Interview: Debian Project Leader Tells All
Packaging Front End
by Christopher B. Brown
Considerable improvements have gone
into the "back end," apt-get; while
there
has been some experimentation with
gnome-apt and console-apt, there
doesn't seem
to yet be anything that
unambiguously improves on dselect in
terms of
functionality.
With the things that have been learned from those attempts, is there likely to be some sort of dselect-ng?
Wichert:
I really hope so. The reason that we don't have a
super-glitchy-totally-awesome apt frontend at the moment is that we have
nobody who is willing and able to invest the time and effort into making
it. Unlike a commercial distribution, we can't just say `oh, this would
be cool. You there! Write this for us and we'll give you some money.'
Somebody has to decide for himself that it is an interesting project and
make it. We can only encourage people to do something and be very
thankful when they do. At this moment the only interactive frontends
(that I know
off) are dselect, gnome-apt, console-apt, Corel Update (formerly/also
called
get_it) and aptitude. I would like to ab^H^Huse this opportunity to invite
people to write a good frontend or finish console-apt. The apt library
is really powerful and does everything you want it to do, the only thing
missing is the frontend...
2) When will KDE be
included in Debian?
by grrussel
Now that Qt 2 is free software,
under the QPL, will Debian include
KDE 2 when it
is released, based on Qt 2?
Wichert:
Short answer: yes. Long answer: we will include it when we're sure that
all license issues have been resolved. The QPL is a major step forward
over the previous license and allows you to use it in Free Software
projects. There is still a slight problem though: it is not compatible
with the GPL. This doesn't mean that it's not free, but it does mean
that if you want to use code that has been licensed with the GPL and
use it with something that is licensed under the QPL (like Qt) you
have a problem. There are two ways to fix that: change the license for
the GPL'ed part to add a special clause stating it is okay to do this,
or replace the GPL'ed part with something under a different license.
KDE has stated that they are indeed going to make or request the
necessary license changes so all these problems should be fixed for KDE
Once that has been done there is nothing to stop us from including KDE in Debian. Right now we are mostly waiting for the KDE team to release the first beta of KDE 2 so we actually have something to study and package.
More from grrussel
Also, do you feel it is better to keep Linux entirely DSFG free
software only, or to include software in some way restricted, such as
Pine, Qt 1.x and Netscape?
Wichert:
I'm not so worried about having non-free applications for Linux. What
does worry me is the explosion of different licenses. Everything used to
be relatively simple when almost everything was either GPL, LGPL, BSD or
MIT-licensed. But now we have the MPL, QPL, SCSL, APSL, Artistic, Wine
and other licenses as well. It seems that every time someone starts a
big project they want to have their own license. The result is more
licenses that conflict with each other in various subtle ways. A lot of
the licenses are based on the same principles, which suggests that it
would be possible to replace them with a common one. I would love to see
an effort in which people from various backgrounds would try to design a
couple of good licenses which are acceptable by both the existing Free
Software community and the commercial world.
3) Choose HURD over Linux?
by sanderb
Since you are working on both Linux (established) and the HURD
(experimental), could you please tell what the advantages of using the
HURD over Linux would be, once the HURD would near completion?
Wichert:
The HURD is a very different thing from Linux, and we will have to see what the advantages will be. Unlike Linux, the HURD is a micro-kernel
based system. (Remember the flamewars between Linus Torvalds and Andre
Tanenbaum?) This means that unlike Linux you don't have one big kernel,
but a lot of very small objects working together. This gives you a very
flexible system where various parts are easily replaced. Right now most
of the effort is being put into stabilizing the systems and building the
set of objects that will offer you a Linux-like interface to the system.
Once that has been done we will probably see more interesting
developments where non-Unix-like elements are being combined with the
other interfaces to produce.
4) RPM vs. dpkg
by Tet
What are your feelings on RPM vs. dpkg? Would it be better for Debian
to add any missing functionality to RPM, and then switch to that?
Wichert:
That's not really possible. The differences between rpm and dpkg are
bigger then just the format in which packages are stored; the
interesting differences are in the way relations between packages are
declared and how the details of package installation and removal are
done. For example, rpm allows you to have multiple versions of a single
package installed. dpkg does not allow you to do that; it demands that
you change the name of the package.
This might seem unlogical, but the result is that we can always be sure exactly what is installed and not have to worry about exactly which versions of a package are installed, and it allows us to upgrade and maintain multiple versions of a library in parallel. Another really big differences is the way package installation is done: with Debian packages there are separate scripts that are run before and after package installation and removal. Using those we can do all kinds of special-case upgrades, handle error-recovery in failed and aborted upgrades, etc.
More from Tet
In what way might Debian users benefit from sticking with dpkg over a
modified RPM with equivalent functionality?
Wichert:
It's indeed possible to modify rpm, dpkg or create a new tool to handle
both formats. Once that has been done the reason to stick to one single
tool will mostly depend on what you are used to, which one is the most
stable, etc.
More from Tet
From personal experience, the thing that really stood out in Debian
was dselect, but that could sit on top of RPM just as well as it does
on dpkg. Presumably the same applies to apt (although I haven't looked
at Debian recently enough to know about apt).
Wichert:
Apt was actually designed to be reasonably independent of package
format. It's indeed possible to modify it to use rpm-packages. One
problem with rpm-packages is that it is harder to satisfy dependency
due to the concept of file-dependencies. Instead of being able to say
`I need package b to be able to use package a' it can become `I need
file /usr/lib/libfoo.so.3.14 to be able to use package a' and then
you'll have to find some way to scan all packages to see which ones
include that file, and then you're not even sure if they have the right
version of that file..
5) Slow release cycle
by Stephen
To my mind, the main problem that Debian has to sort out is its
release cycle. It's one thing to have a well-tested distribution by
the time it's released, but it's going too far to have packages a year
or more out of date still in the current release. What steps are being
taken to address this? Or is there an expectation that everyone is
happy to use unstable?
Wichert:
The slow release cycle is indeed something we don't like and would like
to change. There have been plenty of discussions on possible new
approaches, and good proposals have been made. Unfortunately, changing
the release process is difficult.
The most popular idea is a new approach we call package pools. Instead of dividing all available packages into distributions like we do now, we put them in a single big pool. Then we create a database with information about all available packages and use that for distributions.
A distribution will then be nothing more then a Packages-file which lists the packages in the distribution. This means that we don't need to do things like move packages physically from one distribution to another or maintain a forest of symlinks; all that is necessary is to create a new Packages-file. This makes it possible to create more distributions and play with new release systems.
The only thing we would need to do is determine how the list of packages for a distribution is selected. We could use it to keep stable and unstable distributions like we have now, but we can also create new distributions such as a reasonably-stable or even things like stable-with-new-X or stable-with-new-kernel, etc. Basically it gives us a lot of possiblities to create and manage distributions, which should result in shorter and more regular release cycles.
Implementing this will take time, and we want to do something for the near future as well. What we plan to do for potato once it is released is create update-packs on a regular basis. An update-pack is a set of packages that you can install on top of stable and extend or upgrade it in some way. Examples could be a Y2K pack, a GNOME pack or a KDE pack.
6) Debian GNU/FreeBSD
by ajs
I was looking over the info on the attempt to integrate FreeBSD's
kernel, and was shocked to find that the people doing it were using
BSD libc! Since glibc was designed with a certain amount of
portability in mind, why not port glibc to FreeBSD's kernel? This
would seem to be to make the overall port MUCH easier, as the rest of
the Debian code should be far simpler to port to a different kernel
platform, but the same libc...
Wichert:
The current idea seems to be to build a small system with the FreeBSD
kernel and system utilities, and use the Linux compatibility support to
run the already existing Linux userland. With this approach you don't
have to work on most of the packages at all, which makes things a lot
simpler. The effort is still in the beginning stages though, so things
might change at some point.
7) Debian bureaucracy
by Big Dave Diode
I've been using Debian for a long time now, and I'd like to contribute
back to the project. However, I've been put off by what looks to me
like excessive bureaucracy and some infighting among Debian
developers. Are there any plans to streamline the process to become a
developer/maintainer, and the developer contribution process itself?
What about fostering a more civil peer review process?
Wichert:
I won't argue that Debian has no problems at all. We have rapidly grown
(100 people in 1995, 200 in 1997, and 500 now) from a small group of
people to a big project. That growth has indeed forced us to establish
some rules and set some guidelines. Where Debian started out with a
single mailing list we now have over 50 mailing lists, a couple of
teams with dedicated functions, a constitution, and policy guidelines.
This may sound excessive, but it's not as bad as it sounds. 99% of all decisions are announced and discussed on lists such as Debian-devel and Debian-project, and everybody is free to contribute to the discussion. Since all lists are public, you will also see people arguing a lot, and emotions can get heated at times, but I wouldn't call that infighting.
The new-maintainer process will indeed be revised. We have a proposal for a new process that will hopefully reduce the load for the new-maintainer team and also help new maintainers. I hope that we'll start using that soon. When we do, we will announce it on the Debian-announce list.
A lot of this is a learning process for everyone involved. How do you handle growing from a small group where everbody knows each other to a large group where you only know a couple of people? How do you assure that everybody is working together and no conflicts arise? How do you handle managing the necessary resources? How do you handle relations with companies? All very real issues, and we are learning at every of the road. A very interesting road, I might add.
8) Debian and Pentiums
by MoNsTeR
Is the Debian project planning, at any point, to create a Pentium-optimized release?
Wichert:
No. Some people have stated an interest in recompiling Debian with
Pentium optimization (there are even some scripts to automate that).
However we feel it doesn't make much sense for a couple of reasons:
- if you compile something with Pentium-optimization it will be faster on an Intel Pentium, and (possibly much) slower all other chips (ie AMD chips, other versions of Pentiums, etc) or simply not work at all (on 486s for example). This means that only a small group of people will benefit.
