/srv/irclogs.ubuntu.com/2008/01/27/#ubuntu-devel.txt

mok0I am fixing a piece of code that's giving me a bunch of warnings:  "deprecated conversion from string constant to ‘char*’" . The code becomes really ugly when you have to cast every string constant. What is the rationale behind this change of the C language?00:14
ln-if you have to cast every string constant, that sounds a lot like you're doing something wrong.00:15
ln-but what do i know, i'm not an ubuntu developer.00:15
LaserJockmok0: seems like I've read something about that recently, but can't for the life of me remember where00:16
ln-mok0: how about showing a piece of code that gives these warnings?00:17
ion_mok0: AFAIU a string constant should either go to a const char * or be strduped.00:18
mok0I can pastebin some code00:20
mok0you'll see it looks ugly00:20
mok0wait, I'll paste a oneliner here.00:20
mok0 if (showprogress) StartProgress((char *)"Locating Bonds",atom.size() );00:21
mok0every time there's a string constant, you have to cast it :-(00:21
ln-i'd say: You're Doing It Wrong00:21
ion_char *foo = "bar";  /* wrong, either use const char * or strdup */00:21
gesermok0: what does StartProgress expect? a char *?00:21
mok0const char *00:22
geserthen remove the (char *)00:22
mok0Then you get the compiler error00:22
mok0warning00:22
geserHi bddebian00:22
bddebianheya geser00:23
ion_mok0: Are you sure StartProgress expects a const char *? Please recheck.00:23
mok0ion_: it doesn't matter what it expects. I tried changing it00:24
mok0ion_: either way, you get the same warning00:24
mok0even in an initializer: const char *str = "Hello world";00:25
mok0This is g++ 4.2.3 from hardy00:26
mok0using -Wall00:26
mok0But it's going to give us tens of thousands of warnings from existing code :-(00:27
gesermok0: I just checked: I get the warning for "char * foo = "bar";" but not for "const char * foo = "bar";"00:29
gesermok0: luckily it just warnings an not errors00:29
mok0geser: what about in a function call ?00:31
mok0geser: I think I read somewhere that the policy recommends compilation with -Wall00:31
gesermok0: http://paste.ubuntu.com/3925/ (ignore the linking error)00:36
gesermok0: gcc (GCC) 4.2.3 20080114 (prerelease) (Ubuntu 4.2.2-7ubuntu1)00:36
mok0geser: you are getting the same warning00:37
mok0geser: I can't tell if it's both functions00:37
mok0... or only func100:37
gesermok0: I get it only for the func1 call00:38
mok0hmm00:38
ln-mok0: but doesn't that paste show the opposite of what you claimed?00:38
mok0ln-: I claimed that changing the function didn't make a difference.00:38
mok0geser shows that I am wrong00:38
* mok0 wants to check again00:39
gesermok0: did you also changed the prototype in the header?00:39
* mok0 forgot to change the prototype :-(00:40
ln-02:15 < ln-> if you have to cast every string constant, that sounds a lot like you're doing something wrong.00:42
* ln- can foresee the future.00:42
mok0ln-: Yeah.00:42
mok0ln-: the solution is to make string constants "const char00:47
mok0"const char *"00:47
ln-yes, but it's not a "string", it's a pointer.00:48
mok0ln-: aie00:48
mok0const char *str = "hello world";00:49
mok0but: char *str = "hello";  is commonplace00:49
geserbut also wrong as you can't modify str without a segfault00:52
geserand the compiler will only warn you for const char *00:52
mok0geser: ? the compiler accepts the latter00:53
mok0former00:53
mok0sorry00:53
geser"hello" is by definition a const char *, so assigning it to a char * isn't wise00:54
mok0geser: yes00:54
ln-actually, you can modify str, but not *str00:54
mok0ln-: so, you can invalidate the pointer?00:55
geserln-: yes, unprecise wording from my side00:55
mok0But, still, char *str = "hello"; is used all over the place, so there are going to be lots of things to change00:56
ln-mok0: not only invalidate, but you can make it point somewhere else.00:57
* geser thinks about the difference between "const char *" and "char * const" again00:57
gesermok0: buggy code should be fixed instead of disable the warning00:58
mok0geser: exactly, that's what I mean00:58
mok0geser: Perhaps I'm ignorant, but I think the warning is pretty new00:59
mok0geser: I've never had to deal with it before00:59
gesermok0: I've seen it only recently too (since hardy, but I didn't look much at build logs during gutsy development)01:04
berto-hi everyone.  i am running 6.06.1 LTS server and compiled a Xen 3.0.4 kernel.  When I boot into the Xen kernel I lose my SATA tape drive (Quantum DLT-V4).  Anyone know if there are any special modules I need besides st and sg that are built into the Ubuntu kernel?01:38
persiaberto-: It's a weekend, so most developers are not present.  Also, you might want #ubuntu, as that appears to be a support question.01:40
berto-persia: ok, thanks.  i've tried in #ubuntu, i'll try again.01:41
persiaberto-: You might also try answers.launchpad.net/ubuntu/ if nobody currently around has an answer.01:42
berto-persia: will do, thanks!01:42
berto-persia: no luck in #ubuntu; i've posted a question on launchpad (https://answers.launchpad.net/ubuntu/+question/23184)  thanks for the tip!01:51
persiaberto-: Your welcome.01:52
=== Skiessl is now known as Skiessi
linos2anyone know where I could find a list of gcc command syntax for pentium and amd athlon processors04:18
LaserJocklinos2: have you checked the gcc man/info pages?04:20
linos2LaserJock, no.. let me check. thanks04:21
linos2LaserJock, I am trying to find out information about the i586-mingw32msvc-gcc command.  I don't have it in my man pages.  Do you know where I could find this on the net?04:25
LaserJocklinos2: google? sorry, I'm not much help04:28
linos2LaserJock, thanks anyway04:28
coastGNUlamont: ping04:44
coastGNUlamont: Is there a chance that #186274 (debian bug-No.462662) will make it to hardy before feature freeze?04:50
=== nenolod_ is now known as nenolod
linos2can someone tell me what is the file name gentoo equivalent make.conf under ubuntu called?  thanks inadvance05:14
persialinos2: No direct equivalent05:16
linos2persia, where are the flags set under ubuntu kde desktop version edgy eft?05:16
persialinos2: Likely in the individual packages, although I think KDE has some commonality.  apt-get source for the package that interests you, and look in the rules file.05:18
linos2persia, ok thank you very much05:18
linos2persia, one last question, where is the file that contains the CPU type?05:19
LaserJockpersia: those would just be additional flags no? aren't there common flags given to all?05:19
LaserJocklinos2: /proc/cpuinfo?05:19
persiaLaserJock: I don't think so.  debian/rules is just a makefile.05:19
Nafallo!weekend05:39
ubotuIt's a weekend.  Often on weekends, the paid developers, and a lot of the community, may not be around to answer your question.  Please be patient, wait longer than you normally would, or try again during the working week.05:39
lamontcoastGNU: 462662 is on my list to evaluate - at first blush, the patch looks not-unreasonable.05:45
lamontgiven the submitter, I'm inclined to trust it05:45
lamontcoastGNU: esp since feature freeze is 2 weeks away05:50
coastGNUlamont: submitter; thats why I told it Joey :)) Thanks a lot.06:42
lamontheh. ok06:42
lamontanyway, it'll be in the next upload06:42
lamontand patch filed upstream06:42
coastGNUI'm writing an article about oem setup of all major community distributions for the german freeX magazine. So giving that the patch will make it into hyrdy that would be a tremendous example how fast a suggestion makes it into a debian package. ;)06:44
coastGNUs/hyrdy/hardy/06:44
=== RAOF_ is now known as RAOF
=== Taggard is now known as Edao
=== Edao is now known as Taggard
=== fabbione is now known as thegodfather
=== hunger_t is now known as hunger
loolA wave of FUD on Ubuntu SRUs is spreading on Planet GNOME :-/10:52
* Fujitsu sighs.10:54
Fujitsu`common sense actions'10:54
FujitsuIt's common sense to update packages in stable releases without a good reason. I see.10:54
loolIt's completely unfounded critics: the examples taken are glomm which is supposed to have serious bugs rendering it unusable but not visible in Launchpad -- if true this warrants a SRU; gnome-games which saw a SRU for gutsy already; and gnome-games being out of date in *hardy* while it simply didn't build because of a new build-dep which needs promotion to main10:57
loolAnd then everybody running screaming that you should run Fedora instead10:58
geserdoes Fedora have a "better" SRU policy?11:09
Fujitsugeser: I believe they just push new upstreams.11:12
=== Hobbsee_ is now known as Hobbsee
=== \sh_away is now known as \sh
Mithrandir │ A new version of configuration file /var/run/grub/menu.lst is available, but the   │14:18
Mithrandirwtf?14:18
Mithrandirconfiguration files in /var/run, now that's a new one.14:19
snikkeri've got some trouble to run vmware (libpng12 error) after the update of some packages, i'm under gutsy on amd6415:08
ScottK2snikker: See /topic.  This isn't a support channel.15:12
snikkerScottK2: yes, i know, but i've already tried yesterday in #ubuntu with no success... now i try again..15:13
Seveassnikker, that doesn't make this a support channel.15:16
snikkerSeveas: ok, sorry for that...15:17
ln-yeah, next you will be instructed to get a support contract.15:17
\shln-, ?15:19
Nafallo\sh: get a support contract ;-)15:21
\shNafallo, ;)))15:29
\shwho do I need to bribe to add more libs to ia32-libs?15:30
=== doko_ is now known as doko
ln-keescook: what does " Declined  for Dapper  by Kees Cook  "  mean in this context: https://bugs.launchpad.net/bugs/cve/2006-7229 ?15:40
geser\sh: ia32-libs is in universe and TIL is pitti15:41
\shgeser, well, if it's in universe I could do all by myself...great....15:43
\shln-, because it's already fixed in linux-source-2.6.15_2.6.15-26.47?15:51
\shln-, http://changelogs.ubuntu.com/changelogs/pool/main/l/linux-source-2.6.15/linux-source-2.6.15_2.6.15-26.47/changelog15:51
\sh * skge: Update to version in 2.6.17, to obtain fixes and D-Link DGE-530T15:51
\sh    support.15:51
\sh    - Malone: #5584715:51
ln-and when is this linux-source-2.6.15_2.6.15-26.47 coming out, or is it out already?15:53
ln-because... the latest Dapper kernel still suffers from this bug.15:53
ln-that is, 2.6.15-51-686.15:54
=== valles is now known as keffie_jayx
\shln-, it was already released15:58
\shln-, if this issue still exists, please ping benC on ubuntu-kernel and ask why the fix is not working anymore...15:59
\sh2.6.15-51 looks like a dapper-proposed kernel to me15:59
Nafallo\sh: the fix is not working cause the user has the wrong kernel :-)16:02
Nafalloso no need to ping Ben about it.16:02
ln-what is "the wrong kernel", and what would be "the right kernel"?16:03
\shNafallo, well, the proposed kernel series could be the next -security upload, so it should contain the 2.6.17 skge source as described in the changelog :)16:03
Nafallo\sh: but it isn't from what I remember16:04
Nafallothe 50 ABIs are something weird and obscure :-P16:04
\shNafallo, then something went wrong with it...so the -kernel guys are the right people to ask why...16:04
ln-2.6.15-51-686 came through apt as a normal update.16:04
Nafalloln-: what happens if you use 26.47 or later?16:05
calchas anyone noticed that nautilus can't open text documents unless they end in .txt now?16:05
\shln-, check your sources.list please..if you have dapper-proposed enabled16:05
calcits something that appears to have changed in gnome/nautilus in the past couple weeks16:05
calcit says "There is no application installed for this file type"16:05
calcfor a text file i have called "irc.channels"16:05
ln-\sh: no, i don't have.16:06
Nafallocalc: lots of stuff has that. docx, rar, zip amongst other.16:06
calcNafallo: huh?16:06
calcNafallo: this is just bog standard text edited with vi, before gnome/nautilus knew how to open it, i think it probably used 'file' to determine what it was, now it seems it must be using the file extension16:07
Nafallocalc: that they are not associatied. at least here.16:07
* calc probably needs to ping seb12816:07
calclooks like he isn't online right now though16:07
ln-Nafallo: 26.47 is in dapper-proposed or something?16:09
calcNafallo: but yea i know what you mean wrt docx, etc16:09
calcNafallo: this is happening on just a standard text file16:09
calcccheney@desktop-c2d:~/Desktop$ file irc.channels16:09
calcirc.channels: ASCII text16:09
calcnautilus should be able to figure that one out (it used to anyway)16:09
\shln-, the last dapper-security kernel image is Package: linux-image-2.6.15-25-686 as far I can read the Packages.gz from dapper-security16:09
\shln-, and Package: linux-image-2.6.15-51-686 comes from dapper-proposed16:11
\shln-, so you have somehow dapper-proposed channel activated somehow16:11
ln-err.. we used 2.6.15-25-686 something like more than 6 months ago, since then there have been -26, -27, -28 and -29, and now -51.16:11
Nafallohttps://edge.launchpad.net/ubuntu/+source/linux-source-2.6.1516:12
\shwell dapper-security is the latest kernel-image linux-image-2.6.15-29-686 to be more accurate16:12
crimsunlinux-source-2.6.15 | 2.6.15-51.64 | dapper-updates | source, all16:13
\shcrimsun, bah...that's why I don't use -updates on my dapper server ;)16:15
ln-actually, i don't think i'll be spending any more time trying to get this bug fixed.  if a trivial vulnerability cannot be fixed in 15 months, then it obviously cannot and will not.16:25
\shln-, as I said, ask BenC .. he knows why this is not anymore in the -updates kernel...16:25
ln-"anymore"? has it been at some point?16:26
\shln-, in the -security kernel skge source was updated to the 2.6.17 skge source...so yes, -security kernel has (should have) the fix ready...I don't know why -updates kernel doesn't have, but I'm not using -updates packages at all, only -security16:27
