[katello-devel] Bundler vs rpm-gems

[Lukas Zapletal]

Well, this is *very* rare. The alpha and omega of security patch is that
you always patch the absolute minimum, just to avoid the security
problem. No functionality should be changed.

I think we can perfectly live without security patches. I bet we wont
hit any problem in regard to this in five years. But Vit should confirm
this, he is the right guy :-)

LZ

On Wed, Aug 22, 2012 at 02:54:46PM +0200, Petr Chalupa wrote:
> I know but those new versions sometimes have different behavior than
> the old version. As a developer I would like to be as close as
> possible to fedora environment even if I am on mac/ubuntu/debian.
> It's particularly useful when you bug-fixing and you avoid
> situations when you unintentionally use a feature from the new
> version of gem which will break katello on fedora/rhel.
> 
> Petr
> 
> On 22.08.12 14:44, Vít Ondruch wrote:
> >Dne 22.8.2012 14:32, Petr Chalupa napsal(a):
> >>We should not drop our gem-repo, we would not be able to provide gem
> >>with patches from rpms to non fedora/rhel systems (I and any other non
> >>fedora developer need those to be able to reasonable fix bugs).
> >>
> >>Petr
> >>
> >
> >Please excuse me, but what is the purpose of gem-repo *with patches*?
> >Security issues are typically fixed in latest versions of gems, which in
> >turn should be available in Fedora Rawhide, so am I missing something?
> >
> >
> >Vit
> >
> >_______________________________________________
> >katello-devel mailing list
> >katello-devel at redhat.com
> >https://www.redhat.com/mailman/listinfo/katello-devel
> 
> _______________________________________________
> katello-devel mailing list
> katello-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/katello-devel

-- 
Later,

 Lukas "lzap" Zapletal
 #katello #systemengine