Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Jarek Polok
Dear Yasha

[...]


 From a query I posted on this matter to the SL list:
 
 2.  Evidently, Singh and other core CentOS team members actually are
 Red Hat employees,
 just as the core SL team have been Fermilab or CERN employees
 (presumably in some cases
 actually paid by the research collaborations funded by various
 government agencies through
 various universities -- e.g., in the USA, NSF or DOE with each PI
 typically holding a
 tenure-stream faculty position at a university).  Will the core SL team
 or the core CERN linux
 team likewise become Red Hat employees?

CERN linux team is and will be CERN employees: Our only relationship
with Red Hat is that we are customers. To clarify little bit: Our
primary mission at CERN is to provide support for linux platform for
our customers - experiments and working groups - not to build linux
distribution. (yes - we did it in last 10 years since in 2004
this was the only option)

 
 End question.
 
 Are Jerek Polok et al. now Red Hat employees, or still CERN employees?
 

Yes we are CERN employees: the fact of using this or that linux version
does not change it - why would it ?

 Additional questions:
 
 A.  Will the SL/SLC source tree for RPM builds be a separate copy from
 the CentOS git, downloaded therefrom?

I am speaking for SLC here: no: we are going to use CentOS.

 
 A.1  Will the SL/SLC source tree be compared to the original SRPMs that
 CERN seems to have under license from Red Hat to verify
 that the CentOS git source is in fact unadulterated RHEL 7 source,
 other than for obvious Red Hat logos and the like?
 

Speaking for SLC here: yes, we could do it (so could SL and anybody
else), but please note: this does not change anything for everybody else
on this list: if somebody decides to distrust Red Hat and CentOS ... why
would that person trust us ? ...


 B.  Jarek states above:  Whatever the case, there will continue to exist
 a linux of production quality and of free or affordable cost. 

That was actually a quote from Konstantin's post- but
I fully agree with it.

 What is
 affordable cost and to what is this cost to be paid?  Red Hat? 
 CERN?  Fermilab (technically, the consortium responsible for operating
 Fermilab as USA federally funded research facility) for USA-based
 university sites using SL 7?

For us at CERN the affordable cost is dedicating some
resources (manpower/hardware/network bandwidth/ .. etc)
towards support/maintenance (and development only if needed)
of a freely distributable linux version matching our
computing platform requirements.

I do not fully understand your question about the cost
to be paid I'm afraid:

What is your current cost of using SL ?

Why would that cost change if you use CentOS (or SL
built with CentOS sources) ?

Best Regards

Jarek

__
---
_ Jaroslaw_Polok __ CERN - IT/OIS/WLS _
_ http://cern.ch/~jpolok  tel_+41_22_767_1834 _
_ +41_76_487_9487 _


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Nico Kadel-Garcia
Jarek, good morning:

I was unfortunately paged about someone else's hardware problem and
happen to be up.

On Tue, Jul 1, 2014 at 2:54 AM, Jarek Polok jaroslaw.po...@cern.ch wrote:
 Dear Yasha

 Are Jerek Polok et al. now Red Hat employees, or still CERN employees?


 Yes we are CERN employees: the fact of using this or that linux version
 does not change it - why would it ?

Yasha has occasionally been known to spend a great deal of thought in
some very elaborate models of how things work procedurally, that do
not always match what is actually going on. Reviewing or clarifying
the situation can sometimes reveal some interesting points, so it's
not something to begrudge him.

 Additional questions:

 A.  Will the SL/SLC source tree for RPM builds be a separate copy from
 the CentOS git, downloaded therefrom?

 I am speaking for SLC here: no: we are going to use CentOS.

There are, for me and for clients I encourage, some very useful
features of SL that CentOS never has and, I think, never will support.
These especially include the various yum configurations for third
party repositories, such as EPEL, repoforge, and rpmfusion.

 A.1  Will the SL/SLC source tree be compared to the original SRPMs that
 CERN seems to have under license from Red Hat to verify
 that the CentOS git source is in fact unadulterated RHEL 7 source,
 other than for obvious Red Hat logos and the like?


