Live data from Hacker News

Why is Debian the way it is?

blog.liw.fi

141–150 of 198 posts

Re: Why is Debian the way it is?

#141
post #107

Earlier quoted context omitted.

Quirky, clunky tooling with a bunch of arbitrary shit you have to memorize to use correctly. People enjoy that kind of thing after they learn it.

Enjoy? No. But yeah, it gets easier once you've done it a few times.

Not really enjoy doing, but enjoy knowing arcane shit even if it doesn't make sense.

Re: Why is Debian the way it is?

#142
post #65
post #61

Earlier quoted context omitted.

With many other non-copyleft alternatives shaping up, and systems like ChromeOS and Android, with the Linux kernel and completely unrelated userspace, I firmly believe when our generation is gone, Linux won't stay around on its present form for much longer.

I wonder if the end-game is a BSD, or some sort of hard fork of the Linux ecosystem. Ubuntu and RedHat basically don’t work by any of my definitions of “work”. They’re both enterprisey and bloated and flaky in all the ways Windows was in the 90’s, except they add flatpack/snap, letting each program be its own flaky OS install, compounding the problem. Want to save a file to ~? Read this 1000 page tome on the 21 succe…

[dead]

Re: Why is Debian the way it is?

#143
post #67

Debian's policies also led to a heavily restricted version of RetroArch being available instead of the real version. Specifically, RetroArch has its own package management functionality built-in through its "Core Updater" feature, which downloads and installs emulators in the form of library files. This is banned by Debian because it sidesteps the whole package manager system. Meanwhile, you can still build the full…

Weird that that was considered an issue while KDE Discover and snapd will both happily install stuff from third-party "stores" by default on Debian.

Re: Why is Debian the way it is?

#144
post #132

Earlier quoted context omitted.

> If your goal is to distribute software across multiple distros and operating systems, bundling dependencies makes sense. Of course, an important "exception to the exception" is when you're making software that can easily be distributed by distributions, e.g. because it's end user software and open source. I think the optimal cases for bundled dependencies are (a) large closed source binaries that never change, like…

> is when you're making software that can easily be distributed by distributions, e.g. because it's end user software and open source. I have trouble understanding why this is desirable for either authors or end users. Even for open source end user applications, I want the software that I'm running to be reflective of the software that was authored and not the software that some distro maintainers think it should be.

> I want the software that I'm running to be reflective of the software that was authored

I don't. As an end-user, I couldn't care less about what the author wanted, I want to run the best possible version of the software. Often that's the version maintained by my distro, as they've put in the effort to make sure all the different software on my system works well together.

Re: Why is Debian the way it is?

#145
post #136

Earlier quoted context omitted.

I think either approach makes sense depending on who you are. If your goal is to distribute software across multiple distros and operating systems, bundling dependencies makes sense. If your goal is to maintain a distro, shared libraries that you can apply a security patch to exactly once is obviously better. But these are two different people with either goal.

What about the user? If your goal is to consume software for which you need long term reliability, accepting software that bundles an unmaintainable (to you) set of dependencies does not make sense. Unless you have no better option [edit: or if you're paying to delegate your problems to someone else I suppose]. As a user, using software sources that make the same choices Debian makes is always preferable for you if t…

Engineering tradeoffs are always tradeoffs. One is not strictly better than the other from the user's perspective.

Mandating shared dependencies means that Debian is often running software against a dependency version that the original author did not develop against or test against. Sometimes the Debian package is effectively a fork. This results in Debian-specific bugs which get reported upstream. Distribution-specific bugs are a crappy experience for upstream developers because it wastes their time, and it's a crappy experience for users to be told that their software cannot be supported upstream because it's a fork.

Maintaining a huge repository of forked software is also an enormous undertaking. It's common for Debian users to be running fairly old versions of software. This is also not ideal, particularly for desktop users who read upstream documentation and require support when entire features are missing from their antique Debian version.

Re: Why is Debian the way it is?

