@phnt@anemone@sun I would never allow EPEL / ELRepo on my servers though. Cherry-pick a few packages into my own self-hosted repo? Sure. But absolutely not allow that entire repo to be deployed on my servers
I've seen... shit happen when someone makes a mistake in EPEL and uploads a package that shouldn't be there, etc.
@feld@anemone@sun Yes, RHEL has very small repos even compared to the small repos of Arch for example. It's because Red Hat is contractually liable for security guaranties and timely security updates and when damages to the company occur thanks to RHEL and the system ran up-to-date version of the problematic package and few other things are right, the company can sue RH for those damages.
Debian doesn't have that. What it has is a large repo of software with a surprising number of orphaned and unmaintained packages.
Also EL has EPEL and ELRepo that have almost everything you would want (not counting PHP; that's Remi.) and aren't supported under RH support contracts.
@sun@anemone he's not wrong about it tripping up first time users, but he's 100% wrong about the OS's package manager solving all problems somehow.
e.g., RHEL distros have a very tiny amount of first-party mainained packages compared to Debian
The availability of software without having to custom compile it yourself or fetch it from some 3rd party website is what made me a FreeBSD user (after being a Gentoo user that escaped from Debian)
@anemone@feld@sun i primarily blame debian for this development because they’re so resistant to change
the tools are garbage, the documentation is bad, the contribution workflow is a nightmare. the stable versions are too outdated for desktop users, and the unstable ones break too frequently—which with their tooling means apt trying to remove half the system because it’s the only package manager without a good dependency solver, and debian (along with arch and others) is one of the distros that still doesn’t have automatic staging so the repos are never guaranteed to be in a consistent state.
i think the idea of distro-specific package management is fundamentally a good one. it’s a layer of protection from e.g. supply chain attacks, and—with modern tooling—allows testing not just individual packages but the entire system before pushing updates.
it’s just that most distros are still doing it like it’s 1998 and we’re distributing software on CD-ROMs in an era where thousands of upstream projects have a new release every single week.
and because that clearly isn’t working, we now have flatpak. linux distros are so fucking behind the curve that we’re bundling the entire user space with every single app.
@sun@shitposter.world@anemone@ebiverse.social He means that the bazaar of users getting software directly from developers or their distributor of choice should be replaced by people getting software exclusively from his store. :neocat_flop: