[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Zoom- best practice?

(Please stop CCing me on replies - especially to messages which I did
not actually send - unless you're specifically trying to draw my
attention to a particular message and think I may not notice it without
the CC. Not only am I subscribed, I am in fact reading this thread on a
multiple-times-a-day basis, as my multiple replies to it to date may
have indicated.)

On 2020-06-09 at 04:42, tomas@tuxteam.de wrote:

> On Mon, Jun 08, 2020 at 02:59:13PM -0600, Tom Dial wrote:

>> If you cannot build an executable from source, you do not know
>> whether the binary you downloaded represents the source
>> faithfully.
> Can we stop that already? Nobody proved you can't build Jitsi or BBB
> from source. Everyone here is just too friggin' lazy to even try.
> Can we give 'em the benefit of the doubt until someone really makes 
> his hands ditry on that?

FWIW, I have tried, at least in part.

For the individual broken-out projects (which may or may not be rolled
up into the larger "master" project, I can't easily tell), I succeeded
with one, and failed with another, but suspect that I could succeed with
the latter with more effort.

For the apparent "master" project, I admit that I didn't bother to try,
because of the exact "too many prebuilt apparent-dependency objects with
no apparent way provided to rebuild them" issue; unless we can rebuild
those objects, not only can we not be sure we have the source for them,
we can't be sure that building with a different version of that object
will even work.

Even a successful build from a repository like that would not
demonstrate that you can actually completely rebuild the project from
scratch; you'd have to actually track down the source for all of those
individual prebuilt objects, rebuild each one, and pull the result in to
the build in a way which will get picked up, and that's more effort than
I'm willing to put in for the sake of a mailing-list discussion like
this one.

I don't fault the developers too much for providing a version of the
project tree with prebuilt dependencies like that; it's a useful
convenience for those who just want to get it to work and for whom
farting around with trying to find the right dependencies and get them
into place would be too much of a hassle. But for (as far as I can tell)
providing the tree in *only* that form, and not providing (as far as
I've found) *any* documentation on what these prebuilt objects are and
why they're needed and how to get them separately and build them and so
forth, there I do fault them, and consider that a ding against proper
Free status.

   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man.         -- George Bernard Shaw

Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: