• [gentoo-dev] Upstream remote-id types in package metadata

    From Ulrich Mueller@21:1/5 to All on Sun May 22 09:10:01 2022
    According to the XML schema [1], the following remote-id types are
    currently allowed:

    bitbucket
    cpan
    cpan-module
    cpe
    cran
    ctan
    freecode
    freshmeat
    github
    gitlab
    gitorious
    google-code
    heptapod
    launchpad
    pear
    pecl
    pypi
    rubyforge
    rubygems
    sourceforge
    sourceforge-jp
    vim

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect
    that?

    Also, the "gentoo" remote-id was added the the DTD [2] but is missing
    from the XML schema. Presumably it should be added there, too?

    Comments please.

    Ulrich

    [1] https://gitweb.gentoo.org/data/xml-schema.git/tree/metadata.xsd?id=e8495470d00cd9912f3d216eb576b72a0f1fc77f#n273
    [2] https://gitweb.gentoo.org/data/dtd.git/commit/?id=f265dac730ca5299280186f1d2ec90c84aa2a848

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKJ4aMPHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4ubwIIAMdlICQaj62iyqR9PT4SKB6NAaILqdOOlmJz CyY2hnWAV5rHRVf50rurE3XScZBNXiFwzlM70bCpihYt1U1wE2lNTHClfZMvpVXX 3ioeHJSb6EUL+gWBNh7tL7xesV/HQjB0VZGAdxBt7O+IuG9jLhYOG3uL+mdbkJMk LPBBMZmePkZaW3U9X+GMjSMnmXDAWP7LTAC2KZcdrhFnR2ohXlvQF1+rRisKBGFo 9y/UXqGZVikORxt3JLmd/Qq10tfPfVrTp1ke+gDxDrGymaOZAFVb0BkVttHC7Cyc +am7AxEQ8AyRmdNCkfvqmK6p9oPWHvFloqLGHeFFX05Br+tzkB0=mZ+v
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hans de Graaff@21:1/5 to Ulrich Mueller on Sun May 22 09:40:01 2022
    On Sun, 2022-05-22 at 09:09 +0200, Ulrich Mueller wrote:

       rubyforge

    Some of them seem to be obsolete. Presumably freshmeat, gitorious,
    and
    google-code should be removed? Any other removal candidates?

    rubyforge has been shut down since 2015 so it can be removed as well.


    Hans

    -----BEGIN PGP SIGNATURE-----

    iQEyBAABCAAdFiEEIggVRmJzp0YePtgn2zR/k4ZU+jQFAmKJ6CMACgkQ2zR/k4ZU +jRGFgf43wIOH+OyxU1UsRwTzuvemnaBAxxLPQyhjRy+1Mcflsz+VvdaqtzHapDg HAiwhWn2yQfa/MZrCtXUYOtq0G5loRuR4rYFvci5KE3f9E5PPSCfIXUjJrp3nepP aTull18lSOCvwqoHIdWZGvusBf2oGpKHNghYV5/3BGVEzSaVzfYkzZRYJDpLq/KM Y9a0dfjLnceelBqeAKiCiOsEsykSxQExhVPzruLF999Ac/1I6G0zDXDlIqx2GRRU BS8TpFBvY1Tl0LInfKdcI8VQXWKLsuWF+uS/Rm04EwwbYjIDtV24vK44hyCb39MZ miTvCbIZN8PRWs9rT1CZKIypgWwL
    =ksmT
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?=@21:1/5 to Ulrich Mueller on Sun May 22 09:20:02 2022
    On Sun, 2022-05-22 at 09:09 +0200, Ulrich Mueller wrote:
    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    LGTM.

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect
    that?

    Also, the "gentoo" remote-id was added the the DTD [2] but is missing
    from the XML schema. Presumably it should be added there, too?

    Comments please.

    I think we should start documenting these values somewhere. Perhaps
    in the GLEP, or maybe on some wiki page — particularly linking
    the provider in question and documenting the value syntax.

    --
    Best regards,
    Michał Górny

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Sun May 22 11:10:02 2022
    On Sun, 22 May 2022, Michał Górny wrote:

    I think we should start documenting these values somewhere. Perhaps
    in the GLEP, or maybe on some wiki page — particularly linking
    the provider in question

    Wiki page sounds good. Presumably, we don't want to update the GLEP for
    every change of the list.

    and documenting the value syntax.

    Let's start with gentoo. :)

    We have one (currently commented out) precedent in sys-kernel/genkernel
    which has:
    <remote-id type="gentoo">git://git.gentoo.org/proj/genkernel</remote-id>

    This is a little verbose. I propose using github or gitlab as a
    blueprint, so above would simply be "proj/genkernel".

