On Mon, Jan 28, 2019 at 12:27:06PM -0500, Ben Cotton wrote:
https://fedoraproject.org/wiki/Changes/SWID_Tag_Enablement
== Summary ==
Provide tools to allow users and developers to create Software
Identity (SWID) tags for Fedora installs and repositories.
== Owner ==
* Name: [[User:adelton|Jan Pazdziora]]
* Email: jpazdziora(a)redhat.com
== Detailed Description ==
SWID (ISO/IEC 19770:2-2015) is a portable standard for identifying
software installed on a system. We already have SWID tags in
fedora-release to identify the overall release+edition of Fedora. We
will add tools to allow users to
* list installed tags
* create and install individual tags identifying RPMs
* add pre-built tags to repositories
* automatically update local tags as packages are installed, updated and removed
This will involve standalone tools to query and build SWID tags and to
add prebuilt tags to dnf repositories, and plugins for dnf/libdnf to
build and download tags.
== Benefit to Fedora ==
Fedora will be usable to users and developers interested in the SWID
functionality being added to relevant other tools, such as
OpenSCAP-1.3.
== Scope ==
* Proposal owners:
** Add python SWID tools (swidq, rpm2swidtag)
Does "add" mean "package" here? Or are they to be added to some other
package? Are the review requests / pull requests to be reviewed
somewhere?
** add SWID metadata awareness to createrepo (but this will not be
Do you mean createrepo_c? createrepo is going away.
used in Fedora, only enabled for user use), agreeing metadata format
with dnf team
F30 beta is in exactly 2 weeks. I doubt "agreeing" and implementation
can happen in this timeframe. It should be OK to put in parts of the
implementation, even if things are not complete for this release.
But for "advertising purposes", maybe it's better to bump it to F31,
so that we don't advertise something that is not fully implemented?
** add dnf and libdnf plugins (no core dnf/libdnf changes expected)
A bit more detail here would be useful.
Zbyszek