Re: salsa.debian.org maintenance (GitLab 11.1.4 upgrade, external storage migration)
On Fri, 17 Aug 2018, Thomas Goirand wrote:
> On 08/17/2018 10:52 AM, Andrey Rahmatullin wrote:
> > On Fri, Aug 17, 2018 at 08:27:00AM +0000, Ulrike Uhlig wrote:
> >> While I understand the simplicity of using $company's cloud storage, I'd
> >> rather not rely on some external company and in particular not on this
> >> one. This company does not exactly represent what I would call ethical,
> >> non-proprietary, and decentralized.
> > Is that a problem?
> >
> >> Are there no partners that would kindly provide such storage to Debian
> >> (Gandi?).
> > Are they ethical, non-proprietary, and decentralized?
>
> To me, none of the above.
>
> On 08/17/2018 11:30 AM, Yao Wei wrote:
> > Still, it is up to their implementation how we can access their
> > storage, and as long as we can access it with free software
> > (JavaScript stuff could be a pitfall though) it shouldn't be too much
> > problem for us.
>
> I very much do not agree with this. The full software stack used by the
> provider *MUST* be free as well. I have made a full talk at Debconf
> explaining why it is important, I would appreciate if you could have a
> look to the video.
>
> On 08/17/2018 03:46 PM, Ulrike Uhlig wrote:
> > I feel like we're currently balancing on a thin cobweb of fait
> > accompli.
>
> I very much agree with this, and I kind of feel we're all gamed into
> using Salsa, and then it moves to using non-free solutions. And I'm not
> even going back to the previous thread where Alexander wrote he would
> *never* switch to a packaged solution. That one as well, is an
> unilateral decision.
>
> > Should we make it known and visible to people who use Salsa that some
> > of their data might be stored at a 3rd party company? Is this a
> > consent issue?
>
> It's more than this, unfortunately. After we've all been invited to
> migrate to Salsa, and all spent time on it, now it's partly non-free. If
> I knew it would go this way, it's possible that I would have chosen
> another place to host my Debian work. Possibly self-hosting it.
>
> On 08/17/2018 03:46 PM, Ulrike Uhlig wrote:
> > Have Salsa maintainers enabled the least invasive privacy features for
> > this service?
>
> Do you really trust this? I don't...
>
> Also, have we ever thought that Google is completely banned in China?
> Can users in China access the data? If it's direct access to things
> hosted by Google, then the answer is probably that it's also blocked.
>
> On 08/17/2018 03:49 PM, Alexander Wirt wrote:
> > why should gandi be better? Do you have access to all of their source
> > code (managementfrontend, storagebackend, billingbackend and so on?)
> >
> > Unless debian is doing the whole thing on its own, we are out of luck.
> >
> > Alex
>
> As I mentioned in my talk at Debconf18, there's 18 listed public cloud
> providers using OpenStack here:
>
> https://www.openstack.org/marketplace/public-clouds/
>
> OVH, CloudWatt, Rackspace, Vexxhost, and also probably the company I
> work for (Infomaniak) are potential candidates for sponsoring storage,
> and all of them are using free-software hosting platforms.
>
> I also don't understand why we're not attempting to build a Ceph cluster
> at UBC. Why not?
go ahead. if it works well we can switch to it.
Alex
P.S. I will not react to the other nonsense in that mail.
Reply to: