IdP packaging for Linux (deb/rpm)

[Etienne Dysli-Metref]

On 12/05/15 18:13, Cantor, Scott wrote:
>> And tomorrow it's going to be building Docker or LXC containers
>> with this...
> 
> It's a major concern for this sort of effort that people can't make
> up their mind, they just keep inventing new ways of doing the same
> thing over and over and expect everybody to keep up, but it's
> impossible.

Oh I was just mentioning building containers as something else that
benefits from packages. I don't expect you to ship one! ;)

> If you're just asking about RPM and DEB, that's a more scoped
> requirement, but I know speaking for myself that I'm not learning
> Debian packaging. I spent too long figuring out RPM to go repeat all
> that when there should be plenty of people able to do that work that
> already know how to do it.

Yeah just packaging the IdP as RPM and/or DEB, nothing else. The rest
(Java, servlet container) is already packaged by Linux distributions.

> As far as RPMs are concerned, before we do that work, we have to
> address issues with Jetty as to whether to package that, embed it,
> deal with setuid (these would have to be arch packages because of
> that), etc. And we need to let the config situation settle a bit
> (people are still suggesting large redesigns of all of this stuff)
> and let the installer itself settle before we start adding
> packaging.

I see... The config situation is clearer now with version 3 IMHO.

> I'm not doing DEB (that's a personal statement, not a project
> decision), but I'm not opposed to the RPM option. I think I am
> opposed to shipping one that depends on OpenJDK, which means these
> packages wouldn't actually express their complete dependency set,
> which may itself be a dealbreaker, I don't know.

I'm not too worried about incomplete dependencies in this case. Having
any package would already be a big plus.

Since both RPM and DEB have virtual packages, I don't think you'd have
to suffer a dependency on OpenJDK. Just depend on "java" or "java-1.7.0"
(RedHat) or "java7-runtime-headless" (Debian) then deployers can choose
which flavour to install.

> Obviously if somebody shows up who wants to do the work, then it's a
> question of timing and of whether we're comfortable inheriting the
> work at the end. For RPM at least, I'm probably comfortable taking it
> over.

My employer is a consortium member so maybe we can work something out
using my time. I'm not much into administrative matters though, I just
write code. ;)

Cheers,
   Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20150513/847216c6/attachment.sig>