Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

7
  • Thank you very much for the reply. I will take your words for granted and I will ask one question. Lets say that you dont work for Oracle and you have your own software house and you can choose to use either SVR4 or IPS packaging for distributing your software. Which one would you use and why? Please answer with honesty :) Commented Jun 14, 2016 at 6:32
  • My take on this, is the SW being build for Solaris 10? If so then SVR4 since Solaris 10 does not have IPS. Otherwise, just go with IPS. Better yet is that once you build your software you can make it depend on other packages and have IPS taking care of that for you during the installation. Nothing says that Oracle will keep SRV4 with Solaris 12. Commented Jun 17, 2016 at 13:18
  • 2
    It doesn't really matter that I work for Oracle now; I worked on the Image Packaging System before I ever worked for Sun or Oracle since it was (and still is) an open source project. With that said, the answer depends on what your target is. If you're providing packages for users on Solaris 10, you need to provide SVr4-format packages. If your users have Solaris 11+ systems, then the best option is to provide an IPS-format package. It makes it much easier for the users to deploy and manage the packages. The SVr4 packages work for now on S11, but may not for future Solaris releases. Commented Jun 20, 2016 at 0:25
  • You are mistaken, the svr4 packaging system supported cryptographic verification before IPS exists. Commented Jun 20, 2016 at 17:15
  • 1
    Schily, while Svr4 provided for a signed datastream format, once an SVr4 package was installed, there was no further cryptographic verification of its contents. In other words, it only checked when using pkgadd. With IPS, the signed package manifest is installed w/ the package contents and is verified during every image-modifying operation (and verify operation) using the information in that package manifest. Commented Jun 22, 2016 at 18:02