[Rpm-maint] [rpm-software-management/rpm] Support repoids (at least) in rpmdb (Discussion #3505)

[Hank Donnay]

The rpmdb recording where an rpm is from (after some fashion) would be *amazing*. The higher-level tools _would_ need API to be able to pass that information, and we'd need to set an expectation that the information should refer to the "point of distribution" as best as possible.

<details><summary>Expounding on that:</summary>

Consider the following two sets of (end-user) equivalent commands:

```
dnf download hello
dnf install hello
```

```
dnf install hello
```

It'd have to be specified that these should _both_ record the URI that's constructed via the repository information; ideally the one actually *used*. Even though in the former `install` the package is directly from disk, the cache should be transparent.

Higher level tools should also refrain from providing URIs that are correct in some sense but don't serve the ultimate goal, e.g. `dnf5:fedora/hello-2.12.1-1.fc40`.

Another option would be to record a [`purl`](https://github.com/package-url/purl-spec) and make similar recommendations about recording provenance information.
</details>

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3505#discussioncomment-11751425
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/repo-discussions/3505/comments/11751425 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250106/5306d736/attachment.htm>