#146

What I don't like in Debian: - 3rd-party software is not welcome; there is no mechanism for installing it securely because you are supposed to either install software from official repository or compile what you have written yourself. For example, if you want to install Sublime Text, or VS Code, there is no way to do it securely, without giving untrusted software access to your browser history and SSH keys. Of course…

> For example, if you want to install Sublime Text, or VS Code, there is no way to do it securely, without giving untrusted software access to your browser history and SSH keys. First, if you don't trust a bit of software, why are you installing it? But more importantly - you don't want your text editor to be able to open and edit your browser history files, or your ssh key files? If my text editor wasn't able to ope…

> First, if you don't trust a bit of software, why are you installing it?

The more people you trust, the larger is the chance that you get deceived.

> But more importantly - you don't want your text editor to be able to open and edit your browser history files, or your ssh key files?

Only with my permission.

Re: Why is Debian the way it is?

#147

What I don't like in Debian: - 3rd-party software is not welcome; there is no mechanism for installing it securely because you are supposed to either install software from official repository or compile what you have written yourself. For example, if you want to install Sublime Text, or VS Code, there is no way to do it securely, without giving untrusted software access to your browser history and SSH keys. Of course…

> For example, if you want to install Sublime Text, or VS Code, there is no way to do it securely, without giving untrusted software access to your browser history and SSH keys. First, if you don't trust a bit of software, why are you installing it? But more importantly - you don't want your text editor to be able to open and edit your browser history files, or your ssh key files? If my text editor wasn't able to ope…

Even if you trust the developer (I don't), there is a chance that there is a bug or vulnerability in the software. Also you need to install different plugins from random anonymous guys from Github, and it is difficult to trust an anonymous person.

Re: Why is Debian the way it is?

#148
post #24

I just switched to Debian this year after ~13 years of Ubuntu, and I really appreciate it It grew on me after a long time. I always thought it was not the most "technically sound" way of doing things i.e. I don't really like the packaging model of global updates where you don't know what's going on, and sometimes there are version conflicts But I have come to appreciate the stability and good intentions of the Debian…

> version conflicts

What are you getting conflicts on? Unless you’re pulling from Sid, and did something fun like upgrading libc6, you shouldn’t see version conflicts if everything was installed via apt.

Re: Why is Debian the way it is?

#149
post #136

Earlier quoted context omitted.

What about the user? If your goal is to consume software for which you need long term reliability, accepting software that bundles an unmaintainable (to you) set of dependencies does not make sense. Unless you have no better option [edit: or if you're paying to delegate your problems to someone else I suppose]. As a user, using software sources that make the same choices Debian makes is always preferable for you if t…

Engineering tradeoffs are always tradeoffs. One is not strictly better than the other from the user's perspective. Mandating shared dependencies means that Debian is often running software against a dependency version that the original author did not develop against or test against. Sometimes the Debian package is effectively a fork. This results in Debian-specific bugs which get reported upstream. Distribution-speci…

You seem to assume that Debian users are hapless and are ending up in these situations by accident. That's not true. Most users choose Debian's model because they want to use software maintained by people who care about their use cases. They use old versions of software by choice, because they want a platform that doesn't change under their feet. Others use Debian or something Debian-based because it is popular, but it is popular because of its quality as a direct result of making these choices, not despite them.

If you're an upstream who gets frustrated by Debian users, then it's worth considering why they're using Debian the first place.

There are some users who don't want this, and they tend to be the vocal minority. Debian is not the right distribution for them!

Re: Why is Debian the way it is?

#150

I personally love and use Debian exactly for its principles and stability. I have heard users of other distros and a few upstream complaint that Debian "modifies" their packages? Is it so? If yes, there surely must be a good reason. Can someone tell me about it?

There's mainly three kinds of patches: * make the software behave like Debian needs it (configuration is stored somewhere in /etc/, no additional downloads at runtime, use the system libraries instead of vendored ones) * security backports. Debian freezes the functionality at release and only provides security updates. Many software nowadays just includes security fixes in new releases bundled with new functionality.…

Another kind of patch is when a common dependency library is being updated, and laggard upstreams need patching to make their current releases work against the newer library; it's either that or a Debian release with those packages missing.

This type is actually really common. Debian packages something like 30k upstreams, and so some are always behind.

Post reply on HN