El 08/03/23 a las 11:37, Philipp Hahn escribió:
> Hello Santiago,
>
> Am 08.03.23 um 11:17 schrieb Santiago Ruano Rincón:
> > El 08/03/23 a las 10:45, Philipp Hahn escribió:
> > > Am 07.03.23 um 20:26 schrieb Ansgar:
> > > > On Tue, 2023-03-07 at 11:55 +0100, Marco d'Itri wrote:
> > > > > On Mar 07, Philipp Hahn <pmhahn@pmhahn.de> wrote:
> > > > > > Is it a good idea to keep it alive for another 2+ years in
> > > > > > Debian-12-Bookworm or should it be removed now?
> > > > > > https://packages.debian.org/source/bookworm/isc-dhcp
> > > > >
> > > > > I do not think that it should be removed at this point, since there is
> > > > > a need for the complex features that isc-dhcpd can provide and there are
> > > > > is no obvious replacement: Kea is super complex (and I do not know if it
> > > > > has all the features) and everything else is too much simple.
> > > >
> > > > Only the client and relay are no longer maintained upstream. The server
> > > > is still maintained and there is no need to drop it from Debian.
> > >
> > > Are you sure the *server* is still maintained? Sadly my quote from
> > > <https://www.isc.org/dhcp/> got dropped, so here again:
> >
> > From README:
> >
> > RELEASE STATUS
> >
> > Version 4.4.3-P1 is a maintenance release of the DHCP client, relay and
> > server. It is the final release for the client and relay components,
> > which have reached end-of-life and will no longer be maintained.
>
> That does not help: they did a maintenance release in the past. So *past*
> issues were addressed. Excellent!
> But what happens in the future? Will we get *future* updates:
> - client: No, as officially EoL
> - relay: No, as officially EoL
> - server: through "providing professional support services"
OK, I see your point. And I must said I missed this:
https://lists.isc.org/pipermail/dhcp-users/2022-October/022786.html
https://www.isc.org/blogs/isc-dhcp-eol/
>
> > > > ISC has announced the end of life for ISC DHCP as of the end of 2022. ISC will continue providing professional support services for existing subscribers, but does not intend to issue any further maintenance releases.
> >
> > You can still read an equivalent sentence from the dhcp upstream url:
> >
> > "DHCP is available for free download under the terms of the MPL 2.0
> > license. The client and relay portions of ISC DHCP are no longer
> > maintained."
>
> Again does not help: I can even still download older releases with unfixed
> issues.
> But I want to know if I should still base my environment/work on
> ISC-DHCP-server in the future, that is: Will it be maintained in the future
> and will we get patches for security issues?
"... If we become aware of a significant security vulnerability, we
might make an exception to this (no future maintenance versions), but it
is our intention to cease actively maintaining this codebase."
It is clear that users should migrate. But it is difficult to find the
same set of features, as already said in this thread.
>
> Do you "Debian ISC DHCP Maintainers <isc-dhcp@packages.debian.org>" have
> enough expertise and willingness to maintain it for another 2+ years
> ("without" support from upstream ISC)?
No, sorry. At least not me, without upstream support.
>
> Philipp
>
Cheers,
-- Santiago
Attachment:
signature.asc
Description: PGP signature