<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-compose;
font-family:"Times New Roman","serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal style='margin-bottom:12.0pt'>FESCo would have to change their rules prohibiting shipping non-official repo files in the main repository. Assuming that political battle is successful…<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>I think signing must be done by the copr creator (personally).<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>As each copr repo is independently timed and created, I’d be OK with a frequently scheduled rsync that pulls all coprs and drops them into the master mirrors, for downstreams to pick up at will. Probably in the pub/alt tree please. That will minimize the # of mirrors that are looking for them too.<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>I think the purgatory problem is one for each copr to decide. Some may be bleeding edge, some may be backports of good stuff that changes infrequently.<o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'>I’d say _<i>no</i>_ to the meta-repo, for exactly the above reasons, and so 2 coprs may conflict and/or compete. That’s their right.<br><br><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>--</span> <br><span style='font-family:"Calibri","sans-serif"'>Matt Domsch</span> <br><span style='font-family:"Calibri","sans-serif"'>Distinguished Engineer, Director</span> <br><span style='font-family:"Calibri","sans-serif"'>Dell | Software Group</span> <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p><span style='font-family:"Calibri","sans-serif"'>-----Original Message-----</span> <br><span style='font-family:"Calibri","sans-serif"'>From: infrastructure-bounces@lists.fedoraproject.org [<a href="mailto:infrastructure-bounces@lists.fedoraproject.org">mailto:infrastructure-bounces@lists.fedoraproject.org</a>] On Behalf Of Kevin Fenzi</span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>Sent: Wednesday, December 04, 2013 2:20 PM</span> <br><span style='font-family:"Calibri","sans-serif"'>To: infrastructure@lists.fedoraproject.org</span> <br><span style='font-family:"Calibri","sans-serif"'>Subject: Some questions around coprs</span> <o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>So, at todays fesco meeting there was some discussion about coprs. </span><br><span style='font-family:"Calibri","sans-serif"'><a href="http://meetbot.fedoraproject.org/meetbot/fedora-meeting/2013-12-04/fesco.2013-12-04-17.59.log.html#l-52">http://meetbot.fedoraproject.org/meetbot/fedora-meeting/2013-12-04/fesco.2013-12-04-17.59.log.html#l-52</a></span> <o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>In particular some folks want to be able to ship copr repo files in the main Fedora repository. This would allow users to easily install software from there without having to discover how to enable it. </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>However, copr packages are not signed or mirrored currently.</span> <o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>So, this brings up thoughts around if we can somehow sign them, and how we could mirror them, or even if we want to go down this road at all.</span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>(as it seems like not a use case copr's was designed for anyhow). </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>So: </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>1. Do we even want to persue this? </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>2. If so, do we have any ideas how signing copr packages could work?</span> <o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>3. Mirroring doesn't seem like it would be that hard, just rsync off the repos and push them out in our regular mirroring system. Could be a fair bit of churn tho, and there's no set schedule, so we would have to decide on frequency, etc. </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>4. If coprs moves to being inside koji, could we at that point have a better time with these needs? </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>5. Perhaps we could propose some kind if pergatory type setup between coprs (experemental, just builds, may set your house on fire, may update incompatibly every day) and fedora repository packages (with all the updates guidelines, reviews, etc).</span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>Thoughts? comments? </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>Possibly related to this: I wonder if copr could grow a 'meta repo'</span> <br><span style='font-family:"Calibri","sans-serif"'>that has all the repodata of all existing coprs. Then you could just enable one thing and be able to install any coprs? </span><o:p></o:p></p><p><span style='font-family:"Calibri","sans-serif"'>kevin</span> <o:p></o:p></p></div></body></html>