On 11/11/2016 12:29 AM, Greg Reagle wrote:
> On Thu, Nov 10, 2016, at 03:27, Lists wrote:
>> Thanks for that. I have always used deb files whenever possible, 
>> thinking it the best way to go. If they are so unreliable, I wonder why 
>> they are so prevalent. Perhaps they could be made more reliable.
> 
> There is nothing unreliable about .deb files per se.  They are,
> underneath it all, what apt-get, aptitude, and other installer
> front-ends use.  They are indispensable.  The .deb files themselves
> don't need to be made more reliable.  The method of installing packages
> via individually downloaded .deb files is not supposed to be your normal
> use case.
> 
>> And I have been advised in the past to avoid ppa's if possible and to 
>> use a deb file in preference
> 
> That's interesting.  I've never heard that.  I wonder why.  Sounds like
> ignorance or unclear thinking to me.  You don't get automatic updates
> with individual .deb files and "dpkg -i" does not do dependency handling
> like apt-get.  It's true that the official repositories are much more to
> be trusted than a ppa (that anyone can throw together), but an
> individual .deb file is no more trustworthy than a ppa.  In both cases
> you have to consider the source.
> 

Yeah this is what it comes down to, in general PPA's / obs home repo's
etc aren't trustworthy and probably don't meet the distro's packaging
guidelines etc, without knowing the PPA author and being able to trust
them or without inspecting the build source its impossible to know if
you can trust a PPA. Whereas you can atleast trust that a deb file from
the fish project doesn't have malicious code and if it does have
packaging bugs then they will get fixed when reported.

Of course the best solution is getting the software included in the
distro proper (This can be quite hard), as A side note fish 2.4 looks
like it should land in the next openSUSE Tumbleweed snapshot.

-- 

Simon Lees (Simotek)                            http://simotek.net

Emergency Update Team                           keybase.io/simotek
SUSE Linux                            Adeliade Australia, UTC+9:30
GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Fish-users mailing list
Fish-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fish-users

Reply via email to