State of Provides/Requires

[Baptiste Daroussin]

On Mon, Jul 11, 2016 at 03:47:18PM -0400, Atomic Beef wrote:
> Hello,
> 
> I was wondering what the state of provides/requires was. I found a couple
> of issues on Github that mentioned the feature, (
> https://github.com/freebsd/pkg/issues/1276 and
> https://github.com/freebsd/pkg/issues/805) but they are both over a year
> old at this point. This is a crucial feature to binary package management,
> not only because it saves disk space, but because it enhances security. For
> example, any package depending on MySQL will usually choose to install
> mysql56-client which is marked as vulnerable and will never be patched. Is
> anyone currently working on implementing this?
> 

Provides/Requires has been added in pkg around 1.4 (iirc)

They are not perfect and we would prefer to use what we call flexible
dependencies instead. that said flexible dependencies are not any close to be
implemented. So I think we should use current provides/requires mechanism in the
mean time.

To use them the only issue in on the ports tree itself

Best regards,
Bapt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-pkg/attachments/20160716/992a452c/attachment.sig>