- it doesn't really help you: if you look at benchmarks you will see that only a relatively small number of programs benefit from this. So you do a whole lot of extra work and gain very little.
- If you are that crazy for speed you probably want to look for either a faster system or a different architecture. Debian has been released for the alpha,for example, which gives you a fast 64-bit architecture. Or you can try powerpc or ultrasparc.
(also by MoNsTeR)
Is the Debian project planning, at any point, to create something like a Debian-lite, that includes only a core of packages such as commonly used libraries, X, popular user agents such as mutt, lftp, and lynx, essential and popular server daemons like sendmail, yp[stuff], nfs, and apache...? Basically, a distro of similar size to the more popular distros that fit easily onto one CD.
Wichert:
Yes. This closely ties in with the archive changes I mentioned earlier:
with the current system it is hard to create a subset of the
distribution since you will essentialy have to create a tree of symlinks
into the full distribution, and managing all those symlinks is a
difficult problem. Using the package pools all we would need to do is
create a set of guidelines for what should be in Debian-lite and the
system will build it automatically.
10) Core
by Anonymous Coward
What do you feel about Corel Linux, Stormix, and other Debian-based
distributions? Do you think Debian may eventually form a common core
or base OS that others build distributions on top of?
Wichert:
I'm quite happy with all the Debian-based distributions. For both sides
it is an unusual situation: the people basing their system on Debian
can start off with a complete distribution and they don't have to
worry about maintaining that, and can focus and their specific goals.
Most of the derivates also release all their changes, which means we
get a lot of bugfixes and new things such as graphical installers,
management tools, etc. We can use those to improve Debian again, and
the cycle is round.
You could call Debian the common core on which Corel Linux, Stormix and others are based in much the same way Red Hat is the common core of Mandrake and others. Some people have mentioned it might be a good idea to use the Debian base-system as a common core for the LSB. Since Debian is a community effort this does make some sense since it means nobody will have complete control of it. If that is the best approach, or if others (or even the LSB) will accept such a situation is something I'm not sure of. We will have to see what happens.
----------
Next week's interview: Curtis Chong, Director of Technology for the National Federation of the Blind, discusses computer and Internet disability issues.
I have found linux bliss in debian I just wish someone would release a CD a little sooner with some of the more recent packages like an updated version of some more of the packages. I have slink 2.1 r 3 but sometimes it is a little difficult to get the packages from the net.
Slashdot social engineering at it's finest
sorry, couldn't resist :)
he is a nazi
What because he has a German name? Reality check there are more Nazis in Idaho than there are in all of modern day Germany get your facts straight.
Slashdot social engineering at it's finest
Jesus Christ, dude! Lay off the Nazis and the states! They're not bad!
There are probably many people who would not like to see the power of Linux in the hands of "the unwashed masses" and leave.
Will this happen?
"The mistake of the young is to think that knowledge can replace experience.
The mistake of the old is to thing experience can replace knowledge"
-----BEGIN GEEK CODE BLOCK----- Version: 3.1 GCS/M/Sd?s-:a---->?c++UL+++P++++L++++ E+++W+++N+K-w---M-PSY+t+5?XtvbDI++
Good morning!
Just a quick question: What is the meaning of the word "debian"?
Thanks!
Ehttp://eugeneciurana.com | http://ciurana.eu
I didn't see any of the questions about Bastille Linux versus Debian, or if there are any plans to try to do a secure version of Debian, so that the Linux community can finally have something that might be approaching the inherent default security that is available with OpenBSD.
What about it, guys?
Brad Knowles
http://daily.daemonnews.org/ -- if you're not
That was a very good interview, and very informative. As a die-hard everything-but-debian user (by accident, I've just never happened to have used debian or any of its derivatives), I'm very tempted to drop debian on a machine or two. The release history seems to suck, but isnt that fixed by using something like apt to update all of your packages? The pool of fresh packages seems like an awesome idea.
Sosumi. just kidding. DONT!
The question is, if Linux becomes very popular, would it still be Linux?
Depends on your definition of "very popular."
Nonetheless, I don't think it "would still be Linux" in the same sense. IMO, for it to become "very popular" a solid release/version/what-have-you would have to be released which had support out the a$$ -- that normal idiots could get to work. A version like this is not freeforming and "open," as I see it. So, it would not be the ever-changing linux of today.
-d9
Oh an interview :)
Yeah funny if you read the description of the article before posting it works wonders.
WHEN WILL THE RECENT SLASHDOT SOURCE BE RELEASED??? Are we for open source, or not?
Never you fool. You see the fact that we at the great directorate of mankind meeting in the secret brotherhood of the holy ones decided that the time has not come for man to have access to this relic of the distant future.
Until you repent of all your sins you will not have access to the one true source.
Jesus Christ, man!
Lay off the interview! It's not bad!
I really can't see how that could be flamebait considering that it is officially illegal to be a member of the Natzi party or wear any of their insignia in Germany. Most of the current hate related crimes are actually carried out in America.
If he has moderatored priviledges then that would be a cool thing to do.
His name is not german, and he is not german.
