[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: moving to testing.



On Fri, 2003-04-11 at 14:40, Brian Nelson wrote:
> Matt Price <matt.price@utoronto.ca> writes:
> 
> > hi folks,
> >
> > I'm thinking of switching from woody to sarge, or at least of adding a
> > sarge partition to my system.  Has the 'gcc 3.2 logjam' broken up
> > enough to make it worthwhile to move over to sarge?  That is, have big
> > important packages like gnome and kde been compiled with gcc .32, or
> > would I have to use unstable packages anyway (or the woody backports,
> > which	I'm currently running). I'm running this
> > on an i386, which I assume is where things have moved furthest ahead
> > at this point.  
> 
> I strongly suggest not running testing until security updates are
> regularly available for it (ie. when it's close to release), especially
> since a lot of stuff still isn't percolating into testing.

Your options are; 

1) pure woody with security updates, and PITA manual source rebuilds or
unofficial repositories to get up to date stuff (which you have to
manually track security for).

2) unstable, with everything up to date and secure, but requiring you to
live with frequent breakages and regular manual intervention for
updates, often requiring painful rollbacks to unbusted versions of
packages (if you still have them) and/or "waiting" until the repository
is sane enough to update.

3) testing with stable updates.

I run a mix of stable and testing, with security updates from stable.
This does potentially put me at risk when I have a "new" package from
testing that gets an "old" security update for stable. It means I have
to subscribe to and watch the debian-security lists, and take manual
action when this happens. In practice, it doesn't seem to happen often.

If I was running stable with manually rebuilt or non-official package
updates I would be in the same boat or worse, _and_ spend my days
building packages or debugging non-official debs.

If I was running unstable, my system would be "secure", just busted a
lot more of the time... However, I would be submitting more bug reports
and fixes on official debs.

For me, testing rocks :-)


-- 
----------------------------------------------------------------
Donovan Baarda                http://minkirri.apana.org.au/~abo/
----------------------------------------------------------------



Reply to: