Bonum Certa Men Certa

Starting a GNU Replacement for GitHub, Possibly Based on GitLab

Gitlab and Gnu



Summary: "It might be easier if we start from the GitLab software," Stallman said

RECENTLY, a letter was sent to Richard Stallman to discuss threats associated with GitHub (among other things). Here is one proposal he entertained last week:

[Stallman:] Developing such software would be a big job, but possible if people are dedicated. It would probably take soe [sic] years.

It might be easier if we start form [sic] the GitLab software. That is free, right?

However, I doubt we could even possibly hope to pull most free software hosting away with GitHub.

Let's suppose we do a great job of developing that software and we set up a server running it, and we want to compete with GitHub for projects to choose us. How many free projects are there on GitHub? Hundreds of thousands, I suppose.

To provide good service for that many projects, I think we would need a server farm, and hundreds of staff. We could not afford that.

We would need those staff, and rental for the server farm.

not for a one-time development expense, but as operating costs, year after year.

The only way we could do that is by charging for the service. Most projects would choose some other service which is gratis.

However, those projects that chose our service would get good service, since we could afford to give it to them, for pay.

We could make this work, but would it make a big difference?


The response (from Thomas Grzybowski):

Hi Richard,

I feel encouraged that most of your concern about a GitHub replacement is technical and economic. Those problems can be solved. The key is to use a distributed architecture.

I see five important reasons to go with a distributed git repository:

1. Distributed I/O and CPU load. 2. No single point of failure (such as a ddos attack). 3. No single site entity would have to finance and maintain a gargantuan datacenter. 4. No one country could censor the content of the repository. 5. No single entity could completely control the entire repository.

I have done some basic research and come up with a proposed technology: For the back-end the project can utilize a PostgreSQL database server utilizing Postgresql ltrees. Ltrees is a very powerful and performant database feature for tree-like data structures such as git, and it would be perfect for this application.

Putting the git data schema entirely in a database provides a secure and robust system, with transactional integrity.

Perhaps most importantly, PostgreSQL 10 has introduced a feature called "Logical Replication", through which one can perform intra-database object-level replication across hosts. This can provide an efficient and solid transactional mechanism for distributed replication.

So, the core idea is to have several sites, located and independently financed in a number of countries.

Now, would such a thing make a BIG difference? Well, like most software projects it would start out small, and then get bigger. Code from Savannah can begin to be migrated-in, making it immediately important, and then the project will certainly receive a lot of attention. I think volunteers will be eager to get on board. As other hubs are established and various and diverse Free Software projects worldwide join-in there will be a compounding function in effect. I think ultimately such a system will provide the preferred repository for Free Software, since that domain will be the focus, and will have the benefits of the distributed implementation outlined above.

It will be an easy sell, assuming the interactive user experience is competitive; people will understand the importance immediately, since Free Software folks do not want to be overseen by Microsoft.

I can come up with a more detailed functional description and system specification if you would like.

Thanks,

Tom G.


Removing GNU/Linux projects from GitHub should be seen as a high-priority initiative. The FSF has not spoken about this yet (not in recent years).

Recent Techrights' Posts

"Google is Googlebombing KDE's Project Banana"
So is Google googlebombing KDE's Project Banana? You decide.
Some Very Large IRC Networks Are Growing
IRC will turn 38 next year
What Ruben Amorim and Stefano Maffulli Have in Common
Censors Wikipedia and Social Control Media
Microsoft Won't Cooperate in Trying to Tackle EPO Corruption (Microsoft Profits From This Corruption)
Use something like BigBlueButton, Jami, Ring, and Jitsi instead
We Are Sad to Hear the Story of Jonathan Riddell, Champion of KDE and GNU/Linux on Desktops/Laptops
I have enormous respect for Jonathan and everything he has done
 
Cindy Cohn Leaving the Electronic Frontier Foundation While Its Co-founder John Gilmore, Whom She Apparently Helped Oust, Will Celebrate 40 Years of the Free Software Foundation, Inc.
EFF has been busy hoarding GAFAM money, whereas the latter is where all the real activism is done
The Reach of Techrights Has Broadened
We nowadays cover a broader range of issues
Complicating Things for No Actual Benefit, Just Added Risk and More Difficulties Adding GNU/Linux and BSDs
Watch what it's like for people who wish to use BSDs
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 15, 2025
IRC logs for Monday, September 15, 2025
Links 16/09/2025: Autumn Party, RPG Planet, and Optical ROOPHLOCH
Links for the day
Geminispace Growing at Pace of Over 10% Per Year
Contrary to what some pessimists try to claim
Linux Mint Forums Today: Disable 'Secure Boot', It Doesn't Improve Security, It's Just a Microsoft Obstacle to GNU/Linux Users
They also mention MOK
Solved Less Than an Hour Ago: Trying to Escape Windows, 'Secure Boot' Gets in the Way
'Secure Boot' wasn't meant to even exist in the first place
Stefano Maffulli, Executive Director of the Open Source Initiative, Resigns or Gets Removed (We'll Continue Covering OSI Scandals)
A dozen mentions of "AI", not much about "Open Source"
Andy Has Just Nailed It (Regarding Complexity and Failure, a la UEFI)
The users no longer own or control what they buy
Compatibility Support Module (CSM) Versus GNU/Linux Simplicity
what Andy recently called "solutionism"
Links 15/09/2025: "Postal Traffic to US Down by Over 80%" and 'Smart' Spinozacampus Laundry Room Goes AWOL
Links for the day
Gemini Links 15/09/2025: Dungeon Hustle and Deleting Oneself From the Net
Links for the day
Breach of EPO's Duty of Care or Cigna Reimbursement Issues
This is the sort of thing that motivated Luigi Mangione to assassinate a CEO
Ask Ubuntu About "Secure Boot" Violation and Laptops That Don't Boot GNU/Linux
Does anyone still believe that "Secure Boot" has anything at all to do with security?
Talking About the Problem vs Talking to the Problem
Wanting an audience is never a good excuse for compromising one's values and principles
Focusing on Patents
The reason we cover the EPO so much is that it's close to home
"Secure Boot Violation": The 'Joys' of Fake Security Gone Wrong
Not everyone reboots every day
Links 15/09/2025: Russia Invades Romanian Airspace, Penske Media Sues Google Over LLM Slop
Links for the day
Links 15/09/2025: Bitcoin ATMs Scam and "Conservative Cryptography" (Backdoors Fantasies)
Links for the day
EPO Imitates Microsoft: "Three Days or More Per Week" Inside the Office to Get a Desk to Work on; "the Office Breaches Its Promise Towards Staff and Acts in Breach of Its Duty of Care"
The EPO serves no actual function in Europe
Links 15/09/2025: Political Affairs, Censorship, and Copyrights
Links for the day
Gemini Links 15/09/2025: Music Genres, Invisible Networks, and Akademy 2025
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 14, 2025
IRC logs for Sunday, September 14, 2025
Satya's Plan B: Try to Hide the Massive Extent/Scale/Scope of Microsoft Layoffs
fewer people buy Microsoft
Red Hat News About De Facto Mass Layoffs (Bluewashing) Gone From Reddit (Censored by Gatekeepers), Still Online in The Register
With RTOs, PIPs, relocation etc. expect IBM to "shed off" many Red Hatters
UEFI "Secure Boot Doesn’t Play Nice at the Moment"
UEFI "Secure Boot" does not improve security. It's an artificial obstacle in service of monopoly.
Gemini Links 14/09/2025: ROOPHLOCH, Music, and Reddit
Links for the day
If You Want to "make your 'Windows PC' lean, mean, and fast" You Will Install GNU/Linux or Some BSD
That kind of article says a lot about IDG
Slopwatch: Google News Infested With Slop (About Half of the Results for "Linux" Today)
This is the sort of junk one finds when looking for "Linux" in Google News these days
Links 14/09/2025: Ricky Hatton Dies and McDonald's Declares War on Tipping Culture
Links for the day
Links 14/09/2025: Disasters for CEOs Obsessed With Slop and Slop Companies School Like Fish
Links for the day
"Bad Shim Signature" (Microsoft 'Secure' Boot)
"Fresh install not booting"
What Microsoft Garrett and Microsoft Lunduke Have in Common
Similar tactics, different "wings"
Links 14/09/2025: US "Economy Sagging", "Michigan Economy Wobbles From Tariffs"
Links for the day
Gemini Links 14/09/2025: Minimalist Snippet Manager and Omarchy Linux
Links for the day
The Face of the Digital Far Right: Microsoft Lunduke
Microsoft Lunduke is an online extremist that belongs to and panders to the far right
20 Years Later and Academia Isn't the Same
"I never dreamed of being a professor"
'Cancel Culture' by the Right: Microsoft Lunduke Contacts People's Employers Trying to Get Them Fired
Microsoft Lunduke panders to extremists online
"Bad Shim Signature"; So 'Secure' That It Overrides Users' Preferences and Turns Itself Back on (Coercive Measure)
This was a few hours ago
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 13, 2025
IRC logs for Saturday, September 13, 2025