Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Olivier Crete]

 On Wed, May 19, 2004 at 07:26:34PM +0200, Olivier Crete wrote:
>>
>> There is at least one other guy who thinks that the handbook has
>> gotten way too long (me)...And foser is right on choice, too much is
>> worst that too little, because you end up not being able to find out
>> howto where to configure stuff.. Gentoo is all about choice and choice
>> is good.. But I dont want to have to go thourhg 800 use flags before I
>> can install a gentoo system.. I used to be able to run ufed and set
>> all of the use flags that I wanted for a system... I tried doing that
>> yesterday.. the list has just gotten out of proportion.
>>
>
> You don't have to; that's my point. Local USE flags are intended to
> allow very specific tweaking when you absolutely need it -- they're not
>  intended to be something you go through and stick in make.conf on your
>  original install. In fact, you probably shouldn't put them in
> make.conf  -- they should probably be consistently used in package.use
> instead.

The problem is that the current version of ufed just has all of the local
use flags... It probably needs to be fixed... And we'd probably need to
fix ufed and euse to put local use flags into package.use instead of
make.conf...

But still, I dont really want ot have to enable every codec by hand when
compile any video related application...
-- 

Olivier Crete
tester@gentoo.org



--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Troels Vognsen]

From: Olivier Crete <tester@gentoo.org>
>There is at least one other guy who thinks that the handbook has gotten
>way too long (me)...And foser is right on choice, too much is worst that too little, because
>you end up not being able to find out howto where to configure stuff..
>Gentoo is all about choice and choice is good.. But I dont want to have to
>go thourhg 800 use flags before I can install a gentoo system.. I used to
>be able to run ufed and set all of the use flags that I wanted for a
>system... I tried doing that yesterday.. the list has just gotten out of
>proportion.
>
>Olivier Crete
>
Well, ain't that mainly an issue of layout change. If we split the body's of text into smaller sections and colorcode them appropriately, according the type of information and significance, that would improve readabilty significantly. I could hence read through the handbook, reading only the (for instance) green sections, skipping the rest, since I know that ain't vital info.

- Troels Vognsen :-)


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Troels Vognsen]

>On Wed, May 19, 2004 at 01:30:00PM +0200, foser wrote:
>> On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:
>> 
>> > I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
>> > because they sound similar.
>> 
>> The second time you mention choice. I guess we know what Gentoo is about
>> by now, the 'choice' argument is too often used just to end criticism.
>> 
>> Choice is an illusion, if you there's too much choice it is no use to
>> anyone anymore, because nobody really knows what it is all about. This
>> is already the case with the loads of USE flags/portage options/etc. we
>> have. Gentoo shouldn't be about choice for the sake of it, it should be
>> about simplicity/managability : stuff that works. It's a trade-off.
>> 
>> I wasn't too happy with the introducation of local USE flags for just
>> the reasons that are becoming a problem now. Too much flags, everybody
>> adds them at will without good reasons. We used to just say to people
>> who wanted a specific (rare) set-up that they could easily edit the
>> ebuild themselves to their need, but nowadays it seems we have to hold
>> hands all the time and add complexity for nothing. That's good for
>> nobody really. The installation manual used to be like 5 pages, by now
>> it's a book of it's own per arch. I don't think that's a good thing and
>> we should be really, really careful about what we can do to stop this
>> movement.
>> 
>> - foser
>
>The users seem to be perfectly happy with having a maximum of choice via 
>local USE flags. Most people are also okay with the handbook. So what's 
>the problem, exactly? Should we force everyone to do what _you_ want 
>rather than what _they_ want?
>
>-- 
>Jon Portnoy
>
Well, I believe that there's nothing wrong with *providing* choice - it will only ruin useability when you *require* it.  Good default values will ensure that the average user ain't forced to make decisions right away.
But ofcourse choices must be sanely organised. Finding and changing options should be intuitive.
For instance I use ufed to change my use flags. That's fairly intuitive, but due to the amount of local flags it can be slightly confusing. That could however be fixed by hiding the local flags by default, and provide the choice of including them (by means of a command line option or so).
In this case choice aids both simplicity and useability. As another example think of ls. It has well over 30 options. But that doesn't ruin useability, because it by default behaves as I would expect it to do, without having read the entire man page. Likewise use flags won't ruin gentoo's useability as long as they are sanely organised.
Simplifying my own statement, I think useability is genrally inverse-proportional to the amount of choices the user is forced to make, to archive a given task.

Just my 2 cents,
- Troels Vognsen


--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Hardened PHP now in Gentoo

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 572 bytes --]

Hiya,

I've just added support for the Hardened PHP patch to Portage.  To include 
Hardened PHP, add the local USE flag 'hardenedphp' before you build 
dev-php/mod_php.

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

[gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 648 bytes --]

On Tuesday 18 May 2004 07:25, Ed Wildgoose wrote:
> Why not just "use hardened"?  Do we really need yet another USE flag?
> (There are more flags than packages these days...)

Because 'hardened' means something else.  Gentoo's all about choice.

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Marius Mauch]

[-- Attachment #1: Type: text/plain, Size: 993 bytes --]

On 05/18/04  Stuart Herbert wrote:

> On Tuesday 18 May 2004 07:25, Ed Wildgoose wrote:
> > Why not just "use hardened"?  Do we really need yet another USE
> > flag?(There are more flags than packages these days...)
> 
> Because 'hardened' means something else.  Gentoo's all about choice.

And that's exactly the point about local USE flag bloat I posted a few
days ago. Why do we need a new flag for this? I would compare the
descriptions, but I don't find one for hardenedphp in use*.desc :(
Actually I don't see the flag anywhere (including the mod_php and php
ebuilds).

If it has to do with security enhancements I think the hardened flag
would be a perfect match unless the Gentoo Hardened team is disagreeing
completely (and as pappy already asked the same question I don't think
so).

Marius

-- 
Public Key at http://www.genone.de/info/gpg-key.pub

In the beginning, there was nothing. And God said, 'Let there be
Light.' And there was still nothing, but you could see a bit better.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 1473 bytes --]

On Tuesday 18 May 2004 19:16, Marius Mauch wrote:
> And that's exactly the point about local USE flag bloat I posted a few
> days ago. Why do we need a new flag for this? 

Like I said, because they are not the same thing.  

> I would compare the 
> descriptions, but I don't find one for hardenedphp in use*.desc :(

Yup.  It seems that I forgot to commit that.  It'll be turning up shortly.

> Actually I don't see the flag anywhere (including the mod_php and php
> ebuilds).

You're looking in the wrong place.  Try the php-sapi.eclass.

> If it has to do with security enhancements I think the hardened flag
> would be a perfect match unless the Gentoo Hardened team is disagreeing
> completely (and as pappy already asked the same question I don't think
> so).

And what do we do if we add support for any of the other (and non-compatible) 
PHP security patches out there?  Renaming this USE flag would seem somewhat 
short-sighted.

I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
because they sound similar.  

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[foser]

[-- Attachment #1: Type: text/plain, Size: 1343 bytes --]

On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:

> I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
> because they sound similar.

The second time you mention choice. I guess we know what Gentoo is about
by now, the 'choice' argument is too often used just to end criticism.

Choice is an illusion, if you there's too much choice it is no use to
anyone anymore, because nobody really knows what it is all about. This
is already the case with the loads of USE flags/portage options/etc. we
have. Gentoo shouldn't be about choice for the sake of it, it should be
about simplicity/managability : stuff that works. It's a trade-off.

I wasn't too happy with the introducation of local USE flags for just
the reasons that are becoming a problem now. Too much flags, everybody
adds them at will without good reasons. We used to just say to people
who wanted a specific (rare) set-up that they could easily edit the
ebuild themselves to their need, but nowadays it seems we have to hold
hands all the time and add complexity for nothing. That's good for
nobody really. The installation manual used to be like 5 pages, by now
it's a book of it's own per arch. I don't think that's a good thing and
we should be really, really careful about what we can do to stop this
movement.

- foser

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Josh Glover]

[-- Attachment #1: Type: text/plain, Size: 1762 bytes --]

Quoth foser (Wed 2004-05-19 01:30:00PM +0200):

> On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:
> 
> > I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
> > because they sound similar.
> 
> The second time you mention choice. I guess we know what Gentoo is about
> by now, the 'choice' argument is too often used just to end criticism.
> 
> Choice is an illusion, if you there's too much choice it is no use to
> anyone anymore, because nobody really knows what it is all about. This
> is already the case with the loads of USE flags/portage options/etc. we
> have. Gentoo shouldn't be about choice for the sake of it, it should be
> about simplicity/managability : stuff that works. It's a trade-off.

That is ridiculous. Speaking from personal experience, choice is exactly
what drew me to Gentoo--I could have it *just* how I wanted it. Thus,
choice is *not* an illusion, it is vital to many advanced users who
have chosen Gentoo for just that reason.

The way to achieve "simplicity/managability : stuff that works" is
through reasonable defaults. Look at all the USE flags that xfree or
xemacs use. Quite a glut. However, the defaults are almost always what
I need. If I care enough, I can run 'equery uses' to find out what the
more esoteric flags do, and select or deselect flags based on that.

If I want things to Just Work(TM), I accept the Gentoo defaults,
knowing that the devs would never lead me down the wrong path. :)


-- 
Josh Glover

Gentoo Developer (http://dev.gentoo.org/~jmglov/)
Tokyo Linux Users Group Listmaster (http://www.tlug.jp/)

GPG keyID 0xDE8A3103 (C3E4 FA9E 1E07 BBDB 6D8B  07AB 2BF1 67A1 DE8A 3103)
gpg --keyserver pgp.mit.edu --recv-keys DE8A3103

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[foser]

[-- Attachment #1: Type: text/plain, Size: 2545 bytes --]

On Wed, 2004-05-19 at 08:30 -0400, Josh Glover wrote:
> > Choice is an illusion, if you there's too much choice it is no use to
> > anyone anymore, because nobody really knows what it is all about. This
> > is already the case with the loads of USE flags/portage options/etc. we
> > have. Gentoo shouldn't be about choice for the sake of it, it should be
> > about simplicity/managability : stuff that works. It's a trade-off.
> 
> That is ridiculous. Speaking from personal experience, choice is exactly
> what drew me to Gentoo--I could have it *just* how I wanted it. Thus,
> choice is *not* an illusion, it is vital to many advanced users who
> have chosen Gentoo for just that reason.

You have the choice. The real power is the easy way in which you can
adapt it to your needs and the simplicity of doing so. Huge loads of
nobody-ever-uses them options don't help one bit. You should keep it
basic for exactly the reason that anyone can adapt it easily. Adding
layers of complexity leads to a system that needs time & effort to get
into : you lose what you want, you lose the true power.
Actually i consider 'advanced users' the people who have a basic system
setup and adapted/created several ebuilds to their needs on top of that,
not the ones who want an extra USE flag for everything under the sun.

> The way to achieve "simplicity/managability : stuff that works" is
> through reasonable defaults. Look at all the USE flags that xfree or
> xemacs use. Quite a glut. However, the defaults are almost always what
> I need. If I care enough, I can run 'equery uses' to find out what the
> more esoteric flags do, and select or deselect flags based on that.

You actually prove my point with your example. The defaults should be
good enough, all the extra stuff is mostly cruft in 99.9% of the cases.
That cruft therefore isn't necessary in the distro, keeping the playing
field clean and open.
Anyway, eg. xfree is all basic and understandable USE flags like they
should be. You don't need no extra tools to explain what a USE flag
does, but you say you need 'equery' to figure out the uses. That's
exactly the thing i'm talking about : we already are starting to require
extra info to make decisions. That is what should be avoided. We're
creating tools to be able to work with our tools, thats in indication of
going the wrong way.

> If I want things to Just Work(TM), I accept the Gentoo defaults,
> knowing that the devs would never lead me down the wrong path. :)

Nuf said.

- foser

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 04:09:10PM +0200, foser wrote:
> On Wed, 2004-05-19 at 08:30 -0400, Josh Glover wrote:
> > > Choice is an illusion, if you there's too much choice it is no use to
> > > anyone anymore, because nobody really knows what it is all about. This
> > > is already the case with the loads of USE flags/portage options/etc. we
> > > have. Gentoo shouldn't be about choice for the sake of it, it should be
> > > about simplicity/managability : stuff that works. It's a trade-off.
> > 
> > That is ridiculous. Speaking from personal experience, choice is exactly
> > what drew me to Gentoo--I could have it *just* how I wanted it. Thus,
> > choice is *not* an illusion, it is vital to many advanced users who
> > have chosen Gentoo for just that reason.
> 
> You have the choice. The real power is the easy way in which you can
> adapt it to your needs and the simplicity of doing so. Huge loads of
> nobody-ever-uses them options don't help one bit.

Except that people _do_ use them.

> You should keep it
> basic for exactly the reason that anyone can adapt it easily. Adding
> layers of complexity leads to a system that needs time & effort to get
> into : you lose what you want, you lose the true power.

"True power"? Can you elaborate?

> Actually i consider 'advanced users' the people who have a basic system
> setup and adapted/created several ebuilds to their needs on top of that,
> not the ones who want an extra USE flag for everything under the sun.
> 

Why not save them the hassle with a couple extra lines? This is the 
point of local USE flags: very specific tweaking for very specific needs 
to provide powerful options out of the box. This is a major advantage 
Gentoo has over binary distributions: you can build everything precisely 
how you want it right out of the box rather than having a vendor make 
those choices for you (and then say "well, if you don't like it, make 
your own packages" which is the equivalent of "if you don't like it, 
edit the ebuilds").

> > The way to achieve "simplicity/managability : stuff that works" is
> > through reasonable defaults. Look at all the USE flags that xfree or
> > xemacs use. Quite a glut. However, the defaults are almost always what
> > I need. If I care enough, I can run 'equery uses' to find out what the
> > more esoteric flags do, and select or deselect flags based on that.
> 
> You actually prove my point with your example. The defaults should be
> good enough, all the extra stuff is mostly cruft in 99.9% of the cases.
> That cruft therefore isn't necessary in the distro, keeping the playing
> field clean and open.

Sure, it isn't strictly speaking _necessary_. USE flags in general 
aren't _necessary_. CFLAGS in make.conf isn't _necessary_ either -- we 
could pick defaults that are "good enough" instead. Instead, we let the 
end user make that choice.

-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[foser]

[-- Attachment #1: Type: text/plain, Size: 3183 bytes --]

On Wed, 2004-05-19 at 12:13 -0400, Jon Portnoy wrote:
> > You have the choice. The real power is the easy way in which you can
> > adapt it to your needs and the simplicity of doing so. Huge loads of
> > nobody-ever-uses them options don't help one bit.
> 
> Except that people _do_ use them.

Relatively speaking. Sure there's always a few users using them, but is
it worth what it adds in complexity ?

> > You should keep it
> > basic for exactly the reason that anyone can adapt it easily. Adding
> > layers of complexity leads to a system that needs time & effort to get
> > into : you lose what you want, you lose the true power.
> 
> "True power"? Can you elaborate?

True power is simplicity, being able to make changes without digging
trough loads of shell/python/etc. script to get what you want.

> > Actually i consider 'advanced users' the people who have a basic system
> > setup and adapted/created several ebuilds to their needs on top of that,
> > not the ones who want an extra USE flag for everything under the sun.
> > 
> 
> Why not save them the hassle with a couple extra lines? This is the 
> point of local USE flags: very specific tweaking for very specific needs 
> to provide powerful options out of the box. This is a major advantage 
> Gentoo has over binary distributions: you can build everything precisely 
> how you want it right out of the box rather than having a vendor make 
> those choices for you (and then say "well, if you don't like it, make 
> your own packages" which is the equivalent of "if you don't like it, 
> edit the ebuilds").

To start : it is not equivalent, binary packaging is a mess of it's own
and ebuilding is starting to go that same way. And it used to be
perfectly fine to say such things ('edit it to your needs') and people
accepted that, because it was (is?) a breeze to edit simple builds
script for example. But somewhere along the way we moved to holding
hands for even the most obscure of setups.

The hassle is that the 'couple of lines' you add time and time again
expand into seriously large ebuilds with stacked layers of eclass and
portage functionality, losing that hands-on touch with the actual
buildscript. That's where you lose the 'true power'.

> Sure, it isn't strictly speaking _necessary_. USE flags in general 
> aren't _necessary_. CFLAGS in make.conf isn't _necessary_ either -- we 
> could pick defaults that are "good enough" instead. Instead, we let the 
> end user make that choice.

You take my point too far, yes it's easy to dismiss this by deploying
the over-used 'Gentoo is about choice' mantra (wasn't Gentoo also about
bleeding edge, configurability.. hmm whatever i can use in the
discussion). No, that's not what i want. I want the simplicity back, the
power to say 'no' to certain things because they do make it harder and
harder to use Gentoo as a real tool for personal distro management.
Increasing complexity makes it harder to control on an individual level.

btw. 10-20% of the bugs the gnome team gets turns out to be CFLAGS
related, I sometimes wish we wouldn't had made using insane CFLAGs so
easy. 

- foser

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 01:30:00PM +0200, foser wrote:
> On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:
> 
> > I'm pro-choice, and do not agree with the idea of aggregating USE flags just 
> > because they sound similar.
> 
> The second time you mention choice. I guess we know what Gentoo is about
> by now, the 'choice' argument is too often used just to end criticism.
> 
> Choice is an illusion, if you there's too much choice it is no use to
> anyone anymore, because nobody really knows what it is all about. This
> is already the case with the loads of USE flags/portage options/etc. we
> have. Gentoo shouldn't be about choice for the sake of it, it should be
> about simplicity/managability : stuff that works. It's a trade-off.
> 
> I wasn't too happy with the introducation of local USE flags for just
> the reasons that are becoming a problem now. Too much flags, everybody
> adds them at will without good reasons. We used to just say to people
> who wanted a specific (rare) set-up that they could easily edit the
> ebuild themselves to their need, but nowadays it seems we have to hold
> hands all the time and add complexity for nothing. That's good for
> nobody really. The installation manual used to be like 5 pages, by now
> it's a book of it's own per arch. I don't think that's a good thing and
> we should be really, really careful about what we can do to stop this
> movement.
> 
> - foser

The users seem to be perfectly happy with having a maximum of choice via 
local USE flags. Most people are also okay with the handbook. So what's 
the problem, exactly? Should we force everyone to do what _you_ want 
rather than what _they_ want?

-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Olivier Crete]

> On Wed, May 19, 2004 at 01:30:00PM +0200, foser wrote:
>> On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:
>>
>> > I'm pro-choice, and do not agree with the idea of aggregating USE
>> > flags just  because they sound similar.
>>
>> The second time you mention choice. I guess we know what Gentoo is
>> about by now, the 'choice' argument is too often used just to end
>> criticism.
>>
>> Choice is an illusion, if you there's too much choice it is no use to
>> anyone anymore, because nobody really knows what it is all about. This
>> is already the case with the loads of USE flags/portage options/etc.
>> we have. Gentoo shouldn't be about choice for the sake of it, it
>> should be about simplicity/managability : stuff that works. It's a
>> trade-off.
>>
>> I wasn't too happy with the introducation of local USE flags for just
>> the reasons that are becoming a problem now. Too much flags, everybody
>> adds them at will without good reasons. We used to just say to people
>> who wanted a specific (rare) set-up that they could easily edit the
>> ebuild themselves to their need, but nowadays it seems we have to hold
>> hands all the time and add complexity for nothing. That's good for
>> nobody really. The installation manual used to be like 5 pages, by now
>> it's a book of it's own per arch. I don't think that's a good thing
>> and we should be really, really careful about what we can do to stop
>> this movement.
>>
>> - foser
>
> The users seem to be perfectly happy with having a maximum of choice
> via  local USE flags. Most people are also okay with the handbook. So
> what's  the problem, exactly? Should we force everyone to do what _you_
> want  rather than what _they_ want?

There is at least one other guy who thinks that the handbook has gotten
way too long (me)...And foser is right on choice, too much is worst that too little, because
you end up not being able to find out howto where to configure stuff..
Gentoo is all about choice and choice is good.. But I dont want to have to
go thourhg 800 use flags before I can install a gentoo system.. I used to
be able to run ufed and set all of the use flags that I wanted for a
system... I tried doing that yesterday.. the list has just gotten out of
proportion.

-- 
Olivier Crete
tester@gentoo.org
Gentoo Developer



--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 497 bytes --]

On Wed, 19 May 2004 19:26:34 +0200 (CEST) Olivier Crete
<tester@gentoo.org> wrote:
| There is at least one other guy who thinks that the handbook has
| gotten way too long (me)...

...which is why we have the quickinstall guides, which are aimed at
people who already know (more or less) what they're doing.

-- 
Ciaran McCreesh, Gentoo XMLcracy Member G03X276
(Sparc, MIPS, Vim, si hoc legere scis nimium eruditionis habes)
Mail:    ciaranm at gentoo.org
Web:     http://dev.gentoo.org/~ciaranm


[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 07:26:34PM +0200, Olivier Crete wrote:
> 
> There is at least one other guy who thinks that the handbook has gotten
> way too long (me)...And foser is right on choice, too much is worst that too little, because
> you end up not being able to find out howto where to configure stuff..
> Gentoo is all about choice and choice is good.. But I dont want to have to
> go thourhg 800 use flags before I can install a gentoo system.. I used to
> be able to run ufed and set all of the use flags that I wanted for a
> system... I tried doing that yesterday.. the list has just gotten out of
> proportion.
> 

You don't have to; that's my point. Local USE flags are intended to 
allow very specific tweaking when you absolutely need it -- they're not 
intended to be something you go through and stick in make.conf on your 
original install. In fact, you probably shouldn't put them in make.conf 
-- they should probably be consistently used in package.use instead.

It's possible that the global USE flag list needs trimming. There are 
USE flags in there that should be probably be local, I'm sure.

-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 08:19:19PM +0200, Olivier Crete wrote:
> 
> The problem is that the current version of ufed just has all of the local
> use flags... It probably needs to be fixed... And we'd probably need to
> fix ufed and euse to put local use flags into package.use instead of
> make.conf...

Yep.

> But still, I dont really want ot have to enable every codec by hand when I
> compile any video related application...

I think we should address this with USE flag groupings. Someone should 
be able to just say they want full video support, for example, and that 
should enable all (freely available licensing-wise) codec flags. That 
way we can provide both simplicity and flexibility.

-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 2669 bytes --]

On Wed, 19 May 2004 14:34:12 -0400 Jon Portnoy <avenj@gentoo.org> wrote:
| I think we should address this with USE flag groupings. Someone should
| be able to just say they want full video support, for example, and
| that should enable all (freely available licensing-wise) codec flags.
| That way we can provide both simplicity and flexibility.

Strangely enough, I just suggested this in #gentoo-dev . Aside from the
issue of tidying up the existing USE flag setup, how do people feel
about something along the following lines (I'll GLEP it if the general
idea seems ok to people...):

ciaranm> jstubbs / genone: how hard would it be to add a use.groups to
portage which allowed aliases like @DESKTOP@ = @GNOME@ @KDE@ X, @GNOME@
= gtk2 gtk gnome X and @MEDIA@ = jpeg png dvd quicktime mpeg blah blah?

genone> ciaranm: shouldn't be too hard, but there might be some little
details I don't see atm making it difficult

ciaranm> genone: issues i could think of are recursive (would have to
avoid circular...), and behaviour of -@GNOME@ (i'd just ban that
outright...)

ciaranm> genone: presumably @GNOME@ -gtk2 (for example) would work...
right now USE="blah-blah" -> -blah, right?

genone> USE="bla -bla" => USE=""

ciaranm> and -blah blah -> blah?

genone> yep

ciaranm> cool, thanks

genone> circularity isn't a big problem, just limit to n levels of
dereference, -@GROUP@ shouldn't be a problem either

genone> I'm more thinking about orders and so

ciaranm> how would -@GROUP@ work? just invert all the flags in @GROUP@ ?

genone> yes

* ciaranm thinks that could get rather confusing

genone> why that ?

steel300> @GNOME@=-kde -qt gnome gtks

ciaranm> well, -@KDE@ for example would disable more than just kde

ciaranm> steel300: except then you'd upset people who do @KDE@ @GNOME@

ciaranm> steel300: i'd rather not have kde imply !gnome

genone> yeah, negated use flags would be forbidden in groups

steel300> it was just an example

ciaranm> steel300: i'm thinking @DESKTOP@=@KDE@ @GNOME@ @MEDIA@

ciaranm> for example

steel300> will any include -*?

genone> no

ciaranm> hell no

steel300> is this a user defined thing or do we manage it?

ciaranm> i'm not so sure about disabling -blah in groups... @SERVER@=-X
-kde -gnome -qt etc for example

ciaranm> steel300: i'd just stick it in /usr/portage/profiles/ myself...

ciaranm> steel300: mmmmmmmaybe allow an/etc/portage/ entry

genone> USE="-* @SERVER@"

Here's hoping -claws doesn't munge the formatting for once...

-- 
Ciaran McCreesh, Gentoo XMLcracy Member G03X276
(Sparc, MIPS, Vim, si hoc legere scis nimium eruditionis habes)
Mail:    ciaranm at gentoo.org
Web:     http://dev.gentoo.org/~ciaranm


[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Allen Dale Parker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Olivier Crete wrote:

|>On Wed, May 19, 2004 at 01:30:00PM +0200, foser wrote:
|>
|>>On Tue, 2004-05-18 at 21:08 +0100, Stuart Herbert wrote:
|>>Choice is an illusion, if you there's too much choice it is no use to
|>>anyone anymore, because nobody really knows what it is all about. This
|>>is already the case with the loads of USE flags/portage options/etc.
|>>we have. Gentoo shouldn't be about choice for the sake of it, it
|>>should be about simplicity/managability : stuff that works. It's a
|>>trade-off.
|>>
|>>I wasn't too happy with the introducation of local USE flags for just
|>>the reasons that are becoming a problem now. Too much flags, everybody
|>>adds them at will without good reasons. We used to just say to people
|>>who wanted a specific (rare) set-up that they could easily edit the
|>>ebuild themselves to their need, but nowadays it seems we have to hold
|>>hands all the time and add complexity for nothing. That's good for
|>>nobody really. The installation manual used to be like 5 pages, by now
|>>it's a book of it's own per arch. I don't think that's a good thing
|>>and we should be really, really careful about what we can do to stop
|>>this movement.
|>>
|>>- foser
|>
|>The users seem to be perfectly happy with having a maximum of choice
|>via  local USE flags. Most people are also okay with the handbook. So
|>what's  the problem, exactly? Should we force everyone to do what _you_
|>want  rather than what _they_ want?
|
|
| There is at least one other guy who thinks that the handbook has gotten
| way too long (me)...And foser is right on choice, too much is worst
that too little, because
| you end up not being able to find out howto where to configure stuff..
| Gentoo is all about choice and choice is good.. But I dont want to have to
| go thourhg 800 use flags before I can install a gentoo system.. I used to
| be able to run ufed and set all of the use flags that I wanted for a
| system... I tried doing that yesterday.. the list has just gotten out of
| proportion.
|

