From owner-freebsd-questions@FreeBSD.ORG Mon Jan 14 14:36:24 2013 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 2D618A83 for ; Mon, 14 Jan 2013 14:36:24 +0000 (UTC) (envelope-from nino80@gmail.com) Received: from mail-ia0-f170.google.com (mail-ia0-f170.google.com [209.85.210.170]) by mx1.freebsd.org (Postfix) with ESMTP id 0379CBF6 for ; Mon, 14 Jan 2013 14:36:23 +0000 (UTC) Received: by mail-ia0-f170.google.com with SMTP id k20so3600758iak.29 for ; Mon, 14 Jan 2013 06:36:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; bh=miTSfxfxA1dWjdrnrrksWOXZCjuRv2G2IJzN785i21o=; b=VpbsN50MURl+BBtaPCxgX3Jrg5zK59TtwZ4uggXceVQZOCwrdlO++v0eMEwRdhWKBF jKXHkTAsDMhEtIvo9JNkUjKyjWWMPE7EJ6cFfz5aQraM3Sp+BMtLScoYxSwImC2pgDD+ 7cRS7AxyKYpy4UFagxloP0AFiqhhtY2lpOu/DKExULP2DoMtfzKeXwVz04zrcx5yUl0o hWXGoDTlZAJc3QB4MylwwCDnPb7L7kRZGINJqcVwpD3jFMhMaKt9Q9Vz2zweAWoDR8fm BJMXU7Ps5+3BBwo9zv+2URG0RoeybNTZ1WrRfSl9pCzFqcjWdEWdPD5Ydkzi4zuzz1kw KGuA== Received: by 10.42.98.80 with SMTP id r16mr51367282icn.45.1358174183583; Mon, 14 Jan 2013 06:36:23 -0800 (PST) MIME-Version: 1.0 Received: by 10.43.19.71 with HTTP; Mon, 14 Jan 2013 06:36:02 -0800 (PST) In-Reply-To: <50F4130A.5050105@freebsd.org> References: <50F403C6.1030705@gmail.com> <50F4130A.5050105@freebsd.org> From: n j Date: Mon, 14 Jan 2013 15:36:02 +0100 Message-ID: Subject: Re: pkgng package repository tracking security updates To: User Questions Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Jan 2013 14:36:24 -0000 On Mon, Jan 14, 2013 at 3:15 PM, Matthew Seaman wrote: > On 14/01/2013 13:10, Andrei Brezan wrote: > > I thing that it's good to wait for ports to compile and to be able to > > chose your configure options for the packages you install. It's good to > > know what options you need and what options you don't and why, that's > > one of the reasons why i'm using FreeBSD. I feel that the goal for pkgng > > is that you can install your locally built binary packages in a > > tinderbox on all your infrastructure so you don't have to compile every > > port on every server. IIRC it was considered too cumbersome to compile > > all the ports tree for all the architectures supported and provide the > > so called official binary repositories. > > No, that's not *the* goal for pkgng. > > The goal is to provide a state-of-the-art binary package management > system for FreeBSD (and anyone else who would like to use it). > > For many users this will entail downloading pre-compiled packages from > FreeBSD official repositories. But it will be possible for third > parties to set up their own repositories, in the same way that eg. the > Postgresql project has their own Yum repositories for RH-alikes. It > will also be possible for people to compile their own packages either > for direct installation, or to create their own private repositories to > serve their own networks with their custom configured packages. > > And, ideally, people will be able to use a *mix* of the above as best > suits their needs. > > Cheers, > > Matthew > Hi Matthew, The point of my question was exactly if it was possible to elaborate on the "pre-compiled packages from FreeBSD official repositories" part. Would it be possible to have a (security-wise) up-to-date pre-compiled packages in the official repositories? Note, I don't expect an unreasonable effort here - I understand there will always be delays between upstream fix --> ports fix --> up-to-date package and it is acceptable for the binary package to lag a few days behind the port (depending on the availability of package building cluster or maintainer upload). Regards, -- Nino