Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-27 Thread Christian Theune
Hi,

Am Montag, den 26.03.2007, 16:49 -0400 schrieb Tres Seaver:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Marc Balmer wrote:
> > Andreas Jung wrote:
> > 
> >> I uploaded corrected versions of the Zope 2.9.7 and 2.10.3 tar-balls.
> >> The tar-balls released yesterday contained a bug that caused
> >> a startup failure when using "zopectl start".
> > 
> > don't do this again.
> 
> Don't do what?  I was about to agree, as I don't think re-releasing
> under the same version number was correct:  the new releases should be
> 2.9.7.1, 2.10.3.1, or something similary (or bump to 2.9.8, 2.10.4).

Ack. Packaging errors happen and that's what the 3rd dot is for.

> > this bug is so obvious to catch that I have some serious doubts about 
> > your software testing process.  are you releasing totally untested code? 
> >   can we trust your releases in the future, will you change sth in your 
> > process?
> 
> The testing that gets done is not done from "released" tarballs, but
> from subversion checkouts.  This was a bug in the process that created
> the tarball from a checkout, and not in the underlying Zope software
> itself.  I *think* it also affected only those who build and install
> Zope as root, although I can't tell for sure, since the tarballs have
> been replaced.  At any rate, I *never* build, install, or run Zope as
> root, and hence would never have noticed the problem, even if I were
> doing the releases myself.
> 
> > Releasing software as a security fix that does not even start makes you 
> > look like a moron, I am sorry to say.
> 
> Too harsh.  Certainly nobody likes having released a "brown bagger", but
> mistakes do happen.

Yup. Way too harsh, personal and non-appreciative of voluntary work that
is contributed.

Christian

-- 
gocept gmbh & co. kg - forsterstraße 29 - 06112 halle/saale - germany
www.gocept.com - [EMAIL PROTECTED] - phone +49 345 122 9889 7 -
fax +49 345 122 9889 1 - zope and plone consulting and development


signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil


Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Robert Nagy
Hi

On behalf of the some OpenBSD developers I would like to apoligize
for what have happened here. Marc should not call anyone a moron
because of a mistake that could have been done by anyone else.

I would also like to ask everyone to not reply to this thread anymore.

Thanks.



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Marc Balmer wrote:
> Andreas Jung wrote:
> 
>> I uploaded corrected versions of the Zope 2.9.7 and 2.10.3 tar-balls.
>> The tar-balls released yesterday contained a bug that caused
>> a startup failure when using "zopectl start".
> 
> don't do this again.

Don't do what?  I was about to agree, as I don't think re-releasing
under the same version number was correct:  the new releases should be
2.9.7.1, 2.10.3.1, or something similary (or bump to 2.9.8, 2.10.4).

> this bug is so obvious to catch that I have some serious doubts about 
> your software testing process.  are you releasing totally untested code? 
>   can we trust your releases in the future, will you change sth in your 
> process?

The testing that gets done is not done from "released" tarballs, but
from subversion checkouts.  This was a bug in the process that created
the tarball from a checkout, and not in the underlying Zope software
itself.  I *think* it also affected only those who build and install
Zope as root, although I can't tell for sure, since the tarballs have
been replaced.  At any rate, I *never* build, install, or run Zope as
root, and hence would never have noticed the problem, even if I were
doing the releases myself.

> Releasing software as a security fix that does not even start makes you 
> look like a moron, I am sorry to say.

Too harsh.  Certainly nobody likes having released a "brown bagger", but
mistakes do happen.


Tres.
- --
===
Tres Seaver  +1 540-429-0999  [EMAIL PROTECTED]
Palladion Software   "Excellence by Design"http://palladion.com
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGCDHa+gerLs4ltQ4RAqHbAJ9UvloqzCCj9NrCaGSeYZDfZduaJwCdFH5l
ydlyxzoHGP7aNnVjG1IJClU=
=6vHA
-END PGP SIGNATURE-



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Andreas Jung

Marc,

--On 26. März 2007 21:47:59 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:


I uploaded corrected versions of the Zope 2.9.7 and 2.10.3 tar-balls.
The tar-balls released yesterday contained a bug that caused
a startup failure when using "zopectl start".


don't do this again.

this bug is so obvious to catch that I have some serious doubts about
your software testing process.


Please calm down. Even trivial bugs can slip sometimes through the testing
phase. In this particular case new code from a hotfix caused this problem.


can we trust your releases in the future, will you change sth in your
process?


To say it clear as release manager: I don't care much about Zope and Python 
packages. We tell the people all the time: use the sources. And we are 
doing our best.




Releasing software as a security fix that does not even start makes you
look like a moron, I am sorry to say.


Harsh words...when I Look the various broken packages for Zope and Python 
on various distributions I could call the maintainers also moron.





pgpQv3rh8MPDM.pgp
Description: PGP signature


Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Martijn Pieters

On 3/26/07, Tres Seaver <[EMAIL PROTECTED]> wrote:

> Releasing software as a security fix that does not even start makes you
> look like a moron, I am sorry to say.


Calling people morons makes you look like one, I'm afraid.

The bug had only indirectly to do with the recent security fix. The
startup problem only occurred when running Zope in managed mode,
something most developers never do because you normally want to see
the Zope log output when developing, so you catch problems early. So
the problem was limited to a special-cased method declaration that
only gets run in a deployment setting.

This was one of those rare cases of bad luck, as the developer in
question was not aware of the fact that this one special-cased method
was not covered by a unit or functional test.

--
Martijn Pieters



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Andreas Jung



--On 26. März 2007 22:26:44 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:


Who started with "moron"? You did.

Stop boring me, stop annoying the Zope community. I accept critics from
the Zope community and from some outsides..if you want to discuss this
issue
any further...bring it up on the zope-dev list. I am not interested in
any kind of further discussions with you. Got it?


Your software testing skills are null.  Got it?



Numpty!

-aj

pgpj0xHGFc1Kh.pgp
Description: PGP signature


Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Andreas Jung



--On 26. März 2007 22:17:12 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:



--On 26. März 2007 22:09:18 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:


Harsh words...when I Look the various broken packages for Zope and
Python on various distributions I could call the maintainers also
moron.


Yes, harsh words, and I admit being angry because it caused me quite
some servers going offline for a stupid mistake that would have been
cought early if you had used you software only once.  You did not test
this at all.



Dude, stop talking bullshit. In the last years you could always be sure
that Zope works fine when using "zopectl fg". And that worked and I've
tested it.


you must be joking, are you?  You release non working software and now
you behave a complete idiot?  zopectl fg works and zopectl start does
not:  you did not test your software before releasing it.

and you keep insulting people for this...  you must really be
brain-damaged.


Who started with "moron"? You did.

Stop boring me, stop annoying the Zope community. I accept critics from
the Zope community and from some outsides..if you want to discuss this issue
any further...bring it up on the zope-dev list. I am not interested in any 
kind of further discussions with you. Got it?


-aj




pgpfp0u0gOJxs.pgp
Description: PGP signature


Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Marc Balmer

Andreas Jung wrote:



--On 26. März 2007 22:09:18 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:


Harsh words...when I Look the various broken packages for Zope and
Python on various distributions I could call the maintainers also moron.


Yes, harsh words, and I admit being angry because it caused me quite some
servers going offline for a stupid mistake that would have been cought
early if you had used you software only once.  You did not test this at
all.



Dude, stop talking bullshit. In the last years you could always be sure 
that Zope works fine when using "zopectl fg". And that worked and I've 
tested it.


you must be joking, are you?  You release non working software and now 
you behave a complete idiot?  zopectl fg works and zopectl start does 
not:  you did not test your software before releasing it.


and you keep insulting people for this...  you must really be brain-damaged.



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Marc Balmer

Andreas Jung wrote:


Who started with "moron"? You did.

Stop boring me, stop annoying the Zope community. I accept critics from
the Zope community and from some outsides..if you want to discuss this 
issue
any further...bring it up on the zope-dev list. I am not interested in 
any kind of further discussions with you. Got it?


Your software testing skills are null.  Got it?

And now we go back to more productive work...



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Andreas Jung



--On 26. März 2007 22:09:18 +0200 Marc Balmer <[EMAIL PROTECTED]> wrote:


Andreas Jung wrote:


Harsh words...when I Look the various broken packages for Zope and
Python on various distributions I could call the maintainers also moron.


Yes, harsh words, and I admit being angry because it caused me quite some
servers going offline for a stupid mistake that would have been cought
early if you had used you software only once.  You did not test this at
all.



Dude, stop talking bullshit. In the last years you could always be sure 
that Zope works fine when using "zopectl fg". And that worked and I've 
tested it.


-aj

pgpTT2ve2fr5s.pgp
Description: PGP signature


Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Marc Balmer

Andreas Jung wrote:

Harsh words...when I Look the various broken packages for Zope and 
Python on various distributions I could call the maintainers also moron.


Yes, harsh words, and I admit being angry because it caused me quite 
some servers going offline for a stupid mistake that would have been 
cought early if you had used you software only once.  You did not test 
this at all.


You can definitely not questions the quality of the OpenBSD port of 
Zope, we even fixed the problem before you did.


- Marc



Re: [Zope-Annce] Zope 2.8.9, Zope 2.9.7, Zope 2.10.3 released

2007-03-26 Thread Marc Balmer

Andreas Jung wrote:


I uploaded corrected versions of the Zope 2.9.7 and 2.10.3 tar-balls.
The tar-balls released yesterday contained a bug that caused
a startup failure when using "zopectl start".


don't do this again.

this bug is so obvious to catch that I have some serious doubts about 
your software testing process.  are you releasing totally untested code? 
 can we trust your releases in the future, will you change sth in your 
process?


Releasing software as a security fix that does not even start makes you 
look like a moron, I am sorry to say.




Andreas