Usage of Copr.repos

seth vidal skvidal at fedoraproject.org
Wed Mar 6 05:26:51 UTC 2013


On Fri, 1 Mar 2013 02:37:45 -0500 (EST)
Bohuslav Kabrda <bkabrda at redhat.com> wrote:

> 
> Well, it is not exactly as you say. The Copr.repos list currently
> contains URLs of repos added to yum's baseurls (so basically the
> format that mockremote uses). Is this correct, Seth? I'm quite sure
> that you should not touch it in terms of changing it, but there is a
> question whether or not to add it to the generated repofile. On first
> look, it might seem to be a good idea, but on the other hand, that
> might be a security risk, since anyone can add anything into repos
> and we have no control over it. So let's start by not using
> Copr.repos at all for generating the .repo files.
> 


You are correct. A repo provided buildrequires should not necessarily
be thrust on a user who just wants to install the pkgs in the copr.

-sv


More information about the copr-devel mailing list