Re: [Pkg-owncloud-maintainers] Dropping owncloud from Wheezy?

2013-03-17 Thread Jonathan Wiltshire
On Sun, Mar 10, 2013 at 11:19:01PM +, Jonathan Wiltshire wrote:
 It would indeed be sad but we don't have many options at this stage. I
 will put my cards on the table and say I favour having a good quality
 package in backports and the chance for ownCloud to be in Jessie.
 
 I suggest there is a further week or so for the maintainers to put together
 a maintenance plan if they wish but after that we look seriously at removal.

Well, a week passed and a plan hasn't appeared, so I'm scheduling removal
tonight. I'm sorry we couldn't resolve it more positively.

-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51



signature.asc
Description: Digital signature


Re: [Pkg-owncloud-maintainers] Dropping owncloud from Wheezy?

2013-03-14 Thread Salvatore Bonaccorso
Hi

Also forwarding/quoting Lukas Reschke's mail here on debian-release
(it was sent on pkg-owncloud-maintainers maintainer list):

cut-cut-cut-cut-cut-cut-
Hey all,

 This is a grave concern. Having OC5 in Wheezy is just not going to be an
 option; having to carry security support on our own for three years for 4.0.x
 equally so.

I have to support that what Tom said - we (upstream) just can't
guarantee to support stable4 for such along period.

ownCloud is maturing in a very fast way, a lot of code changed what is
really cool and exciting, but to be honest we're just too few people
to support three different versions upstream and stable4 is - compared
to our newer releases ... let's say it in a nice way ... not that
good ;-)

In the future, we might consider to release a LTS version with long
term support, however this certainly won't be ownCloud 4 nor ownCloud
4.5.

To say it in other words: I'm tempted to say that we're going to drop
the support of stable4 with the release of ownCloud 6.0 in a few
months. - It's already a lot of work to support 3 versions, it would
be unreasonable to support 4.

Thanks,
Lukas

--
ownCloud
Your Cloud, Your Data, Your Way!
cut-cut-cut-cut-cut-cut-

Regards,
Salvatore


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20130314212830.GA32685@elende



Re: [Pkg-owncloud-maintainers] Dropping owncloud from Wheezy?

2013-03-10 Thread Jonathan Wiltshire
On Fri, Mar 01, 2013 at 09:06:12PM +0100, Thomas Müller wrote:
 
 Am Freitag, dem 01.03.2013 um 20:12 schrieb David Prévot:
  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA256
  
  Hi,
  
  Le 01/03/2013 12:54, Moritz Mühlenhoff a écrit :
   I'm skeptical that owncloud should be shipped in Wheezy. It has
   frequent security issues and the initial maintainers appear to 
   be inactive, all updates after October have been NMUs...
  
  Including owncloud maintainers to the loop in hope this wake up call
  from the security team could lead to some visible activity, or if
  previous NMUers would be happy to join the team, if such a team could be
  set up, or whatever positive sign in that regard.
 
 
 Talking to you with the hat of an ownCloud core developer on my head:
 We will release OC5 in 2-3 weeks which will lead to 3 stable version to be 
 maintained:
 4.0.x, 4.5.x and 5.0.x which is a tough job. I would not be surprised if 
 4.0.x will be 
 dropped within 2013 and then maintenance will be a pure nightmare.

This is a grave concern. Having OC5 in Wheezy is just not going to be an
option; having to carry security support on our own for three years for 4.0.x
equally so.

Having an upstream developer on the Debian packaging team would be a help,
of course, but we can't ignore the recent NMU history of the package. I
don't mean to blame anyone, facts are facts.

 Talking to you with the hat of an almost inactive package maintainer:
 Sorry for the inactivity - sometimes it's simply too much!
 Any other debain devs and maintainers are welcome to join our team and keep 
 the package alive!
 Paul and myself spend many nighty in April 2012 to get ownCloud into Wheezy 
 before the freeze.
 It really would be sad to see it being dropped! :-(

It would indeed be sad but we don't have many options at this stage. I
will put my cards on the table and say I favour having a good quality
package in backports and the chance for ownCloud to be in Jessie.

I suggest there is a further week or so for the maintainers to put together
a maintenance plan if they wish but after that we look seriously at removal.


-- 
Jonathan Wiltshire  j...@debian.org
Debian Developer http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

directhex i have six years of solaris sysadmin experience, from
8-10. i am well qualified to say it is made from bonghits
layered on top of bonghits


signature.asc
Description: Digital signature


Dropping owncloud from Wheezy?

2013-03-01 Thread Moritz Mühlenhoff
I'm skeptical that owncloud should be shipped in Wheezy. It has
frequent security issues and the initial maintainers appear to 
be inactive, all updates after October have been NMUs...



-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/slrnkj1n9j.5o3@inutil.org



Re: Dropping owncloud from Wheezy?

