updates repo admission checklist hole

[Michael Schwendt]

On Fri, 10 Jul 2009 09:03:27 -0700 (PDT), Suhan wrote:

> Hi ,
> 
> I think there is a hole in QA process that allows untested packages to get into the update repo. 
> I may be wrong as well but at least please look into this:
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=508517  
> 
> as this is a case where a broken package pollute the updates repository. 
> 
> I am referring about current state of synce-hal package as reported by yum :
> 
> $yum list synce-hal
> Loaded plugins: refresh-packagekit
> Available Packages
> synce-hal.x86_64                                       0.13.1-3.fc10                                        updates
> 
> 
> PS:  I find here a policy described: http://fedoraproject.org/wiki/PackageSubmissionQAPolicy
> but there is no detailed QA Check list , can someone help me with some pointers to follow for more details?
> 
> Thanks, Andrei.

Nobody has reported this problem in the Fedora Updates System for Fedora
10 and 11 while the package was still a test update. The community has
not contributed any testing for these packages. As why the package
maintainer has not spotted the problem, no idea.

Fedora 11 ships with synce-serial _and_ synce-hal. The latter Obsoletes
synce-serial since February. synce-serial should have been removed _prior
to_ releasing Fedora 11.

The synce-hal update from June for F11 did not change the Obsoletes.
Due to that, the problem is only encountered by users who had synce-serial
installed already.

The synce-hal update from June for F10 adds the Obsoletes compared
with stock F10.

A "yum install synce-kde" on F10 and F11 takes the obsolete synce-serial
to satisfy the dependency, despite synce-hal obsoleting it. A subsequent
"yum update" pulls in the synce-hal due to Obsoletes.

The daily Rawhide build report has switched to yum-util's repoclosure
(when exactly?). Does it handle Obsoletes meanwhile? If it doesn't,
that's the reason why this problem has not been reported for F11
development and not for F12 development so far either.

Extra repoclosure (aka "rc-modified") has made a wrong assumption
when finding obsolete providers. This is fixed now, but I need to
improve/enhance the handling of Obsoletes in general.