• Re: Q: Ubuntu PPA induced version ordering mess.

    From Andrey Rakhmatullin@21:1/5 to Alec Leamas on Mon Jul 1 22:00:01 2024
    On Mon, Jul 01, 2024 at 09:46:11PM +0200, Alec Leamas wrote:
    On 01/07/2024 20:48, Alec Leamas wrote:
    Dear list,

    Still working with the opencpn package. Now trying to normalize the
    Ubuntu PPA builds so they can are based on the same debian/ directory
    and tools as the existing Debian opencpn package.

    opencpn is currently in a beta phase targeting a 5.10.1 release. The
    beta versions are like "5.9.2-beta2+dfsg-1ubuntu1~bpo2204.1". The
    upstream policy is to use 5.9.2-beta2, 5.9.3-beta3 so this ordering is, although a bit strange, still ok.

    However, a quite large user base have PPA packages installed. These have versions like 8767+b2cbf5a3f~ubuntu24.04.1. The prefix is a build
    number, so they are ordered. but all these versions are higher than anything like 5.9.x.


    After some thought, I tend to think that adding an epoch is the right thing here.

    The Policy [1] says:
    ---
    Epochs can help when the upstream version numbering scheme changes, but they must be used with care. You should not change the epoch, even in experimental, without getting consensus on debian-devel first.
    ---

    With all this said: Is this a case where using a epoch is justified? If not, why?

    Adding epochs to work around 3rd-party repo version problems sounds quite wrong.
    We don't even add epochs that Ubuntu itself adds.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmaDCNAtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh nL0P/0MS71LVP++QMSLlxk2QoQGCCbtnzeIcwtnMYgz3773ZuY4qYlbCGiP31Tdk rcMGJRHSi7cqqt/FLjGnM50KapzReQTGw0ybcof5qUzNGRW5YLyc06zftANIyKu8 xjMVABctXasUXU1tkuxj+9rSepshPL4BLhJaw/c8pCbKHt2znCbrMjqMP/89jGMJ MYbodKhfYp/TJOGv4DUjT60E+bkb6/qbEwZQbeQLTEiffVHooSb1rUKyscpyb7KE 7ITEmqLtZhbivykxhc+fe/oFj+krkweQfN10t7staL8+HHqeLqa6LA1M1Gy4jLdi ouEc+1RJJrnzvzCJLkOGC7Al00ScnD55ETQ0KsbkjZ1qIdZhbbOFcnAN13lzAzFD NMq4V/HQQyR/D/Ws1l0N2JN7vUfSVPENtz2t63m87UYcQM7XLvKR0i1SzWmV9mFG MqylKBP1AECqygDneY1lP/KWPu8AM2s8QTxkUm1zYYnN6pGdDb3sp34t25fqL5NS fnU3uhainxJ7PEImHIpFgYXzkQKR7F/eS6jgBXWhyUtQfkavktQkxKfy2S712Ox0 BPWmrupMrDoU5BIX36XOYjTpx9/Q+ArelkDYzhA+l9HVZVGfFtAM2fz0T3imby31 +rXumXJ37VgYm1QCAMu8I0Wbq9Mq0wVB4WE91nQOtCajm7iC
    =4B01
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to All on Mon Jul 1 18:10:38 2024
    On Monday, July 1, 2024 5:59:00 PM EDT Alec Leamas wrote:
    On 01/07/2024 21:51, Andrey Rakhmatullin wrote:

    Hi Andrey.

    Thanks for input.

    On Mon, Jul 01, 2024 at 09:46:11PM +0200, Alec Leamas wrote:
    After some thought, I tend to think that adding an epoch is the right
    thing
    here.

    The Policy [1] says:
    ---
    Epochs can help when the upstream version numbering scheme changes, but
    they must be used with care. You should not change the epoch, even in
    experimental, without getting consensus on debian-devel first.
    ---

    With all this said: Is this a case where using a epoch is justified? If
    not, why?

    Adding epochs to work around 3rd-party repo version problems sounds quite wrong. We don't even add epochs that Ubuntu itself adds.

    But this is not about third parties, it's about upstream which publishes
    PPA packages. So far these are by far the most used Linux packages.

    I also hesitate to add an epoch, after all they are basically considered evil. But if we should not use them when upstream has a broken
    versioning we are about to replace, when should we use it?

    I have good relations with upstream, and they are willing to abandon the current broken versioning in favor of something sane. But the legacy is there, and we need to handle it.

    Have considered tricks like adding a 10000. prefix to the debian/ubuntu versions. But to me, this looks even worse.

    Thoughts?

    Upstream can change the versioning however they want. They are upstream. If they don't care to fix it, then I think we assume they are fine with it and leave it as is.

    Scott K
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE53Kb/76FQA/u7iOxeNfe+5rVmvEFAmaDKV4ACgkQeNfe+5rV mvH4GRAAjtADwpva4Uz6pX6msCwLv0xS7/lT6k/Oai+gD12g0ZFHeHou8YoGn/95 4RZLkQBFwOijYyW27BF0nroyevxXEQkPaSt1aZKZUeBZx+57YkHBF7brYR8g3zMI l5j7ogvBPle6kKoWhSGg9kKhFs6u3Qv4qBRAWGWhIxjpOnM8LIk2f7fTVPmPkUX5 sbBZbqP0Ryucj7HTlhlO/sGsCq59gdC2r3o+x8PbBTTpmOvlQ9t7a3Rm8OmpgpVr va2y4D3Gkl8qxWQFc1f9mgS8Pg+DM3hBnwKTpOOElbCSVnhWROyu1brldFkW64My NNJ7B5e6mDM04TabkqfyOHVgJfNy5fZw8IqTk9/iAeODP6CA1APWwCLQYHJEdjQ5 inh+MfD7s3RYNq4dKeFTyei5LHRYPrca2ECMK8CXPuhlZ2HNmVqALgkhqS2JG5GG WYCmUPbpwFp7dLgPyUWEMUm2t1Y79uZXOy59OHaLLDzI+hnJ6bl/CauADL3qRiZy eXivaVlP9lyS7flq2471aurksFUcOVDbxt1yCSNFQquz3J4tiSrCNfiTKsF43RCP VPvWntrDr2xSpoWUynwA+JP2ytx8PVQuz53dqcYBLtASnFWq2XZYNen0gCE0cVzJ hQv9BbFeJNZKRbJzVafSNPM6f8C0PLIBTOwRtuASXE5PxbQUrt8=
    =ilzy
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to Alec Leamas on Tue Jul 2 00:40:01 2024
    On July 1, 2024 10:18:07 PM UTC, Alec Leamas <leamas.alec@gmail.com> wrote:
    On 02/07/2024 00:10, Scott Kitterman wrote:

    Hi Scott,

    Upstream can change the versioning however they want. They are upstream. If
    they don't care to fix it, then I think we assume they are fine with it and >> leave it as is.


    But here the situation is that upstream do care and wants to fix it. But they need our help (an epoch) to accomplish this to handle the legacy.

    We could be helpful, or not. Why not give a hand?


    No. That's us fixing it. They can bump the version to whatever they want to address the issue. Epochs are forever, so should be a last resort.

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to All on Mon Jul 1 18:54:38 2024
    On Monday, July 1, 2024 6:46:06 PM EDT Alec Leamas wrote:
    On 02/07/2024 00:31, Scott Kitterman wrote:

    HI again

    On July 1, 2024 10:18:07 PM UTC, Alec Leamas <leamas.alec@gmail.com>
    wrote:
    But here the situation is that upstream do care and wants to fix it. But >> they need our help (an epoch) to accomplish this to handle the legacy.

    We could be helpful, or not. Why not give a hand?

    No. That's us fixing it. They can bump the version to whatever they want to address the issue. Epochs are forever, so should be a last resort.
    Yes, epochs are forever and should not be taken lightly, agreed.

    Expanding on the situation. The current opencpn version is 5.9.x, soon
    to be 5.10 in a tick-tock cycle.

    However, the opencpn packages have versions like 8763.x, automatically generated from a build number. This is not communicated to users, they
    just install and update.

    Obviously, upstream should start building packages with versions like 5.9.x..., 5.10.x... etc. But any such version is lower than the current
    build number.

    If you switch hats for a moment: have you any advice for upstream in
    this situation?

    --alec
    8763.5.10

    Next build is:

    8763.5.10~8764

    Scott K

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE53Kb/76FQA/u7iOxeNfe+5rVmvEFAmaDM64ACgkQeNfe+5rV mvEiKQ//baxXntIFdIRI60aiyVXPH7JwKeCzImgHzzZJ/7F0YfPSgdPONQHJWO+k 2kmdDALFXJqP7J5+ThR7SfOV9ycTopBtqUt0847m5FiKlgh2L91y9Wb9oI7SbFL6 FF/VyT+Vm33quZN49RD/weF0xW0fs425z5yBa4FLf5n+tb1Yd1HJ7V4N8tIbQFbL 6f4OyxDozrRecWZ5KS4EaXvR4Ptya2LAYh9brTndEsIAqXO4TPVKP4se5Vo2BbhE 8sjR/F46cUK66vSRewMWR0bVW6BHSwII/P1glNsxYE8qh+VIeOAb8dxraezoVRSV RloRjxhxLYjq1TrYNmj/duTwrzq5gyty8E9k5cX0ogZSbv6SnwYt4kPEaEHFfEnZ WQQqs85Qjjy2/qR4PlOnOpg0fwBxrutaOiFQL6Y9NFgn4WyOoPpWpguweQ6FW+20 kiNSwx5bKGaihPcC8dF5ecXUY9oZM/cFlZAPm69BNhQpHSw0d2nycQH1pSVnLvJ+ tixxgpaWqNp6elFKETaARPjwoNdZgR+LrifgIJRT9IHPBwNrA2wvhqaiQIUcwz5a 7SF1DtNXMlSFuXyu1tWamrVyJKC+jRyrNEUcWn4tg+RK1mdQBIYwLkvs8MkoGW0K y3Rp1UepGltjGX50mC3ZvrekeEaGRtyBlIzxVaL7zXPRlIx0Y5g=
    =soIq
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Mon Jul 1 16:31:16 2024
    Copy: leamas.alec@gmail.com (Alec Leamas)

    Alec,

    On Monday, July 1, 2024 4:19:22 PM MST Alec Leamas wrote:
    Hi again

    On 02/07/2024 01:13, Scott Kitterman wrote:
    On Monday, July 1, 2024 7:07:16 PM EDT Alec Leamas wrote:
    On 02/07/2024 00:54, Scott Kitterman wrote:
    On Monday, July 1, 2024 6:46:06 PM EDT Alec Leamas wrote:
    If you switch hats for a moment: have you any advice for upstream in >>>> this situation?

    8763.5.10

    Yes, I have had a similar idea using 10000 instead of 8763 to make it
    stand out less. In my eyes, this is worse and will lead to that the
    package versions does not match the "public" version like 5.10.2.

    But if the list agrees that this is the correct solution so be it. To be >> honest, it might be a hard sell upstream.

    Next build is:

    8763.5.10~8764

    Why?

    --alec

    Because the '~' means less than. It's a way to add the build number to
    the
    interim versions in the future without causing the same problem again. I guess it should have been 8763.5.11~8764, if 5.11 is the next 'real' version.

    There is absolutely no need of build numbers in the version, it's just a
    sad legacy.

    Let's drop this subthread, keeping eyes on the ball: what is a sane version?

    --a

    If upstream wants to fix this problem, they could just make their next release version 9000, with the one after that either being 9001 or 9000.1.

    Or, possibly, they could encourage everyone to uninstall the PPA package before installing an official one. For example, release a new package to their
    PPA that displays a message encouraging everyone to uninstall the PPA package, remove the PPA from their list of repositories, and *then* install the official
    one.

    As a general rule, I wouldn’t expect a user to keep a PPA package installed when switching to an official package. There is generally no guarantee that upgrading from a PPA package to an official one will work without errors.

    Or, once the official package had entered the system, they could instruct users
    to remove the PPA from their list of repositories and then perform a downgrade.

    All of that being said, Debian could use an epoch to fix the problem. Having an epoch on a package isn’t the worst thing that has ever happened.

    --
    Soren Stoutner
    soren@debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmaDPEQACgkQwufLJ66w tgOvzA//UNcmlI86ZNLEUp/PNIyZAj0UJue5LiGg3rdiDAtAXWFWMv1kM+hnxxw+ pJDdFYuzHPKZmcXeY0QBkL+WSIdsfzEDk4MnLpm3MAESK7gKjmWl4wcfYtPfzmUC ChD7CeK/2Ia8RKJKNPNdKrYt40sZadQVqNsJfP0hMJXzTy1E+j1wxDP0/qDd3aMZ 4A5Xbja54vgbZLEyJOYHVYk6nqXkIDWF80z4mwSkN6xWdHojVDEjLCzlFz1PXW8p ZvUieNDZKjiolEU6ChwjVLFXL0bC3BYo18YAHzdQFws5sjp33HJw10NHRg/OKxi5 hYkBBFwJpgvlPUy0fdja43QPnCv8Vr7Bb/3duvBlUBpSJ99f9YZA+fKKAAl0z1TN HqgPK05pNAnsNz7hRJw+3HPU+vZP5jHbOQ23rQXAQ3E1hjj9PJS+UbIhrOFFqGCg 9CMYPVEEk4WcuRtnXvGR1KhMXdLPyV6FQN6YnJPKJ71RUjEeH5do2uUFAVXGhJFL GrNO+kzxZ/Fg2NR6Jj4VMaEUtmybvONm6WS+7zN25sgtYE33PrJefT91F62JvKSs JpTNolxpJ891jMuODH7OEEwJhACzPV1vJdt0ODnYLdDXc5MSdPXvDUTRzuzkp+z0 Yz0amlMLUdO9M9upAT7HtGzNP/+YlK39CvVIv5XeBNJPMUq8YzE=
    =Ft57
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to All on Mon Jul 1 19:13:25 2024
    On Monday, July 1, 2024 7:07:16 PM EDT Alec Leamas wrote:
    On 02/07/2024 00:54, Scott Kitterman wrote:
    On Monday, July 1, 2024 6:46:06 PM EDT Alec Leamas wrote:
    If you switch hats for a moment: have you any advice for upstream in
    this situation?

    8763.5.10

    Yes, I have had a similar idea using 10000 instead of 8763 to make it
    stand out less. In my eyes, this is worse and will lead to that the
    package versions does not match the "public" version like 5.10.2.

    But if the list agrees that this is the correct solution so be it. To be honest, it might be a hard sell upstream.

    Next build is:

    8763.5.10~8764

    Why?

    --alec

    Because the '~' means less than. It's a way to add the build number to the interim versions in the future without causing the same problem again. I
    guess it should have been 8763.5.11~8764, if 5.11 is the next 'real' version.