Would keeping global USE flags USE and swapping current local USE flags
over to local_USE solve any of these problems? I am also of the camp
that thinks that the amount of USE flags has gotten out of hand. My poor
router is a 1Ghz Via C3-2, originally installed with 1.4. When I first
bootstrapped that system, I had less than 10 USE flags in my make.conf.
I now have over 25 and yet MORE are being added on an almost daily basis
because my "old" USE flags just don't cut it anymore. I can't get the
features I want without adding 50 more USE flags and that's a little
ridiculous. I don't need a global USE flag for every multimedia codec
known to man. I've been wondering lately if the gentoo "server" project
has gotten anywhere, because MAYBE they've cut some of this cruft.

I don't mind editing ebuilds. I DO mind my make.conf splitting at the
seams. I DO mind my make.conf having a USE="---" that's about 3 lines
long wrapped at 1280x1024 (vga=0x31b). Gentoo is a great distribution,
because it does what I want it to when I want it to.

Instead of adding more USE flags for things that can be handled in other
ways (as per caleb's email), let's work on THINNING them down to a
reasonable level. If this means we need to make another USE type flag
definition, so be it. *BUT* when the gimp ebuilds haven't been touched
in almost a month (2.0.1 has been out since 04-17 and STILL isn't in
portage), other ebuilds are falling out of date, I'm SURE that we can
find more useful things to do than adding more USE flags.

- --
Allen Parker
GPG KeyID: 35544083
GPG FP: E628 7310 DE68 321A 933A  5DD1 C831 005C 3554 4083

infowolfe@irc.freenode.net #/tmp #gentoo-dev #gentoo-hardened
infowolfe@irc.oftc.net #vserver
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAq5/TyDEAXDVUQIMRAtLeAJwLm1IiA09dYhR71Y/AlMMskNmDNgCfQ/WO
c/ZubD/1DQXCpGN4WXr9Ko4=
=53L9
-----END PGP SIGNATURE-----

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 01:56:35PM -0400, Allen Dale Parker wrote:
> definition, so be it. *BUT* when the gimp ebuilds haven't been touched
> in almost a month (2.0.1 has been out since 04-17 and STILL isn't in
> portage), other ebuilds are falling out of date, I'm SURE that we can
> find more useful things to do than adding more USE flags.
> 

Frankly the reason GIMP gets out of date, among other gnome herd 
packages, is that the GNOME herd seems to want to retain maintainership 
of a lot of packages totally irrelevant to GNOME proper without having 
enough manpower to deal with it.

Regarding make.conf: look into package.use. `man portage` in the 
/etc/portage section.

-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Allen Dale Parker]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jon Portnoy wrote:

| On Wed, May 19, 2004 at 01:56:35PM -0400, Allen Dale Parker wrote:
|
|>definition, so be it. *BUT* when the gimp ebuilds haven't been touched
|>in almost a month (2.0.1 has been out since 04-17 and STILL isn't in
|>portage), other ebuilds are falling out of date, I'm SURE that we can
|>find more useful things to do than adding more USE flags.
|>
|
|
| Frankly the reason GIMP gets out of date, among other gnome herd
| packages, is that the GNOME herd seems to want to retain maintainership
| of a lot of packages totally irrelevant to GNOME proper without having
| enough manpower to deal with it.
|
| Regarding make.conf: look into package.use. `man portage` in the
| /etc/portage section.
|

So how exactly does one tell between local/global USE flags with emerge
- -pv? Or is there some tool that I'm not aware of (other than ufed) that
will help me figure out what applies to what package? It certainly seems
like quite a few hoops to jump through just to get my systems to run the
way they did under 1.4. (on my dual-booting desktop, package.keywords
has around 30 entries in /etc/portage/package.keywords) Basically, it
seems that the dilema is that more USE flag cruft is being added to what
once was a pretty slim and sleak distro. Oh, my last word on this issue:
/etc/portage/package.use seems like a good idea until it's ~300 lines
(assuming I find the time to actually parse the USE flags available for
each of the packages *and their dependancies* that I use on a
semi-regular basis).

In regards to the GNOME herd being overloaded: is there a way to
collectively slap them and let them know that they need to just *let go*
and pick a core set of packages to maintain? (gimp seems like it'd be
pretty important/popular)

It just seems from this perspective adding more USE flags means more
work for already stressed out and overworked devs.

Another idea for a solution to this mess is to *seperate* features into
classes: ie, if you're running X11, you'd have the desktop class of
local USE flags to choose from, etc. Adds a bit of complexity on the
backend, but would probably simplify a lot of things for people that
don't run X11 on all of their systems. I'd probably run <server -java>
or <console -java> and be a happy boy because X11 and things depending
on X11 would be masked by default for my particular machine-class.

- --
Allen Parker
GPG KeyID: 35544083
GPG FP: E628 7310 DE68 321A 933A  5DD1 C831 005C 3554 4083

infowolfe@irc.freenode.net #/tmp #gentoo-dev #gentoo-hardened
infowolfe@irc.oftc.net #vserver
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAq6ZSyDEAXDVUQIMRAlvyAJ0SOp3rhyq+HV+/yPpDAH8Kxr48CQCfUMEb
4A0ji1vM+2RBpvcRVajO0FA=
=a6rq
-----END PGP SIGNATURE-----

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[foser]

[-- Attachment #1: Type: text/plain, Size: 1682 bytes --]

On Wed, 2004-05-19 at 14:01 -0400, Jon Portnoy wrote:
> On Wed, May 19, 2004 at 01:56:35PM -0400, Allen Dale Parker wrote:
> > definition, so be it. *BUT* when the gimp ebuilds haven't been touched
> > in almost a month (2.0.1 has been out since 04-17 and STILL isn't in
> > portage), other ebuilds are falling out of date, I'm SURE that we can
> > find more useful things to do than adding more USE flags.
> > 
> 
> Frankly the reason GIMP gets out of date, among other gnome herd 
> packages, is that the GNOME herd seems to want to retain maintainership 
> of a lot of packages totally irrelevant to GNOME proper without having 
> enough manpower to deal with it.

A totally irrelevant point in this thread, but I suppose one has to
grasp that one minute of attention and use it to its full extent.