 Speaking for SLC here: yes, we could do it (so could SL and anybody
 else), but please note: this does not change anything for everybody else
 on this list: if somebody decides to distrust Red Hat and CentOS ... why
 would that person trust us ? ...

Because you're aware of the possibly of HTTPS git repositories being
surreptitiously replaced and poisoning all downstream builds. GPG tags
would help that, GPG signed RPM's and SRPM's also help that.

 Why would that cost change if you use CentOS (or SL
 built with CentOS sources) ?

 Best Regards

 Jarek

For me, at least, I'd lose SL's clear separation of 'vendor' and
'non-vendor' code, and the ease of access to and management of the 3rd
paty repositories.


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Yasha Karant
All members of the SL user community (including systems users, not just 
endusers) should be very thankful to Jarek for his clear candor.


From Jarek:

I am speaking for SLC here: no: we are going to use CentOS.

End quote.

At this point, unless Fermilab is planning something else, it appears 
that SL fundamentally is dead.  SL is going to be CentOS, so the SL 
non-CERN community might as well switch to CentOS or to license real 
Red Hat EL for fee.  CERN is no longer willing to invest the resources 
(human and machine) to support a separate distro.  Does Fermilab have 
the resources to go it alone?  SLC evidently will be CentOS with 
specific additional hardware drivers and software applications to meet 
the needs of the CERN LHC collaborations, including running the LHC 
detectors and data reduction and analysis environment.


The second point also is in this quote from Jarek:

Speaking for SLC here: yes, we could do it (so could SL and anybody 
else), but please note: this does not change anything for everybody else 
on this list: if somebody decides to distrust Red Hat and CentOS ... why 
would that person trust us ? ...


End quote.

Unless the SRPMs distributed by Red Hat are a misrepresentation, a build 
from these SRPMs should yield RPMs that are identical (bit for bit, 
e.g., under a real binary compare) to the installable RPMs provided by 
Red Hat.  Once this is verified, one knows that a build of SL derived 
from these SRPMs in fact will be a functionally faithful clone of RHEL 
(specific release and versions in the SRPMs -- functionally faithful 
because the actual logos, etc., will be different).  Red Hat is a for 
profit corporation, providing source, etc., back to the not-for-profit 
community only because of a marketing model and/or GPL, etc., 
restrictive covenants (licenses).  However, the for-profit competitors 
of Red Hat, notably Oracle, are using RHEL source to build a competitor 
linux distro that Oracle evidently distributes without fee.  Thus,
Red Hat now is using CentOS.  Will CentOS be a faithful copy of RHEL?  I 
personally fear that it will not be to stymie Oracle and the like.  The 
git, etc., mechanism that Red Hat is using presents no obstacle to deep 
pocket (well capitalized) for-profits such as Oracle, but only an 
inconvenience.  Thus, this model only will work if CentOS lacks some 
vital feature, or else Red Hat has elected this path for no clear reason.


However, if CERN and/or Fermilab actually do compare the CentOS git to 
the real Red Hat EL SRPMs -- a tedious task unless it can be automated 
-- there is no reason in my opinion not to trust the CentOS EL 
source.  I do trust that CERN and/or Fermilab personnel will do an 
honest compare.


I am not being paranoid -- I am simply applying the way for-profit USA 
corporations (such as Red Hat, Oracle, Microsoft, and many others) 
operate -- and this operation is not in the interest of the commons.  
[Aside:  The closest I have found to such a USA corporation recently 
operating in the interest of the commons is the apparent promise of 
Tesla (electric battery automobiles) to release the fundamental energy 
storage and propulsion technology it uses to competitors at no charge.  
However, Tesla corporation seems to be the rare exception, not the 
rule.]  Please pardon any statements of societal philosophy -- the 
practical question is very simple:  can we bet the farm that the new 
CentOS SL will be a reliable production system in a hostile (under 
attack) environment?  If I understand Jarek, CERN is so betting, 
presumably to save the cost of RHEL 7 licensing to the governments (and 
perhaps private philanthropy at some of the universities participating 
in the CERN LHC collaborations) that are funding the experiments.


Yasha Karant

On 06/30/2014 11:54 PM, Jarek Polok wrote:

Dear Yasha

[...]


 From a query I posted on this matter to the SL list:

2.  Evidently, Singh and other core CentOS team members actually are
Red Hat employees,
just as the core SL team have been Fermilab or CERN employees
(presumably in some cases
actually paid by the research collaborations funded by various
government agencies through
various universities -- e.g., in the USA, NSF or DOE with each PI
typically holding a
tenure-stream faculty position at a university).  Will the core SL team
or the core CERN linux
team likewise become Red Hat employees?

CERN linux team is and will be CERN employees: Our only relationship
with Red Hat is that we are customers. To clarify little bit: Our
primary mission at CERN is to provide support for linux platform for
our customers - experiments and working groups - not to build linux
distribution. (yes - we did it in last 10 years since in 2004
this was the only option)


End question.

Are Jerek Polok et al. now Red Hat employees, or still CERN employees?


Yes we are CERN employees: the fact of using this or that linux version
does not change it - why would it ?


Additional questions:

A.  Will the 

Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Lamar Owen

On 07/01/2014 03:40 AM, Yasha Karant wrote:
At this point, unless Fermilab is planning something else, it appears 
that SL fundamentally is dead.  SL is going to be CentOS, so the SL 
non-CERN community might as well switch to CentOS or to license real 
Red Hat EL for fee.  CERN is no longer willing to invest the resources 
(human and machine) to support a separate distro. Does Fermilab have 
the resources to go it alone?  SLC evidently will be CentOS with 
specific additional hardware drivers and software applications to meet 
the needs of the CERN LHC collaborations, including running the LHC 
detectors and data reduction and analysis environment.


??? That is not at all what I got from his reply.  What I got was that 
CERN will still be committing resources, but instead of duplicating 
effort they're joining up with the CentOS effort.  I even get the 
impression that it's the same amount of resources as was put towards the 
separate SLC distribution, which will likely now be a SIG of CentOS.  
This is good for everyone, since here is a dedicated team that is not 
comprised of Red Hat employees vested in CentOS.


Unless the SRPMs distributed by Red Hat are a misrepresentation, a 
build from these SRPMs should yield RPMs that are identical (bit for 
bit, e.g., under a real binary compare) to the installable RPMs 
provided by Red Hat. 


The rebuilt RPMs have never been 100% bit-for-bit identical with the Red 
Hat binary RPMs; that's not what binary-compatible means. That's part of 
the reason the CentOS team has changed the statement '100% binary 
compatible' to 'functionally compatible' since they do mean different 
things, but the latter is more indicative of reality than the former 
ever has.


 Red Hat is a for profit corporation, providing source, etc., back to 
the not-for-profit community only because of a marketing model and/or 
GPL, etc., restrictive covenants (licenses). 


That is inaccurate; Red Hat is not obligated to provide source to the 
public, nor is anyone who receives source from Red Hat obligated to 
share it publicly.  Red Hat is being as close to a good member of the 
community as is possible within the constraints of a publicly traded 
corporation, and they are going above and beyond the letter of the GPL 
(but perhaps not as far as the spirit of the GPL) in providing source 
(including timely updates) that is publicly accessible.  No one yet in 
this thread has provided a public, no login required, link to up-to-date 
sources for SLES 11.  The newest publicly available sources for SLES 11 
that I have been able to find are nearly a year old.


However, the for-profit competitors of Red Hat, notably Oracle, are 
using RHEL source to build a competitor linux distro that Oracle 
evidently distributes without fee.


Oracle's support is not without fee.  Oracle and Novell both seem to be 
attempting to provide direct support not necessarily for their own 
distributions, but for actual RHEL itself, too.  This was the cause of 
many pieces of formerly open information (including bugzilla entries) to 
go private, to make it more difficult for RH's competitors.  The 
community was unfortunately negatively impacted by that, too, but it's a 
balancing act between openness and business sense.  I personally wish 
things could be completely open; but I also know that the community is 
heavily, almost entirely, dependent upon Red Hat's business survival.


However, if CERN and/or Fermilab actually do compare the CentOS git to 
the real Red Hat EL SRPMs -- a tedious task unless it can be automated 
-- there is no reason in my opinion not to trust the CentOS EL 
source.  I do trust that CERN and/or Fermilab personnel will do an 
honest compare.


Now this is interesting.  You're trusting a third party to compare Red 
Hat's product to Red Hat's community edition (essentially) but not 
trusting Red Hat to do that itself?  If you don't trust Red Hat to 
provide and continuously verify the contents of git.centos.org 
themselves, then how in blue blazes can you trust Red Hat to provide the 
source code you're using?  Whether Red Hat says they're doing it or not, 
it's a really good bet that a Red Hat engineer is tracking 
git.centos.org continuously to make sure the upstream sources remain 
unblemished.  While I would prefer Red Hat to state that plainly, at the 
same time I believe it is strongly implied by the presence of Red Hat 
employees other than the CentOS team on the centos-devel mailing list.




I am not being paranoid -- I am simply applying the way for-profit USA 
corporations (such as Red Hat, Oracle, Microsoft, and many others) 
operate -- and this operation is not in the interest of the commons.


At this I have to take exception.  Red Hat has many times proven its 
commitment to the community in both word and deed.


  can we bet the farm that the new CentOS SL will be a reliable 
production system in a hostile (under attack) environment? 

Here you really *are* being paranoid, 

Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Jarek Polok
[...]

 ??? That is not at all what I got from his reply.  What I got was that
 CERN will still be committing resources, but instead of duplicating
 effort they're joining up with the CentOS effort. 

This is what I meant.

 I even get the
 impression that it's the same amount of resources as was put towards the
 separate SLC distribution, which will likely now be a SIG of CentOS. 

Actually we (SLC) are putting these resources in CentOS Core SIG.
(and in the future perhaps in other SIGs too - Cloud / Virt / ..etc)
- as a matter of fact - little bit less than 'same amount' -
since we still continue building SLC6 and SLC5 in-house.

 This is good for everyone, since here is a dedicated team that is not
 comprised of Red Hat employees vested in CentOS.
 

[ ... ]

Jarek

__
---
_ Jaroslaw_Polok __ CERN - IT/OIS/WLS _
_ http://cern.ch/~jpolok  tel_+41_22_767_1834 _
_ +41_76_487_9487 _


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Jarek Polok
 And in case I haven't already thanked you (and I think I did, 

Yes, you did (more than once actually ;-))

 but it
 bears repeating) thanks for sticking with IA64 up to SLC 5.4; 

As you know we had to stop this effort .. I believe by
now we do not have any IA64 systems remaining at CERN ..

 it made my
 job of rebuilding CentOS 5 packages on IA64 much much easier, and SLC
 5.4 is still my startup distribution for bootstrapping an Altix before
 pointing to my C5 rebuild repos (I haven't spun ISO's as yet, just
 rebuilt the packages).

Do you have your rebuild available somewhere to the public ?

Regards

Jarek



-- 
__
---
_ Jaroslaw_Polok __ CERN - IT/OIS/WLS _
_ http://cern.ch/~jpolok  tel_+41_22_767_1834 _
_ +41_76_487_9487 _


IA64 C5 rebuilt packages (was: Re: Clarity on current status of Scientific Linux build)

2014-07-01 Thread Lamar Owen

On 07/01/2014 10:06 AM, Jarek Polok wrote:

it made my
job of rebuilding CentOS 5 packages on IA64 much much easier, and SLC
5.4 is still my startup distribution for bootstrapping an Altix before
pointing to my C5 rebuild repos (I haven't spun ISO's as yet, just
rebuilt the packages).

Do you have your rebuild available somewhere to the public ?


Not at the moment, as the packages are unsigned, and I haven't been exactly 
speedy on keeping up with updates.  If demand were to ramp up, I would be 
willing to make them available, after I set up signing infrastructure, doing 
the signing, and setting up some automation for the builds.  I would not be 
willing to make a 'timeliness' commitment on updates, though, since it is very 
much a secondary effort here right now.

But my gut feel is that there is very little demand right now.


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Patrick J. LoPresti
On Tue, Jul 1, 2014 at 6:17 AM, Lamar Owen lo...@pari.edu wrote:


 ??? That is not at all what I got from his reply.  What I got was that CERN
 will still be committing resources, but instead of duplicating effort
 they're joining up with the CentOS effort.

Whatever. The relevant questions are: (1) Will SL's goal continue to
be creating a re-spin of Red Hat Enterprise and *not* CentOS, since
Red Hat's clear goal in acquiring CentOS is to create divergence
between the two; and (2) what mechanism(s) will SL use to achieve that
goal? (Specifically, will SL compare the git sources against actual
SRPMs obtained via subscription?)

 That's part of the
 reason the CentOS team has changed the statement '100% binary compatible' to
 'functionally compatible' since they do mean different things, but the
 latter is more indicative of reality than the former ever has.

The *goal* of CentOS used to be binary compatibility, even if it was
never 100% achieved. Since the acquisition by Red Hat, that is no
longer even the goal, for obvious reasons.

 Red Hat is being as close to a good member of the community as is
 possible within the constraints of a publicly traded corporation,

Disingenuous claptrap. Red Hat is blatantly violating the clear intent
of the license that the authors of the code placed on their work. Why
Red Hat does this is frankly irrelevant.

 No one yet in this thread has provided a public, no
 login required, link to up-to-date sources for SLES 11.

Yes, you keep bringing this up as if it were an argument.

No one has provided a public, no login required link to an up-to-date
photo of my bare rear end, either, which would be precisely as
relevant. We are talking about Red Hat; the actions of SUSE, Oracle,
Microsoft, Tesla, and your cat have zero bearing on the discussion.

Nobody cares about SUSE because nobody cares about SUSE.

 - Pat


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Lamar Owen

On 07/01/2014 11:16 AM, Patrick J. LoPresti wrote:

On Tue, Jul 1, 2014 at 6:17 AM, Lamar Owen lo...@pari.edu wrote:


??? That is not at all what I got from his reply.  What I got was that CERN
will still be committing resources, but instead of duplicating effort
they're joining up with the CentOS effort.

Whatever.


Well, apparently I understood Jarek's post correctly.


  The relevant questions are: (1) Will SL's goal continue to
be creating a re-spin of Red Hat Enterprise and *not* CentOS, since
Red Hat's clear goal in acquiring CentOS is to create divergence
between the two;


It would be detrimental to their bottom line to do so, since so many 
people are out there who could potentially blow the whistle on any such 
divergence.



  and (2) what mechanism(s) will SL use to achieve that
goal? (Specifically, will SL compare the git sources against actual
SRPMs obtained via subscription?)


If the SL developers want to reply, they will.  I trust Connie and all 
the rest are working on the situation, and I trust their judgement for 
their project.


The *goal* of CentOS used to be binary compatibility, even if it was 
never 100% achieved. 


What matters is what they intended it to mean, which has never been 'bit 
for bit identical.'  What does 'binary compatibility' really mean?  (I 
take it to mean that all software compiled and linked for one will run 
on the other; and that doesn't require the packages to be anywhere close 
in terms of a binary compare; the CentOS test includes more than that.)  
The following post from 2011 points to the info on how the CentOS 
project has historically done the binary compatibility test: 
http://lists.centos.org/pipermail/centos/2011-April/109483.html (the 
actual script has been moved to vault; see 
http://vault.centos.org/4.9/build/distro/tmverifyrpms for the actual 
script, dated March 10, 2011).


Further, '100% binary compatibility' to me means that 100% of the 
software built for one will run absolutely unmodified with identical 
behavior on both systems (the binaries built on one are 100% compatible 
with the other).  Compatible doesn't mean and has never meant identical 
at the byte for byte compare level.


...

