Discussion:
Eternally paradigmatic Debian discussions...
(too old to reply)
Gunnar Wolf
2024-06-15 05:50:02 UTC
Permalink
It seems Sean's GR (pre-)proposal perfectly fits the bill for most
paradigmatic Debian discussions. From (half-)following the discussion,
(must confess I have >80 pending messages I haven't read, so there
might be some reality check I haven't yet applied), I can say that:

1. Nobody really opposes what is being proposed.

(which makes sense, as tag2upload is barely controversial: What is
being requested is for the project to ask ftp-masters to trust an
automatically-signing key as a valid originator for source
packages. Of course, this key is to be controlled by an auditable
source base, controlled 100% by members of our project)

(Important mentioning: Nobody is to be forced to use
tag2upload... at least not for the forseeable future)

2. Many people interpret that _others_ oppose this proposal because it
opens the door for endangering different workflows or pieces of
infrastructure.

(But everybody so far says "I'm not saying I want to kill $thing!"
or "It is not me who opposes the idea!")

3. While a listmaster has already called for civility, at least once,
this thread "beautifully" shows how we are capable of treating each
other without much civility, but "decorating" our speech in a way
not to make it obvious we belittle and attack others.

And I think (no evidence!) most of the bad interactions in this
thread come from prior frictions. There is a lot of
finger-pointing, but all people pointed at answer by claiming to be
innocent of the nefarious accusations...

4. I understand Sean (and Ian, I pressume) are pushing this GR to
solve a stalemate while negotiating with ftp-masters regarding
implementation details, or something like that. In such case, I
would have expected an ftp-master to explain what is so difficult
in accepting the new proposed tool/workflow.

In other words: Is there and underlying controversy? Or is it just
we enjoy poking each other?

In any case... I understand you want to give some "discussion time"
before pushing the process. But, is there something in particular
you are waiting from this discussion?

This is one of the mails that actually point nowhere, and I fear are
not as constructive... I sat a bit with it half-written, pondering
whether to send it or to delete it. I am deciding to send it because
the interaction patterns we are seeing are quite pathological. I'm
sending this mail as a call, not only not to tell the other party to
fsck off some filesystems, but to stop finger-pointing and
second-guessing.

- Gunnar.
Salvo Tomaselli
2024-06-15 07:10:02 UTC
Permalink
Post by Gunnar Wolf
It seems Sean's GR (pre-)proposal perfectly fits the bill for most
paradigmatic Debian discussions. From (half-)following the discussion,
(must confess I have >80 pending messages I haven't read, so there
1. Nobody really opposes what is being proposed.
I'm against it. I just saw no point in taking part in the conversation. If we
will actually vote on this I'll vote accordingly.

I suspect at the very least the members of the ftpmaster team would vote in
the same way, although I do wonder if they're even aware of what's going on on
this list.

Best
--
Salvo Tomaselli

"Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di
senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
-- Galileo Galilei

https://ltworf.codeberg.page/
Jonas Smedegaard
2024-06-15 08:00:01 UTC
Permalink
Quoting Gunnar Wolf (2024-06-15 07:44:04)
Post by Gunnar Wolf
It seems Sean's GR (pre-)proposal perfectly fits the bill for most
paradigmatic Debian discussions. From (half-)following the discussion,
(must confess I have >80 pending messages I haven't read, so there
1. Nobody really opposes what is being proposed.
(which makes sense, as tag2upload is barely controversial: What is
being requested is for the project to ask ftp-masters to trust an
automatically-signing key as a valid originator for source
packages. Of course, this key is to be controlled by an auditable
source base, controlled 100% by members of our project)
(Important mentioning: Nobody is to be forced to use
tag2upload... at least not for the forseeable future)
2. Many people interpret that _others_ oppose this proposal because it
opens the door for endangering different workflows or pieces of
infrastructure.
(But everybody so far says "I'm not saying I want to kill $thing!"
or "It is not me who opposes the idea!")
3. While a listmaster has already called for civility, at least once,
this thread "beautifully" shows how we are capable of treating each
other without much civility, but "decorating" our speech in a way
not to make it obvious we belittle and attack others.
And I think (no evidence!) most of the bad interactions in this
thread come from prior frictions. There is a lot of
finger-pointing, but all people pointed at answer by claiming to be
innocent of the nefarious accusations...
4. I understand Sean (and Ian, I pressume) are pushing this GR to
solve a stalemate while negotiating with ftp-masters regarding
implementation details, or something like that. In such case, I
would have expected an ftp-master to explain what is so difficult
in accepting the new proposed tool/workflow.
In other words: Is there and underlying controversy? Or is it just
we enjoy poking each other?
In any case... I understand you want to give some "discussion time"
before pushing the process. But, is there something in particular
you are waiting from this discussion?
This is one of the mails that actually point nowhere, and I fear are
not as constructive... I sat a bit with it half-written, pondering
whether to send it or to delete it. I am deciding to send it because
the interaction patterns we are seeing are quite pathological. I'm
sending this mail as a call, not only not to tell the other party to
fsck off some filesystems, but to stop finger-pointing and
second-guessing.
I find your post very helpful, and appreciate your posting it.

For example, I recognize my own finger being too pointy - i.e. that I
clearly was not clearly on topic, but derailed the conversation somewhat,
through my personal, too stubborn views.

Thanks a lot for your sprinkling the atmosphere of this mailinglist
"room" with a bit of caring-mindset-fairydust.

- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private
Holger Levsen
2024-06-15 09:20:02 UTC
Permalink
Post by Gunnar Wolf
1. Nobody really opposes what is being proposed.
I oppose to vote to implement a design proposal. I also oppose to force
certain work on volunteers. This is very similar to voting to publish
-private.

I didnt have time to even read this (other) thread since two days, yet
alone reply.

I also find it amazing that you wrote a summary of the thread while
stating upfront that you havent really read it. :/
--
cheers,
Holger

⢀⣎⠟⠻⢶⣊⠀
⣟⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄

If you want to forget all about Covid...just keep getting it.
Ian Jackson
2024-06-17 11:30:02 UTC
Permalink
Post by Holger Levsen
I oppose to vote to implement a design proposal.
It's not just a design proposal. The vast majority is already
implemented.
Post by Holger Levsen
I also oppose to force certain work on volunteers.
No work is being forced on volunteers.

We can deploy tag2upload without ftpmaster having to lift a finger, if
necessary. The result isn't as good as a setup which has some minimal
cooperation from ftpmaster, but it's workable.

For example, if ftpmaster really want to do absolutely nothing, the
following approach can deploy tag2upload without them having to lift a
finger:

* We generate tag2upload's signing key in the HSM on the server.
* I sign that subkey with my own personal key.

This approach is of course technically possible right now. The reason
it's not appropriate is that it would be an end run around an
ftpmaster decision. What's needed is political legitimacy.

If this GR passes, and ftpmaster don't feel like doing any work in
this area, something like the above would be an entirely appropriate
approach, at least until a better solution is implemneted. It's not
as good as the version where dak redoes the authorisation check, but
it's good enough.

Ian.
--
Ian Jackson <***@chiark.greenend.org.uk> These opinions are my own.

Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
Joerg Jaspert
2024-06-15 16:30:01 UTC
Permalink
Post by Gunnar Wolf
1. Nobody really opposes what is being proposed.
The opposition is against technical details and the refusal to adjust.
Not against the actual thing.
Post by Gunnar Wolf
4. I understand Sean (and Ian, I pressume) are pushing this GR to
solve a stalemate while negotiating with ftp-masters regarding
implementation details, or something like that. In such case, I
would have expected an ftp-master to explain what is so difficult
in accepting the new proposed tool/workflow.
I just tried to, in another mail in a new subthread. Including that the
GR proposal took me by surprise, as the last discussion *I* can find is
long ago.
Post by Gunnar Wolf
In other words: Is there and underlying controversy? Or is it just
we enjoy poking each other?
Nah, we just don't enjoy getting our points ignored when asked and then
years later a hammer to overwrite.
Post by Gunnar Wolf
This is one of the mails that actually point nowhere, and I fear are
not as constructive... I sat a bit with it half-written, pondering
whether to send it or to delete it. I am deciding to send it because
the interaction patterns we are seeing are quite pathological. I'm
sending this mail as a call, not only not to tell the other party to
fsck off some filesystems, but to stop finger-pointing and
second-guessing.
There *IMO* was one subthread going a particular bad way, where, even
after getting pointed out multiple times that the taken conclusion was
*WRONG*, text still went the wrong way, but the rest of it I found quite
useful/OK. Many of them mails gave me more insight into t2u and ideas
around it.
--
bye, Joerg
Sean Whitton
2024-06-16 04:40:01 UTC
Permalink
Hello,
Post by Gunnar Wolf
In any case... I understand you want to give some "discussion time"
before pushing the process. But, is there something in particular
you are waiting from this discussion?
Ian and I are going through the thread and working on an FAQ atm.
We are thinking it would be good to finish that before moving the
process forward. We'll probably have it done soon.
--
Sean Whitton
Ian Jackson
2024-06-17 11:30:01 UTC
Permalink
Post by Gunnar Wolf
It seems Sean's GR (pre-)proposal perfectly fits the bill for most
paradigmatic Debian discussions. From (half-)following the discussion,
(must confess I have >80 pending messages I haven't read, so there
1. Nobody really opposes what is being proposed.
I'm afraid that is not true.

ftpmaster are insisting on changes which we consider defeat the
purpose of our proposal. See the subthread in which Russ talks about
a "fat client". This is the heart of the disagreement.

ftpmaster are characterising these changes as minor details. They are
not minor details. ftpmaster's proposals demand radically more
complicated software on the uploader's system, than tag2upload.

Ian.
--
Ian Jackson <***@chiark.greenend.org.uk> These opinions are my own.

Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
Loading...