2013-03-01 Thread David Prévot
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Hi,

Le 01/03/2013 12:54, Moritz Mühlenhoff a écrit :
 I'm skeptical that owncloud should be shipped in Wheezy. It has
 frequent security issues and the initial maintainers appear to 
 be inactive, all updates after October have been NMUs...

Including owncloud maintainers to the loop in hope this wake up call
from the security team could lead to some visible activity, or if
previous NMUers would be happy to join the team, if such a team could be
set up, or whatever positive sign in that regard.

Regards

David

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)
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=nKXY
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/5130fdb9.2070...@debian.org



Re: [Pkg-owncloud-maintainers] Dropping owncloud from Wheezy?

2013-03-01 Thread Thomas Müller

Am Freitag, dem 01.03.2013 um 20:12 schrieb David Prévot:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA256
 
 Hi,
 
 Le 01/03/2013 12:54, Moritz Mühlenhoff a écrit :
  I'm skeptical that owncloud should be shipped in Wheezy. It has
  frequent security issues and the initial maintainers appear to 
  be inactive, all updates after October have been NMUs...
 
 Including owncloud maintainers to the loop in hope this wake up call
 from the security team could lead to some visible activity, or if
 previous NMUers would be happy to join the team, if such a team could be
 set up, or whatever positive sign in that regard.


Talking to you with the hat of an ownCloud core developer on my head:
We will release OC5 in 2-3 weeks which will lead to 3 stable version to be 
maintained:
4.0.x, 4.5.x and 5.0.x which is a tough job. I would not be surprised if 4.0.x 
will be 
dropped within 2013 and then maintenance will be a pure nightmare.

Talking to you with the hat of an almost inactive package maintainer:
Sorry for the inactivity - sometimes it's simply too much!
Any other debain devs and maintainers are welcome to join our team and keep the 
package alive!
Paul and myself spend many nighty in April 2012 to get ownCloud into Wheezy 
before the freeze.
It really would be sad to see it being dropped! :-(

Take care,

Tom
 
 Regards
 
 David
 
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.12 (GNU/Linux)
 
 iQIcBAEBCAAGBQJRMP24AAoJELgqIXr9/gnyHQ8QAKLYzLPgJnNWkPU1Z+nvXu79
 DZyWd+3FgE+LdCw0TNoisEPF929k8vSDjPX5cKBi1JIA4tjH/y+eSgZrOceM9Tsu
 2pvqS3NXVbUb5bbepfuTPAaeMdDrCoZgPeVDeMrrcyDjCQfGdZ4Eb9eqFr8F6yKB
 ZfBW4i8dc067d1nr5KUfiW/A6R0evrXGhwC7btTSKjErwsLZQhRifagqbmuDeMwK
 fQ751xEo7FX6RXCzkuUuMQmHf5+SsOdHjjMKh5P62OJKao+UqejYTxFk6jCoTOOJ
 LR9IFXiGMps9+dqPROjeYEZwJXBPXXOtMyNapgXng+6H22UWXe7UPY1bKm5hZZWq
 iZ9HNuIdjRN8xnt4/xG2clotLg7QWUk0qaHDjf5+7EiXfXDa9PpaZlshv93gVfKW
 xMjysqsJP8K5sP5+9Ul8GMApEf9fdpqQ7xURE1T4MCTdQN59q+7QDAizWpTEtL/1
 RFoevU0WVNO7883th/lr1Tga1o37sC5jaXS7Wn3bTXZ3OPlnR/x2x6fjmwrcU7Xv
 Hr8bwwSVkneApBebeUasCbkBFhDZeNmHD2NaP3QXdLvqTtNFfeSJRcJVIMk5JPev
 MDwVhAgaBrrA7w0W8LqZlXz9tVGfCpSZYScEGxM4qsgWlxhsrUAFJeOl0TMpt0zW
 cERKI8ucHqc1mMF4pOfj
 =nKXY
 -END PGP SIGNATURE-
 
 ___
 Pkg-owncloud-maintainers mailing list
 pkg-owncloud-maintain...@lists.alioth.debian.org
 http://lists.alioth.debian.org/mailman/listinfo/pkg-owncloud-maintainers


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1362168372.51310a3460...@office.tmit.eu



Re: Dropping owncloud from Wheezy?

2013-03-01 Thread Michael Gilbert
On Fri, Mar 1, 2013 at 11:54 AM, Moritz Mühlenhoff wrote:
 I'm skeptical that owncloud should be shipped in Wheezy. It has
 frequent security issues and the initial maintainers appear to
 be inactive, all updates after October have been NMUs...

I agree.  Let's remove it until its demonstrably supportable security-wise.

Best wishes,
Mike


--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CANTw=mplhoiwh7p4rlttnbncz95xrs2ny_uhcjnugvciypd...@mail.gmail.com