Yum repositories

[seth vidal]

Your questions grow in generality.
> This is kind of annoying - we have two package install/update tools that
> use the same underlying mechanisms but have different configs.  Not only
> that, but they are not configured to operate the same out of the box.

I implemented mirrorlist so yum could play nice with the up2date
mirrorlists.
> If up2date is configured to use mirrors by default, shouldn't yum be
> configured that way as well?  If there's a good reason NOT to configure
> yum that way, shouldn't that reason apply to up2date as well?

 I don't really _like_ mirrorlists. The mirrorlists aren't gpg signed.
So if someone compromised the list file and put in what they wanted,
they could seriously screw up some people. Especially people not gpg
checking by default - and on fc-devel that would be EVERYONE.

I'd be fine with dumping all items and going with a common configuration
location for up2date/yum/etc, but I'd want it to be a common format that
we've all agreed on.


> Why do we need both up2date and yum?

they do different things - and frankly - they're both useful for
catching each-other's bugs.
-sv