Its a typical Name for a person from the Netherlands, and in fact he is dutch.
Wichert: I really hope so. The reason that we don't have a super-glitchy-totally-awesome apt frontend at the moment is that we have nobody who is willing and able to invest the time and effort into making it. Unlike a commercial distribution, we can't just say `oh, this would be cool. You there! Write this for us and we'll give you some money.' Somebody has to decide for himself that it is an interesting project and make it. We can only encourage people to do something and be very thankful when they do.
This is the exact reason why a Redhat is needed. Now that they have the market capitalization they don't need to wait until someone wants to work on a particular project. They have talented people on the payroll that they can assign to work on needed technology. The Open Source attitude has been very successful to date, particularly because of the attitude expressed by Wichert that solutions arise from need and interest, but to grow Linux so that it can truly compete with MS and others, it needs to support technologies quickly. No more of this USB in the 2.3 kernel stuff or Firewire being supported who knows when. Linux needs to take off its training wheels and go play with the big boys. Adopting a big business attitude that can coexist peacefully with its Open Source origins will get it there and is Linux's greatest challenge.
Hates people who have stupid little sigs
Hear hear!
CmdrTaco, we need the Slash code!
"You can never have too many elephants on your team."
uh-oh, the `pile anything on top of each other approach' to package
management is coming to the BSD world.
On reflection I think it is a good idea: getting Debian to work of
top of FreeBSD is a good test of the Linux compatibility mode. Its a
shame the Debian effort doesn't look very ambitious, but I guess its a
voluntary effort. A port of glibc would be a very good thing for
BSD...
One constantly hears conflicting opinions on pentium optimiaztion. Advocates say it will give you a performance hit on 486s and the like but you should see an improvement on any pentium class machine. Opponents frequently say it wont run at all on a 486 and you'll see no improvement or a hit on AMD or other p class chips. I'd like to see these benchmarks people keep mentioning.
As for Wichert's statement that it only really helps with certain programs, I'd like to say the ones it does help with seem to be important ones. I'm currently using a Dual PII box on which I have run both Debian and Stampede, and while I didnt sit around doing benchmarks all day, I did notice a very large difference in the performance of KDE. Even if pentium optimization only helps out with things like KDE I'd say it's worth it.
I know a guy at work with a german name, but he isn't nazi, I asked him.
I know nazi's can lie about being nazi's, but I belief him, because he doesn't lie, because he said he didn't.
and that is why you have to pay for commerical software, dam redmond people.
The apt library is really powerful and does everything you want it to do,
In fact, the poor and out of date libapt documentation aside, this isn't true. Among other things, libapt isn't good at:
-> keeping track of automatically performed selections and removals; each frontend has to do this itself
-> allowing in-progress downloads to be manipulated on a fine-grained level (ie, cancelling individual jobs)
-> keeping persistent state across program runs: knowing, for example, that the user specifically asked for a particular program to be held back at a lower version than the newest available.
Not that it isn't a wonderful tool, but it's not perfect -- not by a long shot.
Daniel
Shameless plug: I have a very early prototype of an alternative apt frontend at
aptitude.sourceforge.net
. Please download it and send me comments so I can fix problems in the next version!
Hurry up and jump on the individualist bandwagon!
Okay....
Things like this make me happy not to live in America. How about an option on Slashdot where posts can be moderated to 'free speech -1' and so we can select not to view the posts that are here due to free speech (but still view low rated posts). The fact is that the poster has no responsibilities for the other people on Slashdot, so the overall experience is ruined for those people. With rights comes responsibilities. If you abuse your responsibilities you should lose your rights!
Just my opinion anyway.
Nice to see that Debian is moving towards a FreeBSD style packaging system, but looking even more advanced. A hierarchical packaging system would kick ass:
So you could include as many or as few of the packages as you wanted in a distribution, that would be great.
I still don't understand why KDE and related programs can't be packaged under "non-free" and distributed as such. QT doesn't seem that much less open than, say the pine sources or the GIF plugins for gimp. What am I missing here?
Alex, I'll take keybindings not used by Emacs for $400....
It's called Alien, and I can't remember anything about it except I found it on Freshmeat a while ago.
The one time I used it to convert from dpkg to rpm it worked fine.
First off, IANAL, but how about calling it the COSL (see subject) or just CPL (Commercial Public License. COSL is probably most accurate.
Now get reps from several companies (IBM, Sun, Troll, Redhat, etc.) that are interested in doing Open Source work and allow one Contract law lawyer each in a room with ESR, Bruce Perens, and the GPL lawyers. Let them hash out the items that they feel a company needs in order to release a product with the source code available! Don't make it mandatory that the license be used for every product, but if they want the Open Source seal of approval or whatever then the source MUST be available!
The software the license applies to could be shareware, demo, free (gratis), or regular off- the-shelf-pay-me-fifty-bucks software, but the source must be available as well as a method for submitting Bug reports publicly and public request for feature improvements/changes. I'm not saying the company would have to accept each and every bug fix to include in the next release, but they should consider them and use their programming standards to fix the problem in a reasonable amount of time. And test that it doesn't break something else. (Hello, Microsoft products.) My idea about feature changes/requests is that if the users have a hard time getting to or using a feature that is used all the time, then this would improve useablity. Kind of like Ergonomics, also if the company mistakenly moves a feature around in the menus from one release to the next without improving useablity I want to be able to let them know. (In IE 4.0 the internet options are in one place and in a different one in IE 5.0. Hello MS are you listening, didn't think so. They also change the name of features for no reason.) Basically I want the software companies to act differently than MS. Big surprise!
Now, make the license available on the net for peer review and later for use by any Commercial company that wants to do Open Source software. They can just place their companies name and the name of the software in a blank in the contract. Just like the generic standard mortgage contracts.
Well, that's my two cents, I'll crawl back in my cave now.
--Somewhere there is a village missing an idiot.
Now, I haven't used Debian, but how do the scripts run before and after (un)installs differ from RPM pre and post scripts?
Jesus Christ, dude! Way to persecute me, the defender of the persecuted. I mean, I'm not bad! Oh, and your jokes stink.
Jesus Christ, man! You call yourself the defender of the persecuted? You're persecuting him because you say his jokes aren't funny. He's not bad, dude! Lay off him.
You mean like the %pre, %post, %preun and %postun scripts in RPM?
Jesus Christ, man! Lay off of Yahweh! He's not bad.
Perhaps Corel and Stormix can assist with the development of new tools for debian package management, such as the GUI or new version of dselect. Or other Debian specific packages. I like the idea of Debian, but it's currently too far out of date for me to use.
It's the 21st Century Do you know what your government is doing
Wish I didn't have to explain all this, but I want to believe the moderation system actually works, and isn't being used mainly by people whose sole concern is to mark posts according to a blind logic of popularity.
Thus it would be nice to have a way to decouple the upgrade process for sets of applications like GNOME from that for sets of applications like tetex. The upgrade-pack idea seems to be a fine solution.
You don't have to release source to be DFSG-compliant (Open Source). You just have to allow the source to be distributed as wide as the binaries. Since Slashdot binaries are not available, Slashdot source doesn't need to be either.
perl -e 'fork||print for split//,"hahahaha"'
but to grow Linux so that it can truly compete with MS and others
The major reason Linux specifically and free source software in general is more robust and useful than proprietary software is because the authors WANTED to write it, and WANT to work on it, and it's written in public where everyone can see it. Now if RedHat or Corel wants to pay someone to write free source software, that's fine, but it doesn't have the same motivation.
Quality will suffer. Innovation will suffer.
Linux needs to take off its training wheels and go play with the big boys
Common M$ FUD here. Linux got to where it is with your so-called "training wheels" and doesn't need to take anything off to keep on going. Success with Linux is measured in how well it works, not in inflated market capitalizations.
--
Infuriate left and right
Nice try, loser-boy.
The person who posted this is the same guy that was interviewed. That's right! He's the featured man of the day.
It's FUNNY. Just mark the think up to 5 and leave it there. Right now the struggle between moderators is wasting a lot of points.
This article posted with my default of +2 in an effort to make it appear close to the FUNNY comment. Please leave it at +2 for that purpose.
Thanks
If tits were wings it'd be flying around.
Yes, I more or less am continuously up-to-date from unstable. The whole notion of periodic releases looses much importance when you aren't updating your system that way.
I do like the package pool idea though, as it would be fun to make micro-distributions by listing all the packages needed. It would also be nice to make meta-packages, such that you could install mike-graphics and get a nice set of graphics related packages, or pick hardcore-crypto for cryptography packages, etc.
My other recommendation is to move as many packages to source-only distribution as possible, and have them compile on install, so that the packages would become platform independent. Note that you can still distribute binary packages, but the way to do this is to treat them as cached intermediate objects, not the actual packages themselves. This would also solve the 'can I get a pentium-optimized version', you could distribute stripped binaries or debug versions, and it would be much easier to support and move to more platforms.
Lastly, I think the BSD distribution is a great idea. At the very least it helps keep all the packages source-compatable between the two systems.
That said, Debian installs by default or offers a number of critical packages that are not necessarily mainstream (but should be), presumably because security and ease of configuration are being kept in mind. Take for instance, the OpenBSD ftp server, ssh, a number of SSL'd tools like telnet, exim as a mail transport, gpg, mason, etc.
Debian's security depends upon the maintainers of individual packages, and my impression is that these maintainers are qualified and experienced individuals. Security may not be the ultimate priority, but it is not exactly ignored, either. A great indicator is the speed in which new packages are issued in Potato, especially when a security bug has been reported.
It seems to me that a separate "secure version" is something to be avoided. Ideally, the default version would already be secure. Remember, too, that most security holes are the result of poor administration. I'd say that the default configurations in Debian are a pretty good balance of usefullness and security. However, an admin who doesn't set up firewalling and lock down unused ports is being naive, and no distro can prevent that. Someone who specifically demands a secure version is probably a little too paranoid about others and should be more paranoid about themselves.
