RDO repo are helpful as a bunch of > dependencies are > available there. Unfortunately on a SF installation if yum is freely usable > then > an operator can break its SF deployment if EPEL or RDO lands something that > break > an ABI. > > Usually it should not happen with EPEL as explain in the upgrade policy: > https://fedoraproject.org/wiki/EPEL_Updates_Policy > https://fedoraproject.org/wiki/EPEL/GuidelinesAndPolicies > > RDO have stable releases that should not introduce ABI breakages over the > time. > > Relying on both EPEL and RDO can increase the risk so it may be better to only > rely on one of them and RDO includes stuff we care about like olso, > openstack clients ... (+ a lot of pkg from EPEL) so better to only rely on > RDO IMO. > > Also there's the solution of only relying on base centos managing the > deps by ourself but the work seems quite huge for a small team ... ?
What about, in that case, having the distro.yaml file that describes the SRPM list like : extra-srpms: - http://cbs.centos.org/kojifiles/packages/python-pecan/1.1.2/1.el7/noarch/python2-pecan-1.1.2-1.el7.noarch.rpm - http://cbs.centos.org/kojifiles/packages/python-oslo-policy/1.18.0/1.el7/src/python-oslo-policy-1.18.0-1.el7.src.rpm - ... That way we will have a self-sufficient SF RPM repo, like RDO where only base and update centos repo are needed. We will need to take care of also adding the Build and Runtime deps for what we include in extra-srpms. A job, well a script, must fetch the srpms and build them in the specific target. If a srpms is already referenced in the target simply skip. If one has change (version changed) then: - koji remove-pkg - koji build > Also after discussing with Nico it can be safer to only enable centos-update > and > sf RPM repos and disable the rest at the end of the built of the image to > avoid eventual unexpected pkg bumps from RDO or even EPEL according to our > choice. > > Cheers, > Fabien > _______________________________________________ Softwarefactory-dev mailing list [email protected] https://www.redhat.com/mailman/listinfo/softwarefactory-dev
