On Mon, Jan 25, 2016 at 10:45 AM, Martin Vaeth <mar...@mvath.de> wrote:

> Mike Gilbert <flop...@gentoo.org> wrote:
> > On Mon, Jan 25, 2016 at 11:31 AM, Luis Ressel <ara...@aixah.de> wrote:
> >>
> >> I might be asking this for a second time, but why does repoman download
> >> the metadata.dtd at all? If one fetches from
> >> git://../gentoo-mirror/gentoo (or via rsync, afaik) it is included
> >> in /usr/portage/metadata/dtd/.
> >
> > repoman is a developer tool. The git repo used by developers does not
> > include metadata.dtd.
>
> repoman is useful for everybody who manages a local
> or public repository. I guess only a small number
> of these people use the developers' git repo.
> (For instance, I am one of these...)
>
> It would be nice if repoman would first check whether
> the file is in some ${repo}/metadata/dtd/
> and download to DISTDIR only as a fallback.
> Or if it can be at least configured (e.g. with an option)
> to check for this file (maybe the path can be configured, too)
> before downloading metadata.dtd.
>
> In fact, I was so annoyed by the forced downloading
> (which as mentioned is a permission/security issue)
> that I regularly apply a patch to portage which sets
> the download interval to (almost) infinity.
> Perhaps I am not the only one who did such a hack.
>
>
>

So submit a patch to portage?

-A

Reply via email to