From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6740510031426355200 X-Received: by 2002:a1c:cf05:: with SMTP id f5mr6597966wmg.131.1569405112300; Wed, 25 Sep 2019 02:51:52 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com Received: by 2002:adf:eacc:: with SMTP id o12ls1945510wrn.5.gmail; Wed, 25 Sep 2019 02:51:52 -0700 (PDT) X-Google-Smtp-Source: APXvYqxeNIkQUkI1tkf2DSwqGmUZ2loe87Oml6L0d55clnnY83kK02T7xnEv3giGrd9XFk/ZEsOr X-Received: by 2002:a05:6000:160a:: with SMTP id u10mr8770386wrb.235.1569405112006; Wed, 25 Sep 2019 02:51:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1569405111; cv=none; d=google.com; s=arc-20160816; b=ebDVMyPjUG2YfmWGgTeSzp6y5fex2z+dlbg9Lu0Y/EzS3/DYwTErKyK7agKRal0y3q HaVrTHWiY2blxcUaQbXVQOLTwJTfvWBbwUoUSMcYohJKmr/2/ShAx2x5UekYQR1uHRy1 vlSQOLDgTcqHAUlFagwgEp0mL6nDuZSkn2Dq9sZK8y/5pbOjjm4S3s+M6McfvQ8ylG7/ VPD3xjKisqa4GHch0TG+D1hHujldYKUIgRExdLdVFME2q2IsFtcQZtsEhKNSqGaWJZ7B r87bFBFVCvnz4NIXMVh6PkKWTi30vKyrzrbJddUHAcN3Clb8D5NXUsNr7eg/2KCZTSb7 E97w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:to:from:date; bh=qzMRws6S2dtBudvv5VpcrwxCiZ9o3tFtvOFIAO5at6w=; b=xEE2w66y7CKLseYGnpsdhz4E7HUV1/solB+h+l3VoJgGF4gDyBYj6fidKzFh41OTXV 9Xx91Vw5QjyeTW9BV331BTyh1yHcWISRpHcL5PkHseDqaI9yTA5K5Qaedgr88/XNNwwe dYMsJOwcsl3Zxjbl7QVMAgvSvINRum0SXf0nXQjPy0D/5+118x4v+RzDXwpRsSJXeMg7 4NUSDSxhRQiTU6FqmBhVcKQcF2RHlY4pIyDAD5MfO58J1NsEB+ixFU88/eXkFYrH53uT QFsv/jACLxXGsLPtTDaS2j7EgQKs9TxFmgO79NgN9jKMeipzWEcveSxvCqiuYKZjLU0r hN3Q== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Return-Path: Received: from shymkent.ilbers.de (shymkent.ilbers.de. [85.214.156.166]) by gmr-mx.google.com with ESMTPS id y11si313033edq.1.2019.09.25.02.51.51 for (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Wed, 25 Sep 2019 02:51:51 -0700 (PDT) Received-SPF: neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) client-ip=85.214.156.166; Authentication-Results: gmr-mx.google.com; spf=neutral (google.com: 85.214.156.166 is neither permitted nor denied by best guess record for domain of ibr@radix50.net) smtp.mailfrom=ibr@radix50.net Received: from yssyq.m.ilbers.de (host-80-81-17-52.static.customer.m-online.net [80.81.17.52]) (authenticated bits=0) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8) with ESMTPSA id x8P9poFk015415 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 25 Sep 2019 11:51:51 +0200 Date: Wed, 25 Sep 2019 11:51:50 +0200 From: Baurzhan Ismagulov To: isar-users@googlegroups.com Subject: Re: Discussion: Base-apt features Message-ID: <20190925095150.zd3xffaatxq2yjga@yssyq.m.ilbers.de> Mail-Followup-To: isar-users@googlegroups.com References: <20190925074122.GA12490@lightning> <20190925081241.bmcblmlsax6xb4i4@yssyq.m.ilbers.de> <20190925090232.GB12490@lightning> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190925090232.GB12490@lightning> User-Agent: NeoMutt/20180716 X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: h2VKFhlrjvU1 On Wed, Sep 25, 2019 at 02:32:32PM +0530, Vijai Kumar K wrote: > > > 3. Support for specifying the signing key. ... > By using "SignWith: yes", we are asking reprepro to use the default key of the system. > BTW, there is a possibility that the key we specified using BASE_REPO_KEY might not be > the default key of the system. Ah, that's the signing part, thanks for the explanation. > > > 5. Refactoring code to consolidate reprepro calls. > > > > I'd suggest to evaluate other tools and libs like python-apt and / or aptly. > > After looking at Acquire::By-Hash use cases in more detail, I've seen that we > > do need it. According to Jan, it isn't supported by reprepro. I think in the > > long term, we'll have to use python-apt and touch bitbake to get everything > > right. > > Thanks for the info. I have been wondering regarding the need to move out of > reprepo. This gives some fair amount of detail. Let me also have a look at > the other tools. In the long term, there is more to that. Currently, we rely on bitbake pipeline when populating base-apt. To cover all use cases correctly (e.g., updating base-apt if upstream changes, removing packages not used anymore, etc.), we'd have to do more stuff statically upfront (including debootstrap). To achieve that, we might have to extract the functionality to a separate tool using python-apt, touch bitbake, or both. This functionality may also be necessary e.g. for determining Build-Depends: of debianized external sources (such as hello-isar) and reflecting that in the pipeline (currently not possible, since bitbake determines that before fetching and Debian -- after). With kind regards, Baurzhan.