Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.java > #11968

Re: List of consultants focusing on Debian packaging for Java?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Am Sonntag, den 06.12.2020, 21:46 +0100 schrieb Antonin Delpeuch (lists):
[...]
> How important is it that all dependencies are packaged independently?
> Butterfly is a framework that has not been maintained for years, and we
> are not aware of any other users beyond OpenRefine. We would love to
> migrate to something else. We are the de facto maintainers of butterfly
> since we use our own fork anyway, so I would argue that it can be
> considered an internal library that is not worth exposing to the outside
> world. This is true for other dependencies in the
> org.openrefine.dependencies namespace. But of course many other
> dependencies listed below are actively maintained and used in other
> projects.

It is quite important in Debian to be able to build dependencies independently
from each other, especially if different upstream projects maintain them. One
or more binary packages are built from one source package. We usually package
only one version of a certain software project and then all other packages in
Debian, which depend on it, must function with it. For Java developers this is
a strange concept because Java is version-centric. For them it is even possible
to depend on multiple versions of the same library in one project.

The reason why Debian is insisting on building independent packages and
packaging only a single version is to avoid code duplication and security
problems across the distribution. If there is an issue it can be fixed in a
single source package and all other dependent packages are protected. It also
makes bootstrapping much easier and in the end it takes less time to maintain
those packages in stable releases. However the initial work can look quite
intimidating. Making different projects work with just a single library version
sometimes requires patches to the source code, something upstream would
hesitate or even refuse to apply. 

Of course there are exceptions. If Butterfly is basically an internal library
of OpenRefine then we could try to bundle them together in one source package.
Ideally the Butterfly source code is included in src:openrefine and Maven would
do the rest. Otherwise a clear separation between Butterfly and OpenRefine
would work as well, it is just one extra source package.

It is also noteworthy that network access is disabled when we build Debian
packages. That means a project can't just simply download dependencies from the
internet. All those dependencies must be available as Debian packages already.
This ensures that everything in Debian can be built from source, even offline. 

Back to linux.debian.maint.java | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

List of consultants focusing on Debian packaging for Java? "Antonin Delpeuch (lists)" <lists@antonin.delpeuch.eu> - 2020-12-04 18:20 +0100
  Re: List of consultants focusing on Debian packaging for Java? Markus Koschany <apo@debian.org> - 2020-12-04 21:10 +0100
    Re: List of consultants focusing on Debian packaging for Java? Sam Kuper <sampablokuper@posteo.net> - 2020-12-05 03:30 +0100
      Re: List of consultants focusing on Debian packaging for Java? "Antonin Delpeuch (lists)" <lists@antonin.delpeuch.eu> - 2020-12-05 19:10 +0100
        Re: List of consultants focusing on Debian packaging for Java? Paul Wise <pabs@debian.org> - 2020-12-06 00:10 +0100
    Re: List of consultants focusing on Debian packaging for Java? Markus Koschany <apo@debian.org> - 2020-12-05 23:10 +0100
      Re: List of consultants focusing on Debian packaging for Java? Emmanuel Bourg <ebourg@apache.org> - 2020-12-06 22:20 +0100
        Re: List of consultants focusing on Debian packaging for Java? Hans-Christoph Steiner <hans@at.or.at> - 2020-12-07 14:30 +0100
          Re: List of consultants focusing on Debian packaging for Java? Sam Kuper <sampablokuper@posteo.net> - 2020-12-07 18:30 +0100
          Re: List of consultants focusing on Debian packaging for Java? Fabrice BAUZAC <noon@mykolab.com> - 2020-12-12 00:50 +0100
        Re: List of consultants focusing on Debian packaging for Java? Emmanuel Bourg <ebourg@apache.org> - 2020-12-07 22:00 +0100
          Re: List of consultants focusing on Debian packaging for Java? Pirate Praveen <praveen@onenetbeyond.org> - 2020-12-08 12:30 +0100
            Re: List of consultants focusing on Debian packaging for Java? Emmanuel Bourg <ebourg@apache.org> - 2020-12-10 23:10 +0100
          Re: List of consultants focusing on Debian packaging for Java? Hans-Christoph Steiner <hans@at.or.at> - 2020-12-08 21:00 +0100
      Re: List of consultants focusing on Debian packaging for Java? Markus Koschany <apo@debian.org> - 2020-12-07 12:50 +0100
        Re: List of consultants focusing on Debian packaging for Java? Thorsten Glaser <t.glaser@tarent.de> - 2020-12-07 15:40 +0100
          Re: List of consultants focusing on Debian packaging for Java? Markus Koschany <apo@debian.org> - 2020-12-07 21:20 +0100
            Re: List of consultants focusing on Debian packaging for Java? Sudip Mukherjee <sudipm.mukherjee@gmail.com> - 2020-12-07 22:00 +0100
          Re: List of consultants focusing on Debian packaging for Java? Emmanuel Bourg <ebourg@apache.org> - 2020-12-07 22:20 +0100
  Re: List of consultants focusing on Debian packaging for Java? Paul Wise <pabs@debian.org> - 2020-12-05 04:40 +0100
    Re: List of consultants focusing on Debian packaging for Java? "Antonin Delpeuch (lists)" <lists@antonin.delpeuch.eu> - 2020-12-05 19:00 +0100

csiph-web