Em Quarta-feira 08 Setembro 2010, às 12:38:55, você escreveu: > > My recommendation and conclusion is then the following: > I fully agree with this. > > > 1) packages are allowed to have dependencies that are not pre-installed > > on the device. This means the installation mechanism must have > > dependency resolution enabled. (in other words, it should go through > > yum/zypper, not straight to rpm) > > > > 2) the only repository guaranteed to be always enabled in all MeeGo > > devices is the Core profile repository > > > > 3) [wish] the Open Source, community repository should also be enabled on > > all devices so it's an allowed source of packages too, even if it > > triggers a warning that the packages there are not QA'ed > > > > 4) profile-specific repositories (handset, netbook, tablet, ivi, stb, > > etc.) are allowed if the vendor is aware that the package will not > > install on all devices. The spec should say that this is not > > recommended. > > > > 5) use of other repositories makes it not MeeGo compliant, but is > > tolerated by use of stores. These are governed by the rules of the > > specific store the application is being submitted to. > > > > Any third-party repository falls under rule #5, which may include > > someone's personal repository, something like Extras-Testing and > > Extras-Devel, vendor- specific repositories (containing overlays for > > things like GL drivers), etc.
Oh, one more thing:
The repository-installation instructions must not be activatable by a simple
browser. A dedicated application should be required. So no "click here to add
my repo" webpages.
Otherwise, this could open up security risks that foreign repositories are
added and start overriding core packages.
--
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
Senior Product Manager - Nokia, Qt Development Frameworks
PGP/GPG: 0x6EF45358; fingerprint:
E067 918B B660 DBD1 105C 966C 33F5 F005 6EF4 5358
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ MeeGo-dev mailing list [email protected] http://lists.meego.com/listinfo/meego-dev
