[Freeipa-devel] [PATCH 0052] Create server-dns sub-package

[Alexander Bokovoy]

On Thu, 02 Jul 2015, Jan Cholasta wrote:
>>>>>Can this be done without adding server-core?
>>>>I'm not aware of such method (except of adding all DNS dependencies as
>>>>Requires straight into freeipa-server package).
>>>>
>>>>>Because it's not server core,
>>>>>it's the whole thing! Or maybe just rename it to server-common?
>>>>
>>>>I'm fine with 'common'. Ticket 4058 calls for sub-package for CA too
>>>>so my
>>>>idea was to create 'core' package which will be gradually reduced
>>>>more and more.
>>>
>>>Well, I don't like the fact that in order to install IPA server
>>>without DNS you have to install freeipa-server-core instead of just
>>>freeipa-server. Fedora packaging guidelines [1] state that the
>>>metapackage should be named freeipa-server-compat, so I guess renaming
>>>freeipa-server to freeipa-server-compat and freeipa-server-core to
>>>freeipa-server is good enough.
>>I think you are misunderstanding what the guidelines say. -compat
>>subpackage is something that only contains Requires: and Obsoletes:, to
>>help to pull the right packages. It is not supposed to be a
>>full-featured package with content.
>
>With Petr's patch, freeipa-server is exactly that - a metapackage with 
>requires and obsoletes only - hence my suggestion to rename it 
>according to the guidelines.
That's not good.

>>I think we are good enough with freeipa-server-dns. We have the same
>>situation with freeipa-server-trust-ad -- it is not required by the main
>>package and pulls in Samba-related bits. We also don't have any -compat
>>or metapackage for it.
>
>freeipa-server-dns is fine, what is IMO not fine is that it *is* 
>required by the main freeipa-server package, *unlike* 
>freeipa-server-trust-ad.
>
>We don't have a compat metapackage for freeipa-server-trust-ad, 
>because there are no upgrade issues with it, which is what Petr is 
>trying to solve with his patch.
So, the issue is that for installed bind+bind-dyndb-ldap combination we
need to switch to bind-pkcs11+bind-dyndb-ldap. Maybe instead of
modifying main freeipa package we could modify bind-dyndb-ldap package
to require bind-pkcs11 and corresponding bits of freeipa packages?

-- 
/ Alexander Bokovoy