Re: [gentoo-project] Repo mirror & CI: official statement wrt GitHub

[Alec Warner <antarus@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 2142 bytes --]

On Thu, Jun 14, 2018 at 8:33 PM, Thomas Deutschmann <whissi@gentoo.org>
wrote:

> On 2018-06-14 16:14, Alec Warner wrote:
> > They seem to offer docker packages, so we could just nab those and run
> > them in containers on hosts. I'm not too keen on doing a bunch of
> > (really what I consider busywork) to try to 'get it working on Gentoo.'
> > We already use upstream provided containers and I expect that to
> > continue as upstreams continue to abandon the 'release packages' model
> > and move to 'release sets of containers' model.
>
> Huh? Is this the Gentoo-way? I hope not! :(
>
> No, I really hope something like that will never happen. Like I hope we
> will never see the attempt to add "FLATPAK", "Snap"... to the official
> Gentoo repository.
>

I think you will find that vendors who offer fairly complex applications
will continue to focus on vertically integrated solutions
(e.g. containers) because its cheaper (build once run anywhere) and
scalable (you don't need to maintain N packages, for N distros.)

I won't comment on what the "Gentoo" way is (because there are dozens of us
and we don't all agree) but as a human trying to deploy these sorts of
services; I don't see much point in packaging them when upstream offers a
container deployment. Given the dozens of hours I could spend trying to
write ebuilds for all of the bundled stuff vs deploying the container..I'm
going to deploy the container most of the time precisely because I don't
need the 'gentoo customized build', particularly when containers offer
isolation boundaries between the application runtime and my system runtime.

Obviously containers have their own customization challenges (but also
provide layers of isolation where extreme customization is lower priority
than 10 years ago) and also present interesting security challenges (how do
you keep up to date, you cannot use more traditional security tools) but I
suspect organizations can adapt to the former and the industry will provide
for the latter at some point.

-A


>
> --
> Regards,
> Thomas Deutschmann / Gentoo Linux Developer
> C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5
>
>

[-- Attachment #2: Type: text/html, Size: 2916 bytes --]