    Scott K
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE53Kb/76FQA/u7iOxeNfe+5rVmvEFAmaDOBUACgkQeNfe+5rV mvHLuRAAkWlNPIfGxG5iYtUG9ke4EkiUsMIMg+GPUF9egQYqwi8Tjk2SgL+pSgju iht5VRuTRTq06yVdqCmxbF7M13whvoNBkxYIbCy4gcG/WLGPWpN3ZcNlgBKBJMSl iunGxDstyoHW6zF4X+nkEpHi0aTQub1xzw+mG5QXqrJ+kxvtZR+XKB+znr3srwLm l276XWxftoXt+/TfvkxyJAr4bZjUqL96qxLS1xSuZX1XT3TMxfH7QV+uUKihl7Rx McjjA652sLpwjuqWZt84PdRB68c+uSgA1SHdbeSNiQuAqBX/Ss2Gr85UebEvH81e qXP5FQQ5iusaYn+z9bsRodk9ajlBqWBtfsh6Fxw/HOfzLUMXzAEHXkODwGC9L+zL lXQvuzD9Aed/k48zQ592U7Iq/s2pOLQdA6OsnKbk+wmlS33wYx+G/6j83340+dhC g6qxjIV5H8Ga1pI09K62Wz/da3xpvJ3z25p36NsAbC9gylbxsnr1lw+SVFp1pWle CSX2Klhbv9uPKfKjUlU5aYxmXTiAPkrW6UqfRUYFt5bYa7gOO2TW2zmP6OgIVUUF JNktRGTMK1GgyhzNl9DZXU7KE79VB3dgUGPX1T1FbQ2EmSqgB4PgeVETGz9edGDf APyodguTCm+pktm8qo9W2HXGvhZHd7o5J9oCPZr73V2Uq+rn8Yw=
    =C0N9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to Alec Leamas on Tue Jul 2 01:40:01 2024
    On July 1, 2024 11:25:59 PM UTC, Alec Leamas <leamas.alec@gmail.com> wrote:
    On 02/07/2024 01:19, Alec Leamas wrote:

    Let's drop this subthread, keeping eyes on the ball: what is a sane version?

    Looking at this from another point of view: is there any situation where an epoch is appropriate?

    Yes. I don't think this is it.

    A sane version is one that's higher than the last one. If upstream wants the last one to include their versioning from non-Debian packages, they can do that. If they don't want to, that's fine, but I don't think we should either then.

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Mon Jul 1 16:41:24 2024
    Copy: leamas.alec@gmail.com (Alec Leamas)

    Alec,

    On Monday, July 1, 2024 4:25:59 PM MST Alec Leamas wrote:
    On 02/07/2024 01:19, Alec Leamas wrote:
    Let's drop this subthread, keeping eyes on the ball: what is a sane version?

    Looking at this from another point of view: is there any situation where
    an epoch is appropriate?

    --alec

    Epocs are usually used when upstream changes their versioning system in a way that causes problem for our packaging. For example, if they previous have used dates for their release versions and switch to ordinals, Debian needs a way of indicating that version 1.0 is newer than 2024.01.05. This is to support upgrades of official Debian packages in Debian repositories from one version to the next.

    Epocs are not typically used to fix problems in .debs published in some PPA that was never an official part of Debian. This case is a little odd because the unofficial .debs were published in the PPA by upstream themselves (without thinking through how the .debs should be versioned). As a general observation, upstream developers don’t tend to have a good grasp of how to create an idomatic .deb. If they did, they would just release it to Debian themselves (I say that with my upstream hat on).

    However, as I said in the other email, adding an epoch to a package isn’t the
    worst thing that has ever happened, and if there are a large number of users who have these PPA packages installed, then it might be in the best interests of the *users* to do so. In my mind, the users always come first when making these types of decisions.

    --
    Soren Stoutner
    soren@debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmaDPqUACgkQwufLJ66w tgNh9RAAjR+z665A17D4keLOXIrMgG3D6vaxJF0eYMO+qEPUic33nS0DK3+C6T/p tKcPOLiQY0sr6cZeXR9Tyt49yQoScb/PkHVKDK+ejCmM+OQL/AcutREC2z1PP57w BMyiuY96bd7uNKU1mk5AVSfZE28iYWmmvln2eAW/yqD+ZmtTPqGnQrFm0eEZuzTT ougvrKu5zzH+/OGgzAXPbba62RN2Vx2cF8P+PbznJspW1TkCzuZM/0zaEh/E0hRH BlSPaZywMi6zkF0ownp2G3PzLl3yVAPZTfRh8Lf0JIki7B4QZSTdfq//qDAG+4sV NT4r9DQEARp9yQItJuKpitOliGZCDA0szX6ipLXqHcXaInqxazJ19VeOrSUZiRVd toPhpCS/fxM1V+28/PruJ8/nqs2FvIyj9vc22xfxOMif1pmBeOu1e42/w/GFrihF 8KIGRCzs478LKaPW8t7MMVJ3lHRMpFmqMfqZak0LoxV6XrH2y837GCNLRcUkLyUj MXRHMfI3M8HH62b+YcclGQBEYxprkEJccmH7X39KWcy0SkyRgLA3VGPFpJAYlm+q 5ntLmEoQfRJAWURnBqnaLL7+MGoxj30loerIcoH0GrGX6y+zJZxwsHjXJt6oiLxD 3IQ51c9pUWmhbio02hYxfm2mX4El2PZwucHiY+yczw/4AWU8jx0=
    =DPf4
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wookey@21:1/5 to Alec Leamas on Tue Jul 2 02:00:02 2024
    On 2024-07-01 23:59 +0200, Alec Leamas wrote:

    But this is not about third parties, it's about upstream which publishes PPA packages. So far these are by far the most used Linux packages.

    I also hesitate to add an epoch, after all they are basically considered evil. But if we should not use them when upstream has a broken versioning we are about to replace, when should we use it?

    Quite. People are quite resistant to spoiling neat version numbers
    with epochs, and no-one likes them, but they don't do any actual harm
    (except sometimes break scripts and tools that forgot to allow for
    them), and this seems seems like a very sensible use case: essentially
    jus thwat they are intended for.. Yes it was upstream that messed up
    not us/you, but we have the technology and you can make user's lives
    easier by just adding an epoch.

    It's a pity upsream didn't know about the 0~ trick so that it wouldn't
    matter what crazy version string was used, but it's done now.

    I guess the only potential argument against it (beyond 'we don't like
    epochs') is 'how big is the userbase now and later'. i.e if this is
    actually fairly new and there aren't really that many users with the
    duff versions, but maybe in the future there will be 100 times more
    getting their packages from us, ubuntu and upstream PPA, then that's a reasonable argument to make them have to deal with it manually in
    exchange for 'neat' epochless versions forevermore for all those
    future users when everyone has forgotten about this cock-up.

    Ultimately you are the maintainer so it's up to you.

    From what you have said, I think I'd epoch in this case, unless I
    thought the current set of users could be considered 'de minimus' from
    the point of view of say 5 years time.

    Wookey
    --
    Principal hats: Debian, Wookware, ARM
    http://wookware.org/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEER4nvI8Pe/wVWh5yq+4YyUahvnkcFAmaDQaAACgkQ+4YyUahv nkfJwA/+LslM+hEsAREyhvmFhR5gLsN/DCSdPd0vLoL44agpXN++quYlzJ3yF7Nk awisg6UtxudA3GZFiZWZt341Xdh8L/2VQ5rK8ufxFEsjbOUJZt9Sf4OCWGCdSnrX megTVG9XOsPlHC8UXt9BiyTu1AiWCAA7KpjMfcPQqgWX9tDf/Sx2xNLTQuROtm0B JnEa8VgzLh9Zv/UfpGLNewuWU28pvdTc3Vxw7qlYauFgLVGgJ4O5/LcK96OcqqF5 xZmEHR0yVdLSFsGDBA+ji0PAtwNQf2FZQqadgX3EOj5Jzp5S7G0LGd6t4ulbXHTc ryVk+iu/f0a2G138ElrDnl6pye6aikFCpMN0QaSX08WrUtd7WmTTjLoA9KA1eKIt GuQvlPeLR+6bnpFFYVcoHgJFSxUA+sjmHqS34XBb4rS530SVCyHC77jolhHxZqyE o5ufmjwyg/P7Jhdzhn4fQcRXx1Qcj4CM6PobuQhoAvlpJYKg6Cxp7m9PR4DXeF37 GcKV1nPau1sDBhmU+V6TEUXgInczehTv/fYO+43Qctr2P8uHdIcSaan1mWSKCYDH 1IF2AUaqg08dBSOlUYBvss/hyayf7wQx2yI6jerUNK6NbmscT/Es/z4dcvShZDas HAtxCHTu3Wv7Va4SVfvlghG9nMvguwFXhU4Ra+A/8FUOSXnyWRc=
    =hBWO
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Mon Jul 1 17:08:20 2024
    Copy: leamas.alec@gmail.com (Alec Leamas)

    Alec,

    On Monday, July 1, 2024 4:59:26 PM MST Alec Leamas wrote:
    1. Persuade users to uninstall PPA packages before installing official packages and also generation 2 PPA packages with sane versions like 5.10.x

    [...]

    Of these I would say that 1. is a **very** hard sell upstream. Users are
    used to just update and will try, fail and cause friction.

    Although I generally agree with your conclusions, using a PPA is the type of end user task that involved them making modifications to the repositories on their systems. I would assume that anyone who has done so, and who is already running Linux instead of Windows, is fully capable of handling a “downgrade”
    to an official package. Asking users to remove the PPA they manually added and
    install an official package doesn’t really seem like that hard of an ask to me.

    --
    Soren Stoutner
    soren@debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmaDRPQACgkQwufLJ66w tgNbkA//dtLHoDF+A7HuetR12USzIWrYn/ydkw43csxyHbGK4qYTHQF1y0QRKbES ykvqCWK35S47uqwgG+F802sh3qNNcUHbjoFZedyJ7311+1vK22Gq0om4xvPN9UBm BScW+Uf2+8iMkswjlDoyEJrQehV/0Me2/C8NU+PHdDMfL8Hiwe7XqD5cASFULtTp ZBUJVP3vGKse9qHTEDdtiCMryxvBggXw6rb2btKCFH2kh97OI8q8ArbmN5LnPSVu u9Aq7vCk8M19wJvYcWx8qPlIK+ccBNKkX8GLF3P6QFkuVh+Qu8lHVwq6MYNXawb6 pAGD1jDJg8QZxz0hsX6AW1/VseMMjW3iiPOoZAexNbl87tu2hHr1CcFRCwpkvXpX p1a7fLA2mMUCCW0YJBA0rAXgj4oifiqgjp4AfHrxev8VGZDv5ILtHSNr1b8F8iOU u8DqGexZrf5R8ENIbAAodx5KxWnR7AJ77dcePBQwIwGBWjs+/T/btuXJFPxNoWnO hkmi2u5JxeycIEmQf4XFq+A9+fs+j4U6a9oG8c97/dSQmZ+GxY7H7WcsKINBNb3/ W43e6MpML8g+tKrMnD343GdveEbwZAYATS28z9GYMyC/kHyiw/TZIziEhQrdXwLP 3l0qM+G1TrbVIkWz9sEX/xjaHVmfo1KMrmJdQphJ/cfrUFPi0Fs=
    =4zMm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Alec Leamas on Tue Jul 2 02:20:01 2024
    Alec Leamas <leamas.alec@gmail.com> writes:

    So, at least three possible paths:

    1. Persuade users to uninstall PPA packages before installing official packages and also generation 2 PPA packages with sane versions like
    5.10.x

    2. Use versions like 9000.5.10, 9000.5.12. etc.

    3. Use an epoch.

    Of these I would say that 1. is a **very** hard sell upstream. Users are
    used to just update and will try, fail and cause friction.

    2. and 3. both adds something which must be kept forever. Given this
    choice I tend to think that the epoch is the lesser evil, mostly because
    the package version could match the "real" version.

    I would use an epoch.

    It sounds like the PPA was in serious use by the intended users and
    they're going to be switching to your packages. You are trying to make
    that easy and avoid obvious and easily-forseen problems and I think that's good: that's exactly what a maintainer should do. If it were just a
    handful of people you could walk through the transition, that's maybe different, but it sounds like that's not the case.

    2 is a hard sell to upstream for psychological reasons. Maybe it
    shouldn't be, maybe upstream should be fine with this, but as you say
    upstream in practice isn't going to be fine with this and honestly if I
    were upstream I probably wouldn't be either, even if I knew I should be.
    It's hard enough to get people to use version numbers properly. Getting
    them to use a "weird" version number that their users might be confused by
    for the rest of time is going to be difficult.

    Changing the version number only in Debian is even worse: that's just
    horribly confusing for users and will be forever. And the confusion is
    going to affect upstream as well.

    Basically, you'd be burning a lot of social capital with upstream for no
    really good reason and you probably still wouldn't be able to convince
    them. I don't think it's worth it.

    I would just use the epoch. I know people really hate them and they have
    a few weird and annoying properties, but we have a bunch of packages with epochs and it's mostly fine. It's something you'll have to keep working
    around forever, but not in a way that's really that hard to deal with,
    IMO. (I would also warn upstream that you're doing that, so that they
    know what the weird "1:" thing means in bug reports in the future and why
    it's there.)

    This feels like exactly the type of situation that epochs were designed
    for: upstream was releasing packages with weird version numbers and now
    they're effectively going back to normal version numbers that are much
    smaller. In other words, to quote policy, "situations where the upstream version numbering scheme changes." Yes, in this case it was only in their packages and not in their software releases, but that still counts when
    they have an existing user base that has those packages installed.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to Debian Development on Mon Jul 1 17:26:49 2024
    Copy: leamas.alec@gmail.com (Alec Leamas)

    Alec,

    On Monday, July 1, 2024 5:19:37 PM MST Alec Leamas wrote:
    For Debian users we backport opencpn which works well. However, the
    Ubuntu backport process is, well, interesting (been there, done that).

    The PPA represents a much better way to publish backports to current
    Ubuntu branches. But for this to work we need to reset the versioning so
    it works together with the official stream from Debian.

    Anyway, seems we have a emerging conclusion that an epoch is a correct solution here.

    That adds some needed clarification. I agree that in that circumstance, adding an epoch is the best way forward. It allows you to maintain the current upstream program version number, while unifying the Debian, Ubuntu, and PPA version numbers in such a way that packages from those repositories can be
    used interchangeably.

    --
    Soren Stoutner
    soren@debian.org
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmaDSUkACgkQwufLJ66w tgOBfhAApIfS0OiX0QKoSdIS+AsnqKgecGmaCwzbOhUVeUWOGYaHR1un+aV7MOqZ zhBz0QGlOBATNmjtPA271egm7WdGS1F44V/Y2MYlz2p5LzP6Ybfj3oMX5cTn6sgl B3IqSRemLkQh1kE0n3zEuneSMRYpk7oYx5Qq9ryOCVkhsoaNFupX5x931r8coAri Ow1d4HlQcv6xjv6ONigHW1q0NoiJu+Kkjd8rgVYGAltV7yfb5+2lDHzZuSPzLbrz 8v8wZCwI3Mr07YuYzQ+wjSD7sNBtPEOJXqC8b2g8Gxo5Nf1MrMY56PE6o195WbP+ 3c6Oae61463SxxsRH0rTAM2PDpDb1Ox0rRiZ6byg0XNiG3AN86N/oWyn6+2p8ZOp qeVQxBp7aBDfPPw3nyalg/hRQdxJDThlbfookgrhfKeHvLnCAGxLw49j6C/qFIvb wlWnBLxaaQugThrw3KA5oBaqTZBBFOiNmxoOiq71dOadKD8sq5KOcyVC71z3/njq 6RbvQXo/nud+VBUwAwWTxQfRxww02+69fCCEsh0VkKsHEfEU2/CAKKUUbmssfc6z B+U7DSpundnxx7Ku5qG4y1XA2xQMg6qZo5wb39O6shubV00fDhtyH0QupohJ/mJy i2rpAbCrcOSQ//Uofp7ussT/CuTO5ikubD/1RjuZd3qmjV+K5Y8=
    =FGCq
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to Soren Stoutner on Tue Jul 2 02:40:01 2024
    On July 2, 2024 12:26:49 AM UTC, Soren Stoutner <soren@debian.org> wrote: >Alec,

    On Monday, July 1, 2024 5:19:37 PM MST Alec Leamas wrote:
    For Debian users we backport opencpn which works well. However, the
    Ubuntu backport process is, well, interesting (been there, done that).

