I worry about Debian’s future. The infrastructure of the project is slow moving and baroque. Not many people want to learn it to become maintainers. Michael Stapelberg’s blog post about leaving Debian describes the general issue of using tooling and process with 1994 leverage to tackle problems with 2022 scale, does not sound fun: https://michael.stapelberg.ch/posts/2019-03-10-debian-windin... I tried to get into Deb…
The Delusions of Debian
41–50 of 62 posts
Re: The Delusions of Debian
#42This article is full of inaccuracies and errors. > Due to the sheer size of the current Debian release it is infeasible for a small team to be able to audit all the packages, so there is a system of prioritizing packages which are more security sensitive. This was, at best, poor communication. Of course nobody would ever audit all of 90,000 packages, easily billions of LOC. Especially not when the vast majority of th…
> This was, at best, poor communication. Of course nobody would ever audit all of 90,000 packages, easily billions of LOC. Especially not when the vast majority of these packages have a very small user base.
How is that any different? It rather sounds like you've restated the same thing and then claimed the author's wrong.
Re: The Delusions of Debian
#43It's the same deal with Debian and systemd. It's not the init system. It's the thing it represents. Having to either adopt systemd or run GNOME in an unsupported configuration seems like a clear-cut choice (which is why systemd is now the Debian default), but having a major upstream force you to significantly rearchitect the distribution seems like a pretty significant loss of control. This is at the same time as other upstreams have gradually ripped control out of the hands of Debian developers in other ways: Firefox, librsvg, and python-cryptography adopting Rust suddenly made it a lot harder to support a bunch of niche CPU architectures. Speaking of Rust, and also Go, they use static linking and have their own library package managers, which both makes it harder for Debian to package and simultaneously easier for users to install a binary directly provided by upstream. And languages that don't have static linking support can always use Docker.
Honesty, I wouldn't want to be a Debian developer right now. Red Hat has tried to reinvent themselves in a world of containers, but since Debian is a volunteer organization and not a corporation, it's a lot harder to pivot (attempting to pivot would probably cause all their existing volunteers to quit, while failing to attract new ones). What sort of future does Debian even have, if they have no decision-making power over the core OS, and all the applications route around them?
Re: The Delusions of Debian
#44Devuan is in rank 32 on distrowatch. What distros haven't moved to systemd at this point? I would appreciate a list so I never use them thanks. How badass is Lennart Poettering? Dude just says alright I'm going to improve upon the craptacular init system. He follows through and the whole world starts using his software. That dude is a legend and he's only 41. Devuan forked in 2015 and is basically a non-existent dist…
>What distros haven't moved to systemd at this point? The one that has the biggest impact on my life is Alpine, because I run postmarketOS on my phone which is an Alpine derivative. It has OpenRC instead, which doesn't have the ability to auto-restart crashed services (it doesn't do any action when a service crashes, by design), doesn't do socket activation, and doesn't support running as a user instance for a user s…
Ok, that's a fair. My python projects refused to work on alpine so Ihavent tried it.
Re: The Delusions of Debian
#45Re: The Delusions of Debian
#46This article is full of inaccuracies and errors. > Due to the sheer size of the current Debian release it is infeasible for a small team to be able to audit all the packages, so there is a system of prioritizing packages which are more security sensitive. This was, at best, poor communication. Of course nobody would ever audit all of 90,000 packages, easily billions of LOC. Especially not when the vast majority of th…
>> Due to the sheer size of the current Debian release it is infeasible for a small team to be able to audit all the packages, so there is a system of prioritizing packages which are more security sensitive. > This was, at best, poor communication. Of course nobody would ever audit all of 90,000 packages, easily billions of LOC. Especially not when the vast majority of these packages have a very small user base. How…
Re: The Delusions of Debian
#47For a daily driver always buy a ThinkPad, a year old model when new stable comes out, and use it as long as possible.
For servers, run the latest stable with minimal packages from main and occasionally few from backports.
Build from source/ download from upstream where Debian packages are available (specially browsers).
Reliable kernel, coreutils, vim and gcc from Debian stable, git + ooenssh from backports, tmux built from source, golang and "go get xyz" is mostly what I need. (I understand this can be too minimalist for many, but works for me).
I have a hobby website using fossil, running on 8year old SBC running bullseye.
At work, almost all bullseye docker images on minimal Bullseye running Dockerd. PostgreSQL, Redis, and few more central piece of software work fine with Debian.
Low maintenance, reliable systems that I seek, and Debian has never failed me.
Ahh and yes, when I need bleeding age, Arch is what I go to, but won't be running a daily driver machine or server on it. It's too fast for me to keep pace with.
I can safely say I have more peace of mind with free Debian than any paid OS I used (taken together with application ecosystem). All systems have their own pros and cons. I just picked what worked best for me, I am thankful for that and wish Debian project never runs out of great people.
Re: The Delusions of Debian
#48I worry about Debian’s future. The infrastructure of the project is slow moving and baroque. Not many people want to learn it to become maintainers. Michael Stapelberg’s blog post about leaving Debian describes the general issue of using tooling and process with 1994 leverage to tackle problems with 2022 scale, does not sound fun: https://michael.stapelberg.ch/posts/2019-03-10-debian-windin... I tried to get into Deb…
Some of these issues are well known in Debian and being addressed; https://salsa.debian.org/debian/grow-your-ideas/-/issues
Re: The Delusions of Debian
#49If your marriage is ending over a toilet paper roll... it's not actually about the toilet paper roll. It's the same deal with Debian and systemd. It's not the init system. It's the thing it represents. Having to either adopt systemd or run GNOME in an unsupported configuration seems like a clear-cut choice (which is why systemd is now the Debian default), but having a major upstream force you to significantly rearchi…
1. "GNOME in unsupported configuration" is, with due respect, FUD.
2. There was no dichotomous choice to make. Debian could have let you decide whether or not to install systemd. Instead, the project decided to essentially force the use of systemd, necessitating a fork.
3. "suddenly made it a lot harder to support a bunch of niche CPU architectures" 4. Language-related package manager do make things difficult for an OS distribution, at least somewhat - but that's not particular to Debian.
However - I actually agree with your main point. I'm sure Debian maintainers/developers have it hard.
I really wish Debian would:
1. Admit the Devuan people were right and re-merge the distributions.
2. Recruit, offering a self-training track for aspiring package maintainers.
3. Modernize some of their tooling (as people seem to be complaining about that)
4. Fundraise effectively, to finance the above.
Re: The Delusions of Debian
#50Devuan is in rank 32 on distrowatch. What distros haven't moved to systemd at this point? I would appreciate a list so I never use them thanks. How badass is Lennart Poettering? Dude just says alright I'm going to improve upon the craptacular init system. He follows through and the whole world starts using his software. That dude is a legend and he's only 41. Devuan forked in 2015 and is basically a non-existent dist…