Re: Freexian, security and Debian

--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Lucas Nussbaum <[email protected]> writes:

> Hi,
>
> On 19/07/26 at 19:57 +0300, Adrian Bunk wrote:
>> 2. Debusine, and Freexian in general
>> ------------------------------------
>>=20
>> While it is laudable that Freexian has the explicit goal of helping=20
>> Debian, Debian giving preferential treatment to one company might
>> outweigh the benefits when this drives away other contributors.
>
> A long time ago, I was the DPL when Debian LTS was set up.
>
> I was very careful at the time to defend a setup where mutiple actors
> could collaborate on Debian LTS. I think that this still holds: if
> someone if sufficiently unhappy with Freexian's contributions to LTS,
> there's space to setup other actors, with their own funding models.

Would that even be possible if Debian buildds were to use Debusine?

Doing so seems like a corporate-takeover of an essential Debian-internal
service.

I guess the close association between Debian-internal matters (e.g., LTS
or buildd) with one external company is what may annoy people.  It calls
for transparency.

Don't get me wrong: in this particular case, I'm for replacing our aging
buildd infrastructure with Debusine which is well documented and appears
on the surface to be better engineered.  I don't have anything per se
against corporate takeovers, and find that they often lead to more
activity and progress, which is good.  But we should be aware of what we
are doing.

/Simon

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=1Nk9
-----END PGP SIGNATURE-----
--=-=-=--