<br><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Dec 6, 2012 at 12:11 PM, Stephen John Smoogen <span dir="ltr"><<a href="mailto:smooge@gmail.com" target="_blank">smooge@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 6 December 2012 10:58, Matthew Miller <<a href="mailto:mattdm@fedoraproject.org">mattdm@fedoraproject.org</a>> wrote:<br>
> On Thu, Dec 06, 2012 at 10:45:54AM -0700, Stephen John Smoogen wrote:<br>
>> Ok looking at the security plugin code it seems it bases its decisions<br>
>> on what is already stored in the repodata. That being the case any<br>
>> sort of plugin is going to need to have extra stuff stored in repodata<br>
>> which means changes to createrepo, rpm, yum-utils, and yum. I don't<br>
>> think this is going to happen so we might as well look for some other<br>
>> solution.<br>
><br>
> Why not? The security metadata wasn't always there and _that_ feature got<br>
> added.<br>
<br>
</div>It got added before RHEL-6 was out the door. EPEL does not control<br>
yum, createrepo, rpm or yum-utils for Red Hat Enterprise Linux.<br>
Getting it into there means working with Fedora yum/rpm developers on<br>
how it will be stored.. getting it working in Fedora, then figuring<br>
out how to back port that to the RHEL-5 and RHEL-6 yum's. Then working<br>
with Red Hat on allowing for a large ABI break where old yum users are<br>
guarenteed to still be able to make yum commands without yum crashing<br>
and that new yum users won't crash when reading old yum repos.<br>
<div class="im HOEnZb"><br></div></blockquote></div><br>If updateinfo.xml could store the data, would the addition of an alternate 'update' type break existing systems? From what I can tell updateinfo.xml is populated by parsing errata feeds. If this data could be presented as a specifically formatted errata, which to me makes a bit on sense because its just an update, then the updateinfo.xml generator and the plugin would be the primary change points. As long as the clients don't blow up at an alternate <update type='breakable'> or whatever, then maybe there wouldn't be a large ABI break.<br>
</div>