ln-\sh: are you referring to 2.6.15-26.47 in the changelog, and the line: "skge: Update to version in 2.6.17, to obtain fixes and D-Link DGE-530T support." ?16:28
\sh,16:29
\shln-, yes16:29
ln-\sh: in that case, take a close look at this bug report: https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.15/+bug/6563116:29
ubotuLaunchpad bug 65631 in linux-source-2.6.15 "skge driver broken: invalid call to spin_unlock causes system crash" [Medium,Fix committed]16:29
ln-i.e. the one related to the CVE report.16:29
=== bigon` is now known as bigon
ln-\sh: it appears that the update from 2.6.17 was exactly when the driver was *broken*, not fixed.16:30
\shln-, then something really strange happend, and it's still a bug for the kernel guys...16:37
=== Ubulette_ is now known as Ubulette
=== bigon is now known as bigon`
=== bigon` is now known as bigon
=== bigon is now known as bigon`
CarlFKUsePAM fell out of hardy's /etc/ssh/sshd_config - where can I see proof, and maybe a reason not to file a bug report?17:42
Chipzzdebian changelog would be a good place to start17:43
CarlFKaccording to #debian, it is still in17:44
Chipzzno, the debian changelog of the package17:44
Chipzzlemme give ou a hint17:44
CarlFKah - is this the most recient: http://changelogs.ubuntu.com/changelogs/pool/main/o/openssh/openssh_4.7p1-2/changelog17:44
Chipzzzless /usr/share/doc/openssh-server/changelog.Debian.gz17:45
CarlFK"    - Remove hacks to support the old PAM configuration scheme."   think that applies to17:50
CarlFKUsePAM?  the change caused an account to get locked out17:50
CarlFKer, that sounds like a migration issue.  fresh box, same setup that worked on gutsy doesn't work on hardy17:52
CarlFKcjwatson your name is on openssh_4.7p1-2/changelog - should I assign a bug against it to you?18:02
CarlFKhi buddy :)18:02
NafalloCarlFK: you never assign bugs to anyone else.18:03
NafalloCarlFK: I'm sure Colin has OpenSSH as bug contact.18:04
CarlFKNafallo: are you saying that as the general policy, or did you scan my bug reportting history and see a trend? :)18:04
NafalloCarlFK: I'm saying that is the policy.18:05
NafalloCarlFK: subscribe, but not assign.18:05
CarlFKNafallo: figured.  it just happens that 90% of the bugs I find seem to fall into Colin's inbox18:06
\shwho is responsible for the ubotu bot?18:11
Mithrandir\sh: seveas, I believe18:12
\shMithrandir, thx18:13
ln-where is the discussion about the recent xorg update that broke things?18:13
ln-the why-it-happened-and-how-to-prevent-it discussion.18:13
\shln-, on the ML?18:15
\shln-, if there was such a discussion, then on the ML or in one of the bug reports18:15
ln-one of the bug reports it was implied that there would be such a discussion, and i was wondering if someone has a url to it, if it ever took place.18:16
=== warp10 is now known as transwarp
=== transwarp is now known as warp10
=== bigon` is now known as bigon
\shwhat could trigger an restart of trackerd even with trackerd disabled in gnome-session management?18:44
ion_Some program querying its DBus interface, i think.18:46
=== bigon is now known as bigon`
=== bigon` is now known as bigon
=== \sh is now known as \sh_away
zokeare we shipping hardy with NM 0.7 ?19:32
Riddellevand: seen this? http://ubuntuforums.org/showthread.php?p=421479919:41
=== Seveaz is now known as Seveas
Skiesslcan someone make a multithreaded version of pdfcrack? :/ it's too slow atm20:33
* Mithrandir kicks java in the nuts.20:53
MithrandirI can choose between icedtea which doesn't contain HTTPS/SSL support or j2re1.4 which dies with java_vm: xcb_xlib.c:82: xcb_xlib_unlock: Assertion `c->xlib.lock' failed.20:56
* Mithrandir sighs and goes to do something else.20:56
FujitsuThere's an environment variable you can set to fix that error.20:57
MithrandirX_STAB_HARDER?20:57
FujitsuHah.20:57
FujitsuLIBXCB_ALLOW_SLOPPY_LOCK, perhaps.20:58
FujitsuSet it to 1.20:58
JultomtenI'm having trouble with Apache 2.2.4/Ubuntu 7.10 hanging after a while, answering connections but not providing any responses. Anyone feel like helping me debug it? It's hung right now.20:58
persiaMithrandir: Running sed -i 's/XINERAMA/FAKEEXTN/g' /opt/sun-jdk-1.6.0.02/jre/lib/i386/xawt/libmawt.so for sun-java6-bin is also reported to work (see bug #87947)21:03
ubotuLaunchpad bug 87947 in libx11 "xcb_xlib.c:50: xcb_xlib_unlock: Assertion `c->xlib.lock' failed." [Medium,Fix released] https://launchpad.net/bugs/8794721:03
ChipzzJultomten: this channel is not for support21:06
=== Zero_ is now known as Zer0
