On Mon, Apr 25, 2005 at 11:15:57AM +0200, Martin Schulze wrote: > Steve Langasek wrote: > > On Mon, Apr 25, 2005 at 08:39:55AM +0200, Adrian von Bidder wrote: > > > On Monday 25 April 2005 08.03, Branden Robinson / Debian Project Leader > > > wrote: > > > > * establishing a backup site for ``snapshot.debian.net`` > > > I wonder if snapshot shouldn't be promoted to an official debian.*org* > > > service in recognition of its value to the project. > > One concern I have, personally, is over precisely how much value > > snapshot.d.n provides to the *project*, as opposed to providing value to > > others outside the project. Since DDs have access to recently removed > > packages via the morgue on merkel (albeit not indexed nicely the way > > snapshot.d.n currently is), I really wonder if this service should be a > > priority for Debian to spend money on while our ports and other areas of > > core infrastructure are in a state of disarray (IMHO). > The snapshot service is very valuable when it comes to checking older > versions of packages. For example, it is a very, very good help for > doing security work when older package versions need to be reviewed. Out of curiosity, do you have a sense of how long after a package is dropped from the archive that it ceases being useful to you for security research? I know that all of the stuff I've used snapshot for falls within the scope of what's kept in the morgue, which is quite a small subset of what snapshot keeps; snapshot just has much better (i.e., existing) indexing. > I would love to have it as an official service, and even a backup. I read > that it currently takes one TB of disk space. According to <http://snapshot.debian.net/du/df.png>, it's already exceeded 1.2TB. That sounds to me like it would be one of the larger direct hardware purchases ever made by the project, so I do think it's a good idea to ask how much of this history is truly needed by the project -- the open-ended 1.2TB and growing of snapshot.d.n, or something more modest, like the 60GB used by the morgue? -- Steve Langasek postmodern programmer
Attachment:
signature.asc
Description: Digital signature