[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to cope with patches sanely

On Thu, Feb 07, 2008 at 11:42:16AM +0000, Ben Finney wrote:
> Pierre Habouzit <madcoder@debian.org> writes:
> > On Thu, Feb 07, 2008 at 05:12:00AM +0000, Manoj Srivastava wrote:
> > >         Why should I bring my feature branches into a patch system, when
> > >  there is no need to?  As far as the end user or NMUer is ocnerned, they
> > >  do apt-get source foo, and they get the sources they may hack
> > >  on. Adding to the chaos by converting my nice, clean source format to
> > >  the blecherousness of a patch system does seem like regression to me..
> > 
> >   That's not really about "bring your feature branches" into a patch
> > system, but rather export them into something that looks like one so
> > that the security team or the NMUer can have a good outlook of the
> > modifications you apply to upstream.
> In the scenario Manoj presents above, the modifications applied to
> upstream are easily available all in one place: the foo.diff.gz.

  Yeah, in the very same way ubuntu gives patches to debian[0], in a big
fat unreadable blurb without comments or explanations.

> > It sounds like a fair thing to me. You can't decently ask the
> > security team to know every single $SCM out ther, and guess how
> > $random_developer use it (especially, sorry but it's true, when it's
> > a SCM as complicated as tla is).
> In the scenario Manoj presents above, no-one in the security team
> needs to know how to do anything but get the source package, since

  Neiter in mine.

> Whereas with a patch bundle system, the security team needs to know
> *every* patch bundle system in use and how to use it, just to have a
> chance of operating on arbitrary Debian source packages.

  You didn't read carefully it seems, I'm advocating using _THE_ (not a,
the sole only one format) quilt format to split the .diff.gz in
something readable and understandable by a mere mortal. For all I care,
I think wig & pen was supposed to support multiple .diff.gz, well, maybe
it should just support the .diff.gz being a .quilt.tar.gz. _that_'s
*all* I say.

  [0] a troll ? where ? :P

·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org

Attachment: pgpktx6lsvtuI.pgp
Description: PGP signature

Reply to: