Re: Have a Debian-LLM?

Hakan Bayındır <[email protected]>
Newsgroups gmane.linux.debian.devel.general
Message-ID <[email protected]>
On 27.08.2026 ÖÖ 5:45, Simon Richter wrote:
> Hi,
> 
> On 8/27/26 6:48 AM, Steffen Möller wrote:
> 
>> That AI should help with packaging and also auto-perform updates when 
>> the package maintainer so allows.
> 
> This is a bad idea regardless of how it's implemented.

I completely agree.

> 
> Debian's key strength is that maintainers are usually somewhat connected 
> to upstream. If there is a supply chain attack, we hear about it early. 
> If there is something special to know during an update, that is how we 
> learn about it.
> 
> Our goal still isn't to amass the largest pile of software, but to 
> curate it.

I believe the human touch and the careful work done on the distro is 
what makes Debian what it is. In other words, Debian's perceived 
slowness and deliberate work on matters is its greatest strength.

> 
> We just had a thread about mass-removing unused -dev packages, which is 
> a clear sign that no one was even looking at these packages.
> 
> Automatically importing changes for these is just a vector for supply 
> chain attacks.

Even more so, how one can guarantee that the update is applied as-is, if 
it's handled by a Gen-AI system?

If we want reproducible auto package updates, arguably a bash script can 
handle it too, but this fact doesn't make it a good idea, either.

On the contrary.