    Ulrich

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKJ/BoPHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4uD7sIAKVtrUWACZfJ7/w7g2JtQ5/Et5JCNqaCYWu4 HmS5NTiCzlvVnbDiFh+qrO4TexCyePzXO4IRqxBpNSoYsjAiWR836W/NjPpBZvnv 1FzkqE0457nOEfNE2e+4QQs3Pa81w0x7InlEWMtLw0cftQaVOG5r+e39VHn9hTqd 4BMGCzF33DFMpk7QyfZKgz77totedy+tWwKIudHw5/pD2enSWFa4snUXz3Xf3p6o 8WRL+a01WFu9eeD61XaFiUbRFB6Q5Anll0pUSrZvLIsCrFIjkMQy7Wmwmfzld8BD PTaip24lyedlwePT+z/DADv6r7/dp/WBlRxtR3Tm7ejSygBbKRU=t6i0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Sun May 22 14:10:02 2022
    On Sun, 22 May 2022, Ulrich Mueller wrote:

    According to the XML schema [1], the following remote-id types are
    currently allowed:

    bitbucket
    cpan
    cpan-module
    cpe
    cran
    ctan
    freecode
    freshmeat
    github
    gitlab
    gitorious
    google-code
    heptapod
    launchpad
    pear
    pecl
    pypi
    rubyforge
    rubygems
    sourceforge
    sourceforge-jp
    vim

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    I've created https://github.com/gentoo/gentoo/pull/25599 for the update
    of the tree. For now, this removes freecode, freshmeat, and google.

    Remote-ids gitorious and rubyforge are not (no longer?) used in the
    Gentoo repository.

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect
    that?

    I'll push a commit for that later, but we'll have to update the XML
    schema first (otherwise CI would fail).

    Ulrich

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKKJeUPHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4u9LIIAMFcdcYjGGjBJ828sZZiwXD4ZTh738F3fuVz u62r+lSZP3W0Y9uWjPEMmy3TvPpZxKwamXGcEY459DJzVId0kdOMbJ/gteuN69EY nsnl5o8P5VI49TgFoFZQm5x8FEJx96GzumjMIHrbUQOKbjRmZDOPmcTC9STLG/VA bgDPO476BHE89P81S/PuLOy8hkDu6D5bHvLeP1gWx88EVdF4TjzkKo1vppYUm1/3 sIUQd+FJleNSF9cR/H6xd7LgQj5rrncF1ksNfWWlK7bm7/wi+tRre7QDiBicc8qq POE2NDuQw02I4i7K+WWiIGkBBR5SNzgO58KCck50kEM6IyhbqIo=
    =CqLF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Hanno =?UTF-8?B?QsO2Y2s=?=@21:1/5 to Ulrich Mueller on Sun May 22 15:30:01 2022
    Hi,

    On Sun, 22 May 2022 09:09:23 +0200
    Ulrich Mueller <ulm@gentoo.org> wrote:

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    I'm not sure about Google code.

    While it's no longer an active site, it is still online in an archived
    state. We maintain plenty of packages that have no active upstream, and
    having a reference to an unmaintained previous upstream which still
    allows downloading the code and the repo archive seems like a good
    thing.

    --
    Hanno Böck
    https://hboeck.de/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCAAdFiEEn3wfQCCb9MicJwD8dkhfABMwL8oFAmKKOpUACgkQdkhfABMw L8o2nw/+P5AzX6EkAnqi8O8s6zVYgzRX/zsBlHfQe0nq/P5VuWzDUu1jgqS1YQl5 m2SzkBjTKEU8iRKPj4ePVUhZRH0FnUi3tXqU918G9xOyWx/FKfYn8T9/UJyPpU1T RZy560L9F9YgawE0qXWn25zLqffyqq0uma8oJgcDjuJmtRasihRwAve8cRHVyV0u kidW+I7aYwaIsEgjfYRBNfPqgwFjrRIijqrUDklwhRVIJ4vNFKr3AieU06iG9Et0 XMOHHHfHmBwSb4K6NeN7j1dHtCt4wworIeyLhjFF3GyIMmENbBQVsGalncdu2/Bt JHbsBGv+GPm9aUXE2REAOcFWYei/ty0vYzfoUpKwdxIdMQK5H6WQQY8u98vJNYmP lsanvybK8TwJl491/GJublHY6vgDwSp/UsJqA1MjIlCo5pnYwY3uk4ndu15F7m6k 3V1xumU/xrxcfdICnS7CHszWSCM7ZMK175KoGHixedQ6z1Z01QwpnYKSLpU0IYen W3g4hbMQXzxLc2vGm1lsdb5n7ZyxipteUgc4SpV42CbZvV/7ZuF5oFeKGeuEIfU1 HWH1eBKTP+LvNf+ZGg94SXpnjfA0ZZJ7b0KjMKf7yDeRMhwP4d3FVhUY7Wy2uaBy jU+mtXqQAr9nbUjrmdyYp0x2hmDaaoTvCk0zOMCUpCsT2hVwDVs=
    =DHct
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alessandro Barbieri@21:1/5 to All on Sun May 22 17:50:01 2022
    Il Dom 22 Mag 2022, 09:09 Ulrich Mueller <ulm@gentoo.org> ha scritto:

    According to the XML schema [1], the following remote-id types are
    currently allowed:

    bitbucket
    cpan
    cpan-module
    cpe
    cran
    ctan
    freecode
    freshmeat
    github
    gitlab
    gitorious
    google-code
    heptapod
    launchpad
    pear
    pecl
    pypi
    rubyforge
    rubygems
    sourceforge
    sourceforge-jp
    vim

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect
    that?

    Also, the "gentoo" remote-id was added the the DTD [2] but is missing
    from the XML schema. Presumably it should be added there, too?

    Comments please.


    How to propose new values?



    <div dir="auto"><div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Il Dom 22 Mag 2022, 09:09 Ulrich Mueller &lt;<a href="mailto:ulm@gentoo.org">ulm@gentoo.org</a>&gt; ha scritto:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .
    8ex;border-left:1px #ccc solid;padding-left:1ex">According to the XML schema [1], the following remote-id types are<br>
    currently allowed:<br>

       bitbucket<br>
       cpan<br>
       cpan-module<br>
       cpe<br>
       cran<br>
       ctan<br>
       freecode<br>
       freshmeat<br>
       github<br>
       gitlab<br>
       gitorious<br>
       google-code<br>
       heptapod<br>
       launchpad<br>
       pear<br>
       pecl<br>
       pypi<br>
       rubyforge<br>
       rubygems<br>
       sourceforge<br>
       sourceforge-jp<br>
       vim<br>

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and<br> google-code should be removed? Any other removal candidates?<br>

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect<br> that?<br>

    Also, the &quot;gentoo&quot; remote-id was added the the DTD [2] but is missing<br>
    from the XML schema. Presumably it should be added there, too?<br>

    Comments please.<br></blockquote></div></div><div dir="auto"><br></div><div dir="auto">How to propose new values?</div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-
    left:1ex">
    </blockquote></div></div></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Sun May 22 18:40:01 2022
    On Sun, 22 May 2022, Alessandro Barbieri wrote:

    How to propose new values?

    I'd say, file a bug with some rationale and the proposed syntax.

    Ulrich

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKKZW0PHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4uCq8IALL4rihuYuJtnyVWMny7qiPm9MqlutTYMx7J qjFLCtM2SYl0OG21ATWOOyS8rCWlc17Pam+MRIfbTp49jrrdLoCOloK1avRmyxtD 4T4wuhOPbMh+isIDo1x/UOYdK191NlFLZYy4GW3Igt2AV8zLhUPwFVL19DMwEDby ptjEpsp/MRKRyfvLUByeZsgouy1mjgcWTXS6L83k2BN3m0temfvrouN6NEi+9iOn Ue0e47EqSPdo1v5gqIHb5OaT2CMH/bgdMvf2ow4meP7O2IkxlUKIjtgGdGKrYqBR EphX5SLr0Sw7Wx9eVsU0Uew5F3XOfJvF9Y3+STx+fIcqsUJZx58=
    =jnQ/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Sun May 22 19:10:01 2022
    On Sun, 22 May 2022, Hanno Böck wrote:

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and
    google-code should be removed? Any other removal candidates?

    I'm not sure about Google code.

    While it's no longer an active site, it is still online in an archived
    state. We maintain plenty of packages that have no active upstream,
    and having a reference to an unmaintained previous upstream which
    still allows downloading the code and the repo archive seems like a
    good thing.

    The same is true for gitorious, but we have dropped those remote-ids
    from the tree nevertheless: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f8fd6bd07efee4d36a1babf55d6e69c7cb4a93d4

    However, I think that your point is valid. So the basic question is
    whether we should keep dead upstreams in that list, for archival
    purposes? If the answer is yes, then consequently we should also keep
    gitorious (and maybe revert above commit?).

    Ulrich

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKKbWEPHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4u31oH/An0EDHF9SI/q6Gb9UeaBMP0Y+S6YTqLOcMn JS7Gqm9DRf4eE094vIzJm1MQ+l+ypdJ7D5zeOQ8jtuOn6JPtq753v7l5uU3ulhSL naCZjKXvRX9uG86h+zw/tU2t9u9Pzo3MlohJYXZ8WobvKMCgEOlY+DNvJa0cTXk1 lNW+DzRse9rXJ3Y1B/9RAXDiWclaa/xJrdYfHsNtoaSP/vIbldoo7wJNk2+AKZFx gcx+xT9lG8MnYUoboGGmzhwfqjEdhF9H0eCMKZru5OTMqJhdvw1Aoo8CGya6vm/B CJ8X/AKrcobHLiFrabKGpa1plxbJRLvVsw3HfEY+n7dLS2zyRE8=+dSS
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Mon May 23 11:40:02 2022
    On Sun, 22 May 2022, Ulrich Mueller wrote:

    Some of them seem to be obsolete. Presumably freshmeat, gitorious, and google-code should be removed? Any other removal candidates?

