On Mon, Oct 04, 2021 at 03:15:24PM +0100, Richard W.M. Jones wrote:
On Mon, Oct 04, 2021 at 10:57:42AM +0200, Vít Ondruch wrote:
> Hi,
>
> Recently, there have been a lot of discussions on this list as well
> as we have internally about onboarding. During our internal
> brainstorming, we were initially discussing that it could be useful
> to have some package one can experiment with without being too much
> worried about the result.
>
> However, discussing this back and forth, we figured that it might
> also be good idea to actually have something such as "onboarding"
> package, where new coming package maintainer could gradually gain
> experience with the packaging workflows. So the simplest tasks could
> be:
>
> 1) Add changelog entry into onboarding package and open PR with the
> change. This would not require too many privileges. Alternatively
> this could include change to "CONTRIBUTORS" file. I suspect that
> also some current Fedora contributors might be interested to send
> such PR ;)
>
> 2) Second step could be something similar, but that would require
> the packager to be already sponsored and they could go through the
> whole process themeselves just with some light guidance if needed.
>
> This could be extended in the future. E.g. next step could be:
>
> 3) Submit module update.
>
> Apart from gaining experience, this could also help with the common
> question "where should I start". And of course our sponsoring
> guidelines could be refreshed suggesting/requesting to take these
> steps at some point.
>
> Thoughts?
It's a good idea, but it's probably also a good idea to block it from
installation at the dnf level. If it was open to everyone even
non-sponsored then someone could anonymously put something nasty in it,
like a %post script.
I don't think it'll be "open to anyone". In the described workflow,
non-approved packagers can only open PRs (like they already can against
any package).
Zbyszek