Re: backintime: Where are the sources from?

2022-08-27 Thread Little Girl
Hey there,

c.bu...@posteo.jp wrote:
>Am 27.08.2022 18:04 schrieb Little Girl:

>> Launchpad is used by Ubuntu for managing projects, which can
>> include storing the packages

>I think that is the key information for me. It wasn't clear for me
>that Launchpad is "official Ubuntu".

Yep. It's owned by Canonical Ltd., which is the company that produces
Ubuntu:

https://en.wikipedia.org/wiki/Launchpad_(website)

-- 
Little Girl

There is no spoon.

-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu


Re: backintime: Where are the sources from?

2022-08-27 Thread c . buhtz

Dear "Little Girl",

thank you for your reply.

Am 27.08.2022 18:04 schrieb Little Girl:

Launchpad is used by Ubuntu for managing
projects, which can include storing the packages


I think that is the key information for me. It wasn't clear for me that 
Launchpad is "official Ubuntu".


--
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu


Re: backintime: Where are the sources from?

2022-08-27 Thread Little Girl
Hey there,

c.bu...@posteo.jp wrote:

>What I want to know is how can I be sure where the ubuntu package
>got its sources from. I assume it isn't upstream everytime!

The commands and link that I had originally given you often provide
links to the source locations. Also, the version number of a package
may correspond with or be similar to an upstream version, which may
provide a clue. But as Athos pointed out, there's no way to know
whether that source will remain available or whether the developers
have changed the source file after Ubuntu grabbed a copy of it or
will change it at any time. It may sometimes be necessary to contact
the maintainer for more information.

>For example backintime: Upstream is at GitHub. But there are also 
>sources on Launchpad. That is what confuses me.

GitHub is one of a number of places where upstream developers put the
code that they work on. Launchpad is used by Ubuntu for managing
projects, which can include storing the packages (sometimes fetched
from GitHub and then packaged by Ubuntu) used in its releases.

-- 
Little Girl

There is no spoon.

-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu


Re: backintime: Where are the sources from?

2022-08-27 Thread Little Girl
Hey there,

c.bu...@posteo.jp wrote:

>Why does Ubuntu use Launchpad in that case? Why this step between?
>Why not using the sources directly from ubstream?

I believe that the packages are often taken from upstream, but
Launchpad contains copies of the packages at the versions and in the
approved state that they were in at the time of that Ubuntu release
rather than their current upstream version or state. It's basically a
snapshot of all of the approved and usable packages at a specific
moment in time.

This provides a solid reference, a reliable resource, helps with
troubleshooting, and helps with decision-making for potential changes
after release. There are probably other advantages that I missed.

>And one sidequestion: Why does debian build its own package for 
>backintime? It is in Debian? Why not use the Debian package? Isn't 
>Ubuntu "based on Debian"?

Every package in Ubuntu must meet the Ubuntu Packaging Guide
standards and the current system of packaging or repackaging them
ensures that they all do:

https://packaging.ubuntu.com/html/

There are teams that do that sort of thing, but it can also be done
by any individuals and then approved by folks from those Ubuntu
teams, so this page might also be useful:

https://wiki.ubuntu.com/UbuntuDevelopment/NewPackages

-- 
Little Girl

There is no spoon.

-- 
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu


Re: backintime: Where are the sources from?

2022-08-27 Thread Athos Ribeiro

On Sat, Aug 27, 2022 at 05:52:43AM +, c.bu...@posteo.jp wrote:

Dear Athos,

thanks for explaining.

Why does Ubuntu use Launchpad in that case? Why this step between? Why 
not using the sources directly from ubstream?


While I am not in a position to give you a final answer to your
question, given I was not, and am not involved in launchpad development,
distributing software usually involves being able to reproduce builds,
or rebuild a component with fixes or with fixed dependencies. It is also
important to be able to trace components for security reasons. If you'd
just fetch the source code for a given package from an external source
and build a binary from it without caching these sources somehow, you
would need to fetch the same sources again in case you need to patch or
rebuild that software component. At this point, you would be trusting
that this external source will always be available, and that it will
never change.

And one sidequestion: Why does debian build its own package for 
backintime? It is in Debian? Why not use the Debian package? Isn't 
Ubuntu "based on Debian"?


Please, read

https://wiki.ubuntu.com/UbuntuDevelopment;
https://wiki.ubuntu.com/Ubuntu/ForDebianDevelopers; and
https://wiki.ubuntu.com/Debian/ForUbuntuDevelopers

--
Athos Ribeiro

--
Ubuntu-motu mailing list
Ubuntu-motu@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu