I think we're getting way off topic here. The fundamental issue in this
bug report is that the policy being employed when building the mainline
kernels does not follow the policy documented. Either the mainline
builders need to start following the policy (and building on LTS) or
change the policy (and continue building on Ubuntu "next").

If you use my PPA and have questions about it, then please open an issue
on the github project here: https://github.com/TuxInvader/focal-
mainline-builder

DanglingPointer (cool handle) is correct in a lot of what he said, there
is no inherent trust conveyed through the PPA system. Any one can setup
a PPA and upload software packages to launchpad. Downloading software
from a PPA is little different to downloading a snap or binary package
from a website. You need to decided whether you want to trust the
origin. I would like to point out the following though:

1. PPAs aren't compiled in the uploaders basement, a source package is
built and uploaded to the PPA and then the compilation takes place on
launchpad. I'm not suggesting this is more secure obviously. I could
still have messed with the source package ;-)

2. Kernel PPAs are not more of a threat to your system than any other
PPA. Your kernel runs your hardware and has full access to the system,
but does a malicious kernel module have more access to your data (read
the stuff you care about) than your user account? Beware of all PPAs,
not just ones which package kernels.

In the interest of transparency, I have reverted my docker container to
use the official dwarves package. If you want to use my container to
build your kernel you can now see everything it does, it is after all a
shell script.

If you chose to continue using my PPA, then I would also point out that
those binaries are built using my dwarves package, because that's just
how launchpad works.

Cheers :-)

PS. If you're not using 5.12.x, then you may have noticed that mainline
hasn't built any packages for a while, 5.11.x and 5.10.x started failing
around the time they switched to impish, and coincided with the build
machine running out of disk space. I opened a report here:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1928535

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1926938

Title:
  Recent mainline packages are built with Hirsuite 21.04, not Focal
  20.04 LTS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1926938/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to