Bonum Certa Men Certa

Starting a GNU Replacement for GitHub, Possibly Based on GitLab

Gitlab and Gnu



Summary: "It might be easier if we start from the GitLab software," Stallman said

RECENTLY, a letter was sent to Richard Stallman to discuss threats associated with GitHub (among other things). Here is one proposal he entertained last week:

[Stallman:] Developing such software would be a big job, but possible if people are dedicated. It would probably take soe [sic] years.

It might be easier if we start form [sic] the GitLab software. That is free, right?

However, I doubt we could even possibly hope to pull most free software hosting away with GitHub.

Let's suppose we do a great job of developing that software and we set up a server running it, and we want to compete with GitHub for projects to choose us. How many free projects are there on GitHub? Hundreds of thousands, I suppose.

To provide good service for that many projects, I think we would need a server farm, and hundreds of staff. We could not afford that.

We would need those staff, and rental for the server farm.

not for a one-time development expense, but as operating costs, year after year.

The only way we could do that is by charging for the service. Most projects would choose some other service which is gratis.

However, those projects that chose our service would get good service, since we could afford to give it to them, for pay.

We could make this work, but would it make a big difference?


The response (from Thomas Grzybowski):

Hi Richard,

I feel encouraged that most of your concern about a GitHub replacement is technical and economic. Those problems can be solved. The key is to use a distributed architecture.

I see five important reasons to go with a distributed git repository:

1. Distributed I/O and CPU load. 2. No single point of failure (such as a ddos attack). 3. No single site entity would have to finance and maintain a gargantuan datacenter. 4. No one country could censor the content of the repository. 5. No single entity could completely control the entire repository.

I have done some basic research and come up with a proposed technology: For the back-end the project can utilize a PostgreSQL database server utilizing Postgresql ltrees. Ltrees is a very powerful and performant database feature for tree-like data structures such as git, and it would be perfect for this application.

Putting the git data schema entirely in a database provides a secure and robust system, with transactional integrity.

Perhaps most importantly, PostgreSQL 10 has introduced a feature called "Logical Replication", through which one can perform intra-database object-level replication across hosts. This can provide an efficient and solid transactional mechanism for distributed replication.

So, the core idea is to have several sites, located and independently financed in a number of countries.

Now, would such a thing make a BIG difference? Well, like most software projects it would start out small, and then get bigger. Code from Savannah can begin to be migrated-in, making it immediately important, and then the project will certainly receive a lot of attention. I think volunteers will be eager to get on board. As other hubs are established and various and diverse Free Software projects worldwide join-in there will be a compounding function in effect. I think ultimately such a system will provide the preferred repository for Free Software, since that domain will be the focus, and will have the benefits of the distributed implementation outlined above.

It will be an easy sell, assuming the interactive user experience is competitive; people will understand the importance immediately, since Free Software folks do not want to be overseen by Microsoft.

I can come up with a more detailed functional description and system specification if you would like.

Thanks,

Tom G.


Removing GNU/Linux projects from GitHub should be seen as a high-priority initiative. The FSF has not spoken about this yet (not in recent years).

Recent Techrights' Posts

The Register Bill
The Register MS - putting the "MS" in your centre of the universe
Analogies for "Memory Safety" in Rust
Don't worry, it's Rust! It can do anything!
 