    The PPA represents a much better way to publish backports to current
    Ubuntu branches. But for this to work we need to reset the versioning so
    it works together with the official stream from Debian.

    Anyway, seems we have a emerging conclusion that an epoch is a correct
    solution here.

    That adds some needed clarification. I agree that in that circumstance, adding
    an epoch is the best way forward. It allows you to maintain the current >upstream program version number, while unifying the Debian, Ubuntu, and PPA >version numbers in such a way that packages from those repositories can be >used interchangeably.

    I would suggest that you work with upstream on how they will version things in the future, so you aren't bumping the epoch every year.

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Mon Jul 1 17:15:23 2024
    Copy: leamas.alec@gmail.com (Alec Leamas)

    This is a multi-part message in MIME format.

    --nextPart1732770.W8RckZmPCv
    Content-Transfer-Encoding: 7Bit
    Content-Type: text/plain; charset="us-ascii"

    Alec,

    Is upstream planning to maintain their PPA after the packages are released into Debian?
    Or, will it be more like Gentoo, OpenSUSE, or Mageia, where the OpenCPN website simply links to the official packages?

    https://opencpn.org/OpenCPN/info/downloadopencpn.html[1]

    On Monday, July 1, 2024 5:06:54 PM MST Alec Leamas wrote:
    So have I also understood it.

    And this is more or less the situation. For all practical purposes the
    PPA is the current upstream packages, it's not some random packaging of opencpn. I have some control over both the PPA and the debian/ubuntu packages.

    And what we want to do is to switch the upstream versioning in a way
    which means the "next" version is lower than current version. The end
    game is that the PPA is proper pre-releases of the official packages,
    built from the same sources and debian/ directories.

    On other words, a rather good example on when an epoch makes sense.

    --alec


    --
    Soren Stoutner
    soren@debian.org

    --------
    [1] https://opencpn.org/OpenCPN/info/downloadopencpn.html

    --nextPart1732770.W8RckZmPCv
    Content-Transfer-Encoding: 7Bit
    Content-Type: text/html; charset="us-ascii"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Alec,</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Is upstream planning to maintain their PPA after the packages are released into Debian?&nbsp; Or, will it be more like Gentoo, OpenSUSE, or Mageia, where the OpenCPN website
    simply links to the official packages?</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;"><a href="https://opencpn.org/OpenCPN/info/downloadopencpn.html">https://opencpn.org/OpenCPN/info/downloadopencpn.html</a></p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Monday, July 1, 2024 5:06:54 PM MST Alec Leamas wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; So have I also understood it.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; And this is more or less the situation. For all practical purposes the</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; PPA is the current upstream packages, it's not some random packaging of</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; opencpn. I have some control over both the PPA and the debian/ubuntu</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; packages.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; And what we want to do is to switch the upstream versioning in a way</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; which means the &quot;next&quot; version is lower than current version. The end</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; game is that the PPA is proper pre-releases of the official packages,</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; built from the same sources and debian/ directories.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; On other words, a rather good example on when an epoch makes sense.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; --alec</p>
    <br /><br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">-- </p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">Soren Stoutner</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">soren@debian.org</p>
    </body>
    </html>
    --nextPart1732770.W8RckZmPCv--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmaDRpsACgkQwufLJ66w tgMYjhAAhqfVdHAaSXKTVckbMd1EZOiCKxmgm2axtLuDNNi/dRPKB6/AjFusXPHs aSfNMKApj1GBAfY7AikGOAW4ENzGjsKbL4BLQZPjQdWFvbXVZQqaQOUrbMVv4v58 r4Y/FSt4zXVhxMxczGYDVWbPrpGT0kM1g6gVhVZKiSdcK4q1AEvhFXB2n2w7tL19 wr0q8IkkVXMcFr9JzEyb9BOgu3MDqhXNbieoxBvjU2sGKUliXr09MefIqeKa370b rElTp0WLl4ehOOAcvJET12dGxIgpNGbaxFtIOZe9JlffXD+IYN1ltDjmcbw38LIg CWDy2eRXM56LISnIUgdR477ltViq9A43WkFAHNYFSoTpWwGN2juZVP7ppA12qyI/ qod8USMeBYsPKe6dh7lqijd+M2FEe+bigFPTqisQgQtXczMp0DVEvZnGTL3+3grc vwXlAULiGYpfB5WHSXMCxE10c0fLc95zO9BV2iSmB1JO91CxWoxSRy6sn5ih2a5i fP0s9CkLGNUHqrajL4Qdo6HgTPFPPl9u54KgW/zsGIMi3KHSHYOGus27Zpg/w57U CTtF+44yxD5fbz45xq74m5RpCzz3nbzBn1O+Oo4XE7x4s/BQiYwsBA6FvF544CGb /aJNpm1Isug4XwmJgmiai4IyHlLWC4t9QNINjY4WZlx9cxGjbOY=
    =GjaG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guillem Jover@21:1/5 to Wookey on Tue Jul 2 03:40:01 2024
    Hi!

    On Tue, 2024-07-02 at 00:54:13 +0100, Wookey wrote:
    On 2024-07-01 23:59 +0200, Alec Leamas wrote:
    But this is not about third parties, it's about upstream which publishes PPA
    packages. So far these are by far the most used Linux packages.

    I also hesitate to add an epoch, after all they are basically considered evil. But if we should not use them when upstream has a broken versioning we
    are about to replace, when should we use it?

    Quite. People are quite resistant to spoiling neat version numbers
    with epochs, and no-one likes them, but they don't do any actual harm
    (except sometimes break scripts and tools that forgot to allow for
    them),

    Oh, but they can cause actual harm. As has been mentioned on this
    list many times, epochs by design invalidate existing versioned
    relationships in both packaging fields (inside the distro (but in this
    case that does not look like a problem) and on custom local packages),
    and on tools/(maint)scripts comparing these versions. These can either
    cause letting versions that should not be installed through, or can
    cause version unsatisfiability.

    There's also the problem that epochs are (currently) not included as
    part of the filenames.

    They are also a common source of errors, due to people forgetting they
    need to add them in relationships (if you read package changelogs,
    this is a common-ish occurrence).

    This is covered in the dpkg FAQ (although I should probably also add
    the accidental omission case):

    https://wiki.debian.org/Teams/Dpkg/FAQ#Q:_What_are_version_epochs_and_why_and_when_are_they_needed.3F

    and this seems seems like a very sensible use case: essentially
    jus thwat they are intended for.. Yes it was upstream that messed up
    not us/you, but we have the technology and you can make user's lives
    easier by just adding an epoch.

    I guess the first question that pops in my mind is whether users who
    have installed the packages from the PPA, because the Debian/Ubuntu
    packages were not satisfactory, are going to be switching to the
    Debian/Ubuntu packages? Perhaps only temporarily and then back to
    the PPA? Are we going to get a version arms-race then?

    (Personally I'd find the "sort the mess on the PPA side", the better
    approach, but *shrug*.)

    It's a pity upsream didn't know about the 0~ trick so that it wouldn't
    matter what crazy version string was used, but it's done now.

    AFAIUI upstream was using "correct" versions in their releases, they
    just used the build-increment-based versions in that PPA.

    Thanks,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Alec Leamas on Tue Jul 2 06:40:01 2024
    On Mon, Jul 01, 2024 at 11:59:00PM +0200, Alec Leamas wrote:
    After some thought, I tend to think that adding an epoch is the right thing
    here.

    The Policy [1] says:
    ---
    Epochs can help when the upstream version numbering scheme changes, but they
    must be used with care. You should not change the epoch, even in experimental, without getting consensus on debian-devel first.
    ---

    With all this said: Is this a case where using a epoch is justified? If not,
    why?

    Adding epochs to work around 3rd-party repo version problems sounds quite wrong.
    We don't even add epochs that Ubuntu itself adds.


    But this is not about third parties, it's about upstream which publishes PPA packages.

    I don't think it matters that they are published by the upstream.
    Similarly to the versions issue you are not required to guarantee smooth upgrades from 3rd-party packages and other such things.

    I also hesitate to add an epoch, after all they are basically considered evil. But if we should not use them when upstream has a broken versioning we are about to replace, when should we use it?

    When upstream had a broken versioning *that we used in Debian*.

    I have good relations with upstream, and they are willing to abandon the current broken versioning in favor of something sane. But the legacy is there, and we need to handle it.

    Again, it's just questionable to me if we *need* to handle upgrades from non-Debian packages.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmaDg0AtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh HeYP/0hya8aH5LQ+wiN67ApxZ9dEeYYrDUaNg54w6SGK8VcGpcRqfi4puBYNjsd1 30xYnv4od+W3Wg/IRhD3JyKFckWuXwhu49udDNHBPkEF4ZY705FJNFQ86aD6xkuw K/AurpxEF8comYwJZq5T5yV6Ype0JMsSJ0d5w3jGaiUcJafIL1nuC873iyVMqmyr KJ2cFkkP7np63Vyj0Lk9wQCjcs0n/P1J/0D17hVbjmFLwQqzdFiGeU+qMLMRWRFD 0SAq6rQW2/nz/cjX9ownbvSHj9PB0Ezxas5LqQZJaYJE69Md9tbx5kHY/TIoT2me RDZBxJztpHZNKHxXFnv0beLAuD6SCZtWs1KoYMAYqAB2Tv8WcZamStYaz+bqPr2a B9DBMfwfu43aLL/H80RKDFQ6HvVmlii9kRjUUEaLUnZuHNtLDZYXdcMb2ThNtoP/ WcdOY+0L0AQAEwr8KOxbvx5L2QWvAuBddvrWOPSTVtPQogmV6ADN+yk4hEr0u5Y0 KnkqhE9rQ5iloQjhjo7fwcWnuQ6uK0/XNYibXJaKepmneb/7uEO4cqgXvMuyRFCC QWQf2IZzwF050zlePSg2O+v7q1G9mN/c2G8OiLqgdVyNDT7341QC5StaG3KcfIiR lxKalWXZrCadjaNka/43X0sxq+JVgHMR8BQApIDOFxqaPJil
    =ihTp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to All on Tue Jul 2 06:40:01 2024
    (sorry, I replied thinking I've read the entire thread, I didn't notice
    that there is a second thread broken off of this one)


    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmaDhActFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh NbEP/3+rhmn/LO26aRVRKCaQGpadDEmJk0pGWIqoYcMB7fcqMd6k6Y8KA145ilAu +jDyPWMTJZdLzMIzpcObvgPJXafj+pn3feb21dARNx8b3JTsBY1yALE9F5pNCPnI 1PUncjd4J9iYHsYohNrhRM5H5qOVwVS6kJXIm0Tf9PqojSmC6Xae5pvFVSsxwZN7 LQPauWLOreJ0oYnowWf3dsJmlW8Xs9rBgYyyBDM5bLwxlxEgeNS69WiN0oTlQGPo pYnWQttDt9L/HDOkksXYspT16r/6VtwFjWziN9kJTVeyQRjeOrJeJ2wiBeOo+p8f iG8E1r/bG0B5ZUiS6kIrzrxivzKwCu2o/lWOq4IaUUSULfCczfqVPvnt5ixxjqOB k2F2N6RzyDJB5+V0hKtrddE84aQa3Hkw+QEzWTeGaV4Vpm3nmF0kV4x1u/+8oCLQ pPf7e+U1TmRoG5k6rSGtmBw2wCv+6iMSDx+kMohxwjQBqdMg5rs3GNpIng9gl4bU 0EDk9HQ1B5LC21qRcUXvozuGZPJXfqgikvNordruNP7pfN4+tGHxryb9GJZYF2ZR 0p3GRtQ2vzzJREtS3k6vJ/ZWMkLog8eAfHbd5bmvDZwmjttsPI9s0z4dE3hBeFvf ppMNTyuZAIDPZnvtRWjpK7akAxNfSJjv2iKok17DFjgs13iA
    =9iBJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Russ Allbery on Tue Jul 2 12:10:01 2024
    On Mon, Jul 01, 2024 at 05:17:09PM -0700, Russ Allbery wrote:
    I would use an epoch.

    yes.

    [...]
    Basically, you'd be burning a lot of social capital with upstream for no really good reason and you probably still wouldn't be able to convince
    them. I don't think it's worth it.

    yes.

    I would just use the epoch. I know people really hate them and they have
    a few weird and annoying properties, but we have a bunch of packages with epochs and it's mostly fine.

    a bunch?

    $ grep ^Version: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_source_Sources |awk ' { print $2 } ' |grep -c :
    1142
    $ grep -c ^Version: /var/lib/apt/lists/deb.debian.org_debian_dists_unstable_main_source_Sources
    38200

    ok, maybe 3% of all packages is a bunch. :)

    It's something you'll have to keep working
    around forever, but not in a way that's really that hard to deal with,
    IMO.

    yes.

    This feels like exactly the type of situation that epochs were designed
    for: upstream was releasing packages with weird version numbers and now they're effectively going back to normal version numbers that are much smaller. In other words, to quote policy, "situations where the upstream version numbering scheme changes." Yes, in this case it was only in their packages and not in their software releases, but that still counts when
    they have an existing user base that has those packages installed.

    yes.

    Thank you Russ, for wording this so well, that I don't have to type much.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    In a world where you can be anything, be kind.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmaD0IEACgkQCRq4Vgaa qhyT3xAAofuRxv5W1IoSy2nkhxj8eyucgRnRb6P/R3enSt10vQXtjEG3lAWbJGdy Sg7GrIk0v6vZVIyWM/kL1Ha86A1g9X7jZ9SzHZK8OJUkiE8wFxTBEqRQaXAQeuOx un4jv2nkNm4RH/O5ec2nlaZkTm8I+42+fN5WOuxNPoBoa4iHyRC+jjhcB7VoXNPs VLhhTXyQueSGrcsLYbAK4EFehrVPZcQaGPvYldpKCqxBiapxpndq3+4wAJn9jWdL J0GDHe//L0RBZbIyRUUZ/ymvNo06jZsmjeHzqbbYcKQQEEACoAejs35embp44I8D WqcxQGFG/atGD4iEem9btwUEQtODJf0VOv1nZX1ZsrFC18eMs7HAlIg2cNHEpG+R eJd08kBBK9ndeozjyCopej1kNDLa9vB0AYZ5OJx5jPefY+YnGbJmVL4OIO2SB20p DE15NixXwYNC3BmU1roo9wbTgdMU8I0IjaB7nBkdWvZawiOgjXwyquBmRr7xM1iN 2ak5t5GIzqiH0UOIeHyrhDeNqqliYtAlrMj2F5mGsbm9mzYLV8q+j9EHQOZACrAM I1iX6aqA9srMrf+OVktETrI+VlaWmiNTkEqoDE6AJwvPgbarEcL68zRjBGS6ufqf
  • From Guillem Jover@21:1/5 to Guillem Jover on Tue Jul 2 15:00:01 2024
    Hi!

