Re: third-party packages adding apt sources

2016-05-19 Thread Vincent Bernat
❦ 19 mai 2016 18:04 +0100, Ian Jackson  : >> b) many upstreams appear frustrated about getting their package >> officially supported in Debian. Sometimes there is good reason their >> package doesn't belong in Debian but sometimes it is more about inertia >> in Debian or the upstream isn't aware

Re: third-party packages adding apt sources

2016-05-19 Thread Vincent Bernat
❦ 19 mai 2016 16:39 GMT, Bas Wijnen  : > Debian stable is for users who want a rock solid system. It is out of date by > the nature of how it is built. Users who want to get the newest versions of > their software should not be running stable; testing is probably better for > them. testing is

Re: third-party packages adding apt sources

2016-05-19 Thread Mike Hommey
On Thu, May 19, 2016 at 04:39:24PM +, Bas Wijnen wrote: > > Hell, teams packaging Mozilla-soft and PostgreSQL are DDs maintaining > > *external archives* because it's easier. > > This indicates that our procedures are too hard. That needs to be fixed. > Maybe people from those teams are readi

Re: third-party packages adding apt sources

2016-05-19 Thread Ian Jackson
Paul Tagliamonte writes ("Re: third-party packages adding apt sources"): > [cc'ing devel, since this is a rant that involves technical topics, and > god knows I only go on so many rants a year these days] I think you may have only BCC'd -devel, or something. > > Sometimes there is good reason th

Re: third-party packages adding apt sources

2016-05-19 Thread Ian Jackson
Bas Wijnen writes ("Re: third-party packages adding apt sources"): > On Thu, May 19, 2016 at 07:15:01PM +0200, Daniel Pocock wrote: > > Another thing comes to mind: making sure that even if the user > > explicitly allows some other repository, they are protected from package > > updates that come a

Re: third-party packages adding apt sources

2016-05-19 Thread Russ Allbery
Daniel Pocock writes: > Another thing comes to mind: making sure that even if the user > explicitly allows some other repository, they are protected from package > updates that come along and replace other things like apt itself, libc, > bash, gnupg, ... While this would be nice to prevent accid

Re: third-party packages adding apt sources

2016-05-19 Thread Ian Jackson
Daniel Pocock writes ("Re: third-party packages adding apt sources"): > On 19/05/16 19:04, Ian Jackson wrote: > > Debian proper has a very high bar for inclusion. Obviously there are > > perhaps some packages which are close to suitable for inclusion, but > > the vast majority of things that aren'

Re: third-party packages adding apt sources

2016-05-19 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, May 19, 2016 at 07:15:01PM +0200, Daniel Pocock wrote: > Another thing comes to mind: making sure that even if the user > explicitly allows some other repository, they are protected from package > updates that come along and replace other thing

Re: third-party packages adding apt sources

2016-05-19 Thread Hakan Peker
On 05/19/2016 06:18 PM, Daniel Pocock wrote: More and more frequently I'm encountering systems where third-party repositories have been added into /etc/apt/sources.list or /etc/apt/sources.list.d, usually put there by some .deb package that a user installed from some third party site. Hey, Th

Re: third-party packages adding apt sources

2016-05-19 Thread Daniel Pocock
On 19/05/16 19:04, Ian Jackson wrote: > Daniel Pocock writes ("third-party packages adding apt sources"): >> b) many upstreams appear frustrated about getting their package >> officially supported in Debian. Sometimes there is good reason their >> package doesn't belong in Debian but sometimes i

Re: third-party packages adding apt sources

2016-05-19 Thread Ian Jackson
Daniel Pocock writes ("third-party packages adding apt sources"): > b) many upstreams appear frustrated about getting their package > officially supported in Debian. Sometimes there is good reason their > package doesn't belong in Debian but sometimes it is more about inertia > in Debian or the up

Re: third-party packages adding apt sources

2016-05-19 Thread Adam D. Barratt
On 2016-05-19 17:39, Bas Wijnen wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, May 19, 2016 at 11:46:53AM -0400, Paul Tagliamonte wrote: [cc'ing devel, since this is a rant that involves technical topics, and god knows I only go on so many rants a year these days] You didn't a

Re: third-party packages adding apt sources

2016-05-19 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, May 19, 2016 at 11:46:53AM -0400, Paul Tagliamonte wrote: > [cc'ing devel, since this is a rant that involves technical topics, and > god knows I only go on so many rants a year these days] You didn't actually do this. > > Sometimes there is

Re: third-party packages adding apt sources

2016-05-19 Thread Holger Levsen
On Thu, May 19, 2016 at 08:45:09AM -0700, Russ Allbery wrote: > I don't think we can provide that inside Debian, at least without some > pretty significant changes to how we handle stable releases that are > contrary to some of our goals for stable. I think I heard someone saying "PPA" or such… ;

Re: third-party packages adding apt sources

2016-05-19 Thread Paul Tagliamonte
[cc'ing devel, since this is a rant that involves technical topics, and god knows I only go on so many rants a year these days] On Thu, May 19, 2016 at 05:18:28PM +0200, Daniel Pocock wrote: > b) many upstreams appear frustrated about getting their package > officially supported in Debian. Yeah,

Re: third-party packages adding apt sources

2016-05-19 Thread Russ Allbery
Daniel Pocock writes: > b) many upstreams appear frustrated about getting their package > officially supported in Debian. Sometimes there is good reason their > package doesn't belong in Debian but sometimes it is more about inertia > in Debian or the upstream isn't aware about backports and thi

third-party packages adding apt sources

2016-05-19 Thread Daniel Pocock
More and more frequently I'm encountering systems where third-party repositories have been added into /etc/apt/sources.list or /etc/apt/sources.list.d, usually put there by some .deb package that a user installed from some third party site. There are a few things going on here: a) the .deb forma