No one yet in this thread has provided a public, no
login required, link to up-to-date sources for SLES 11.

Yes, you keep bringing this up as if it were an argument.


It's a valid counter-example.  If the violation of not publicly 
releasing source RPMS and tying subscription status with continued 
access were so egregious then SuSE would have been sued into oblivion 
long ago, and the absence of such suits makes it more difficult for the 
argument to be made that Red Hat, which is making up-to-date sources 
available, is violating where SuSE is not (which does not make 
up-to-date sources available).


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Lamar Owen

On 07/01/2014 11:54 AM, Yasha Karant wrote:

From:

http://en.wikipedia.org/wiki/GPL#Copyleft

Conversely, if one distributes copies of the work without abiding by 
the terms of the GPL (for instance, by keeping the source code 
secret), he or she can be sued http://en.wikipedia.org/wiki/Lawsuit 
by the original author under copyright law.


End quote.


From the gnu.org GPL FAQ:

Does the GPL require that source code of modified versions be posted to 
the public?


   The GPL does not require you to release your modified version, or
   any part of it. You are free to make modifications and use them
   privately, without ever releasing them. This applies to
   organizations (including companies), too; an organization can make a
   modified version and use it internally without ever releasing it
   outside the organization.

   But /if/ you release the modified version to the public in some way,
   the GPL requires you to make the modified source code available to
   the program's users, under the GPL.

   Thus, the GPL gives permission to release the modified program in
   certain ways, and not in other ways; but the decision of whether to
   release it is up to you.

...

If I know someone has a copy of a GPL-covered program, can I demand he 
give me a copy?


   No. The GPL gives him permission to make and redistribute copies of
   the program /if he chooses to do so/. He also has the right not to
   redistribute the program, if that is what he chooses.

...

Does the GPL allow me to sell copies of the program for money?

   Yes, the GPL allows everyone to do this. The right to sell copies is
   part of the definition of free software. Except in one special
   situation, there is no limit on what price you can charge. (The one
   exception is the required written offer to provide source code that
   must accompany binary-only release.)

Does the GPL allow me to charge a fee for downloading the program from 
my site?


   Yes. You can charge any fee you wish for distributing a copy of the
   program. If you distribute binaries by download, you must provide
   “equivalent access” to download the source—therefore, the fee to
   download source may not be greater than the fee to download the binary.

...

If I distribute GPL'd software for a fee, am I required to also make it 
available to the public without a charge?


   No. However, if someone pays your fee and gets a copy, the GPL gives
   them the freedom to release it to the public, with or without a fee.
   For example, someone could pay your fee, and then put her copy on a
   web site for the general public.

...
End of quotes.

This last point is the real meat, and is the issue which is so 
controversial. And that issue of 'does a vendor have to right to draw up 
a terms of use for a means of access to software that makes not 
redistributing materials obtained via that means a condition for 
continued use of that means of access?' There's an old posting that 
somewhat addresses this, but not for this current exact situation: 
http://linuxmafia.com/faq/RedHat/rhel-isos.html


I am not a JD (or equivalent in any nation-state), but I do teach the 
professional computer science ethics course my School (Department) 
uses to meet ABET accreditation. This includes an article by Stallman 
on the concepts of free software. 


This is laudable, and I'm glad someone is doing this. I am a member of a 
committee developing certification standards for accreditation of some 
computer-related educational fields, and having the ethics of various 
IT/IS/CS/CE/SE situations dealt with in depth is critical, and something 
I've lobbied for. I'm a very 'free' leaning person, actually, as it 
would be my preference for all software to be free in the freedoms 0-3 
sense of the word free. I'm also a realist and I know that there are 
tradeoffs made in real life that idealists forget to their detriment.


My understanding is that under the GPL the full source code must be 
made available -- full, including whatever is required to build the 
software application. 


Of course then you also know that that does not include certain pieces 
of the operating system, like the compiler and kernel used, although the 
exact versions of those must be noted (RPMs 'note' those versions 
through build and install dependencies).


