Re: Strawman: merge main and universe

2007-12-18 Thread Mark Shuttleworth

Scott James Remnant wrote:

The distinction between main and restricted is done based on licensing:
software in main fulfils the necessary freedoms for modification and
redistribution, software in restricted may not.
  

[snip]

I therefore propose an alternative.

We move all packages from universe into main, and remove the universe
component.  Likewise packages from multiverse are moved into restricted,
and multiverse removed.

Instead, we define who provides what kind of support through meta-data.
  
I think separately-maintained metadata is the right way to solve the 
problem of what are we communicating about package X. Even components 
fail to communicate tricky things like the difference in maintenance 
windows for desktop and server on an LTS release - gnome-gpg is in main, 
and apache is in main, but they are formally maintained for different 
lengths of time, and there's no way to have the system generate a report 
of that for you.


Metadata, published separately and used by the full set of apps that 
need to communicate this to the end-user, would be a good solution.


[snip]

What about upload privileges?

Let's do those the same way.
  

-1, and loudly.

I do think we need a richer privileges system for upload - we 
specifically need to solve the problem that people who care about a 
package in universe don't lose the ability to tend to it when it moves 
to main. But that should be the exception, rather than the rule. In 
other words, I would layer explicit additional permissions for packages, 
and (small) sets of packages, on top of our existing main/universe 
permissions. That way, when a package, or small set of tightly-linked 
packages, wants to migrate from universe to main, it can come with a 
dedicated group who can continue to upload to it even though it's in main.


I don't want to see a general move to seed-based permissioning, because 
while the seeds themselves are relatively stable, their dependencies can 
flap all over the show, and I don't want to have to try to resolve those 
issues, nor do I want people to have any incentive to define 
dependencies to achieve ulterior policy goals.


Mark
-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: Strawman: merge main and universe

2007-12-14 Thread Matt Zimmerman
On Wed, Dec 12, 2007 at 10:24:56PM +, Scott James Remnant wrote:
 The distinction between main and universe is instead done based on
 support.  But what does this actually mean?

Our terminology on this needs a bit of cleanup, but the relevant distinction
here is maintenance.  This means that, for example, a security
vulnerability in the package will be fixed, and this is backed up by a
commitment from Canonical (which has dedicated resources to this
maintenance).

 What about support for fixing bugs?  We actually don't like to do that
 very much, we only have limited updates to our stable release.  This
 surprises most people who think this is what support means.

We do need to do a better job of both communicating our maintenance
practices and ensuring that they meet expectations.  There is work in
progress to change this for 8.04 LTS.

 We move all packages from universe into main, and remove the universe
 component.  Likewise packages from multiverse are moved into restricted,
 and multiverse removed.
 
 Instead, we define who provides what kind of support through meta-data.

 We have generated lists of packages already, the seeds.  In fact, it's
 these seeds that (by a manual process) result in packages being divided
 between main and universe right now.
 
 So let's just use these to determine the types of support provided.

This seems sensible to me; Debian-style components are unwieldy to work
with, as they are closely tied to the way the archive is published.  We
should be able to change a declaration of maintenance without moving files
around on a web server, and the placement of the files isn't a very good way
of communicating this information.

 Canonical can declare that it provides commercial support for the
 ubuntu-desktop, ubuntu-server, ubuntu-mobile and kubuntu-desktop seeds
 (and any others we support that I forgot).  It can also declare what
 date that support ends.
 
 Other companies and groups can declare their own support based on the
 existing seeds, or just branch the bzr repository and make their own
 (the seeds are public, and the tool to generate complete package lists
 is also public).
 
 The Ubuntu Security team can declare which seeds they provide security
 support for at which levels.

All reasonable.

 The packaging tools can then use this information to show appropriate
 information to the user; they'll know the package they are installing is
 supported for a further 12 months by Canonical, a further 18 months by
 another company or group; Security support is provided by the Ubuntu
 security team for 12 months and critical bug fixes are no longer
 provided.

This is tricky.  In order to be effective, this needs to be communicated all
the way from apt-cache up through gnome-app-install in a reasonably
consistent way.

 What about upload privileges?
 
 Let's do those the same way.

Sounds elegant enough, though I wonder about automatically granting upload
privileges based on a new dependency.

-- 
 - mdz

-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss


Re: Strawman: merge main and universe

2007-12-13 Thread Matthias Klose
Scott James Remnant schrieb:
 I'd like to make a strawman proposal to be torn apart and burnt as
 necessary: merge main and universe.  I will try and explain my
 rationale, and my alternate proposal.

+1

We apparently have difficulties to communicate that this separation was done
only for the support case mentioned. two examples for universe not being 
ubuntu:

 - distrowatch.com treats universe as non-existant (I contacted them, but
   they didn't want to change their mind).

 - Fedora did get good feedback by integrating extras into core; while
   not directly comparable you can see the some impact on integrating the
   community.

Matthias



-- 
Ubuntu-devel-discuss mailing list
Ubuntu-devel-discuss@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss