| *** cosm has quit IRC | 01:07 | |
| *** cosm has joined #baserock | 01:10 | |
| *** toscalix has joined #baserock | 01:42 | |
| *** rdale has quit IRC | 01:44 | |
| *** gk{\`_^}1wm has joined #baserock | 02:30 | |
| *** toscalix has quit IRC | 03:14 | |
| *** gtristan has joined #baserock | 04:48 | |
| *** jude_ has joined #baserock | 07:33 | |
| *** jude_ has quit IRC | 07:48 | |
| *** jude_ has joined #baserock | 08:08 | |
| *** ctbruce has joined #baserock | 08:59 | |
| *** paulwaters_ has joined #baserock | 09:01 | |
| *** rdale has joined #baserock | 09:14 | |
| *** ctbruce has quit IRC | 09:15 | |
| *** jonathanmaw has joined #baserock | 09:17 | |
| *** ctbruce has joined #baserock | 09:19 | |
| jjardon | Hi, can anyone review https://gitlab.com/baserock/definitions/merge_requests/32 please? | 09:22 |
|---|---|---|
| gtristan | How is evolution 'legacy' ? | 09:23 |
| rjek | How is webkit 1 insecure? | 09:28 |
| * rjek thought 1 and 2 were developed together, but 2 was multi-process. | 09:28 | |
| *** juergbi has quit IRC | 09:34 | |
| *** juergbi has joined #baserock | 09:36 | |
| *** noisecell has joined #baserock | 09:36 | |
| jjardon | Webkit1 is deprecated; it's even gonna be removed from the next fedora version | 09:44 |
| jjardon | Evo is not legacy, that version of evolution is; feel free to upgrade it and move it back to gnome stratum | 09:46 |
| gtristan | jjardon, I disagree with the logic here | 09:46 |
| gtristan | motivation to upgrade Evo to a new webkit supporting version = existant... motivation to remove something for the sake of removing it, not so much ? | 09:47 |
| rjek | jjardon: My understanding was that WebKit 1 is /not/ deprecated; 1 and 2 use the same rendering code, but it is a significant difference in API. Although this information is probably from 2015; when did they deprecate it? | 09:48 |
| jjardon | Remember this is webkitgtk | 09:49 |
| jjardon | https://webkitgtk.org/ | 09:50 |
| rjek | Right, so WebKitGtk+ using WebKit 1 is deprecated, not WebKit 1. | 09:51 |
| jjardon | gtristan it will be removed until someone upgrade it; it will also save 1h:30m of build time | 09:52 |
| pedroalvarez | hehe, let's remove the entire gnome system to save time :P | 09:53 |
| pedroalvarez | jk.. | 09:54 |
| pedroalvarez | are newer versions with webkitgtk2 support already available? | 09:54 |
| jjardon | Context: https://blogs.gnome.org/mcatanzaro/2017/02/08/an-update-on-webkit-security-updates/ | 09:55 |
| jjardon | I think so | 09:55 |
| gtristan | jjardon, honestly I think this is wrong, you are removing an essential functionality from the gnome system (an email client is pretty essential), because it will save time to build ? | 10:01 |
| * rjek pops mutt in | 10:01 | |
| gtristan | from my pov, honestly I dont mind other than conversions to bst will result in a less useful system, but without this change; updating evo to a latest stable ref can be automated with `track` | 10:02 |
| gtristan | in any case, upstream gnome modulesets are more important | 10:02 |
| jjardon | No, I'm removing it because it using a library that is full of cve's | 10:02 |
| jjardon | Build time is a nice second effect | 10:02 |
| gtristan | jjardon, right, but you're removing it, and you also point out that it can be upgraded | 10:03 |
| gtristan | So why would upgrading Evo not *block* the removal of WebKitGtk1 *first* ? | 10:03 |
| jjardon | We do not build webkitgtk1 in gnome anymore | 10:03 |
| gtristan | jjardon, would you prefer to run a distro on your laptop that has no email client ? or run a distro on your laptop which has en email client that has known security issues ? | 10:04 |
| gtristan | I guess is the question. | 10:04 |
| jjardon | It's being moved, not removed; feel free to work on the upgrade | 10:04 |
| gtristan | That's more work overall, what's the rush ? | 10:05 |
| jjardon | There is no rush | 10:05 |
| *** ssam2 has joined #baserock | 10:06 | |
| *** ChanServ sets mode: +v ssam2 | 10:06 | |
| rjek | The security issue at the moment is surely imaginary: nobody uses this | 10:07 |
| jjardon | I simply don't want to keep building sth that is broken ( more if it's sth as big as WebKit ) | 10:07 |
| rjek | If we moved everything in definitions to dedicated strata that were old or full of CVEs, we'd have nothing | 10:07 |
| jjardon | rjek patches welcomed to update stuff | 10:08 |
| rjek | I'm saying that the logic being applied here is faulty | 10:09 |
| gtristan | To be honest I dont want to argue this specific issue. The wider ethos of this is more important to me; yes not many people, almost none, are maintaining these things (dropping the unmaintained was a first step in helping that situation) | 10:10 |
| rjek | a) removing or moving something because it's old and crusty if applied across definitions would result in something empty (but quick building), b) saying moving it is bad because it means we no longer have X feature when nobody uses X feature | 10:10 |
| gtristan | breaking functionality should not be done so lightly, though. | 10:10 |
| jjardon | If someone wants to spend some time to upgrade Evo and empathy so they don't depend on webkitgtk1 great; in the meantime I do not want to waste time building sth I know is broken | 10:12 |
| jjardon | We have done this in gnome modulesets upstream before; or you upgrade your stuff to meet a minimum level or quality or you are out of the official release | 10:13 |
| pedroalvarez | when are we releasing? | 10:17 |
| gtristan | jjardon, this is just the point, we are not wasting time building something if it's actually needed for an email client | 10:18 |
| gtristan | And note that the gnome release modulesets are not exactly the same, they are statement that the release team makes to the world and to the internal projects of what is the official release | 10:19 |
| gtristan | in which case, doing so at the beginning of the release cycle (which is still a _harsh_ move) is a message to maintainers that their module will not be in the next release if they don't change their deps. | 10:20 |
| gtristan | In *this* case, we have a reference system that has pretty much every *basic* thing that you need on a GNOME desktop - that should overrule random upgrades of middleware as well as removals of disliked libraries. | 10:21 |
| jjardon | nothing is being removed; only temporarily moved until someone has the time to upgrade; you can always put the legacy stratum on your system if you want | 10:24 |
| jjardon | We can create a branch point here if you want to keep a reference to the current system | 10:25 |
| gtristan | jjardon, I'm not arguing this specific point, I'm only arguing to try to convince you, only because I would *like* baserock to become something more serious | 10:28 |
| gtristan | I think this kind of change, in general, when maintaining a reference build... needs to be blocked when it unnecessarily regresses system behavior | 10:29 |
| jjardon | So you prefer to build sth you know is broken instead? | 10:31 |
| gtristan | jjardon, it's is certainly more broken without an emailer, than it is with an email that has some known bugs, yes. | 10:38 |
| jjardon | ok, one sec, let me rework my branch | 10:41 |
| *** CTtpollard has quit IRC | 10:53 | |
| *** locallycompact has joined #baserock | 10:53 | |
| *** CTtpollard has joined #baserock | 11:58 | |
| *** CTtpollard has quit IRC | 12:23 | |
| *** toscalix has joined #baserock | 12:31 | |
| *** CTtpollard has joined #baserock | 12:44 | |
| *** edcragg has quit IRC | 12:59 | |
| *** gtristan has quit IRC | 13:08 | |
| *** toscalix has quit IRC | 14:08 | |
| *** gtristan has joined #baserock | 14:11 | |
| *** toscalix has joined #baserock | 14:28 | |
| *** pedroalvarez is now known as ironfoot | 14:35 | |
| *** tardyp has quit IRC | 14:42 | |
| *** gtristan has quit IRC | 14:46 | |
| *** gtristan has joined #baserock | 14:48 | |
| *** locallycompact has quit IRC | 14:54 | |
| *** locallycompact has joined #baserock | 14:54 | |
| *** tardyp has joined #baserock | 14:55 | |
| *** toscalix has quit IRC | 15:37 | |
| *** ctbruce has quit IRC | 16:10 | |
| *** noisecell has quit IRC | 17:21 | |
| *** CTtpollard has quit IRC | 17:30 | |
| *** Guest11941 has quit IRC | 17:35 | |
| *** CTtpollard has joined #baserock | 17:50 | |
| *** jonathanmaw has quit IRC | 18:01 | |
| *** jude_ has quit IRC | 18:44 | |
| *** ssam2 has quit IRC | 18:54 | |
| *** jude_ has joined #baserock | 19:02 | |
| *** locallycompact has quit IRC | 19:05 | |
| *** toscalix has joined #baserock | 19:48 | |
| *** toscalix has quit IRC | 19:51 | |
| *** locallycompact has joined #baserock | 20:32 | |
| *** gtristan has quit IRC | 20:51 | |
| *** jude_ has quit IRC | 22:07 | |
| *** rdale_ct has joined #baserock | 22:37 | |
| *** thrace_ has joined #baserock | 22:39 | |
| *** juergbi` has joined #baserock | 22:40 | |
| *** locallycompact has quit IRC | 22:42 | |
| *** juergbi has quit IRC | 22:42 | |
| *** rdale has quit IRC | 22:42 | |
| *** thrace has quit IRC | 22:42 | |
| *** vgrade12 has quit IRC | 22:46 | |
| *** cyndis has quit IRC | 22:46 | |
| *** benbrown_ has quit IRC | 22:46 | |
| *** dabukalam has quit IRC | 22:46 | |
| *** locallycompact has joined #baserock | 22:50 | |
| *** cyndis has joined #baserock | 22:52 | |
| *** benbrown_ has joined #baserock | 22:52 | |
| *** dabukalam has joined #baserock | 22:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!