The UEFI 9/11 - Part VIII - Denial of Service and Selling Us WSL (Windows) Instead of "Risky" (Prone by Breakage by Microsoft) GNU/Linux
Restricted Boot (so-called 'SecureBoot') does not improve security. It is nothing but trouble. It's meant to trouble non-Windows users. In dual-boot setups, SecureBoot is a recipe for disaster because Microsoft keeps erasing or tampering with the boot sector, to paraphrase an associate
Slop is Extremely Rare in Geminispace, Slop Images Are Unheard Of (Despite Images Being Supported)
As long as Geminispace grows in terms of domains it's safe to predict the protocol will still be used in 2029 and hence Geminispace will turn 10
Certificate Authority Let's Encrypt Has Almost Gone Down to Zero, Nearly Totally Extinct in Geminispace, the Few Capsules Still Using It Are Spam/Dead/Stagnant
This represents another decrease for Let's Encrypt; the last decrease was last week
Links 07/09/2025: Robodebt Class Action, Fines, and Copyright Settlement
Links for the day
Links 07/09/2025: Yle Impersonated in Social Control Media, Boat-Attacking Orcas, Midjourney Sued Again
Links for the day
Slopwatch: LinuxSecurity, Linux Journal, and the Serial Slopper
Google won't tackle the issue because Google participates not only in relaying slop but also in generating lots of it
Links 07/09/2025: Google Fines in EU and "Your Internet Access Is at Risk"
Links for the day
Gemini Links 07/09/2025: Little Brother and Corporate Theatre
Links for the day
Links 07/09/2025: More Harms of Slop and Anthropic's Nightmare Scenario (Huge Legal Liabilities for Slop)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 06, 2025
IRC logs for Saturday, September 06, 2025
Microsoft Sites Now Talking About September's Mass Layoffs at Microsoft
It's noteworthy that even Microsoft's MSN now covers the latest revelations about mass layoffs
Gemini Links 06/09/2025: SpellBinding Moving and "The Cloud" Ridiculed
Links for the day
Slopwatch: On "the Apology Industry", Chatbots (Punchbag for Customers), and Fake Articles About "Linux"
"news reporting priorities changed"
Links 06/09/2025: "Covid Incidence on the Rise" and Many Attacks on the Press Worldwide
Links for the day
Nobody Denies That SecureBoot Will Cause Problems After September 11
Not even Microsoft
Gemini Links 06/09/2025: Infinite Scrolling and Posting from Emacs
Links for the day
Links 06/09/2025: GitHub Meltdown Over Slop, "U.S. Jury Says Google Should Pay $425 Million in Privacy Lawsuit"
Links for the day
Despite Its Severe Financial Problems Gnome Foundation Inc Paid Rosanna Yuen Over 100,000 Dollars Last Year
maybe relocation should be considered
The "Left" and the Right"
It poisons everything
Mozilla and Rust Are Not Leftists
they're part of the mass consumerism machine
Disposable to Microsoft
There is an extensive set of people who got used by Microsoft, only to be thrown away a month later or a year later or a decade later
The UEFI 9/11 - Part VII - This Coming Week Many PCs Will Refuse to Boot "Linux" (Because of Microsoft's Expired Certificate)
The real solution is, disable "secure boot" or "SecureBoot" while it's still possible. [...] Just like submarine patents, a lot of this problem was "hibernating" for a while
The Thing Nobody in Red Hat Wants to Talk About Openly
There is a real sentiment or worry among Red Hatters, Europeans and Americans in particulars (because of higher salary expectations)
Slopwatch: Small Parade of Fake News About "Linux" and Scams Borrowing the Name (or Word) "Linux"
In practice, LLMs are a risk
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 05, 2025
IRC logs for Friday, September 05, 2025
Genini Links 05/09/2025: Community, ROOPHLOCH, and PITkit
Links for the day
Links 05/09/2025: Vaccine Sceptics Poison the Well, Two Exploited Vulnerabilities Patched in Android
Links for the day
Gemini Links 05/09/2025: Logitech Lift and DIY Gemini Servers
Links for the day
Links 05/09/2025: Sainsbury's Caught Spying on In-Store Shoppers and Microsoft "OpenAI is Using Legal Threats to Harass its Critics"
Links for the day
BASIC Predates Microsoft by Over a Decade, Microsoft-Controlled Sites Like The Register MS Don't Want You to Know This
The state of the media is really bad when it relies a lot on oligarchs' money and is appointing editors who are working for oligarchs
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C
17 hours ago
Reminder: Microsoft's "Secure Boot" Certificate for "Linux" Will be Expired in One Week
Many PCs won't manage to 'rotate' to another certificate
"Many of the Red Hat Employees Are Still Looking for Work"
Shame on IBM's CEO
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 04, 2025
IRC logs for Thursday, September 04, 2025
Microsoft Started With Code Literally From The Trash, Nothing Has Improved Since
The reality is, there are systems and code that are reliable. But they're not Microsoft's.
Hypothesis That New McKinsey/Microsoft Executive Inside Red Hat Will Outsource Research and Development Operations to India (Like They Do in IBM)
IBM is floundering
Slopwatch: Scams, Fake Articles About "Linux", Plagiarism, and Worse
Perhaps some time soon the LLMs or the "Big LLMs" will run out of money (to borrow) and go offline, leaving those slopfarms in a tough place