> 
>     Simon

Cheers,

Hakan
OpenPGP_0x165476670B2E463F.asc (application/pgp-keys, 3.7 KB)
-----BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBFa5z8wBEADMOeBVb9sMw6X99t9+n5+cfkPlpvw4ZALAPQN5OctWNrnDSfPh
eQEdgqDvt6a3XqFijL4EhtQnSP7B2ZYTVsM1fUIl8ALMNOWv+vOL2yTsmoljx6tE
se2kvtn96LPJkaGSwyqJTixcBGNMuKDNPmAI4/8W5cmEqsEtWLhlX9tVNU87NoJk
zeRjxGMT3dXQH7t75kBA+i4DnUZapJ+j72DR4EYed/1JxoYvGnHkVQT+sg97SzkD
/4z74hI1Nny4Kw05QGqoamPC9Y3vBPm9Cfvo6t3yA4SYoH5e+5CD+hyz0lcp950b
bRHX0/TQCGAJkt+TUhXIIrDju87Wie/0QUJpSiA7vo415GdpidczhOWZevjsY2bN
foQBt4QDbU088G/qPC6LBsNVfvzcMHKJ/Jd/6fGx8sAbVzD5thLkPTmWdiL82u8E
lKQfUVsqx7/XJq54XBO8kv2ywnt97zwraVXu1EoE7QvwT737yMLaRCXUY/cbt+Vg
C1g3xICtYTWK0ExzIJlT87Rwx3d2hCy76/iHBVnkLS8BRXmY71UeipsimGclkun2
Lxp1xPhM3hLPAd4eOhMiaFgU6Kk3NdeqydA1yNMHsj5ByTPNaExpzOvJmn77RmR0
z/CJ/TAoDt4Av5NouKKwr10Rkfl6Gf6AC6COGCcAUADZQBSaFJ8qwkZSkwARAQAB
zTRIYWthbiBCYXnEsW5kxLFyIChQZXJzb25hbCBrZXkpIDxoYWthbkBiYXlpbmRp
ci5vcmc+wsF4BBMBAgAiBQJWuc/MAhsvBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIX
gAAKCRAWVHZnCy5GP1IdD/9kDn/zKbbJxTacmfuiFtH5HHfbRCHt3iuvH3tvN9Xl
1xQb+JrFsz+m0X8++9vOnz7xiOus/P++hRRafGCD7RtB8wfEK2zvJh+bBhCUgpSx
z5jNqiyJhBwD2BMc1as3WpE00mWib4Prl9eDQCUOl0CmPCkASq/FxlVEHrlYlnzo
omPWUZ50FLJcc3QG3SnrWOALQ1qGuZyqX6B4Ld/Xh8B1ORFdiK9C9HdzHjgR12Ai
Ctbocw49E/TrrNyrPpx0j3wMwb4CmOyKI1PaZ0RpHC5xbvD23VSlBqpWnvaFAnLS
sdqKhgi5kvNbYHhfnCh8rWAOq+YYUnujilwGKJSypohpiiaGY+0MYnonGQS3Ei0Z
S4+3fM5DvzdScGsNqVo6aFqfM69sYri4Ok92nCbZdhkuBGUKQh5zcn5usCQknour
s2ugxtVpQvju7nwTCk75WM3JRSf3JRwRJLSy50Tl81GkT2JyimJOp4kHzvlKsKoM
JtKCMwyvHD1AAsecU6mabWNZLujzNy73JpEDBHqLMNDcF/45CMleK8F5E70SR9ng
TOBFYxZ+HMZ8qlIcopO8gFt6s/TRa5iSQjAf7ORyAkYS5eR3CRmUxQuFqZZtJXzA
qRsSyWil68qASeNAUQDr8RrT2HXlJiMlAT5QYHpg2/5b1waBOXk76GvKadrijsF2
Ac7BTQRWuc/MARAA21l5rhkocMa+Ui+TKOkJXrIEPbArwQfygMWU8BKbLZN9gUc8
eC2YenmgsT2je8Zh5pLrgbMl6QBgQ33CvH47qVY92kjvoLimBQlOS0e36/M4ejWf
M7y1QhisAzQOuD1v8VFct9qpcaTkZADM3t3uABsVJ6B8i95Lvg6eQ5BFOEIGu4wR
Wf8v7v6+ke9pUaeNEnoVP/vxwuUIfb9HVbkRu8U6OS8C0IY+//1p9chAT3NvQweM
7SfPlPkfc/GVuuyRK91rP9Wf/osptCRqcUGY/7DsKf3EDGXvBglR5dFmr12H6av2
tQ4KDXBVf1VBjF54Y/U23/jl7e382lt2wPZ73/hnnhJJqBzFocDXJoVqnVS4zdqs
56WDFJtPhe2L2REFNvJu6b0zoKDFO+rDbIdAxLx1Ao2w6resknv4pkQ1uJki16M0
N1j8OKlCP0+Td3kAKhDVaAD/DE/JkOflV7GDeaneE6NCq+7VpYdfk8jgjaX6JwZi
TV7IcBXEGKxAMlmlZh2DuRLVdxffe/GMrzKqXQ+JoujIjA+1GawG+vYzR0ZENKm2
wKozvC1yJO0MvPCXsNTN48MJ2GPqyVheykrqvfxKCtiev4ib9fxDbzKJS77q7SNI
0KWedhWljemSgm2F90Um3zvS5kHZqKDygdgtrmMzqzpxIROaXBU3e7dQf88AEQEA
AcLDfgQYAQIACQUCVrnPzAIbLgIpCRAWVHZnCy5GP8FdIAQZAQIABgUCVrnPzAAK
CRDeYi3O8J0HnKSnD/45e5hgi8gqJprdQMOOEbOsCl/IGeFPH0UtkOqOTEMNDlYt
xV+h3V8KEFGmkWFUa1U3BTYtgT7JD2WZTUZ7fH2xFqHGflonye4oNuhh6dROSpdG
MeNe3duC6bbZzjlSfnb76PzY9AU5nwYEFf/ebPWKpHWx0pg+Pnpml16rWwsulrId
1y17Nqv+VcUUk4jsjI+Qca2LUxKhBT2fwhAKCCnnHIqba4oYdBQVpLP249d9JqCZ
eFrHGiKXyM3yPcV6aHOd2QpV0m7J902N2H+oSysTjV9P5Kx1PMFJaqoJRkHEdPtx
2T7gVC2T5LMDtE8Iu8k83YXCTgD7B+97cgR6XUcLRHcSbylSB03Rtylp6CKfbO+b
cI6M+sJ31fUWsRRm5aetJsvBnF8jsU9pRvroyuoTqSxDe6xPrhQbYipchk5M/sI8
p13Hqcwf9Tr/p4Ar9/HIFxgslWdvkOiKAxWm9tttBXRJkxYJR0n2rWhy4y4FojPD
KBo+9/NbePEhWYUEc8mGY+CIiszbe3Kq2bVyVp9PQ2otgKiOFiAspfgXgs33vNnw
Kb8JIm/zCu7Yi8fcCtz33XMigLUO5wTw/n2idFwMa6V52Pedf6rRY5uUqy0sEeQD
1u1n41y0oURin8Unls8sxMeTopU217o6UL8OkXmJDMaBpyVdL5w4doJ77yGsRv64
D/964e0BtSIhHD8h0ObIsgp9QpC5xd6Vrcfbm0W66SWYwmGskC2ieWKHjWqpfdgI
G8hV/plYIDQ6nyZuzgJa2qbQK8BaIka4nNHF3E0zLvrVZ1COnZXQhY9VJqzheq9t
tqW8wjVS48CWw+5hj0nrjiSi6SojvwXAmuv0s1WPp/m7e1crIwd43An+dw4SWo70
r+Z2LAiRupNQnbc6jspTXv/EUr6+GxRuAwGadOqZHoDXmFgKa1dE83CZ7xbUPRZ3
7vvvL9sWuZq/MWApMJwcU0HxvjyDWQOnG4dxA/Ibh3WowR22EcqY20aUvaIfu+bW
CrtKeP5QLy1zxHrxt7H1gCFsxPTPNEDLSzJQ/TNiDF1tAMQaSRLZR9LrwPfed5J7
hqPdpo/wopr4ewtdEljelO5csi8pW8aUiUDRSfqezdyenOXwTxUuCD5WBDbQqv77
c7+kVmu4w1smsyI0Rve3iZdTNzNVxeVTrCFm9Szs0JSHkgw+2A14HYnt5iNr+DcO
lXS0Fl1UYIf1t1BsYsNsBGCyHWOEbM/8IYhmU7o9OCsCk2FekcmoiUIPXwC1LeEn
GTur//Fw9xezDyK+QddPE3tBa6V3M16Vo5xOKBNW80gREeFJ5fAUGhHvSkEiBUnn
usV9FoMdVha4y8JyhiaBbvXSO972tJH68oh66CnVNQ6yxw==
=91oK
-----END PGP PUBLIC KEY BLOCK-----
OpenPGP_signature.asc (application/pgp-signature, 840 B)
-----BEGIN PGP SIGNATURE-----