=== Zer0 is now known as Zero-Cool
jdongvorian: hey, ktorrent-kde4 3.0~rc1 is out, ktorrent.org, you gonna grab it?22:16
vorianjdong: sure\22:16
jdongvorian: awesome :)22:18
vorianjdong: what version were we going with here?22:18
jdongvorian: 1:3.0~rc1 should work?22:18
vorianah, right22:19
vorian:)22:19
jdonghttp://ktorrent.org/downloads/3.0rc1/22:19
vorianalready working on it jdong :)22:19
jdong:)22:19
jdongone step ahead :)22:19
jdongvorian: you got the watchfile okay, or do I need to give you the one I just wrote for 2.x.x?22:36
vorianjdong: this worked for me22:37
vorianhttp://ktorrent.org/downloads/([0-9].*)/ktorrent-(.*)\.tar\.bz222:37
vorian(and notated on the changelog)22:38
jdongvorian: I'd do (^3\.[\d\.]+) for the directory22:38
vorianI'll give it a whirl22:38
jdongvorian: currently both give the same result but it's better if we more explicitly catch the 3.x.x series22:39
voriangood point22:39
brycelool: I've also heard sru-related issues from other corners23:11
brycelool: I myself have felt the process to be rather bureaucratic and overly time consuming23:12
brycelool: unfortunately, when I raised the concern (particular as related to sru's for X drivers), the sense seemed to be "It's good that it's hard and time consuming to do sru's, that way people won't bother doing them unless it's extremely important."23:13
brycelool: yet I think in actuality the result is people also aren't doing sru's even when it *is* important.23:14
brycelool: I also worry that out of hand dismissing complaints about the sru process, may result in hiding real problems that may end up hurting Ubuntu longer term23:15
LaserJockbryce: I think perhaps a "backporting only" policy is also a bit frustrating for upstreams that do bug-fix only releases23:16
bryceLaserJock: that's certainly true23:17
jcastrobryce: LaserJock: I just sent a mail to the upstream guys wrt. the SRU policy23:17
bryceLaserJock: it's ironic that with Inkscape, I put a lot of extra effort to ensure we got 0.45.0 out in time for Feisty feature freeze - which we did but missed several important bugs in the process - and then put out a subsequent 0.45.1 bugfix-only release to fix the issues, but it ended up that every release EXCEPT Ubuntu benefitted from the bugfix release.23:19
bryceer, "every distro EXCEPT Ubuntu..."23:19
jcastrobryce: I think revisiting the SRU policy might be a good idea23:19
elmobryce: well you could avoid that by targeting beta, like gnome does/we do with gnome23:19
jcastroespecially if upstream is jumping up and down23:19
LaserJockelmo: but that's only to a certain extent23:19
elmoand I'd like to balance 'woo SRUs for all' by reminding people that we can only take so many 'blue screen of death' SRUs...23:20
LaserJockelmo: what about bug fixes after Ubuntu's release23:20
bryceelmo, well, we'll see... we're going to be in a similar situation this time around23:20
LaserJockelmo: yes, but should we punish *all* packages for that? It seems to me that some sort of differentiation between X and kernel type packages that are hardware-related and more difficult to ensure no regressions and desktop packages that have a much lower risk of "big" problems23:21
LaserJockseems to me that 1-2 weeks of -proposed testing should easily determine if a SRU is gonna work or not23:22
LaserJockthat first sentence wasn't "well formed" exactly23:23
LaserJockjust trying to say that our exposure to risk is fairly dependent on the type of software and how upstream does releases23:24
elmoLaserJock: sure.  but there's also sometimes a big disconnect between upstreams and the impacts of changes they're making23:26
elmoon users23:26
elmoyou say 1-2 weeks of -proposed testing is enough for anyone, but I'd ask how we know it's getting tested in proposed23:26
bryceLaserJock: agreed - particularly in the case of a discrete end application like Inkscape, the worst damage that can occur would be that inkscape would be broken, but it would certainly be not in our upstream interest to risk that23:27
elmostuff going into -updates scares the hell out of me.  -security is a necessary evil, but I (and I'm just one data point of course), would run around disabling -updates on users computers if the SRU policy got any more slack23:27
bryceI can see a strict policy being more important with kernel, driver, or library updates23:27
jcastrobryce: I was just brainstorming that a "desktop SRU" might be a good idea23:28
elmoI don't understand the fixation on hardware related packages.  if someone takes out thunderbird in -updates, it might as well be X, for users in our office, f.e.23:28
jcastrofor desktop apps23:28
elmono mail - no work23:28
jcastroelmo: but what if you get an explicit message from upstream to ship an upgrade?23:28
LaserJockelmo: true, but testing is easier, in general23:28
* Fujitsu notes that we have enough breakage in -security, and daren't think what a slacker SRU policy would do.23:29
elmojcastro: that should be taken into account, but it's not gospel, any more than we don't ship completely unmodified packages from upstream as a rule23:29
jcastroelmo: fair enough23:30
elmoLaserJock: yeah, that's a fair point23:30
LaserJockFujitsu: but if upstream is fixing bugs for our users why should we not get those fixes to users?23:30
elmoit's possibly worth pointing out that the last couple of major breakages in -security have come from _upstream's fixes_23:30
emgentheya23:30
Fujitsuelmo: Exactly.23:30
FujitsuSamba, X...23:31
LaserJockyes, that can certainly happen23:31
elmoLaserJock: hello, false dichotomy ;-)23:31
jcastroelmo: and on top of that, some upstreams do bugfixes only on certain branches, and some do new feature work23:31
jcastroit's a tough problem to fix23:31
LaserJockbut throwing out the baby with the bath water is not helpful23:31
bryceI'd never argue that testing should not be thoroughly done or that the process should be "slacker"; but that the sru process as currently written is extremely labor intensive to whomever wishes to push the sru along, and is likely resulting in people not wishing to help in the sru process, with the consequence that justifiably important sru's are not getting through.23:31
LaserJockif what we need is more testing then fine, let's get better testing23:31
LaserJockbut our current policy is to basically not even let a lot of things get that far23:32
FujitsuWhere do we get better testing?23:32
elmoLaserJock: err, how so?23:32
jcastrois there an lp query that shows pending SRUs that haven't been applied?23:32
brycealso, as the SRU page indicates, SRU != security updates23:33
brycesecurity updates have a much slacker process than the SRU process23:33
LaserJockelmo: our current policy is turning off people because of "excessive bureaucracy" and we have a "backport only" policy rather than allowing a new upstream release23:33
brycesince they can't wait several weeks or months to go out23:33
LaserJockFujitsu: well, the guy I talk to said maybe some better PR "Get the latest gnome early!!" might help23:33
LaserJockas far as I can tell very few people are being recruited to test23:34
bryceLaserJock: I had really good results recruiting testers via the forums for checking my Xorg packages during gutsy23:36
LaserJockI certainly don't have the solutions here, but it seems that Ubuntu is much stricter for SRU than other distros23:36
bryceagreed23:36
Burgundaviafedora is loser, but then has isuses with that23:36
asacbryce: well you can get general feedback, but you will miss corner cases ... and those are mostly the ones that regress in such an upstream-bugfix-only-release23:37
LaserJockand it makes me wonder if were fixing a lack of testing by using stricter policy23:37
LaserJock*we're23:37
FujitsuFedora appears to push new upstream versions for security fixes, even if they have other fixes/features.23:37
asacLaserJock: we allow reviewing by that policy ... and reduce the risk of regressions23:38
LaserJockasac: but a lot of people look at the policy and just don't bother23:38
LaserJockI would think that the "weeding" out should be done at testing time, not paperwork time23:38
elmoso, one thing I don't understand about "it's too bureaucratic" - can you give a concrete suggestion of how it could be made less so?23:38
LaserJockelmo: well, if you look at Fedora basically any developer can push to -updates and the often push new upstream release23:39
LaserJockor rather to a -proposed like repo23:40
elmoLaserJock: so you're advocating removing the entire SRU process?23:40
asacLaserJock: well ... testing is good, but as i said above, its not enough: you will surely miss corner cases.23:40
bryceelmo: I would point to the length of https://wiki.ubuntu.com/StableReleaseUpdates as a starting point - it's tiring to read let alone follow all the steps23:40
LaserJockelmo: umm, I guess I'm saying that that seems to work for others23:40
jcastroelmo: http://blogs.gnome.org/phomes/2008/01/26/ubuntu-update-policy-suckage/23:40
FujitsuDoes it work?23:40
LaserJockelmo: I'm not convinced that we need *no* SRU policy, but perhaps a significantly looser one would still work23:41
jcastroLaserJock: I don't think comparing to fedora is fair23:41
LaserJockoh?23:41
LaserJockwhy not?23:41
jcastrothey specifically don't have a "stable" release like we do23:41
FujitsuDon't they?23:42
jcastrothey like, push new major kernels, dbus, etc., to their "stable" release23:42
LaserJockbut they have a very succesfull product23:42
FujitsuEw.23:42
jcastro"stable" being defined as "unchanging"23:42
broonieAutomated building of SRU candidates without an ack from the team might be helpful for jollying the process along (this may be happening now, duno).23:42
LaserJockjcastro: but that's exactly what people are often upset about23:42
jcastroLaserJock: that depends.23:43
asacLaserJock: you usually don't know the voice of those that are happy - even though they might be the majority23:43
jcastroIf I was deploying something, in production, I don't want major new versions, I want something unchanging23:43
elmoLaserJock: dude23:43
elmoLaserJock: you're never going to make everyone happy23:43
bryceelmo: there are a lot of "musts" which are sometimes difficult to do.  For example, you "must" provide a test case to reproduce the issue.  In many cases users will tell you "X randomly fails," and confirm that such and such a patch fixes it.  But then you're left having to translate "randomly fails" into a reproduceable test case.  I usually just give up and refuse to sru the fix.23:43
LaserJockelmo: granted23:43
geserpeople will also complain if one updates of hundred breaks their system23:43
jcastro^^^23:44
elmoLaserJock: if you removed the SRU process like you suggested, I would start a blog just so I could rail about how much Ubuntu sucks23:44
Fujitsugeser: Rightly so.23:44
LaserJockbut it seems like we're working much more on the assumption that our stable releases are "stable" and "bug free" than is reality23:44
elmoLaserJock: some of us value stability and can deal with known bugs vs the risk of regressing production environments23:44
jcastroelmo: he didn't suggest removing the SRU process, just relaxing it23:44
elmojcastro: actually he did23:44
bryceelmo: I also ran into massive bureaucracy with trying to get 0.45.1 into feisty.  That bug fix release had several dozen patches to fix a wide variety of issues reported upstream.  It was reviewed and only 4-5 were deemed "critical fixes".23:44
crimsundoes Ubuntu have a release manager who can kindly override SRU policy?  (where "kindly" obviously implies "sanely")23:44
LaserJockelmo: no, I didn't, I said that was what Fedora did23:44
LaserJockelmo: I said previously that I think relaxing it might be a sane thing, but not getting rid of it entirely23:45
jcastroI don't think that doing something because Fedora does it is a good idea either.23:45
LaserJockno, of course not23:45
LaserJockI'm just trying to look at examples23:46
bryceelmo: unfortunately, the main issue users complained about wasn't included in that list, and 2-3 of the fixes were hard to describe.  Also, extracting those specific 4-5 fixes from the set was time consuming since upstream hadn't individually called out each patch.23:46
jcastrofair enough23:46
Fujitsubryce: One should shoot upstream in that case. If you stab them enough, they normally eventually release sane patches.23:46
LaserJockbecause if upstreams are saying "Ubuntu is a problem because it's not taking our bug fixes" I'd like to know it it's really us or if that's a general problem with all distros23:46
elmoFujitsu: ha ha.  bryce == upstream23:46
elmobryce: sure, I'm not arguing the current practice is perfect.  and perhaps y'all should get a similar exemption to the gnome guys23:47
LaserJockcrimsun: that'd be nice23:47
jcastroI think that there should be an SRU process where upstream can say "we're upstream and we'd like this version to be the one in a stable ubuntu release."23:47
elmobryce: I'm just super leary of more breakage in -updates, and think the 'make SRUs easier' crowd are waving their hands a little vigourously ;-)23:47
broonieIt might also help if the process were more directly implemented in Launchpad - given the latency involved it'd be good to avoid procedural errors.23:47
bryceFujitsu: trust me, I was thinking seriously of shooting myself after going through all this!23:47
elmobroonie: yes, that jumped out at me too23:48
elmothere's a lot of manual fluff in there that could at worse be scripted, or better yet have built-in LP support23:48
LaserJockyep23:48
superteddoes anyone know if there will be any regularity to language packs in hardy and if so how often they will be realeased?23:49
LaserJockelmo: I think I'd advocate "make SRUs saner" over "make SRUs easier"23:49
asacLaserJock: for that you need to state what is not sane atm23:49
asac?23:49
LaserJockasac: blanket policies23:49
LaserJocklots of manual work23:49
LaserJockwhen, as elmo said, a lot of this should be in LP23:50
bryceelmo, it seems that the only two options are excessive hand waving, or just ignoring the whole SRU process and let users suffer23:50
bryceI hate to admit that I've pretty much adopted the second option.23:50
jcastroasac: but in this case, bryce is upstream, shouldn't he have direct control of how his package is represented in ubuntu?23:50
elmobryce: I strongly disagree23:50
elmobryce: the problem is both you and laserjock are complaining but unwilling to break things down into _specific_ things which could be improved23:51
LaserJockelmo: ok, let me break it down, at least as far as I can see it23:51
LaserJock1) better tracking of upstream release of stable series23:52
geserjcastro: that assumes a sane upstream that only wants a bugfix release in a stable distro and not the last and "best" release of their software23:52
LaserJock2) some sort of classification or tiering that make high-risk packages harder to break and low-risk packages easier to update23:52
LaserJock3) increased testing efforts23:53
jcastrogeser: yep. that's what makes this so hard. You can't have a blanket policy if you want to make everyone happy, it really all depends per-project23:53
jcastrowhich is why this is so hard23:53
LaserJockthose are a few things that I think might help23:53
bryceelmo, ok I thought I was being specific enough:  Reduce the number of steps, quantity of labor, and number of iterations with reviewers/approvers involved in filing an SRU.23:53
jcastroyou can't just blindly say "upgrade at will, you're upstream."23:53
asacjcastro: in general i would say no. upstream will always push to fix as many bugs as possible, so their application is perceived as prefect as possible to the majority of their users. the distro itself is more scared about regressions that might hit a minority of production deployments.23:54
elmoasac++23:54
jcastroasac: probably because upstreams mostly care about their package, not how it affects the rest of the distro23:54
LaserJockasac: right, so we're trying to get as many fixes with the least amount of regressions23:54
asacjcastro: for bryce case, i don't know ... their is certainly a conflict and it depends on how he resolves this in his own heart23:54
elmobryce: well, umm, not being funny, but 'reduce the number of steps' isn't specific.  "take out step 5, it's unnecessary for this reason" would be specific23:54
bryceelmo, I went through a number of ideas with pitti at the previous sprint, but basically got told, no, no, no, no.  So I gathered there was little benefit to try giving specific change requests; everything just gets denied.23:55
jcastroasac: for example in your case, if we blindly accepted FF's upgrades and just upgraded everything, half the distro would break23:55
asacjcastro: right ... well fixing bugs will benefit them more, but we have to be the ones denying requests so we can really claim to provide a stable distro23:55
crimsunbryce: did you suggest a $release-proposed-upstream component?23:56
jcastrobryce: out of curiosity, do you guys have an inkscape ppa?23:56
asacjcastro: yes ... unfortunately firefox is really a case where we do this ... and i always start to pray after the upload - which is why how hard it is to guaranteee regression-freeness.23:56
elmo(I have to run away - interesting discussion though...)23:56
jcastronite elmo23:56
LaserJockasac: but FF is a bit of a tough case23:56
asac(i try to review as hard as possible, but there are 200 bug fixes vs. 70 security fixes in such a release)23:56
asacLaserJock: yes, but we track them carefully ... we have to think about all packages if we want to come up with a policy23:57
asacthere might be upstreams with really strict policies ... but there might be ones with slacky policies23:57
LaserJockasac: but that's my point, we need finer grained policy. A blanket policy doesn't seem to really suffice23:57
jcastroasac: EXACTLY!23:57
brycejcastro: yes we do23:57
asacbut those that have strict policies usually provide individual patches anyway23:57
asacand thus providing them as "backports" shouldn't be a problem23:58
asacLaserJock: well ... the reviewer somewhat has to decide and who can bend the policy. its mostly about what is "critical" and how risky do those patches look like23:59
asacso its not really a blanket policy atm imo23:59

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!