    On Tue, 2024-07-02 at 03:32:53 +0200, Guillem Jover wrote:
    On Tue, 2024-07-02 at 00:54:13 +0100, Wookey wrote:
    Quite. People are quite resistant to spoiling neat version numbers
    with epochs, and no-one likes them, but they don't do any actual harm (except sometimes break scripts and tools that forgot to allow for
    them),

    Oh, but they can cause actual harm. As has been mentioned on this
    list many times, epochs by design invalidate existing versioned
    relationships in both packaging fields (inside the distro (but in this
    case that does not look like a problem) and on custom local packages),
    and on tools/(maint)scripts comparing these versions. These can either
    cause letting versions that should not be installed through, or can
    cause version unsatisfiability.

    There's also the problem that epochs are (currently) not included as
    part of the filenames.

    They are also a common source of errors, due to people forgetting they
    need to add them in relationships (if you read package changelogs,
    this is a common-ish occurrence).

    Ah, another one that I had forgotten (which I had in mind adding
    explicitly to the FAQ), but I guess is a variant of the "them being
    confusing" point.

    Epochs make it way harder to understand the history of the archive.
    When you are not familiar with a package and its history it might be
    hard to tell what happened to it to require an epoch bump, where in
    many cases this is not even documented in the changelog (and it gets
    worse now with the trimmed changelogs), and you might need to dig
    into that history (via BTS, or git, or mailing list threads) to know
    for example whether a security issue affects old versions or not,
    whether that package used to be a different source package, whether it
    was due to an unnecessary epoch bump to revert a problematic version,
    whether it was for a proper version-space reset, etc.


    The fact that they are perceived as ugly, is a good thing, but it's
    not the main reason they should be avoided, to me that's just a
    materialization of their powerful and problematic nature. They indeed
    have their place, but I still have the feeling people reach for epochs
    too easily, because in general their addition _seems_ trivial (but not
    its irreversible consequences).

    Thanks,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Tue Jul 2 20:50:01 2024
    Alec Leamas dijo [Tue, Jul 02, 2024 at 01:59:26AM +0200]:
    So, at least three possible paths:

    1. Persuade users to uninstall PPA packages before installing official packages and also generation 2 PPA packages with sane versions like 5.10.x

    2. Use versions like 9000.5.10, 9000.5.12. etc.

    3. Use an epoch.

    You can also consider a third possible path: Pick a different package
    name.

    I am unfamiliar with opencpn to be able to suggest an alternative. But
    given opencpn has never been part of Debian, you could just name your
    package "opencpn-deb". Just to be sure users don't get surprised by
    having two different versions of the same package, it can "Conflict:
    opencpn". Then, you get a blank slate from which you can work your
    versioning as you deem adequate.

    It does, yes, introduce some confusion, but I think is the least evil
    option.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Milan Kupcevic@21:1/5 to Alec Leamas on Wed Jul 3 00:00:01 2024
    On 7/1/24 14:48, Alec Leamas wrote:

    [...]


    Hi Alec,



    opencpn is currently in a beta phase targeting a 5.10.1 release. The
    beta versions are like "5.9.2-beta2+dfsg-1ubuntu1~bpo2204.1". The
    upstream policy is to use 5.9.2-beta2, 5.9.3-beta3 so this ordering is, although a bit strange, still ok.

    However, a quite large user base have PPA packages installed. These have versions like 8767+b2cbf5a3f~ubuntu24.04.1. The prefix is a build
    number, so they are ordered. but all these versions are higher than
    anything like 5.9.x.


    [...]


    The upstream shall consider adopting 5 digit release version numbering
    without dots/periods. E.g. 50903 would mean version 5, major 09, minor
    03. Thus you would go with package version numbering 50903-1 or
    50903+dfsg0-1 as the case might be.

    Milan

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to umlaeute@debian.org on Wed Jul 3 09:30:01 2024
    IOhannes m zmölnig (Debian GNU|Linux) <umlaeute@debian.org> writes:

    anyhow here's my 2¢:
    according to you¹, upstream have simply botched their package
    versioning, which i would consider *a bug*.
    bugs cause pain.

    AIUI the botching was done by whoever put the PPA together.

    If that's the same as upstream, fair enough, but it seemed to me (having glanced at the repo) that upstream has been using sane versions
    throughout.

    FWIW I'd say that people that installed from a PPA probably know they
    did that, so can be left to sort themselves out -- especially if they've
    been pulling Ubuntu PPAs into a Debian install.

    Well, at least they'll have followed some sort of HOWTO to get it
    installed. If you could get that HOWTO to be updated with a Debian
    section that points out that they'll need to remove the PPA as a source,
    and force ``downgrade'' the package to restore sanity, then that seems
    like it deals with the problem. It would probably be good to also
    document the fix on upstream's and/or Debian's wikis.

    Then you can cheerfully ignore the broken PPA versions.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmaE/UcACgkQ0EujoAEl 1cC78RAAyPsRCl4Ww7YrGwUeMGkkSPT+H1/WfNTNViWbZ//lZ48WyarU7GkrcIc1 JDiCFOBHr2YLOmJZmILZDtfvmMrAL/uAmuOjt1iVybd2HGVT7JYuOgoamIKtkx+w F0R6yWw3runBe+pECCUKzsV4+BrCnem/BUiLub4L7IMEXGxCS0u2oXLghSLwJD7F OJ16rUT76TdNoIRRM/hXNNePM0kAGKrtJU0LCmAZ4VWzSJOB6XNAoJlykVLKlYMY Ee4uQvjRAPl/q9AP+wvHF30BsBVf/d7/EIiWWVK6v7gmEt7Wg/MWCHbPH7GdR3qI HimhAl+QPt1A4sOXJ/G0UM2r8ti7Nh1zaqMOS3tezOyc/TeThj/pjPh5a9OQQnCa pU4cs0ayYyyPxntfVllTXW4X0h4lPzxrG8bvmmE1+VbsiyESXPWA76e0WeBahSnd Huuh6Jb5RbEeEYRNioZ7KOn09LkNvV5Pu0NH37jOTy/x6HJIH5AAMF64XFFySLIM FDa9bro1y38DlMPChTeM8SWND9gSVQC8cm3XCzDfNcN1Z9RVpIDap4+WhsM56s01 V9O73PKWpiu67xiTRKveugoIxLGbLKgKwim2fNxqGpOZWzmqxaRcV4xDs2LjAEhX jL4UqH8QJDObFQH2LTIqF7bwnsfnhhvwohVh5F1qg6yrz3XllQg=8uJ3
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Philip Hands@21:1/5 to Alec Leamas on Wed Jul 3 10:20:01 2024
    Alec Leamas <leamas.alec@gmail.com> writes:

    On 02/07/2024 20:46, Gunnar Wolf wrote:
    Alec Leamas dijo [Tue, Jul 02, 2024 at 01:59:26AM +0200]:
    So, at least three possible paths:

    1. Persuade users to uninstall PPA packages before installing official
    packages and also generation 2 PPA packages with sane versions like 5.10.x >>>
    2. Use versions like 9000.5.10, 9000.5.12. etc.

