https://www.puppet.com/community logo
Join Slack
Powered by
# voxpupuli
  • v
    so this announcement only concerns binary builds, not source access?
  • d
    correct only binary builds
  • v
    because that's not clear to me at all, reading the announcement
  • v
    bastelfreak: when you say "repos" there, are you refering to the binary package repos (APT/.deb, RPMs, etc) or git repos?
  • d
    but for transparency to highlight changes would be made in the downstream private forked repos first before going to the public upstream repos
  • v
    that's a hell of a footnote
  • v
    anarcat: I meant the git repos
  • v
    i think there's a contradiction here between "only binary packages are affected" and "oh, we're also forking to private repos now"
  • v
    David: but then the private forks aren't downstream anymore
  • v
    so what's going to happen in those private git repositories?
  • v
    how is that not close-sourcing puppet? that's effectively a closed source puppet repository
  • v
    i mean you can do that, legally, of course, Puppet is Apache, not GPL
  • d
    https://www.redhat.com/en/blog/what-open-source-upstream#:~:text=Within%20information%20technology%2C[…]erm,flow%20from%20upstream%20to%20downstream was where I was trying to take my terminology from after getting very confused about upstream and downstream
  • v
    but it still means, in my book, we don't get access to the actual real repositories used to build Puppet
  • v
  • v
    anarcat: that's my undetstanding as well
  • v
    not sure what the rest of the stuff does
  • v
    what's an "EAB" ?
  • v
    heh
  • v
    i mean that's effectively what we're talking about here
  • v
    we (Debian developers) need a reliable upstream from which we can pull new releases and security patches when they come out
  • v
    if we can't have that anymore, we can't have puppet anymore, and it either needs to be removed from debian, or forked to provide a proper upstream
  • v
    if those patches are locked behind a private repository hidden behind a EULA that is not a free software license, then puppet is effectively not free software anymore
  • v
    Same for Arch Linux
  • v
    same for everything
  • v
    anarcat, but isn't (for Debian) the upstream puppet.git? which I would assume still will exist?
  • v
    i just speak for debian though, and not voxpupuli
  • v
    Zhenech: from what i gathered, that still exists, but is lagging behind the real upstream
  • v
    ah, so android.git!
  • v
    haha
1...618619620...648Latest