I don't think Debian is moving towards the FreeBSD packaging system. More like Debian is going repackage up some of FreeBSD in Debian way.
...What is your function?
:)
> Grow up. I believe there is a fameous quote that to have free speech we must also tolerate the speech we hate for us to truly be free.
to which, you (hattig) replied:
> Things like this make me happy not to live in America.
Which is ironic, as I believe the quote he was referring to was: "I disagree with what you say, but I will fight to the death for your right to say it", often attributed to Voltare, a French philosopher. (Of course, it could be said that a great deal of American concepts of freedom come from the French and visa-versa).
As to if this quote is correctly attributed, I have some question (I've seen it in print and on a billboard, but some academic types have recently disputed it). But the common attribution is to a Frenchman.
Are you now happy that you don't live in France?
--
Evan (Sick of "geeks" who complain about the term "hacker" in the media slamming someone for their "nationality").
"$30 for the One True Ring. $10 each additional ring!" -- JRR "Bob" Tolkien
They've got Debian Linux, HURD, and FreeBSD, isn't anyone else a little worried that they've taken on too much? In the end, it will probally delay each dist a lot longer then the long awaited 2.2
Possibly - but I think that once the "hard work" is done with issuing the first release (with code of course, since we're talking about Red Hat) then that puts a lot of momentum behind the project. So yes, maybe you'll have "disgruntled Red Hat worker in her cube" (if there is such a thing...) releasing the first version, but then it's out there for all the people who didn't have time to do it from scratch, and the beauty of open source takes over...
Unless the initial design was fundamentally flawed, I think great software can still arise from a corporate-sponsored beginning.
----
In the earlier article my question was basicly "With Slink being out of date, and Potato having a flaky install, how does one do a fesh install of Debian now, and have all the recient packages (Xfree 3.3.5, 2.2.13, etc.)
/etc/apt/sources.list to unstable
Here's what I did, and thanks to the reply to my post that was helpful:
1) Installed Slink, with all the packages I wanted. (installed flawlessly, as it should)
2) Compiled my own kernel. I tried to do skip this step and alot of the Potato packages chocked because I wasn't running a 2.2.x kernel. SO I had to start over.
3) changed
4) apt-get update udates your package database to the latest version that are in unstable.
5) apt-get install dist-upgrade upgraded all my packages that I installed with Slink. Updated packages included XFree86 3.3.5, Enlightenment DR16.3, Latest GNOME, etc. It failed to to update a couple packages, but they weren't needed and I just apt-get remove
6) Went though the set-up process. Uncluding XF86Setup, untar'ing my old home directory, etc.
That's about it. I have a full Debian distro with later stuff then I even had with RedHat 6.1 Apt-get served me so far when I didn't have libgnome-dev(compiled a couple gnome aps). Unstead of looking for RPMS like I did with RH, I just typed apt-get install libgnome-dev and waited a few minutes and had then already installed and read to go.
Been running fine for 4 days now, and it's great.
I encurage anyone thinking about Debian to give it a try. My only gripe is that I didn't install it months ago =)
Is there an installation GUI in the works?
I hear a lot of people saying that FreeBSD needs glibc. I wonder what we
BSDers are missing. We have our own libc you know.
As far as I know it works great. Why fix it when it ain't broken?
This problem could tie in very nicely to the new package system. There could be two versions of every kind of distro: A pentium version and an amd/x86 version. I, for one, installed Debian on my 386 w/ 4 megs (Dad won't let me partition the main computer :-( ), and I would be very disappointed if Debian made their distribution Pentium-based.
OK, maybe I'm a special case, but lots of other companies use old 486's for routers etc while using Pentium workstations. They would also be very happy with the new package pool + Pentium/non-pentium distros.
Friends don't let friends misuse the subjunctive.
The problem with the GPL and a lot of different open source licenses and not open source licenses is this... they're too complicated, and restrictive... the opposite of what 'free' and 'open' mean.
The optimal OSS license would be this:
One may do whatever they wish with this source code and may take credit of only those changes which they make, if any. The source code of the original unmodified software must remain available and the modifications must acknowledge their being based on the original software, however, the changes made to it may be put under any license which the developer wishes.
whatcha think?
personally, when i write software, i say in my license... this software is now YOURs, it is your property, you may do what you wish with it - change it, copy it, sell it.
Well, to run all the unstable stuff (which include the newest versions of E, GNOME, etc.) you need to have libc 2.1 installed... which is a serious download, and requires upgrading gcc and a few other packages. But I think the connotation of this post is that you have to make a choice that your whole system depends on (bet. 2.0 and 2.1), while in my experience the vast majority of the packages will be just fine after upgrading to 2.1.
In other words, the upgrade to 2.1 seems to me more of a dependancy issue (such as e.g. needing gtk+ and imlib and so on to install E) than a "you can't do this on this system" issue.
Jose M. Weeks
Debian uses ncurses based GUI during installation. ncurses IS a library for GUIs. What is wrong with ncurses?
