Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.devel > #106923

Re: Should singularity-container make it to next release?

From Nilesh Patra <nilesh@debian.org>
Newsgroups linux.debian.devel, linux.debian.security
Subject Re: Should singularity-container make it to next release?
Date 2023-01-26 10:10 +0100
Message-ID <FS6qB-1fnO-9@gated-at.bofh.it> (permalink)
References (1 earlier) <FLXzI-gFnc-17@gated-at.bofh.it> <FM0nT-gHda-7@gated-at.bofh.it> <FQrSy-aOC-25@gated-at.bofh.it> <FRTD3-16Zh-7@gated-at.bofh.it> <FS6gV-1f4y-3@gated-at.bofh.it>
Organization The Debian Project

Cross-posted to 2 groups.

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

On Thu, Jan 26, 2023 at 09:51:21AM +0100, Paul Gevers wrote:
> On 25-01-2023 20:14, Moritz Muehlenhoff wrote:
> > On Sat, Jan 21, 2023 at 08:34:40PM +0100, Salvatore Bonaccorso wrote:
> > > So in my understanding of the above the situation around singularity-container,
> > > which lead for buster to https://bugs.debian.org/917867 and keeping it out of
> > > the stable release, did not really change in the aspect of beeing able to patch
> > > vulnerabilities to the stable branch once upstream versions moved on, is this
> > > correct interpretation? In context from #917867, it was even in stretch at
> > > first, but needed to be removed after stretch was released in a point release.

I guess something that changed since then is that upstream is aware
about it and can help a bit with backporting. However the onus to
maintain it in stable is still on the maintainer and security@ (to some
extent)
It is bit of a high-effort maintainance (in stable) as far as I can see.

> I have forwarded this message as bug #1029669. Unless we get more confidence
> that it's supportable, let's keep it out of stable. I guess fasttrack [1] is
> currently the best forum to supply singularity-container to our users.

Since I had done quite a bit of work on this, I'm a sad to see this
happen, as fasttrack still has much less visibility / availability than
an official stable release, or even backports.

> [1] https://fasttrack.debian.net/

-- 
Best,
Nilesh

Back to linux.debian.devel | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Re: Should singularity-container make it to next release? Nilesh Patra <nilesh@debian.org> - 2023-01-09 11:30 +0100
  Re: Should singularity-container make it to next release? Shengjing Zhu <zhsj@debian.org> - 2023-01-09 12:50 +0100
    Re: Should singularity-container make it to next release? David Trudgian <dtrudg@sylabs.io> - 2023-01-09 13:30 +0100
  Re: Should singularity-container make it to next release? Andreas Tille <tille@debian.org> - 2023-01-09 14:30 +0100
    Re: Should singularity-container make it to next release? Salvatore Bonaccorso <carnil@debian.org> - 2023-01-21 20:40 +0100
      Re: Should singularity-container make it to next release? Moritz Muehlenhoff <jmm@inutil.org> - 2023-01-25 20:30 +0100
        Re: Should singularity-container make it to next release? Paul Gevers <elbrus@debian.org> - 2023-01-26 10:00 +0100
          Re: Should singularity-container make it to next release? Nilesh Patra <nilesh@debian.org> - 2023-01-26 10:10 +0100
            Re: Should singularity-container make it to next release? Sam Hartman <hartmans@debian.org> - 2023-01-26 16:30 +0100
              Re: Should singularity-container make it to next release? Andreas Tille <tille@debian.org> - 2023-01-26 18:00 +0100
                Re: Should singularity-container make it to next release? Nilesh Patra <nilesh@nileshpatra.info> - 2023-01-26 20:50 +0100

csiph-web