Dne 18. 12. 24 v 10:42 Clemens Lang napsal(a):
Hi Neal,On 18. Dec 2024, at 10:21, Neal Gompa <ngompa13@xxxxxxxxx> wrote: One thing I hope we never do is allow something to be principally owned by groups as a rule.See https://src.fedoraproject.org/rpms/stunnel, or https://src.fedoraproject.org/rpms/gnutls, owned by @crypto-team.As a general practice, "groups" are bad at being responsible for packages when the chips are down. It is difficult to figure out if a package is being administered. Having a singular point of contact in that scenario is beneficial, and I would prefer we maintain that going forward in any new system.Do you have the impression that stunnel or gnutls are not well maintained in Fedora? While I sympathize with your concerns, this really comes down to the particular group that maintains these packages. The Fedora crypto team (which is equivalent to the RHEL crypto team, essentially) does take good and active care of its components, even though they are maintained by a group. In fact, those packages being maintained by a group is actually an advantage for Fedora, because we will collectively monitor and, if necessary, act on tickets even when the primary maintainer is currently out of office. As a consequence, I am very much opposed to a rule that would require packages to be maintained by single individuals. Are there such cases as you describe? Absolutely! Should they be a reason to completely ban groups? No.
There are different groups.Group such as `ruby-packagers-sig` is basically dumping ground. Everybody thinks that if they give permission of their package to `ruby-packagers-sig`, then it will be automagically maintained, which can't be further from truth. Also making `ruby-packagers-sig` as a primary contact is problematic, because the group cannot e.g. retire such package without opening rel-eng ticket.
Vít
Attachment:
OpenPGP_signature.asc
Description: OpenPGP digital signature
-- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