KDE doesn't use any GPL code from other projects. The only GPLed code in KDE is by KDE developers.
it doesn't really help you: if you look at benchmarks you will see that only a relatively small number of programs benefit from this. So you do a whole lot of extra work and gain very little.
Which programs are those exactly which will benefit? I wouldn't mind putting some time into recompiling some key applications for my PII if it was going to help some.
p.s. I'm using Debian potato ("unstable") and it works just great!
The time between releases issue has been raised constantly and I have the same answer each time.
1: If the person on the other end wants bleeding-edge stuff installed they can always compile their own or ride the unstable tree. For example, I've been running 2.2 on all my Debian machines since the day 2.2.0 came out.
2: If one looks at the release cycle of the main distributions (Red Hat, Slackware, SUSE, Debian) one will note that Debian's release cycle isn't slower. The logest release so far was 2.1 at 7 months. All the others have had 7 month release cycles in their past. The others have had release cycles as low as 3 months. Interestingly enough the low month releases were also the most buggy for the other distributions. Debian's stable tree has been just that, stable as rock. If a quicker release cycle means less stability (which I think it does) then ride unstable and be done with it!
-- Grey d'Miyu, not just another pretty color.
Yes I think you understand the issue. To answer your question. I don't know of any GPLed code in KDE (in CVS) that is taken from other projects without permission.
OpenBSD audits everything under /usr/src. Most of the auditing is fixing bugs, so that buffer overruns simply can't happen, stack smashing attacks are impossible, etc.... When a bug is found anywhere in the code, it is fixed -- even if there is not a known exploit, the bug is fixed anyway.
/. to papers written by Bruce Schneier demonstrate, crypto is actually a very small part of the overall security picture, albeit a critical part.
/usr/src has nothing to do with the integration of the crypto. These are things that should be done with all OSes, not just OpenBSD.
That's the biggest part of the default security that is inherent in OpenBSD -- Simply eliminating bugs.
There's another part -- where strong crypto is integrated by default into all those places where it can be of help, but as recent references on
Fixing all the known bugs in the kernel and stuff under
You could leave the strong crypto in packages that could be added appropriately (via the 'net), according to the location of the user -- RSA implemented with RSAREF in the US, but implemented with faster (and publicly available source, so it is likely to be more bug-free, and avoid embarassing things like buffer overflows in the RSAREF libraries) for overseas customers. But you might always get one package or the other by default, depending on where you are.
Of course, when it comes to packages and ports, you have to depend on the respective authors, but if they have the time and the necessary tools, it wouldn't hurt to have the same auditing procedures applied to them by the same auditing team, and then fixes offered back to the authors.
That way, everything in the OS would be more bug-free (and less susceptible to being exploited), and the system as a whole would tend to be more secure.
Brad Knowles
http://daily.daemonnews.org/ -- if you're not
Moderation Totals:Offtopic=6, Flamebait=2, Troll=2, Funny=15, Overrated=2, Total=27
That's quite a power struggle. Wichert's karma has been having a bumpy little ride, indeed.
For the record, *I* think it's damn funny.
\RANT mode=1
I agree... people seem to want to run as fast as they can from ncurses and upgrade to X-based installations. The problem is, a lot of people (read: me) don't want to deal with the extra overhead, instability, and even complexity associated with an X-based installation. While converting 22 Macs over to Linux, the LinuxPPC/Redhat ncurses installation method was the only feasible meathod that I could install the OS from... the X version (which was also the "recommended install method") wouldn't work correctly, and often crashed out entirely.
People really need to understand here that though ncurses might be ugly as sin, it sure as hell beats crashing during an OS installation! \RANT mode=0
Know ye not that ye are Gods???
The point about the install-script has already been made in another post.
/usr/lib/libfoo.so.3.14 to be able to use package a' and then you'll have to find some way to scan all packages to see which ones include that file, and then you're not even sure if they have the right version of that file.. "
I'll object to the others:
"For example, rpm allows you to have multiple versions of a single package installed."
That's not entirely true: RPM will allow that by default (provided that there's no file conflict), and this can sometimes be useful if you wish to have multiple versions of a library on your system for backwards compatibility purposes.
However, the packager is given the choice to state a "conflicts" clause, which supports version information. So to emulate dpkg, packagers should simply assert that some version conflicts with all earlier versions, and the trick is done.
Now about the other one:
"One problem with rpm-packages is that it is harder to satisfy dependency due to the concept of file-dependencies. Instead of being able to say `I need package b to be able to use package a' it can become `I need file
Again, this is not entirely accurate: RPM allows a packager to specify a "Virtual capability": Simply put, a package foo can assert to provide a capability bar, and other packagers can express dependencies to the bar capability, rather than the libfoo file.
I'm not saying this to bash dpkg in favor of RPM, but just to set some facts straight.
For instance, I like dpkg's "recommended" dependencies (as opposed to RPM's only "hard" dependencies).
I think the two technologies are roughly equivalent, and that Wichert is oh-so-right in saying that in the end the choice boils down to personal tastes, familiarity and stability.
