[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: security upload imposing load on other parts of Debian



Hi Sylvain,

On Thu, Feb 27, 2020 at 12:28:49PM +0100, Sylvain Beucler wrote:
> This thread sounds weirdly formulated to me. 

this might very well be the case and this is exactly why I started it, to
improve.

> We have an official Debian project (LTS, not eLTS), which is well
> integrated in Debian and requires coordination which many other teams
> and resources (security team, system administration, builders, ftp
> masters...).
> Let's remind that the LTS suite is public and benefits all Debian users,
> and that LTS regularly contributes to other parts of Debian.

well, yes, LTS is public and free and cool, but it still sometimes
relies on work by others who didnt volunteer to do LTS. and while quite
probably these people also enjoy (and/or see & applaud) the benefits
of LTS "for the world at large" it's also the case they are 
suddenly "required to do coordination" as you describe above, while 
they never volunteered for that.

also please take into consideration that people (where people = fellow
Debian volunteers) might be happy to involuntarily voluntarily support 
LTS 95% of the time, but 5% of the time LTS is really draining and annoying...

(and please ignore the percentages in this. the numbers are made up.)

and please keep in mind that we are official because of good will only.
let's keep the good will high!

> In this particular case we have a security upload, which is time-sensitive.
> The way people in the various teams are paid, directly or indirectly,
> has little relevance to shipping a security fix timely to the Debian users.

uhm, no. 

> Also I don't know what other complaints were sent to Holger, but in
> light of our Social Contract "We will not hide problems" I would
> encourage raising problems directly on this list.

and I'll encourage anyone who wants to share problems privately, whenever, with
whomever, to just do that. We will not hide problems in source code, but human
relationships are a bit more delicate sometimes.


-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

Attachment: signature.asc
Description: PGP signature


Reply to: