On Fri, 1 Mar 2013 03:26:09 -0500 (EST)
Bohuslav Kabrda <bkabrda(a)redhat.com> wrote:
- A very nice functionality would be to only add other coprs to
repos. This way, we could make sure that anything user tries to install will have
dependencies met and also we will have them under control. Also, that would allow us to
generate RPMs with .repo files that would depend on other (e.g. copr X depends on copr Y,
generated RPM for X depends on RPM for Y, Yum can download that somehow). Thoughts?
This, I think, is the way to go. Depending on outside packages not build with copr is
inherently insecure, and while I do see a point in having these insecure package
dependencies, I don't think we should actively encourage it. Linking against other
copr-built repos provides a consistent level of security (be it high or low) and leaves
the user quite some manœuvering space compared to not having external repos at all.
And I still hope that this would actually not destroy any of
Tomas's work :)
That would be nice, thank you :) .
TR
--
Tomas Radej <tradej(a)redhat.com>