walters(a)redhat.com (Colin Walters) writes:
> CVS can not replace SRPM:
Note that I was talking about prerequisites for changing to a better
revision control system, not how our current system is flawed. But I'll
answer anyways:
> - SRPM can be signed, CVS not
Right; this is solved directly in pretty much all the distributed
RCSes.
How? Signing the data-transfer can not be compared with SRPM signing. The
on-disk data could be changed but the data-stream would be still valid.
> - SRPM give you reproducibility, CVS not
Not true if you can map NVR->CVS tag.
You do not know if somebody renamed the tag between two checkouts.
> - SRPM are buildable with system-tools (rpmbuild); for CVS you
need lots
> of prerequisites.
Not necessarily. We could just stick the necessary scripts in the
common/ dir or whatever. Or just include the necessary tools in an
updated rpmbuild.
You will still need online-access. SRPMS can be used offline.
Enrico