Received: from mx1.tetrasec.net (mx1.tetrasec.net [74.117.189.118]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 18276782CD9 for <~alpine/devel@lists.alpinelinux.org>; Fri, 24 Jan 2020 09:11:09 +0000 (UTC) Received: from mx1.tetrasec.net (mail.local [127.0.0.1]) by mx1.tetrasec.net (Postfix) with ESMTP id 512E52DE43C2; Fri, 24 Jan 2020 09:11:07 +0000 (UTC) Received: from ncopa-desktop.copa.dup.pw (67.63.200.37.customer.cdi.no [37.200.63.67]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: alpine@tanael.org) by mx1.tetrasec.net (Postfix) with ESMTPSA id 2E1D62DE42C4; Fri, 24 Jan 2020 09:11:05 +0000 (UTC) Date: Fri, 24 Jan 2020 10:10:59 +0100 From: Natanael Copa To: "Laurent Bercot" Cc: ~alpine/devel@lists.alpinelinux.org Subject: Re: Lets talk about apk-tools 3, and apk-tools in 2020 in general Message-ID: <20200124101059.33d2822f@ncopa-desktop.copa.dup.pw> In-Reply-To: References: <1c4796e0cda2248c2de159d4d467421c@dereferenced.org> X-Mailer: Claws Mail 3.17.4 (GTK+ 2.24.32; x86_64-alpine-linux-musl) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit On Thu, 23 Jan 2020 20:23:07 +0000 "Laurent Bercot" wrote: > 2. Building a package should not require root privileges, or hacks, no > matter what goes into the package. In other words: please axe fakeroot > in > abuild. This would, among other things, make abuild work with static > programs (as well as make abuild easier to bootstrap). > fakeroot is used because the tar utility does not allow a non-root user > to encode arbitrary uids/gids, or certain special files such as device > nodes, in the archive. This could be avoided by having a better archive > creation tool, that takes a file hierarchy to encode as is *and also* a > metadata file, listing special permissions to modify in-archive. If you > are going to change the archive format, this is the perfect opportunity > to add the functionality, and make package creation a lot more robust. I think this is a good point and I support this. Getting rid of fakeroot is highly wanted. I belive this is also one of the motivating factors why we want write the tooling in apk-tools project namespace to create the package. Thank you for your input! -nc