• DevSummit
• 201308
• pkgng

Topics

Integration with language packages

• languages like Haskell, OCaml, Perl, Python, R, Tex have their own package repositories
• approaches:
  • patch to register as FreeBSD pkg
    • e.g. scrape each CTAN directory
  • pkg plugin to resolve new kinds of dependences (which can query language package system)
    • e.g. when requesting a tex package, go to CTAN
    • it would be difficult to depend on e.g. texlive-2013
      • could integrate using Provides: ?
    • this would require a solver that can integrate with external repositories
      • pkg 1.2 will have a pluggable solver that might support this
      • pkg uses CUDF (sp?); could feed everything using this?
      • lots of work: different systems provide different information, name packages differently...

        • rwatson covers eyes when word "ontology" is mentioned

• principle: the ports tree is one way of creating packages

  • base is another possible source
• Adrian: in the new world, how do I patch upstream's packages?
  • bapt: create a port
• funky new pkgng goodness
  • can build packages from CMake, hopefully autotools soon
  • pkgng can scan packages you build, look for e.g. library dependencies and the packages they come from
• could end up with multiple repositories (ports, Perl, Python...)
  • do we build repositories or just register installed language packages?
  • brooks: could replace the language packaging systems' implementations
  • gabor: it's not a good idea to follow upstream blindly
    • some complexity is unavoidable when maintaining a package repository
• brooks: is anybody planning on actually implementing one of these?

Package signing

see summary from Security paging

TODO list for 10.0

1. bsdconfig

   • UI for package install (bteske — in progress)

2. make pkg.freebsd.org "official" (from pkg-test)
   • Simon wanted package signing

   • DES wants package signing — bapt, pjd

   • once package signing exists, depends on core

3. CDN

   • in progress — clusteradm

   • pkg distribution script works-ish — needs cleanup (stalled on simon)

   • consistency/availability/freshness/correctness checking service (needs doing, unowned, who?)

4. policy
   • how long should packages live?
   • what lifetime guarantees do we make to users?

   • owned by portmgr

5. finish signature/revocation scheme

   • owned by bapt/jon'

   • in progress
6. package validator tools

   • owned by portmgr

   • status: thinking

   • Works when should just work

   • Confirm when user intervention is required
7. SAT solver for pkgng

   • owned by vsevolod

   • status: in progress
   • TODO: set him talking with Warren
8. Documentation gap

   • owner: gavin (shepherding)

   • status: in progress
   • specs/ABI
   • pkg.freebsd.org landing site redirects to docs why there is nothing there
   • migration advice
9. PR
   • talk to Deb and Dru at Foundation

   • owner: gavin (shepherding)

10. NYI build infrastructure growth
    • for non-x86 archs, especially mips64

    • owner: gnn

    • status: need to ask
11. Commit misc image activator to 10

    • owner: sson/brooks

    • status: in progress
12. Qemu crossbuild parts/packages

    • owner: sson/brooks/nox

    • status: uncertain