Thus, the statement that the actual binaries for non-Red Hat RHEL that 
are built (before the actual clone distribution that no longer uses 
the Red Hat logos, etc.):


RH sometimes uses an unreleased version
of bar in order to build foo. Rebuilders like CentOS and SL have to
make do with the released version of the bar srpm in order to build
foo. (From:

Date: Tue, 1 Jul 2014 05:05:56 -0400
Message-ID: 
CAOdo=SzsNsJWn2c-u+sjE_tigvGhVe0_=_hy_5gcgej38kn...@mail.gmail.com

Subject: Re: Clarity on current status of Scientific Linux build
From: Tom H tomh0...@gmail.com )

End quote

seems to violate the GPL as there is a (very important) bit of source 
code that is 

Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread jdow

On 2014-07-01 08:16, Patrick J. LoPresti wrote:

On Tue, Jul 1, 2014 at 6:17 AM, Lamar Owen lo...@pari.edu wrote:

...


That's part of the
reason the CentOS team has changed the statement '100% binary compatible' to
'functionally compatible' since they do mean different things, but the
latter is more indicative of reality than the former ever has.


The *goal* of CentOS used to be binary compatibility, even if it was
never 100% achieved. Since the acquisition by Red Hat, that is no
longer even the goal, for obvious reasons.


Pat, this is nominally impossible with modern compilers as I discovered a
long time ago. The compilers I am used to embed a time stamp in the various
files compiled. This time stamp will differ between machines used to compile
the code. So when you perform the binary compare you will hit errors. The
compiler on which I discovered this first (Microsoft C7) the embedded dates
were not even the same length. So once I hit that difference the binary
compare was broken for the rest of the file. If GNU C has this same feature
prattling about binary identity and so forth is nonsense.

...


  - Pat



It is good that some of these issues are being aired. But some of the issues
raised smokescreen other more pertinent and substantive issues such as RHEL
traceability. (In the hardware world I infested long ago all test equipment
had to be calibrated in a manner traceable to NBS (now NIST). That issue was
solved.) This RHEL traceability issue is significant as is traceability back
to creators for non-RHEL code replacements for RHEL proprietary software and
for any add-on software provided by sources in the path from SL back to RHEL.
Fussing about binary compatibility is needless obfuscation.

The issue at its base is who do you trust? It helps to know who is asking
you to trust when you make that decision.

{^_^}   Joanne


Re: Clarity on current status of Scientific Linux build

2014-07-01 Thread Patrick J. LoPresti
On Tue, Jul 1, 2014 at 5:09 PM, jdow j...@earthlink.net wrote:
 On 2014-07-01 08:16, Patrick J. LoPresti wrote:

 The *goal* of CentOS used to be binary compatibility, even if it was
 never 100% achieved. Since the acquisition by Red Hat, that is no
 longer even the goal, for obvious reasons.

 Pat, this is nominally impossible with modern compilers as I discovered a
 long time ago.

Incorrect.

 If GNU C has this same feature

It does not, and it never has.

See https://wiki.debian.org/ReproducibleBuilds or
https://blog.torproject.org/category/tags/deterministic-builds or
http://www.chromium.org/developers/testing/isolated-testing/deterministic-builds
or just try a search of your own.

 prattling about binary identity and so forth is nonsense.

Before accusing someone of prattling about a topic, may I suggest
learning something about it?

 This RHEL traceability issue is significant as is traceability back
 to creators for non-RHEL code replacements for RHEL proprietary software and
 for any add-on software provided by sources in the path from SL back to
 RHEL.

No, traceability is the irrelevant side issue here. (Granted, binary
reproducibility is also a side issue; just one where you happen to be
wrong.)

Once again, the only relevant question is whether and how Scientific
Linux can be a rebuild of Red Hat Enterprise *and not CentOS*, when
Red Hat's clear motivation and intention is to make those different
things.

 The issue at its base is who do you trust?

Whom. OK OK too pedantic.

I trust the Scientific Linux team. Obviously, I do not trust Red Hat
which includes CentOS. Time will tell how well my trust is placed.

 - Pat