The gimp has been over time (even in the 1.3 series) maintained
perfectly fine. Due to some seriously uncontrolled developer
unavailability it has suffered a bit lately. Gnome held on to Gimp
maintainership for mainly two reasons. First Gimp is _the_ gtk+ example
application and second because frankly the changes made over time by
non-gnome team members have all been regressions or failures to
understand it's underlying structure. We do hand over packages to other
teams (gladly mostly), but we do want it to be maintained at least as
well as it was done before (in quality). Previous experiences have made
us wary of that and then we get to clean up the mess and we double our
workload unlike when we would've handled it ourselves in the first
place. Sounds arrogant ? Guess so, but if we're getting frank I'm gonna
be frank as well.

- foser

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[oford]

On Wed, 19 May 2004 19:26:34 +0200 (CEST)
Olivier Crete <tester@gentoo.org> wrote:

> There is at least one other guy who thinks that the handbook has gotten
> way too long (me)...And foser is right on choice, too much is worst that too little, because
> you end up not being able to find out howto where to configure stuff..
> Gentoo is all about choice and choice is good.. But I dont want to have to
> go thourhg 800 use flags before I can install a gentoo system.. I used to
> be able to run ufed and set all of the use flags that I wanted for a
> system... I tried doing that yesterday.. the list has just gotten out of
> proportion.

I happen to agree that the list is too cumbersome and long. So why not sort them into categories ie use.local.media use.local.kde etc.

As someone earlier mentioned the kernel's .config, why not have ufed work more like menuconfig and have submenus based on what is affected by toggling the USE flag?  That makes it so much faster to find what you need.  The alphabetical sort is tedious to dig through just to find one lousy flag.  I tend to give up before I find it (or to not use ufed at all).

--owen

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Caleb Tennis]

On Wednesday 19 May 2004 11:06 am, Jon Portnoy wrote:
> The users seem to be perfectly happy with having a maximum of choice via
> local USE flags. Most people are also okay with the handbook. So what's
> the problem, exactly? Should we force everyone to do what _you_ want
> rather than what _they_ want?

Count me as a second "user", who along with foser, believes there are too many 
local use flags.

In particular, it seems like a lot of packages could be compiled without the 
need for the flags - if later a user decides they want the "added 
functionality", all it requires is an emerge of the "added functionality" 
package, then a re-emerge of the original.

That is, instead of using use flags to pull in some optional deps, let the 
ebuild figure out what to configure based on what's already installed.

An example: there's a bug report open now about how a user emerged "kdesdk" 
and it didn't compile cervisia because they didn't have cvs installed 
already.  They're requesting a local use flag for this.  I'm more inclined 
just to say "emerge cvs kdesdk" will fix the problem, because it saves one 
more local use flag for something which is rather easily fixed.

This is a sensitive topic for me, because if I added local use flags for 
"customizable" things you could do with the kde ebuilds, we'd probably have 
at least 50 more flags in the space.  I sure would like to avoid that.

I would say that at ~600 use flags, the space is starting to get a bit 
polluted.  Having a dialogue now about how to handle it is a good thing.

Caleb

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Ciaran McCreesh]

[-- Attachment #1: Type: text/plain, Size: 1611 bytes --]

On Wed, 19 May 2004 12:44:15 -0500 Caleb Tennis <caleb@gentoo.org>
wrote:
| In particular, it seems like a lot of packages could be compiled
| without the need for the flags - if later a user decides they want the
| "added functionality", all it requires is an emerge of the "added
| functionality" package, then a re-emerge of the original.

I suggest you start running *now*, before Spider catches you and eats
you alive.

| That is, instead of using use flags to pull in some optional deps, let
| the ebuild figure out what to configure based on what's already
| installed.

We've had this discussion over and over again. It's an extremely bad
idea to do things this way. It will break stages. It will break livecds.
It will break GRP. It will cause extremely confusing and inconsistent
behaviour. It will *not* make things simpler for the end user -- instead
of having to set a few USE flags, they have to come up with complex
emerge commands figuring out some magic to do with install order.

| An example: there's a bug report open now about how a user emerged
| "kdesdk" and it didn't compile cervisia because they didn't have cvs
| installed already.  They're requesting a local use flag for this.  I'm
| more inclined just to say "emerge cvs kdesdk" will fix the problem,
| because it saves one more local use flag for something which is rather
| easily fixed.

Uh, no. That is not an acceptable fix for the bug.

-- 
Ciaran McCreesh, Gentoo XMLcracy Member G03X276
(Sparc, MIPS, Vim, si hoc legere scis nimium eruditionis habes)
Mail:    ciaranm at gentoo.org
Web:     http://dev.gentoo.org/~ciaranm


[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Caleb Tennis]

On Wednesday 19 May 2004 12:57 pm, Ciaran McCreesh wrote:
> | That is, instead of using use flags to pull in some optional deps, let
> | the ebuild figure out what to configure based on what's already
> | installed.
>
> We've had this discussion over and over again. It's an extremely bad
> idea to do things this way.

I'm not saying it's a one size fits all scenario, nor am I suggesting we 
remove use flags entirely.  I'm suggesting that we can trim them down, 
perhaps move a lot of global flags to local flags as was suggested, and still 
present just as much "choice".

> | An example: there's a bug report open now about how a user emerged
> | "kdesdk" and it didn't compile cervisia because they didn't have cvs
> | installed already.  They're requesting a local use flag for this.  I'm
> | more inclined just to say "emerge cvs kdesdk" will fix the problem,
> | because it saves one more local use flag for something which is rather
> | easily fixed.
>
> Uh, no. That is not an acceptable fix for the bug.

Then it will get closed as LATER, as I'm the one doing the work, and until 
someone else comes along who has a contrasting opinion, and wants to 
implement all of the use flags, it won't get "fixed".  After all, isn't a 
significant portion of the contributions to portage based on developer 
opinion of the "best" way of doing things?

Look, users can still edit ebuilds, and can still run things in their 
overlays.  Even if we were to remove some of the use flags, and provide a way 
within an ebuild to "quickly edit" things to their choosing, how is that 
taking away choice?  It's not: it's shifting the burden of choice to the user 
who wants it, instead of putting the burden of choice on all of the users.

I'm not suggesting the above is a good way of doing things - it's purely for 
example.  Personally, I'm fairly open minded about the topic, and I hope 
those on the other side of the argument are as well.

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Georgi Georgiev]

maillog: 19/05/2004-12:44:15(-0500): Caleb Tennis types
> In particular, it seems like a lot of packages could be compiled without the 
> need for the flags - if later a user decides they want the "added 
> functionality", all it requires is an emerge of the "added functionality" 
> package, then a re-emerge of the original.
> 
> That is, instead of using use flags to pull in some optional deps, let the 
> ebuild figure out what to configure based on what's already installed.

Weren't USE flags that bear the name of a package being set, depending on
whether the package is installed or not, unless specifically set in one of the
config files? I.e., unless you say "USE=gimp" or "USE=-gimp", then a gimp use
flag would be set only if you have gimp installed.

-- 
 /   Georgi Georgiev    / "If there isn't a population problem, why is  /
\     chutz@gg3.net    \  the government putting cancer in the         \
 /  +81(90)6266-1163    / cigarettes?" -- the elder Steptoe, c. 1970    /

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 5058 bytes --]

On Wednesday 19 May 2004 12:30, foser wrote:
> The second time you mention choice. I guess we know what Gentoo is about
> by now, the 'choice' argument is too often used just to end criticism.

If people are arguing against additional choice, then I guess that at least 
some devs don't get that this is an important part of Gentoo.

> Choice is an illusion, 

Try telling that to people using <insert distro here> who don't have that 
choice.

> if you there's too much choice it is no use to 
> anyone anymore, because nobody really knows what it is all about. 

Agreed.  So is the problem choice itself, or the tools we use to deliver that 
choice to our users?

> This 
> is already the case with the loads of USE flags/portage options/etc. we
> have. Gentoo shouldn't be about choice for the sake of it, it should be
> about simplicity/managability : stuff that works. It's a trade-off.

Where do we have choice for the sake of it?

Reducing choice does not always increase simplicity.

> I wasn't too happy with the introducation of local USE flags for just
> the reasons that are becoming a problem now. Too much flags, everybody
> adds them at will without good reasons. 

USE flags allow users to switch on (and off I guess) optional settings.

What would you prefer?

a) hardened-php patch not available at all in Gentoo
b) hardened-php patch always included

Because those are the only choices you are leaving.

> We used to just say to people 
> who wanted a specific (rare) set-up that they could easily edit the
> ebuild themselves to their need, 

Thank god we don't do that any more!  I'm all for educating our users in the 
ways of UNIX-like systems, but perhaps that is raising the bar too high.

> but nowadays it seems we have to hold 
> hands all the time and add complexity for nothing. 

I don't think USE flags are hand-holding.  The principle - that a Gentoo dev 
spends a little time working out how to safely make an optional feature 
available - scales far better than expecting all of our users to try and 
solve the same problem for themselves all the time.

> That's good for 
> nobody really. 

I agree that adding complexity is not good.

> The installation manual used to be like 5 pages, by now 
> it's a book of it's own per arch. I don't think that's a good thing and
> we should be really, really careful about what we can do to stop this
> movement.

The installation manual used to cover just one architecture.

I'm sure our users appreciate the vast improvements that the handbook 
contributors have delivered since those early days.

> You have the choice. The real power is the easy way in which you can
> adapt it to your needs and the simplicity of doing so. 

Which is exactly what USE flags currently provide - until someone figures out 
a better way to deliver the same amount of choice.

> Huge loads of nobody-ever-uses them options don't help one bit.

Just because you don't use them, don't assume that no-one else finds them 
useful.

> You should keep it basic for exactly the reason that anyone can adapt 
> it easily. Adding layers of complexity leads to a system that needs 
> time & effort to get into : you lose what you want, you lose the true 
> power.

The simplicity has to be at the point of use.  The major point of use for our 
users is the 'emerge' command.  If USE flags are too complicated, why not 
suggest something better?  I'm not sure that eliminating choice is something 
better.

> The defaults should be good enough, all the extra stuff is mostly cruft 
> in 99.9% of the cases. 

I agree that the defaults should at least be sensible.  But I don't agree that 
the optional stuff is cruft.  You may not need some of these options, but 
there are users out there who are.

As long as there are developers willing to maintain these optional features, 
why is offering choice (as a principle) wrong?

> That cruft therefore isn't necessary in the distro, keeping the 
> playing field clean and open.

I'm *soooo* glad that everyone doesn't agree with that statement.

You want to take a distribution that provides a tonne of flexibility - more 
than any of the competition - and see all that flexibility removed from it?  
Is that really your position?

> We're creating tools to be able to work with our tools, thats in indication
> of going the wrong way. 

Then what is the right way to deliver the richness that is Gentoo *without* 
losing the flexibility that others like (even if you don't seem to)?

I guess I've mentioned choice a lot more than twice by now :)

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Joshua Brindle]

*sigh* this thread is already out of control but all the hardened devs 
agree with the use of the hardened flag. It wouldn't take choice away, 
anyone that ways hardened-php without the other hardened stuff can use 
/etc/portage/ .. that is why it's there, to help advanced users select 
use flags more granularly..

Stuart Herbert wrote:
> On Wednesday 19 May 2004 12:30, foser wrote:
> 
>>The second time you mention choice. I guess we know what Gentoo is about
>>by now, the 'choice' argument is too often used just to end criticism.
> 
> 
> If people are arguing against additional choice, then I guess that at least 
> some devs don't get that this is an important part of Gentoo.
> 
You are confusing choice with excessive work, having 500 use flags *does 
not* help the choice cause, it increases work and therby decreases choice.

<snip>
> 
> Where do we have choice for the sake of it?
> 
> Reducing choice does not always increase simplicity.
> 
> 
heh, you name it :) but again, additional use flags *does not* equal 
more choice, there is a delicate balance

>>I wasn't too happy with the introducation of local USE flags for just
>>the reasons that are becoming a problem now. Too much flags, everybody
>>adds them at will without good reasons. 
> 
> 
> USE flags allow users to switch on (and off I guess) optional settings.
> 
> What would you prefer?
> 
> a) hardened-php patch not available at all in Gentoo
> b) hardened-php patch always included
> 
> Because those are the only choices you are leaving.
> 
that couldn't be more incorrect, check top point

> 
> The installation manual used to cover just one architecture.
> 
> I'm sure our users appreciate the vast improvements that the handbook 
> contributors have delivered since those early days.
> 
> 
>>You have the choice. The real power is the easy way in which you can
>>adapt it to your needs and the simplicity of doing so. 
> 
> 
> Which is exactly what USE flags currently provide - until someone figures out 
> a better way to deliver the same amount of choice.
> 
> 
>>Huge loads of nobody-ever-uses them options don't help one bit.
> 
> 
> Just because you don't use them, don't assume that no-one else finds them 
> useful.
> 
But we can't help 100% of people, we can help the majority, anything 
more is more work for us, and more work for the vast majority of users.

why should 90-95% of the users have to sift through hundreds of use 
flags that 5-10% of users use? It doesn't make sense.

<snip>

There are more things that gentoo offers than choice, just yesterday 
Stuart and I had a conversation about webapp-config and how convenient 
that is, and how other distros don't use it. We offer innovation and 
easy system administration. Choice is a primary concern but not that the 
expense of everything else, please keep this in mind.

Joshua Brindle

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Jon Portnoy]

On Wed, May 19, 2004 at 01:41:01PM -0500, Joshua Brindle wrote:
> *sigh* this thread is already out of control but all the hardened devs 
> agree with the use of the hardened flag. It wouldn't take choice away, 
> anyone that ways hardened-php without the other hardened stuff can use 
> /etc/portage/ .. that is why it's there, to help advanced users select 
> use flags more granularly..
> 
> Stuart Herbert wrote:
> >On Wednesday 19 May 2004 12:30, foser wrote:
> >
> >>The second time you mention choice. I guess we know what Gentoo is about
> >>by now, the 'choice' argument is too often used just to end criticism.
> >
> >
> >If people are arguing against additional choice, then I guess that at 
> >least some devs don't get that this is an important part of Gentoo.
> >
> You are confusing choice with excessive work, having 500 use flags *does 
> not* help the choice cause, it increases work and therby decreases choice.
> 

Can you explain the logical connection between "increases work" and 
"decreases choice"?

> <snip>
> >
> >Where do we have choice for the sake of it?
> >
> >Reducing choice does not always increase simplicity.
> >
> >
> heh, you name it :) but again, additional use flags *does not* equal 
> more choice, there is a delicate balance

How so?

> But we can't help 100% of people, we can help the majority, anything 
> more is more work for us, and more work for the vast majority of users.
> 
> why should 90-95% of the users have to sift through hundreds of use 
> flags that 5-10% of users use? It doesn't make sense.

See the rest of the discussion, particularly about people *not* having 
to sift through hundreds of USE flags if ufed was fixed, and also the 
fact that USE flag grouping can fix the ballooning global flags issue.


-- 
Jon Portnoy
avenj/irc.freenode.net

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[foser]

[-- Attachment #1: Type: text/plain, Size: 1201 bytes --]

On Wed, 2004-05-19 at 14:48 -0400, Jon Portnoy wrote:
> See the rest of the discussion, particularly about people *not* having 
> to sift through hundreds of USE flags if ufed was fixed, and also the 
> fact that USE flag grouping can fix the ballooning global flags issue.

USE flag grouping still is basic step from what we have now, not a
re-evalution. Don't fail to realize that USE flags at this point
represent a lot of different concepts and that mere grouping is a
temporary hack, not a solution.

Ufed : tools to use tools. This whole discussion somehow got focused on
USE flags, but it is much broader than that. It's more the concept that
added complexity decreases control on an individual level.

Most people used to be drawn to Gentoo because of it's adaptability, but
we're losing that to adding cruft for rare use case scenario's. Portage
gets more and more obscure features, while basic stuff like normal dep
tracking is still lacking and there are a few half finished concepts
lying around (like SLOTs) that still need fixing.
Focus has been on the wrong areas, rarely used niceties over a solid
basic framework. A building is as strong as it's base.

- foser

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[Stuart Herbert]

[-- Attachment #1: Type: text/plain, Size: 3848 bytes --]

On Wednesday 19 May 2004 19:41, Joshua Brindle wrote:
> *sigh* this thread is already out of control

I do admit, I am a bit surprised that such a small patch to a package that 
many Gentoo devs openly prefer not to use anyway (and such is their right ;-) 
has caused such fuss.

I was hoping that people would be happy that we're adding a bit of value, and 
perhaps doing a little bit more in the web-serving area than the other 
distributions.  Maybe that was unrealistic ;-)

> but all the hardened devs agree with the use of the hardened flag.

Sorry, but I don't.  I'm sympathetic, and agree that USE flags shouldn't be 
added for the sake of it.  But I believe that the 'hardened' USE flag is for 
a different feature.  Combining the two does not make sense to me.

I'm not going to do it.

> It wouldn't take choice away, 
> anyone that ways hardened-php without the other hardened stuff can use
> /etc/portage/ .. that is why it's there, to help advanced users select
> use flags more granularly..

It's great that Portage can be so flexible, but tbh in this case I think 
having to resort to entries in /etc/portage just supports the idea that 
"hardened" and "hardenedphp" are actually two different things.

> You are confusing choice with excessive work, having 500 use flags *does
> not* help the choice cause, it increases work and therby decreases choice.

Then let's invent a better mechanism to deliver this choice.  Let's get a 
discussion going on *how* to deliver this choice, and then let's deliver 
better tools.

Right now, though, we seem to be debating whether or not we should be offering 
the choice at all.  Is that topic on the table or not?

We've got ~8300 packages, and ~600 USE flags.  Just over 200 of those flags 
are global, leaving just under 400 local flags.  That compares with 941 
CONFIG settings in /usr/src/linux-2.6.6/.config on this box.

> But we can't help 100% of people, we can help the majority, anything
> more is more work for us, and more work for the vast majority of users.

No-one is forcing you to add USE flags to your packages.

> why should 90-95% of the users have to sift through hundreds of use
> flags that 5-10% of users use? It doesn't make sense.

Okay - let's look at that objectively, and see how we can craft a better 
solution.  I'm offering to write the result up as a GLEP, and if necessary to 
code it too.

Anyone want to make a start?

> <snip>
>
> There are more things that gentoo offers than choice, just yesterday
> Stuart and I had a conversation about webapp-config and how convenient
> that is, and how other distros don't use it. 

The whole GLEP 11 initiative came out of a discussion on how we could better 
deliver choice.  We wanted a way to support more than just the one web 
server, and to support both virtual hosting and non-virtual hosting too.

Working together, we've delivered on part of that.

> We offer innovation and easy system administration. 

The ability to tailor the package - without having to compile the damn thing 
by hand - is an integral part of that easy system administration.

> Choice is a primary concern but not that the expense of everything else,
> please keep this in mind. 

I agree it shouldn't be at the expense of everything else.

Let's reduce this thread down to looking at how we can better deliver the 
choice.  Let's design a better tool.

Best regards,
Stu
-- 
Stuart Herbert                                              stuart@gentoo.org
Gentoo Developer                                       http://www.gentoo.org/
                                                   http://stu.gnqs.org/diary/

GnuPG key id# F9AFC57C available from http://pgp.mit.edu
Key fingerprint = 31FB 50D4 1F88 E227 F319  C549 0C2F 80BA F9AF C57C
--

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Re: [gentoo-web-user] Hardened PHP now in Gentoo

[John Nilsson]

[-- Attachment #1: Type: text/plain, Size: 287 bytes --]

On Wed, 2004-05-19 at 21:52, Stuart Herbert wrote:
> Let's reduce this thread down to looking at how we can better deliver the 
> choice.  Let's design a better tool.
> 
> Best regards,
> Stu

Why not drop global USE-flags and adopt the kernel configuration system?

-John



[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]