• [gentoo-dev] [RFC] Adding a "new-packages-only" (better name appreciate

    From =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?=@21:1/5 to All on Sun Jul 13 18:10:01 2025
    Hi,

    GURU -- much like Sunrise of the old days -- has a policy of including
    only packages that aren't in ::gentoo. I'm wondering if we should put
    that into a formal key in metadata/layout.conf that could also be used
    in other repositories. Something like:

    # This repository only permits packages that aren't in any of its
    # masters.
    new-packages-only = true

    We'd use that in pkgcheck to report "duplicate" packages, and perhaps it
    could also cause package managers to always prioritize packages from
    masters, independently of version.

    WDYT?

    --
    Best regards,
    Michał Górny

    -----BEGIN PGP SIGNATURE-----

    iQFGBAABCgAwFiEEx2qEUJQJjSjMiybFY5ra4jKeJA4FAmhz2R0SHG1nb3JueUBn ZW50b28ub3JnAAoJEGOa2uIyniQOEEMH/i66RhHMTPPqxChtYAlO7AeqXEm+Guqu /ThcOZF4MOwdOm+J3if3h3jrEdoHoIiR/7k7CPOrfjbVAnicC206JxlZMbPLCUds 9GrYMP4Z3pktT6B8B2w9qwIRvPmLkWSp9iH01CZBUwCm8ZKhhc4xZB3PXVmvpHeh aVr+zjHDr/7tCcL3GZJRwvLeZ/cswWX/sed41yNKD9Z2Hx6n1yfi8U0r1cgLiIf0 H94WTod/7stUBTV0cDx8F0Z/g8NdCq0kFRt7e6G6VkUtCiJSuS2a8rCF/5vtDqmv ISq5hoC/3Q/hOz3tzp+AeCHQcSuy3yjBAROSgLzattfBijpJVJSzjxc=
    =ABPC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Robin H. Johnson@21:1/5 to All on Mon Jul 14 00:50:01 2025
    On Sun, Jul 13, 2025 at 06:04:45PM +0200, Michał Górny wrote:
    Hi,

    GURU -- much like Sunrise of the old days -- has a policy of including
    only packages that aren't in ::gentoo. I'm wondering if we should put
    that into a formal key in metadata/layout.conf that could also be used
    in other repositories. Something like:

    # This repository only permits packages that aren't in any of its
    # masters.
    new-packages-only = true

    We'd use that in pkgcheck to report "duplicate" packages, and perhaps it could also cause package managers to always prioritize packages from
    masters, independently of version.

    WDYT?
    I like the idea; but the principal of least surprise worries me.
    +1 on warnings based on it.
    -1 on prioritizing from parent repos.

    Example 1:
    Time=0:
    overlay ::A is bleeding edge, and has pkg/cat-0.0.1, possibly right as
    upstream releases it. At this point, it passes pkgcheck CI.
    User does emerge pkg/cat, gets the overlay version.

    Time=+1d
    pkg/cat is added to ::gentoo, with slightly different USE flags or
    config options [possibly to a skipped optional dependency that is not
    yet in ::gentoo]. At this point, the CI on ::A starts to fail. The same
    user is doing a rebuild, and rebuilds pkg/cat; they get pkg/cat from
    ::gentoo, which now has different behavior.

    Example 2:
    Similar to above, but with pkg/cat-9999. Should the package manager
    downgrade the user?


    --
    Best regards,
    Michał Górny



    --
    Robin Hugh Johnson (then/he)
    Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
    E-Mail : robbat2@gentoo.org
    GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
    GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEveu2pS8Vb98xaNkRGTlfI8WIJsQFAmh0NqwACgkQGTlfI8WI JsTtGw/9HXf0hWSLx+ZEBoz7HoN5NSAZYldiwK8TUvE1z+xLRyD7GbTUE1BncznK hZlXyDJvFX3y0635rjmvfllQtoJCoMmgxJCWIx9t8s5TZksjyCry1EQzoCcDpTFc 6oWVp8fZ4UKBrLs9o9q2JyKzRQ15zcPQksgVMpz3nliwEcxjpKgrcF0MJ3l94vfd DfKijAp/Rs2WnZkmbi0TT7RFEksi1DTrwY8QWsBBmYTUYgcIYdfy6L9rKQyxiTum xq+CH1K6ZVcjw+iGUYQv9q+2sxxU/UmLB8JhLJ1EUQx8ao8k4GDHZ7FHTMfiNYPK wGry7SFPzXNr7FgiEqSjoStEIVr7jCa97zE7i5VGXrdXItew/8Z1zSQZBRFT2j25 AsOsOSiWOKCZRBBaZ6tXd33uCZuiPjD0oTlJ/pLjlAqbyFcdk5+WK9p2Kr7iy95q LJCx35b5nH6GuaZJyecrQAKVO8WOuAn0nM4DgfovdmfADR1+e56TVdCi8r6QDJOx jcTo2r4/sqEZVQCybS3vgTellUbBV5kcIe6PI/DWS4vg6I5NKhbLzst9kUbKVoYY S2q1QQGxrz9vCaTAOQNHOY+dSXL27N5pG+Qd3rXxdpU2PnKb/gS476LaNsA+qhyF 2RaTXnEM3FJat8MU7ZVqD1ovxlqHBi