Re: gnupg2: fail with libgpg-error 1.47

[Greg Troxel <gdt%lexort.com@localhost>]

Thomas Klausner <wiz%gatalith.at@localhost> writes:

> On Thu, Jan 09, 2025 at 02:54:47PM +0100, tlaronde%kergis.com@localhost wrote:
>> OK, so let's look at the reverse: a dependency is happy with X and
>> build, then package depending on it requires Y, and when you replace X
>> by Y, you pull the carpet under dependency. How does it work in this
>> case?
>
> That depends on the way you maintain your system.
>
> The way I do it, I build binary packages in a pbulk, so I have the
> latest version of every package available, and then I update with
> pkgin. There's no problem in that case.

What I do is pkg_rolling-replace -uv, which also has the effect of
having everything up to date.

To tlaronde@'s question: if you have

  foo depends on bar depends on baz
  foo depends on baz
  bar says it needs baz >=X
  foo says it needs baz >=Y (and Y > X)

  you have baz X installed

  you build bar: it is ok with X, and you get bar installed

  you try to build foo, and it objects to X

  you do 'make replace' in baz

  now, you have indeed put bar into a state of "unsafe_depends" where it
  might not be ok.  actually, everything that depends on baz.

  to fix this manually, you can "make replace" in bar".

  to fix this semiautomatically you can "pkg_rolling-replace -v".  But
  that will run a lot of things, if you have been doing this sort of
  thing as a general practice.  It will do not that much, if your
  installation is clean with respect to dependencies.

but a higher level point: You are seeming to want to run your system
with old packages.  In theory this will all work.  In practice ~nobody
who hacks on pkgsrc does this, so staying up to date is the recommended
plan.  I don't understand why people want to have a mixed/old
environment.  This leads to not getting bugfixes including security
bugfixes.

Also, pkgsrc is only expected to work if you have a consistent tree,
with the whole tree up to date, either:
  by -D $date
  by -r $branch
  by -A (HEAD)

If you want to update things separately and deal and run pkg_rr or do
things by hand, you are welcome to do so.  But you will have gone
outside of what is formally expected to work.