Some questions around coprs

[Kevin Fenzi]

So, at todays fesco meeting there was some discussion about coprs. 
http://meetbot.fedoraproject.org/meetbot/fedora-meeting/2013-12-04/fesco.2013-12-04-17.59.log.html#l-52

In particular some folks want to be able to ship copr repo files in the
main Fedora repository. This would allow users to easily install
software from there without having to discover how to enable it. 

However, copr packages are not signed or mirrored currently.

So, this brings up thoughts around if we can somehow sign them, and how
we could mirror them, or even if we want to go down this road at all.
(as it seems like not a use case copr's was designed for anyhow). 

So: 

1. Do we even want to persue this? 

2. If so, do we have any ideas how signing copr packages could work?

3. Mirroring doesn't seem like it would be that hard, just rsync off
the repos and push them out in our regular mirroring system. Could be a
fair bit of churn tho, and there's no set schedule, so we would have to
decide on frequency, etc. 

4. If coprs moves to being inside koji, could we at that point have a
better time with these needs? 

5. Perhaps we could propose some kind if pergatory type setup between
coprs (experemental, just builds, may set your house on fire, may
update incompatibly every day) and fedora repository packages (with all
the updates guidelines, reviews, etc).

Thoughts? comments? 

Possibly related to this: I wonder if copr could grow a 'meta repo'
that has all the repodata of all existing coprs. Then you could just
enable one thing and be able to install any coprs? 

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20131204/ffe9595a/attachment.sig>