----- "Kamil Paral" kparal@redhat.com wrote:
Generally there is one use case where rpmguard compares the new package with itself. It is when the updated package moves to official repositories before the rpmguard test is performed.
As I have mentioned, it is currently possible for a package to "fly under our radar" by simply moving to official repositories (stable, updates, updates-testing) too soon. It caused by our current strategy to compare the package against its most recent version in official repositories.
So how to tackle it?
Solution #1: Leave it be I suppose this events will not happen too often. If you deem it appropriate, we can just let it be. Currently it's mainly proof of concept. In the future if we have a policy that no package can move from -updates-candidate unless it has been checked by AutoQA test, then the problem is automatically solved.
Solution #2: Re-implement "search for latest" strategy I have been playing with koji command and it seems to be able to list all the history of builds with particular tag, not just the latest build. You can try it yourself: $ koji list-tag-history --package=PackageKit $ koji list-tagged dist-f12-updates PackageKit Therefore we can re-implement/add a new method to our library that would not just provide the latest build of a package, but all of them from the history. Then we would pick the one that suits us most. The API clearly offers this capabilities.
There is also one question that is directly connected to this topic. Which tags do we want to search through when looking for previous builds? a) Currently we search through stable, -updates and -updates-testing. b) Would it make sense to search also through -updates-candidate? The differences would always show to the very latest build, doesn't have to be released. c) Or the other way round, would it be better to search through only stable and -updates (skip -updates-testing)? When more builds are in testing repo, the differences would be displayed always against the latest build in stable repos (stable or -updates).
I would say solution #2 shouldn't be that hard, I would do it. And as for repositories searched, maybe c) would be better than a), but I don't know packagers' needs.