-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jeff Turner <[EMAIL PROTECTED]> writes:
<snip>
> > To solve it...
>
> .. as in, fish around in a project's lib/ directory, and ensure that *every
> jar* in there is it's own .deb? Ouch.. that's a pretty large overhead. There's
> no general way to determine the version of a jar, so packaging them all would
> first require a long, painful identification process. For instance, some
> projects use CVS snapshots of jars. It would be *really* difficult to
> pinpoint a jar version when all you've got to go on is a CVS log like "updated
> to latest jar from foo to fix bug X".
Again.. I think this is a problem with Java systems assuming the world revolves
around *them* !
> In addition, changing the default jar location would break init scripts,
> security policy files and custom classloaders. Tomcat illustrates all of these
> issues (and the issue of non-redistributable jars). You might get away by
> symlinking the jars to their expected locations, *if* you can be sure that
> none of the jars have a "Class-Path:" entry in their manifest (which would
> then be incorrect).
Eventually we will have to document all these issues.
I would say that Class-Path in the manifest is a BIG no-no.
> [..]
> > Due to the WORA nature of Java applications, a lot of projects assume they
> > are
> > the only package management system in existence.
>
> And they're right, if you take into account that a cross-platform app needs a
> cross-platform package management system. There is nothing like that now, and
> Java projects will rightly continue to bundle jars until there is.
What about the Java Web Launch system. Has anyone looked at that ??? I haven't
because it is proprietary and I don't want to encourage SUN! :)
<snip>
- --
Kevin A. Burton ( [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] )
Location - San Francisco, CA, Cell - 415.595.9965
Jabber - [EMAIL PROTECTED], Web - http://relativity.yi.org/
Boycott Amazon.com http://www.gnu.org/philosophy/amazon.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Get my public key at: http://relativity.yi.org/pgpkey.txt
iD8DBQE77DFGAwM6xb2dfE0RAnONAJ9+2ZF+sc1ccrRLb03RxqfrQ9aRIACghz+W
PdWI0Bg6hCyAiUNtlE9NnrE=
=BC0H
-----END PGP SIGNATURE-----