    Looks like SourceForge-JP was renamed to OSDN, should the file reflect
    that?

    Also, the "gentoo" remote-id was added the the DTD [2] but is missing
    from the XML schema. Presumably it should be added there, too?

    Thanks for all your comments. Taking them into account, the plan is:

    1. Remove all freecode and freshmeat remote-ids from the Gentoo repo:
    https://github.com/gentoo/gentoo/pull/25599

    2. Remove freecode, freshmeat, and rubyforge from the XML schema.
    We'll keep gitorious and google-code for now, because archived
    versions of them exist.

    3. Add gentoo and osdn to the XML schema.

    4. Update pkgcore (it bundles a local copy of metadata.xsd) and wait
    for a new release.

    5. Rename all sourceforge-jp remote-ids to osdn in the Gentoo repo:
    https://github.com/ulm/gentoo/tree/remote-id-osdn
    (no PR yet because CI/pkgcheck would complain)

    6. Remove sourceforce-jp from the XML schema. Sync pkgcore again.

    7. Create a wiki page documenting remote-id types and their syntax.

    Ulrich

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKLU/4PHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4udUkH/09vua4KY64MgxL9/CikMugdXT7LN1geg7CS K1go0ua5O7dtiHjiwWVhAPJQSetHQNL7PTt4403oJ+rORPm7aCA64EHnN+A4WXdk VkMcdDCsIjacwP9KKPl8gw2NUvRdUIfXl+VITbRfozfzFQIr8G1Cvs+aYvZLEmNF nzu9CMfbdd/MydyXnEEMGxa44BR1f/lNT/oRlbjKXnqHeOHkwoKWWCKzrkVRRNiv UUlz4Z6MxDBoqzdRBWQEtbDrWWbe7KxrOoYRXGSyaobEahvqQ8f5RLMB1tGD+ZNU tLD6nrcV3oEnnZVxJ399hpFH2T0bjSzQLacEAdgINDvcnoojrjQ=0SOE
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ulrich Mueller@21:1/5 to All on Wed May 25 11:30:01 2022
    On Sun, 22 May 2022, Ulrich Mueller wrote:

    On Sun, 22 May 2022, Hanno Böck wrote:
    I'm not sure about Google code.

    While it's no longer an active site, it is still online in an
    archived state. We maintain plenty of packages that have no active
    upstream, and having a reference to an unmaintained previous upstream
    which still allows downloading the code and the repo archive seems
    like a good thing.

    The same is true for gitorious, but we have dropped those remote-ids
    from the tree nevertheless: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f8fd6bd07efee4d36a1babf55d6e69c7cb4a93d4

    However, I think that your point is valid. So the basic question is
    whether we should keep dead upstreams in that list, for archival
    purposes? If the answer is yes, then consequently we should also keep gitorious (and maybe revert above commit?).

    For gitorious, I went through all packages where that remote-id was
    dropped in the above mentioned commit. These packages were either
    last-rited, or moved to different hosting. So restoring gitorious in
    package metadata makes no sense for either of them.

    Also, https://gitorious.org/ has a security certificate that expired in
    early 2019.

    Unless I see any objections here, I'll drop gitorious from the XML
    schema and the DTD tomorrow.

    Ulrich

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQFDBAEBCAAtFiEEtDnZ1O9xIP68rzDbUYgzUIhBXi4FAmKN9a8PHHVsbUBnZW50 b28ub3JnAAoJEFGIM1CIQV4uTYIIAKWU8o1q0BEDFdWZX6bcUlmjTNLUK1kEb15y pDT0jegPbIvyBT1BNQAx4NvZDKRRRb8muCfi4apO0g96W2VzBHOG3vaXyYFzLvi9 ewK6sbLj91SzB7D2FIkFBDvF9SR2dhXjUU50gL47Wxpy8O6vmEV8rafMWe9VojW8 q7bi2HJTc8maF2NcXKL3r6MZ6qw/SI6gGY3ogJEbsowjZIzpZGNpv7b/NStgiYWJ 1JTEfl6D0gkKYT4iuekZN+S/xhASOEzohd1pcohnPDPv4GKqPtyyf57ctexDY5Ew SQGMmFm6ecXQVAInrg1PO7vQGkiWv5JjERMCZnYDPNrVtJT/y8E=WdRo
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)