OpenIndiana/ips
Watch
2
0
Fork
You've already forked ips
 0
Code Issues 29 Pull requests 2 Projects Releases 4 Packages Wiki Activity Actions

v1 retirement, protected snapshots and fail-closed import exclusions #50

Closed
forge wants to merge 0 commits from v1-retention-20260923 into v1-integration-20260923
pull from: v1-retention-20260923
merge into: OpenIndiana:v1-integration-20260923
Conversation 1 Commits - Files changed -
forge commented 2026-09-23 09:41:25 +00:00
First-time contributor
Copy link

A superseded version can now be hidden from catalogs and search while its exact manifest and payload remain servable. The new pkg6repo retire verbs plan, apply, restore, status, close-depot and check-policy keep retirement distinct from pkg5 pkg.obsolete; automatic inactivity policy is opt-in with a 12-month default and auditable access history. Protected snapshots keep their dependency closure solver-visible. Import policy accepts explicit exact/regex FMRI exclusions from KDL, text or JSON and rejects a batch whose exclusions break its dependency closure. No package is purged automatically.

Validation: focused libips retention (35), retirement (31), pkg6depotd HTTP (5), and pkg6repo retire CLI (4) tests passed. Independent Opus reviews checked access-log deletion, stopped-depot, crash and apply-fence cases; the resulting durable per-depot head detects missing newest logs. Full integrated CI, native package/manpage staging and actual pkg5 client smoke remain gates before the RC tag. The ADR number is intentionally renumbered when this branch merges into the integration line.

A superseded version can now be hidden from catalogs and search while its exact manifest and payload remain servable. The new `pkg6repo retire` verbs plan, apply, restore, status, close-depot and check-policy keep retirement distinct from pkg5 `pkg.obsolete`; automatic inactivity policy is opt-in with a 12-month default and auditable access history. Protected snapshots keep their dependency closure solver-visible. Import policy accepts explicit exact/regex FMRI exclusions from KDL, text or JSON and rejects a batch whose exclusions break its dependency closure. No package is purged automatically. Validation: focused libips retention (35), retirement (31), pkg6depotd HTTP (5), and pkg6repo retire CLI (4) tests passed. Independent Opus reviews checked access-log deletion, stopped-depot, crash and apply-fence cases; the resulting durable per-depot head detects missing newest logs. Full integrated CI, native package/manpage staging and actual pkg5 client smoke remain gates before the RC tag. The ADR number is intentionally renumbered when this branch merges into the integration line.
feat: policy retirement snapshots and explicit import exclusions
Some checks failed
CI / illumos (OpenIndiana) build + nextest (pull_request) Failing after 8m19s
Details
CI / Linux (fmt / clippy / nextest / e2e / docs) (pull_request) Failing after 30m26s
Details
cd22b951cb
toasterson commented 2026-09-27 13:13:08 +00:00
Owner
Copy link

Superseded by #54, which brings the whole RC13 line (feat/historical-import, a strict superset of v1-integration-20260923) to main in one pull request, as decided in ADR-015 item 6. Nothing from this branch is lost; closing to keep one integration path.

Superseded by #54, which brings the whole RC13 line (`feat/historical-import`, a strict superset of `v1-integration-20260923`) to `main` in one pull request, as decided in ADR-015 item 6. Nothing from this branch is lost; closing to keep one integration path.
toasterson closed this pull request 2026-09-27 13:13:10 +00:00
Some checks failed
CI / illumos (OpenIndiana) build + nextest (pull_request) Failing after 8m19s
Details
CI / Linux (fmt / clippy / nextest / e2e / docs) (pull_request) Failing after 30m26s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
Compat/Breaking
Breaking change that won't be backward compatible

  
Crazy Idea
Something that went through my mind which is not part of the core use case but fun

  
Kind/Bug
Something is not working

  
Kind/Documentation
Documentation changes

  
Kind/Enhancement
Improve existing functionality

  
Kind/Feature
New functionality

  
Kind/Security
This is security issue

  
Kind/Testing
Issue or pull request related to testing

  
Priority/Critical
The priority is critical

  
Priority/High
The priority is high

  
Priority/Low
The priority is low

  
Priority/Medium
The priority is medium

  
Reviewed/Confirmed
Issue has been confirmed

  
Reviewed/Duplicate
This issue or pull request already exists

  
Reviewed/Invalid
Invalid issue

  
Reviewed/Won't Fix
This issue won't be fixed

  
Status/Abandoned
Somebody has started to work on this but abandoned work

  
Status/Blocked
Something is blocking this issue or pull request

  
Status/Need More Info
Feedback is required to reproduce issue or to continue work

  
needs-info
Waiting on reporter for more information

  
needs-triage
Maintainer needs to evaluate this issue

  
ready-for-agent
Fully specified, ready for an AFK agent

  
ready-for-human
Requires human implementation

  
wayfinder:grilling
Wayfinder decision ticket: grilling

  
wayfinder:map
Wayfinder map issue (parent of decision tickets)

  
wayfinder:prototype
Wayfinder decision ticket: prototype

  
wayfinder:research
Wayfinder decision ticket: research

  
wayfinder:task
Wayfinder ticket: task that unblocks a decision

  
wontfix
Will not be actioned

No labels
Compat/Breaking
Crazy Idea
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority/Critical
Priority/High
Priority/Low
Priority/Medium
Reviewed/Confirmed
Reviewed/Duplicate
Reviewed/Invalid
Reviewed/Won't Fix
Status/Abandoned
Status/Blocked
Status/Need More Info
needs-info
needs-triage
ready-for-agent
ready-for-human
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
OpenIndiana/ips!50
No description provided.