That's great!
That should make it easier to fix the license on the KDE side.
Peter Galbraith psg@debian.org
... I think.
My god, this just puts the question to Debian fair and square.
Enough double talk/propaganda from Debian!
Ya think it could be sped up just a LITTLE if they didn't have like 1billion packages to worry about? Also, packages that nobody really gives half a rats ass about? Maybe, just maybe ...
:o)
If I trolled, don't 0 me, if I flaimbated, don't 0 me, and please just don't 0 me I've had enough of that!!!
yeah
Isn't slashdot made in perl? so how could there be binarys?
ReadThe ReflectionEngine, a cyberpunk style n
As of 2:56AM CST:
Moderation Totals:Offtopic=6, Flamebait=2, Troll=2, Funny=18, Overrated=3, Total=31.
wow
Think about it, is it DEBIAN or LESBIAN? Kinda makes you wonder about amazgon Linuz dirbibutions, doens't it?
YOU GOTS SHORT MONEY, BOIIIII!
Thius ez ownage last post brought to you by shots of Bsacardi 151 proof rum. ez.
_.......................__
||.....__...._._||_..||-\\..._...._._||_
||......_\\.(/_'..||....||-//.//.\\.(/_'..||
||__((_||_,_/).||_..||....\\_//.,_/).\\_
The final word; anything following is redundant.
Here's an idea; let SPI sell Debian CD's and manuals and use the profits from that sale to hire people to write a new dselect (and other things that are needed in Debian) -- just like the FSF develops some of their software.
There's a common misconception in the world today that free software "simply happens" because someone needs a tool. There's some truth to that of course, but things like the GNU libc, GNU CC and other projects where started and paid for by the FSF because they saw a need for that software.
Okay, I did some experiments on this end with bzip2, a completely integer code. I compared the default Debian compilation (flags -O2 -g, then stripped) against a couple of other compilation options. The test runs were to compress and decompress a 700K-ish file connecting the two processes via a pipe, a la: bzip2 -c file | bzip2 -cd file > file.0. I then compared file to file.0 to make sure that they were the same (and I found no errors for all of these runs). All runs were on my practically-idle P2-233 laptop.
... the floating-point-intensive codes like xmms will probably benefit more, although I tried the same experiments with that and found similar results. (Hard to put real numbers on that since xmms is an interactive graphical program.) Ummm, I dunno. Since this is a Debian thread, another thing to note is that slink (Debian stable at the moment) was compiled with a completely different compiler than potato/unstable. So if you compare between the two, you'll probably find that potato (unstable) is a fair bit faster overall because of being compiled with the newer egcs compiler (which has the faster Intel-sponsored x86 code generation backend). As I've said before, for real (original) Pentiums the difference is probably significant, but for newer CPUs the optimizations get lost in the noise of everything else. Or that's how it seems to me.
Flags -O2 -march=pentiumpro: 2.6% slower (a bit unexpected)
Flags -O6: 1.2% slower (odd, again)
Flags -O3 -march=pentiumpro -fomit-frame-pointer -funroll-loops -finline-functions -fstrict-aliasing: 3.6% faster
I can't say these are scientific (although I did run each test four or five times, and took the mean score after throwing out the fastest and slowest), but they might help in guaging general performance increases for machine-specific optimizations. The majority of code is integer code not too unlike bzip2
I think dselect is very efficient and isn't as difficult as its made out to be as long as you read the documentation and familiarize yourself with the keystrokes, which are straightforward. Plus, the functionality is there (or am I missing something?), and I don't find it very annoying. Surely, alternatives are good, but there are hostilities towards it and, for some reason, blamed for the difficulty of installing Debian.
If you want Slashdot source and it isn't available clone it. I good point to start is PHP Slash. Slashdot is great but it can't be that complex a site. The hardest part I'd imagine is keeping it from being /.'d into total lag.
At what price learning? At what cost wisdom? The price is a man's peace of mind, and the cost is his life.
why don't one or some of you guys volunteer to become Debian Maintainers for 'pentium opimizations', and recompile various programs that might benefit from these opitmizations, and make the appropriate .debs. Pentium users could then download them and use them instead of the normal ones.
The current Slashdot moderation system is made by gay communists!
That's why I put in the faky looking TM. Besides, IDG and the rest of those Dummies can BITE ME! I personally would feel embarrassed buying one of those yellow covered advertisements that you're a moron, unless of course is were something like Quantum String Theory for Dummies or Plotting the Human Genome for Dummies. Cliff Notes (TM) should sue them for taking their idea of the yellow cover.
Later,
Ripcrd
--Somewhere there is a village missing an idiot.
A group should form to get this finally pushed
through... I'm a very happy Debian user but was
disappointed to the answer to this question.
So many people are running 586s and higher
these days the old "won't work on a 386/486"
argument is no longer valid.
Problem is it's not coding that needs to be done,
it's convincing. Debian needs to be changed
to allow "arch-i586" and "arch-i686" machines which
are able to install arch-i486 packages too.
Someone had to do it.