The debian-private mailing list leak, part 1. Volunteers have complained about Blackmail. Lynchings. Character assassination. Defamation. Cyberbullying. Volunteers who gave many years of their lives are picked out at random for cruel social experiments. The former DPL's girlfriend Molly de Blanc is given volunteers to experiment on for her crazy talks. These volunteers never consented to be used like lab rats. We don't either. debian-private can no longer be a safe space for the cabal. Let these monsters have nowhere to hide. Volunteers are not disposable. We stand with the victims.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Continuous Releases?

Daniel Quinlan wrote:

>> All packages should be considered "unstable" until they are tested
>> unless the security officer decides otherwise (to fix security holes).

Craig Sanders <cas@taz.net.au> writes:

> All packages are, IMO, unstable until i've successfully installed
> them on my system.

I'm not sure how this metric would successfully apply to Debian
project development.

> (also IMO, "Stability" as far as debian is concerned is primarily
> about whether a package installs OK without breaking
> dpkg/dselect. Whether the package performs as advertised is another
> matter entirely.)

Stability should be a reflection of the status of the package.  That
includes installing correctly, but should also mean that the contents of
the package are quality-tested.  The testing should catch things such as
maintainer-created security holes.

We really must end the practice of sending a package straight (not
counting automated checks) from the package maintainer to the user.
Even the best package maintainers make mistakes from time to time.
Packages should be tested by humans before they go to the public.

>> We have shown that this does not work. Let's try something more
>> conservative.

> actually, it's been *asserted* that this does not work. we've never
> actually tried it...

I don't understand.  Debian has never had any serious testing of
packages.  Maybe we are using different meanings for "stable" and
"unstable".

Dan

-- 
Daniel Quinlan (quinlan@pathname.com)   At work (quinlan@transmeta.com)
http://www.pathname.com/~quinlan/       PGP key available - http or finger


--
Please respect the confidentiality of material on the debian-private list.
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-private-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com