[kobold at debian.org: The future of Zope{2, 3} and Plone in Debian and Ubuntu]

[Jonas Meurer]

hey fabio,

On 21/11/2009 Fabio Tranchitella wrote:
> * 2009-11-19 19:44, Jonas Meurer wrote:
> > did you have time to take a look at this issue yet? i think we should try
> > to get zope2.12 into debian soon in order to leave enough testing time
> > before the freeze. unfortunately i'm to busy right now to learn all that
> > new stuff regaring zope2.12 (buildout etc).
> 
> Yes, I tried to get a working zope2.12 for Debian but I couldn't really get
> anything else than hacks. It seems upstream is trying hard to make
> impossible the packaging... :(

too bad :-(

the question then is how to go on. i do think to have zope2.12 in
debian is worth maintaining hacks. one reason is that as system
adminstrator i generally try hard to avoid custom compiled software on
production systems.

could you commit your hacks to pkg-zope svn repository? i'll see whether
i can dedicate some time to zope2.12 packaging in the next weeks.

i guess there're three ways to go:

1) package all required dependencies for zope2.12 as seperate packages,
   but only package the exact required version. this will breake
   zope2.12 package once the dependencies packages get updated. i don't
   consider this as a real solution. at least it's the worst one.

2) create a monolithic source tarball with exact versions of
   dependencies for zope2.12. this is the easiest way to go, but it's a
   real mess for security team (duplicated code for all dependencies
   that do exist as seperate packages as well).

3) patch/fix zope2.12 source to work with most recent versions of
   dependency modules, and package all dependencies. this is the
   cleanest solution. unfortunately i guess that the versioned
   dependencies are there for a reason, and that dependency modules
   change their api within minor versions. i don't see another reason
   why zope2.12 doesn't build with recent versions of the dependencies.

i clearly neither have skills nor time to work out a solution for option
three. if you fabio neither have the time, then i guess we're stuck with
option two. because from what i see we're the only two really interested
in packaging zope2.12 for debian. i don't know what brian and doko do
think.

greetings,
 jonas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-zope-developers/attachments/20091121/028da9c7/attachment.pgp>