wsF5BAABCAAjFiEEULItFeESq+SJGkXo3mItzvCdB5wFAmqQHYUFAwAAAAAACgkQ3mItzvCdB5xP
BBAAsg2kQF099zegQjQtHs4djA6nK5bEDXVhBGQEV6SCiy0iOc2pixNyLkqk5FXGUqW61nvMKDCP
j0wjR8CunCraLFiT5YdjFKS2zjdcpmlNpub6SPKtc2TDBRg6JTe3k2Sj3dmnTqUdFQP9wLgreAzR
uBSzRqc5rpPU0SMGo2NoKdf48APXEcmbREtVVCmYmG6+65T+EMF514mcL9q4yPrFrE6N7HPn8DbZ
VHx9Av6N+/NTiz3LGvdV3goc/O0HfBvCJlKHtZgp4azbItPsZYQAQPphlyGPuAJ/2SR/d6bM0/Bb
MQuao7Mh4mpJmthIRUQ+pNB5bEMPDY/IK96P0SkNwNVNhwwKDjL+fV+IeW8sr8FMOqycFkWER1C6
So6h4vaDk9Q2+cnnv1cW3AUIPZeApFMQ/mcGCF+LUcyjpQU1GJBo6gR1+GlliEU6tkH+ipKOqMd5
VPP8GelzODuKtcxhbvlhgwJ/Ver7PeMnsIi8TgDeWpT0CG1ZEQK9DBtPRU2eSPfF4EJc8rNbvckP
RnAillW1BrHDZ0JkYk8yuyqsiWw/ULMaHsujWDt/2SmoArletmmBHbVv9y40nBKzoU8BgtD+1ejh
OPQH8oV3eOOH9bk1kMra/w6q5l6VxB0lE/ENJ8/rt0Qx5TbiSq/hwlRixEIUUlx10nvo+6Fca4Lu
f3w=
=Yp2P
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.