    3. Use an epoch.

    You can also consider a third possible path: Pick a different package
    name.

    I am unfamiliar with opencpn to be able to suggest an alternative. But
    given opencpn has never been part of Debian, you could just name your
    package "opencpn-deb". Just to be sure users don't get surprised by
    having two different versions of the same package, it can "Conflict:
    opencpn". Then, you get a blank slate from which you can work your
    versioning as you deem adequate.

    It does, yes, introduce some confusion, but I think is the least evil
    option.

    opencpn is part of Debian since many years. However, the major
    distribution is through an Ubuntu PPA, the official Debian package is
    not that visible and of course outdated in Ubuntu.

    opencpn users are counted in at least thousands. We are trying to
    convince the developer community that it's a good idea to use a package created as an official Debian package rather than an auto-generated
    cmake package distributed using the Ubuntu PPA.

    If someone has gone to the effort of configuring a PPA source, it seems slightly abusive to try and override that choice by playing games with versions.

    If you do that, and the user has any problem as a result, then the user
    may be upset enough to "downgrade" to the PPA and pin it, which will
    burn their goodwill towards Debian, and further entrench the problem you
    are trying to fix.

    Alternatively, the PPA maintainer may just adopt the epoch:upstream
    version now that they are aware of the problem, and then the user gets
    to flap back and forth between versions from Debian and the PPA as new
    versions come out and are packaged at differing rates.

    It seems better to take an "If we build it, they will come" approach.
    New installs will likely get the Debian version without ever needing to discover the PPA, and the rumour will spread (assuming the Debian
    package works at least as well) that there's no need to bother with the
    PPA, and then people will do the work to remove the PPA from their
    configs, at a time of their choosing.

    Might it be worth chatting to the PPA maintainer to see it they'd like
    to be included in the effort to maintain the Debian package? They may
    discover that it's less effort for all involved doing it as a team.

    Cheers, Phil.
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmaFB14ACgkQ0EujoAEl 1cAliRAAjCs56x9FTu5kBZu9uRrOcktB5yaj+3yPaob6Ifb3tbl77KDAF2VbeAZ+ fgsCPvOq7V51Ub52pVykW50kXQCdzqUZukywgB843z5ddXEMMCBz069dE2wSuBir /Cz36PRxHNuZGaBpY7AE9J2lrxC6L+vtJ6lbZQpXCNhCjVAcDix1AXNhpKbMbShL tfHRrHgkwRP/Sv7+cfyochJFmWpzhwxwGtjVLQ1y3b12qP9dfHMGsF79c7D9XkVV 9WbiuelRKwE2iq6+UvLcIEkmgNlGIZ0dQ4dfmi6DZZEFqHKs5mJhqeaPO4xwBfF5 BgB9vJB/ruTSdXS5zsoTkUiP0Ei7luH42VY+PLp3K2vH0NDmLcu3PgKzS0A6CU0U M8aQJSleHq6vUAu51hrIYnyFVcndbfzcSg9SR5o/CZwQTrLpYXVKDCTTiE4zY4rY 1CPkFeSGzWee36zmTKi6sIM10CcUFGi/jJGd84ZpSkprgK3o0HwYLOebStDRhvdd JCDN3rEA87CZA3wC/x1nRPihVLszo42qsG0K7a0gQvZJTOsa6w3nwTp/KBlKP2Z2 nBeXZhVelDglVIlhevSQTEUhltjQSHmuCEyEzm55BzQPjzJvuDrDJA1hvI9ILhtQ Ef4vNI5j4I4hg4nXFGdPJnk/MsUybm46KFrx2/b9+khLHv0N3TM=+KIJ
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Andrey Rakhmatullin@21:1/5 to Philip Hands on Wed Jul 3 10:20:01 2024
    On Wed, Jul 03, 2024 at 09:27:03AM +0200, Philip Hands wrote:
    IOhannes m zmölnig (Debian GNU|Linux) <umlaeute@debian.org> writes:

    anyhow here's my 2¢:
    according to you¹, upstream have simply botched their package
    versioning, which i would consider *a bug*.
    bugs cause pain.

    AIUI the botching was done by whoever put the PPA together.

    If that's the same as upstream, fair enough, but it seemed to me (having glanced at the repo) that upstream has been using sane versions
    throughout.

    <83d8755d-5f57-47e1-bda3-5536b7563791@gmail.com> said it's the upstream.



    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmaFCOktFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh MZ0P/04Gi94/WgkGp+FmMj+4Z8E2RUz3YGIiu7krcBQr1r1fVSe1WFNs1juFPx08 WTn9e8ooVKGbp5e1vbIrS1/deUU8O2kinUou/qQ3JqJX2wabDu1DIIQTltpdxtZm k+EnIUq2N1DZvDFu+d7R6NDSpVg8gKIVWrSeBHKPslpg8EBD7VQ+KEz/Z62HwrTm cf26qKwrn43FHjAkVrS4/J0VN7hSZU9Hkdl577JVSyS83BSdJUEET6NQcWcUa9NF ou4kqJW3fqh5a2em8Mon1jWoyNiJtWaMf5JLEt7RO0wz/V0CtCe//gFWzfMVrAWi EDk0bGzTBv8IlTMorAcjf/03G1QlVm0Ia9FqAv8DH2pRMUwcmtmllY65cj7Jn0JV QY72pI/Fu1D3w1HlAhtF+4BMdHf6+3CX8ymZzAeiPhYY/XMyxnRKk9qOK5USaW1r wuEqgikCEI7p78rrw3DfvxCCprXtsHPH7Gw9V7j6rmqSPY64sEqTr8KfJZKQHW1N oA+QdoSpeA5XQfdl9taEnLjNaDRiHCBpAFP+KU6XsO22N9ZL6OjU23Jkq7bvPQJ0 lWH5M6ZJss6vy9Xx9NXenw+8JEzdWM0og1qpkJ+t/9p7ISiTl9wXBbSHO/ww1TXf TrPvaeNS4j3hSjxv3B44bp40p6VfrhUq8DE4x2+slDLu6LYb
    =yzM0
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to All on Wed Jul 3 12:30:01 2024
    hi Alec,

    please stop mailing this thread and just use an epoch.

    Before adding^wintroducing an epoch one should consult debian-devel@l.d.o,
    you have done this, arguments were exchanged and (IMNSHO) no better
    solution was found, so please do what has done to >1000 source packages
    in the archive already, and add an epoch.

    Thanks for caring about free software and it's users.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    "A fundamentalist gender binary was a key feature of Nazi racial politics and
    genocide. (...) It must be said that the reality of transgender identity
    cannot be challenged. Transgender people have existed throughout history." https://www.lemkininstitute.com/statements-new-page/statement-on-the-genocidal-nature-of-the-gender-critical-movement%E2%80%99s-ideology-and-practice

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmaFJjcACgkQCRq4Vgaa qhyjEg/8DzmyIdDOePOvMMx8XqjL0neWlmMRHPZZJNne6Uxg4eYbrnrphta7mrNV De/+W2BCkw3AOIGHZ9o6gm45Ef5D32dKfUGVFt3+eebOXnW1vF01sTOyPv6BWUry qznxb6tWSUBCoqyTP1rMIM3RRbqMA6Tv262a3IIxBBsxjd51vHSIkYYOt/eNTaxu OxfJAiAUHhSUW59Wxe0uE4pXSoe8hGpiffESIz0OrWU6DGVdwR14CY3PTWqrl8Vt vCGhGUBu4lCbfQskWvNIpUdMqwFOrvgcekQoSZukL45B7bsmUt9tldiS51MZBf