I like the idea.

I think we can even setup tests namespace repo for it, which would ensure all content in this package is %doc only. It does not contain %post scripts and no executable, unless strictly predefined content. That CI repo would have more strict access to ensure newcomers cannot avoid automated checks.

We could ask new contributors to review PRs of candidates and merge and build them.

I think this package definitely should be part of the distribution. Other packages should not depend on it, so it would get installed only by those who want it. New contributors could also be proud once they have their name in a real package. Don't force anyone, but blocking is not needed IMHO.

Cheers,
Petr

On Mon, Oct 04, 2021 at 02:42:58PM -0400, Matthew Miller wrote:

On Mon, Oct 04, 2021 at 05:52:33PM +0000, Zbigniew Jędrzejewski-Szmek wrote:

I like the idea! 
We can block such a package from ever appearing in a compose in pungi. 

Is this really necessary? The package will not be open to anyone,
but only for approved contributors. Malicious behaviour is not more
likely then in any other package (and would be immediately caught).
I think we're thinking up technical solutions to something that is
not a problem.

Yeah, I think making it a real package is a good idea. Maybe even a little
packaged script that runs

  xdg-open https://docs.fedoraproject.org/en-US/fedora-join/

?

The package itself can even be a gateway to onboarding for the curious, but
more importantly, it'd act more like a real package.

True. As long as there's a group of experenced folks watching it, that
should be ok. 

kevin

_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

-- 
Petr Menšík
Software Engineer
Red Hat, http://www.redhat.com/
email: pemensik@redhat.com
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB