Discussion:
debian github organization ?
Jérémy Lal
2015-04-16 13:45:34 UTC
Permalink
Hello,

i was wondering if debian had a github account as an organization, where
maintainers could be added.

This is a scary pandora box, though :)

Jérémy.
Jonas Smedegaard
2015-04-16 13:56:54 UTC
Permalink
Quoting Jérémy Lal (2015-04-16 15:45:34)
Post by Jérémy Lal
i was wondering if debian had a github account as an organization,
where maintainers could be added.
Wouldn't surprise me, but I don't know (not interested).
Post by Jérémy Lal
This is a scary pandora box, though :)
If you add that remark to appeace those disliking non-free services: It
doesn't work on me, and I doubt it works on others either.

If you mention because you dislike it yourself: Easier to ignore it!

Enjou the ride...


- Jonas
--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/

[x] quote me freely [ ] ask before reusing [ ] keep private
Dimitri John Ledkov
2015-04-16 15:04:07 UTC
Permalink
I'd rather see gitlab.debian.net :)

Which is similar in spirit to ask.debian.net.

PS. Sorry for top reply from mobile phone.
Post by Jérémy Lal
Hello,
i was wondering if debian had a github account as an organization, where
maintainers could be added.
This is a scary pandora box, though :)
Jérémy.
Alessio Treglia
2015-04-16 15:09:33 UTC
Permalink
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
Good one Dimitri!

I started to use Gitlab for serious work only recently, and well I love it.
So +1 from me, I volunteer to help out with that.

Cheers!
--
Alessio Treglia | www.alessiotreglia.com
Debian Developer | ***@debian.org
Ubuntu Core Developer | ***@ubuntu.com
0416 0004 A827 6E40 BB98 90FB E8A4 8AE5 311D 765A
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAMHuwoycd9s2Gx78oS04u0Mh53fU3ANeV+3V2-***@mail.gmail.com
Dmitry Yu Okunev
2015-04-16 15:15:07 UTC
Permalink
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
I'm not a DD, but I'd suggest to consider "Gogs", too. It's pretty new
and unfinished, but potentially is much better than "GitLab", IMHO.

Best regards, Dmitry.
Alexander Alemayhu
2015-04-16 18:19:26 UTC
Permalink
Post by Dmitry Yu Okunev
I'm not a DD, but I'd suggest to consider "Gogs", too. It's pretty new
and unfinished, but potentially is much better than "GitLab", IMHO.
I'm not a DD either but +1 :) I tried it out awhile back from the try site[0]and
it just has a much better feel to it IMHO. Have you tried installing it?

[0]: https://try.gogs.io/

--
Mit freundlichen Grüßen

Alexander Alemayhu
Dmitry Yu Okunev
2015-04-16 19:05:23 UTC
Permalink
Post by Alexander Alemayhu
Post by Dmitry Yu Okunev
I'm not a DD, but I'd suggest to consider "Gogs", too. It's pretty new
and unfinished, but potentially is much better than "GitLab", IMHO.
I'm not a DD either but +1 :) I tried it out awhile back from the try site[0]and
it just has a much better feel to it IMHO. Have you tried installing it?
Yes, We are trying it in our University (NRNU MEPhI).

Example repository:
https://devel.mephi.ru/dyokunev/tasks

I can say, that "Gogs" is not production ready. A lot of tiny bugs (with
avatars etc), no "Pull request" support and so on. But it developing
very fast.

Gogs is much more GitHub-like than GitLab as for me, so it's much more
usual for GitHub users, IMHO.
Post by Alexander Alemayhu
[0]: https://try.gogs.io/
Best regards, Dmirty.
Mattia Rizzolo
2015-04-16 15:11:29 UTC
Permalink
Post by Jérémy Lal
i was wondering if debian had a github account as an organization, where
maintainers could be added.
there is: https://github.com/debian
Post by Jérémy Lal
This is a scary pandora box, though :)
indeed. it could be nice, but i'd rather avoid it.
Post by Jérémy Lal
I'd rather see gitlab.debian.net :)
yeah, me too. i love it.
i'd help to run it (i don't have so much experience running gitlab
(yes, i run an instance), but i definitely want to join a team setting
it up + keeping it running.
--
regards,
Mattia Rizzolo

GPG Key: 4096R/B9444540 http://goo.gl/I8TMB
more about me: http://mapreri.org
Launchpad User: https://launchpad.net/~mapreri
Ubuntu Wiki page: https://wiki.ubuntu.com/MattiaRizzolo
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAHKYmevzphp5oYoACJnEK-jkYrmihBkaJwBUe-***@mail.gmail.com
mudongliang
2015-04-16 15:22:53 UTC
Permalink
Post by Mattia Rizzolo
Post by Jérémy Lal
i was wondering if debian had a github account as an organization, where
maintainers could be added.
there is: https://github.com/debian
Post by Jérémy Lal
This is a scary pandora box, though :)
indeed. it could be nice, but i'd rather avoid it.
Post by Jérémy Lal
I'd rather see gitlab.debian.net :)
yeah, me too. i love it.
i'd help to run it (i don't have so much experience running gitlab
(yes, i run an instance), but i definitely want to join a team setting
it up + keeping it running.
I like github very much ,too! And linux kernel have a display on github!
I really want to see Debian in the github! If this can be true , I will
follow it quickly!
But I know that debian does not manager source code by git !
How can it??
mudongliang
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/BLU437-***@phx.gbl
Jonathan Dowland
2015-04-17 16:06:11 UTC
Permalink
Post by mudongliang
But I know that debian does not manager source code by git !
How can it??
Some people and teams in Debian do manage their package sources in git; others
don't. I'm not sure what the stats are at the moment for the various
approaches; there might be a UDD script already that generates some. I was
interested in looking at this, once upon a time.

The real question is: what do we gain by hosting such things on github?
The social stuff, pull requests, etc.?
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@chew.redmars.org
João Vanzuita
2015-04-17 18:36:45 UTC
Permalink
That's a very nice starting point!

Maybe it's a good ideia, but I'm still asking myself why.

And wanna ask you guys to answer the Jonathan Downland question bellow.
Post by Jonathan Dowland
The real question is: what do we gain by hosting such things on
github? The social stuff, pull requests, etc.?
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@me.com
Paul Tagliamonte
2015-04-17 19:40:06 UTC
Permalink
Post by João Vanzuita
And wanna ask you guys to answer the Jonathan Downland question bellow.
Post by Jonathan Dowland
The real question is: what do we gain by hosting such things on github?
The social stuff, pull requests, etc.?
Uch, so I resubscribed to -devel -- it'd be nice to email the admins of
the thing you're talking about to, well, ask them.

I've been using it to create repos where I need to communicate with an
upstream on GitHub (so that it's in the Project's namespace, so it's not
locked up under github.com/paultag when I go missing), and I maintain
mirrors of repos on git.debian.org (using a VCS sync script I wrote) to
let new contributors send me patches.

Lowing the barrier to entry, and helping them work with a different
workflow (alioth, etc) once they feel comfortable contributing is much
less intimidating.


So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't think
this should be the Vcs-Git: target. No, I don't think we should endorse
GitHub. Yes, we need free tools. Yes, we should contribute to the F/OSS
community where upstreams are.


I even wrote a GitHub Pull Request -> format-patch series tool, but
never deployed it. One day when I have all the time in the world :)

Cheers,
Paul
--
.''`. Paul Tagliamonte <***@debian.org> | Proud Debian Developer
: :' : 4096R / 8F04 9AD8 2C92 066C 7352 D28A 7B58 5B30 807C 2A87
`. `'` http://people.debian.org/~paultag
`- http://people.debian.org/~paultag/conduct-statement.txt
Ben Finney
2015-04-17 20:03:12 UTC
Permalink
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't think
this should be the Vcs-Git: target. No, I don't think we should
endorse GitHub. Yes, we need free tools. Yes, we should contribute to
the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?

Upstream is using a decentralised VCS, it seems a little condescending
to assume they are incapable of using it.
--
\ “Friendship is born at that moment when one person says to |
`\ another, ‘What! You too? I thought I was the only one!’” —C.S. |
_o__) Lewis |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@benfinney.id.au
Paul Tagliamonte
2015-04-17 22:06:51 UTC
Permalink
Post by Ben Finney
Upstream is using a decentralised VCS, it seems a little condescending
to assume they are incapable of using it.
An entirely fair point, however, I also think it's quite rude to ignore
the workflow they've chosen for contributions -- if they expect PRs, it
might disrupt their workflow and result in a much harder time for them.

Honestly, it might mean they pull it into one of their repos and make a
PR to the canonical repo. Which is just making work for them.


Cheers,
Paul
--
.''`. Paul Tagliamonte <***@debian.org> | Proud Debian Developer
: :' : 4096R / 8F04 9AD8 2C92 066C 7352 D28A 7B58 5B30 807C 2A87
`. `'` http://people.debian.org/~paultag
`- http://people.debian.org/~paultag/conduct-statement.txt
Neil Williams
2015-04-18 07:20:20 UTC
Permalink
On Sat, 18 Apr 2015 06:03:12 +1000
Post by Ben Finney
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't
think this should be the Vcs-Git: target. No, I don't think we
should endorse GitHub. Yes, we need free tools. Yes, we should
contribute to the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?
I don't see the problem when it is used as just one remote amongst many.

People like the github interface. That is unarguable. It does not
matter one jot that some people don't like github for this reason or
that. There are people (quite large numbers of people) who expect to
find stuff on github and who prefer the UI.

Having github as one of my remotes is extremely helpful.

As Paul mentioned, I also prefer to *not* have my github remotes
"locked-away" under a personal moniker as that makes it harder to add
new admins etc. and it is project admins on github which make the whole
point of github actually work.
Post by Ben Finney
Upstream is using a decentralised VCS, it seems a little condescending
to assume they are incapable of using it.
That makes no sense at all. Upstream have their own git source but that
is optimised to their needs (particular code review, access lists which
need *everyone* to have yet another web account etc.)

Nobody wants to have a hundred web accounts for every possible
distributed VCS server. So having a few which act as mirrors for the
plethora of local ones brings advantages that people are actually able
to interact using a common UI.

I have very little on github which is not simply a mirror of the
primary git source used by upstream - but that is precisely the point.
I'm using github (and now github.com/debian) precisely because the code
is in a DVCS because github allows me to offer the one UI that most
contributors seem to prefer at no cost to me, except maybe an extra
"git push" command.

Alioth cannot be another github, random other upstreams cannot be
another github. Sourceforge .... well, just no really.

Github is exactly that - a hub. Use it to push the code out from within
the access constraints of a typical upstream project. It's easy for
others to work with your code that way.
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Robert Collins
2015-04-19 09:12:57 UTC
Permalink
Post by Ben Finney
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't think
this should be the Vcs-Git: target. No, I don't think we should
endorse GitHub. Yes, we need free tools. Yes, we should contribute to
the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?
It doesn't deny it at all. Writing code is inherently distributed -
folk do it on their local machines. Other artifacts of software
development, like this mailing list and the Debian BTS, are inherently
centralised: they are discussions between actors, not local output.
Post by Ben Finney
Upstream is using a decentralised VCS, it seems a little condescending
to assume they are incapable of using it.
As has already been said, noone is making that assumption. For all
intents and purposes every upstream has made a decision about code
review and patch acceptance processes[*] and patches that don't follow
those processes incur a higher cost and increased likely hood of being
ignored. Those processes end up something like this:
- your patch should apply to branch X in repo Y before you send it.
- put your patches in place Z for us to find them [e.g gerrit at url
U, PR's at url U, mailing list x-y-***@example.com]...
- we'll discuss the patch using tool T

Absolutely none of those three things are distributed in nature. They
can be worked with with distributed tooling, but that is beside the
point - to work with upstream U, requires *working with upstream U*,
whatever their tooling is, wherever they are to be found. That is in
fact exactly what upstream means. Of course, some upstreams don't
document the process super-well, and some are more restrictive than
others (e.g. hg won't accept patches in their bug database - patches
have to go to the list). But there is a process, and its tuned for the
bottleneck that that project has.

To pick a specific example, if you want to get a patch into OpenStack
you *must*:
- sign up for the OpenStack gerrit system
- sign a CLA
- put your patch into git and push it into gerrit

Anything else simply won't be accepted.

*: A very very small number say 'any patch anywhere, we'll handle the
rest', or something similar.
--
Robert Collins <***@hp.com>
Distinguished Technologist
HP Converged Cloud
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAJ3HoZ0yS=gTeoUknVPSR9c_tSeKK2RUfYvvcgmqQ74A6e_-***@mail.gmail.com
Neil Williams
2015-04-19 13:38:40 UTC
Permalink
On Sun, 19 Apr 2015 21:12:57 +1200
Post by Robert Collins
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't
think this should be the Vcs-Git: target. No, I don't think we
should endorse GitHub. Yes, we need free tools. Yes, we should
contribute to the F/OSS community where upstreams are.
To pick a specific example, if you want to get a patch into OpenStack
- sign up for the OpenStack gerrit system
- sign a CLA
- put your patch into git and push it into gerrit
Anything else simply won't be accepted.
Indeed, this is precisely why - in Linaro - we chose to push LAVA
upstream repos to github as mirrors just so that contributors did not
need to register for a Linaro account but could use an existing github
account. We've already received useful contributions via github and so
support will continue. Those who choose to or who make regular
contributions are, of course, welcome to register for a Linaro
community account and submit directly to review.linaro.org, the gerrit
instance for Linaro. An account isn't a big deal but as there is a
trivial way of allowing contributions without it, we thought it would
be daft not to use github as an upstream mirror - I don't even need to
explicitly push to it. We were asked to do it by github users, we are
happy to oblige as the setup is trivial and it "just works".

(So I'm in Linaro and Debian organisations now on github. Yay!)
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Steve McIntyre
2015-04-17 23:01:29 UTC
Permalink
Post by Ben Finney
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't think
this should be the Vcs-Git: target. No, I don't think we should
endorse GitHub. Yes, we need free tools. Yes, we should contribute to
the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?
Agreed - it's really annoying to see everybody clamour for a
centralised single point of of failure for git hosting. :-(
--
Steve McIntyre, Cambridge, UK. ***@einval.com
"Every time you use Tcl, God kills a kitten." -- Malcolm Ray
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/E1YjFGL-0003x0-***@mail.einval.com
Russ Allbery
2015-04-17 23:46:14 UTC
Permalink
Post by Steve McIntyre
Post by Ben Finney
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't think
this should be the Vcs-Git: target. No, I don't think we should
endorse GitHub. Yes, we need free tools. Yes, we should contribute to
the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?
Agreed - it's really annoying to see everybody clamour for a
centralised single point of of failure for git hosting. :-(
Funny, this is why I don't get why people are so upset that some use
GitHub. Because of how Git works, the impact of lock-in is pretty much
limited to the non-repository stuff (issues and so forth).

I use GitHub for some things, largely because it makes it easy for people
to contribute patches if they're used to that workflow, and it lets me
take advantage of some services (like continuous integration builds) that
I could but don't feel like building myself. I also push all my
repositories to my own Git server with its own gitweb instance, so if
GitHub disappears tomorrow, I don't lose anything of much note.

Yes, it's a proprietary service and all, but not all proprietary cloud
services are created equal in terms of their lock-in and other drawbacks.
GitHub is pretty light-weight on that front.

That said, something more akin to GitHub (including the nice integration
API and fork/pull model) running on a service like Alioth would be very
neat.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Ben Finney
2015-04-18 01:44:34 UTC
Permalink
Post by Russ Allbery
Post by Steve McIntyre
Agreed - it's really annoying to see everybody clamour for a
centralised single point of of failure for git hosting. :-(
Funny, this is why I don't get why people are so upset that some use
GitHub. Because of how Git works, the impact of lock-in is pretty much
limited to the non-repository stuff (issues and so forth).
Yet it is exactly those lock-in features that is the basis for arguments
to put special effort into the centralised single point of failure.

For example, the centralised proprietary GitHub “pull request” is
Post by Russ Allbery
An entirely fair point, however, I also think it's quite rude to
ignore the workflow they've chosen for contributions -- if they expect
PRs, it might disrupt their workflow and result in a much harder time
for them.
So upstream have chosen a proprietary lock-in service for their
workflow. That should not put any obligation on others to also submit to
proprietary lock-in.
--
\ “I went to a restaurant that serves ‘breakfast at any time’. So |
`\ I ordered French Toast during the Renaissance.” —Steven Wright |
_o__) |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@benfinney.id.au
Russ Allbery
2015-04-18 03:01:51 UTC
Permalink
Post by Ben Finney
Post by Russ Allbery
Funny, this is why I don't get why people are so upset that some use
GitHub. Because of how Git works, the impact of lock-in is pretty much
limited to the non-repository stuff (issues and so forth).
Yet it is exactly those lock-in features that is the basis for arguments
to put special effort into the centralised single point of failure.
For example, the centralised proprietary GitHub “pull request” is
Uh, a pull request isn't something proprietary. It was part of the design
of Git from the beginning and is based on the workflow of the Linux
kernel. What GitHub offers are some nice tools for managing those pull
requests that reduces the friction considerably, just like they offer a
nice web interface for viewing repositories. Those tools are useful, and
I hope they'll be replicated in an open source framework for Git
repository management, but they're not lock-in. You can do pull requests
without GitHub (and in fact I've done a fair bit of that).
Post by Ben Finney
So upstream have chosen a proprietary lock-in service for their
workflow. That should not put any obligation on others to also submit to
proprietary lock-in.
Of course not. You don't have to use anything you don't want to use, and
no one in this thread is advocating otherwise, at least that I've seen.
All that I'd ask is that, if other people want to use GitHub, for you to
not be an ass about it, the same way that we don't lecture people for
using a proprietary editor to write free sofware. Some of us are willing
to reach out to people who are using GitHub and give and take patches from
them in their preferred way, particularly right now when there aren't a
lot of compelling alternatives to point them to. If you aren't, that's
perfectly fine; just please don't get in the way of us who are.

There's a whole spectrum of difference within the project about how
absolute people want to personally be about only using free tools. Some
people are at the end of the spectrum with RMS and are investigating
computers with fully free firmware, and more power to them. Other people
are using non-free software for some things and free software for other
things and are contributing the latter to Debian. And more power to them
as well, since they're helping us build the free software community.

Sometimes I wonder if people think free software is so fragile that if
anyone who works on it ever touches non-free software, everything we built
will crumble. I think our community and ecosystem is a lot more robust
than that.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Ben Finney
2015-04-18 07:55:17 UTC
Permalink
Post by Ben Finney
Yet it is exactly those lock-in features that is the basis for
arguments to put special effort into the centralised single point of
failure.
For example, the centralised proprietary GitHub “pull request” is
Uh, a pull request isn't something proprietary. It was part of the
design of Git from the beginning and is based on the workflow of the
Linux kernel.
The Git pull request (‘git-request-pull(1)’) is not proprietary. I
didn't claim that.

Indeed, Git's ‘request-pull’ works in a federated way, allowing peer
repositories on different hosting services to collaborate without
needing to establish an account on each other's services.

This is why the Linux repository, for example, deliberately opts to keep
using the standard, federated Git ‘request-pull’ feature
<URL:https://github.com/torvalds/linux/pull/17#issuecomment-5654674> and
not the GitHub “pull request” feature.


The GitHub pull request function is *not* compatible with Git's
‘request-pull’. It mangles them on the way in, and it doesn't produce
them going out.

GitHub's pull request feature is proprietary to GitHub, it can only work
between repositories hosted inside the GitHub silo, and any project
using that feature is thereby locking its workflow to the single-vendor
GitHub service.

Git repositories outside GitHub cannot interact with the GitHub pull
request workflow using Git's own features.

(I've done some searching to try to disprove this with recent
information; if this has changed since 2010, I'd like to know
<URL:https://github.com/blog/712-pull-requests-2-0>.)

Emma Jane Hogbin Westby has a useful perspective on this too
<URL:http://developerworkflow.com/resources/evolution-social-coding.html>.
Of course not. You don't have to use anything you don't want to use,
and no one in this thread is advocating otherwise, at least that I've
seen.
If a project uses GitHub pull requests for their workflow, they are
thereby prejudicing their workflow against repositories not hosted on
the proprietary GitHub service.

They have chosen (or have never been aware they made the choice) to make
it much harder to interact with them using the existing, standard,
federated Git ‘request-pull’ feature, instead opting to exclude anyone
who doesn't want an account on a specific vendor's service.

That's not cool, no matter how nice the UI is for the proprietary
feature. That's damaging to a collaborative software community.
All that I'd ask is that, if other people want to use GitHub, for you
to not be an ass about it, the same way that we don't lecture people
for using a proprietary editor to write free sofware.
Sure, so long as their decisions don't hamper anyone's ability to
collaborate with them.

If they use proprietary features of that tool which hampers
collaboration with others in the community, I hope you'll agree that's
something to object to.
Sometimes I wonder if people think free software is so fragile that if
anyone who works on it ever touches non-free software, everything we
built will crumble. I think our community and ecosystem is a lot more
robust than that.
Conversely, I wonder why people are so eager to cede the power of peer
collaboration by setting up single-vendor services as mediators of our
peer relationships. Surely we have seen that fail far too many times to
be led down that path yet again.
--
\ “[…] we don’t understand what we mean when we say that [God] is |
`\ ‘good’, ‘wise’, or ‘intelligent’.” —Karen Armstrong, _The Case |
_o__) For God_, 2009 |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/857ft9rhui.fsf_-***@benfinney.id.au
Neil Williams
2015-04-18 08:12:30 UTC
Permalink
On Sat, 18 Apr 2015 17:55:17 +1000
Post by Ben Finney
GitHub's pull request feature is proprietary to GitHub, it can only
work between repositories hosted inside the GitHub silo, and any
project using that feature is thereby locking its workflow to the
single-vendor GitHub service.
Not true. Simply and completely untrue.

The pull request exists on github, fine. I can either choose to
manually pick that out of the github interface or I can choose to use
my github account to merge that pull request into a local branch. At
that point, I can use all the power of git to do whatever I like with
that, including pushing directly to my own corporate git review
process. I can use precisely the same workflow for *all* contributions,
pull requests or not.

git pull is separate from git push, it's not as if a pull from github
must inevitably be followed by a push to the other remotes. I pull
from github, I rebase onto a local branch, I push the branch to the
review frontend, I update the pull request issue with the results of
the review. How is that a problem?

It's a sight easier than pulling a patch from my email client.
Post by Ben Finney
Git repositories outside GitHub cannot interact with the GitHub pull
request workflow using Git's own features.
Untrue. I use github and git.linaro.org side by side and have applied
github pull requests as reviews on review.linaro.org without
disrupting my workflow and without needing to limiting access to any
of the features of git.
Post by Ben Finney
If a project uses GitHub pull requests for their workflow, they are
thereby prejudicing their workflow against repositories not hosted on
the proprietary GitHub service.
Untrue.
Post by Ben Finney
They have chosen (or have never been aware they made the choice) to
make it much harder to interact with them using the existing,
standard, federated Git ‘request-pull’ feature, instead opting to
exclude anyone who doesn't want an account on a specific vendor's
service.
Sorry, that makes no sense. Working with github as a second remote is
trivial.
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Ben Finney
2015-04-19 09:00:33 UTC
Permalink
Post by Neil Williams
On Sat, 18 Apr 2015 17:55:17 +1000
Post by Ben Finney
GitHub's pull request feature is proprietary to GitHub, it can only
work between repositories hosted inside the GitHub silo, and any
project using that feature is thereby locking its workflow to the
single-vendor GitHub service.
Not true. Simply and completely untrue.
The pull request exists on github, fine.
How can a collaborator Alice, with no GitHub account, get the pull
request?
Post by Neil Williams
I can either choose to manually pick that out of the github interface
I don't know what this means. How does that interact with the repository
a collaborator Alice, with no GitHub account, is using with standard
Git?
Post by Neil Williams
or I can choose to use my github account to merge that pull request
into a local branch.
So this option supports my point that the GitHub pull request is siloed,
and one must have an account with the single vendor in order to access
it.
Post by Neil Williams
Post by Ben Finney
Git repositories outside GitHub cannot interact with the GitHub pull
request workflow using Git's own features.
Untrue. I use github and git.linaro.org side by side and have applied
github pull requests as reviews on review.linaro.org
How does a person Bob, using their GitHub repository, send a pull
request to Carol using only their ‘review.linaro.org’ repository?

Does Carol need a GitHub account and repository hosted at GitHub? If so,
that's the point I'm making: GitHub's pull request can only be received
and handled by another GitHub repository.
Post by Neil Williams
Post by Ben Finney
They have chosen (or have never been aware they made the choice) to
make it much harder to interact with them using the existing,
standard, federated Git ‘request-pull’ feature, instead opting to
exclude anyone who doesn't want an account on a specific vendor's
service.
Sorry, that makes no sense. Working with github as a second remote is
trivial.
How does a collaborator Alice, with no GitHub account, access Bob's
repository on GitHub and use the standard ‘git-request-pull’ to make a
pull request to Bob? How does this interact with the GitHub pull request
feature?

How does Bob make a pull request to Alice, using GitHub's pull request
feature, such that Alice can handle it using standard Git?

Your descriptions so far seem to support the position that Git
‘request-pull’ is equal for all peers, is incompatible with a
workflow based on GitHub pull requests, and that GitHub pull requests
cannot be received and handled using standard Git commands.

My point is to refute the notion that GitHub pull requests are open and
equal for all peer repositories. Please show specifically where I'm
wrong on that.
--
\ “Don't worry about people stealing your ideas. If your ideas |
`\ are any good, you'll have to ram them down people's throats.” |
_o__) —Howard Aiken |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@benfinney.id.au
Robert Collins
2015-04-19 09:28:38 UTC
Permalink
Post by Ben Finney
Post by Neil Williams
On Sat, 18 Apr 2015 17:55:17 +1000
Post by Ben Finney
GitHub's pull request feature is proprietary to GitHub, it can only
work between repositories hosted inside the GitHub silo, and any
project using that feature is thereby locking its workflow to the
single-vendor GitHub service.
Not true. Simply and completely untrue.
The pull request exists on github, fine.
How can a collaborator Alice, with no GitHub account, get the pull
request?
For the metadata:
- Via the web UI or HTTP API.
For the repository:
- via git over https://

[Unless the host organisation has paid for private repos of course...
but thats exactly the same as Debian security embargoed patches: a
collaborator cannot get those patches without an account.]
Post by Ben Finney
Post by Neil Williams
I can either choose to manually pick that out of the github interface
I don't know what this means. How does that interact with the repository
a collaborator Alice, with no GitHub account, is using with standard
Git?
The person that create the PR did so by pushing a git branch to a git
repo. So the interaction is 'its a git remote'.
Post by Ben Finney
Post by Neil Williams
or I can choose to use my github account to merge that pull request
into a local branch.
So this option supports my point that the GitHub pull request is siloed,
and one must have an account with the single vendor in order to access
it.
No it doesn't. The thing you didn't know what it meant, which I've
explained above, contradicts your assertion.
Post by Ben Finney
Post by Neil Williams
Post by Ben Finney
Git repositories outside GitHub cannot interact with the GitHub pull
request workflow using Git's own features.
Untrue. I use github and git.linaro.org side by side and have applied
github pull requests as reviews on review.linaro.org
How does a person Bob, using their GitHub repository, send a pull
request to Carol using only their ‘review.linaro.org’ repository?
review.linaro.org is gerrit. So git push to the magic gerrit repo on
review.linaro.org the branch pulled down from github.
Post by Ben Finney
Does Carol need a GitHub account and repository hosted at GitHub? If so,
that's the point I'm making: GitHub's pull request can only be received
and handled by another GitHub repository.
No. The metadata will remain where it was of course (on github) - its
not part of the git history. And this is exactly the same as for a
patch up in the Debian BTS.
Post by Ben Finney
Post by Neil Williams
Post by Ben Finney
They have chosen (or have never been aware they made the choice) to
make it much harder to interact with them using the existing,
standard, federated Git ‘request-pull’ feature, instead opting to
exclude anyone who doesn't want an account on a specific vendor's
service.
Sorry, that makes no sense. Working with github as a second remote is
trivial.
How does a collaborator Alice, with no GitHub account, access Bob's
repository on GitHub and use the standard ‘git-request-pull’ to make a
pull request to Bob? How does this interact with the GitHub pull request
feature?
I don't know of anyone using git-request-pull. I presume Linux uses
it, but does anyone else?
Post by Ben Finney
How does Bob make a pull request to Alice, using GitHub's pull request
feature, such that Alice can handle it using standard Git?
All PR's can be handled using standard git.
Post by Ben Finney
Your descriptions so far seem to support the position that Git
‘request-pull’ is equal for all peers, is incompatible with a
workflow based on GitHub pull requests, and that GitHub pull requests
cannot be received and handled using standard Git commands.
git request-pull doesn't send anything to anybody: it is simply a
template email specifying where a repository is and what branch to
merge. Thats not a code review system, its *at most* the start of one.
Its also not a standard (unlike git-format-patch [1] which is - its
output is machine readable and intended to be consumed directly). Some
projects would accept git request-pull as a way of submitting a patch
- but only some [specifically those where code review is on a mailing
list && they aren't using http://jk.ozlabs.org/projects/patchwork/ or
similar - or they have one and only one committer and you're talking
directly to them every time].

git request-pull is thus inapplicable to many projects, since it won't
meet their needs. Similar GitHub PR's don't meet all projects needs,
so many projects don't use them.
Post by Ben Finney
My point is to refute the notion that GitHub pull requests are open and
equal for all peer repositories. Please show specifically where I'm
wrong on that.
They are open - documented API, documented schema (we've had this
debate before!), except for private repositories, code stored in bog
standard git repos anyone can access.

So far, you haven't made your case at all AFAICT. Have you used
github? If not you should: the best position to critique a system from
is one of familiarity.

-Rob

1] https://www.kernel.org/pub/software/scm/git/docs/git-format-patch.html
--
Robert Collins <***@hp.com>
Distinguished Technologist
HP Converged Cloud
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAJ3HoZ3S2wDdzxM+qyA5YzAo=***@mail.gmail.com
Vincent Bernat
2015-04-19 13:21:04 UTC
Permalink
Post by Ben Finney
Post by Neil Williams
The pull request exists on github, fine.
How can a collaborator Alice, with no GitHub account, get the pull
request?
Take a random PR:
https://github.com/twbs/bootstrap/pull/16258

Append ".patch" to get the patch:
curl https://github.com/twbs/bootstrap/pull/16258.patch | git am

Or you can also directly pull the URL:
git fetch origin refs/pull/16258/head:pr/16258
git checkout pr/16258

Or as one operation:
git pull https://github.com/twbs/bootstrap refs/pull/16258/head:pr/16258

No GitHub account required.
--
The very ink with which all history is written is merely fluid prejudice.
-- Mark Twain
Neil Williams
2015-04-19 13:28:17 UTC
Permalink
On Sun, 19 Apr 2015 19:00:33 +1000
Post by Ben Finney
Post by Neil Williams
On Sat, 18 Apr 2015 17:55:17 +1000
Post by Ben Finney
GitHub's pull request feature is proprietary to GitHub, it can
only work between repositories hosted inside the GitHub silo, and
any project using that feature is thereby locking its workflow to
the single-vendor GitHub service.
Not true. Simply and completely untrue.
The pull request exists on github, fine.
How can a collaborator Alice, with no GitHub account, get the pull
request?
Public github repositories do not need a github account to clone.

Accounts are only needed for writes and if github is just one of many
remotes, then as long as one person in the team has write access to
each remote that the team supports, then every remote is equal and can
be updated when the team decides to push. Just like every other git
repo out there. Anyone enabling anonymous write to a git repo would be
insane and private git repos are outside the scope of this discussion
by definition.

The rest of this has already been answered by Rob and Vincent.
Post by Ben Finney
Post by Neil Williams
Sorry, that makes no sense. Working with github as a second remote
is trivial.
How does a collaborator Alice, with no GitHub account, access Bob's
repository on GitHub and use the standard ‘git-request-pull’ to make a
pull request to Bob? How does this interact with the GitHub pull
request feature?
TBH I've never used or been asked to even consider using
git-request-pull for any of the free software work I've done on any
project using git.
Post by Ben Finney
Your descriptions so far seem to support the position that Git
‘request-pull’ is equal for all peers, is incompatible with a
workflow based on GitHub pull requests, and that GitHub pull requests
cannot be received and handled using standard Git commands.
git-request-pull appears to be something which a few people are hung-up
on and which others simply don't need to use, but as long as it uses
standard git commands in the same way as any other git remote setup on
any particular git clone, it would be 100% compatible with all
workflows similarly based on standard git operations - explicitly
including github pull requests and gerrit and a raft of other options.

Github pull requests absolutely can be received and handled using
standard git commands and with a (default) public repo, anyone can
access them, no accounts necessary.
Post by Ben Finney
My point is to refute the notion that GitHub pull requests are open
and equal for all peer repositories. Please show specifically where
I'm wrong on that.
You are specifically wrong on everything on that. There is no basis for
your opposition. If git-request-pull has some kind of problem, then I
would suggest that is a bug in git-request-pull because "standard git"
works fine with github and all the other remotes I use, so should
git-request-pull - I've just never needed it.
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Ben Finney
2015-04-19 14:18:47 UTC
Permalink
Post by Neil Williams
On Sun, 19 Apr 2015 19:00:33 +1000
Post by Ben Finney
How can a collaborator Alice, with no GitHub account, get the pull
request?
Public github repositories do not need a github account to clone.
This is quite frustrating. There's some serious equivocating by GitHub
apologists in this discussion:

* Raising the topic of competing repository hosting services, reliably
leads to insistence that GitHub provides special, GitHub-only features
that make it much more (implicitly, better) than a mere Git repo
hosting service.

* Raising the topic of GitHub's features that aren't standard Git
protocol, reliably leads to dismissal of all those proprietary GitHub
features as being irrelevant since of course we can all clone a repo
from the service.

We're told that GitHub has a raft of features that make it superior,
until it's pointed out that those features are GitHub-specific and
incompatible with collaborators from outside; then, conveniently, the
specialness of those features dwindles to insignificance because we can
access the repo's commits.


In this instance, I've been talking about a GitHub proprietary feature,
incompatible with Git: the GitHub pull request. In response, the non
sequitur of “anyone can clone a GitHub repo” is raised as though it were
relevant.

Yes, Alice can clone the repo. So what? That doesn't allow Alice as an
external party to collaborate in the GitHub pull request on Bob's repo.
The pull request remains siloed within GitHub, accesible only via a
GitHub account Alice doesn't have and doesn't want.

Likewise, as an external party Alice can collaborate via ‘git
send-email’ or ‘git request-pull’ on an equal footing with any other
repo (including GitHub repos). But Bob, having chosen GitHub's
proprietary pull requests as an essential part of his workflow, has
thereby chosen to silo his repo such that Alice can't collaborate as a
peer from outside GitHub.
Post by Neil Williams
Post by Ben Finney
How does a collaborator Alice, with no GitHub account, access Bob's
repository on GitHub and use the standard ‘git-request-pull’ to make
a pull request to Bob? How does this interact with the GitHub pull
request feature?
TBH I've never used or been asked to even consider using
git-request-pull for any of the free software work I've done on any
project using git.
Thanks. Everything I've read trying to find a way to make that possible
points to the conclusion it can't be done: Alice can't send a Git pull
request from outside GitHub and have it fit the GitHub pull request
workflow. GitHub's pull request workflow only works for GitHub repos.
Post by Neil Williams
Github pull requests absolutely can be received and handled using
standard git commands and with a (default) public repo, anyone can
access them, no accounts necessary.
As far as I can tell, the only sense that can be true is if you ignore
everything about GitHub pull request that actually makes it a GitHub
pull request (as opposed to just a bunch of commits in a repo).


I don't object to people using tools they find convenient. I object to
those tools having detrimental effects on collaboration, on the
distributed nature of the protocols we use to collaborate.

I object to being told that a service is open when it isn't. I object to
being told features are simultaneously unique to a service and not
unique to that service.
Post by Neil Williams
Have you used github? If not you should: the best position to critique
a system from is one of familiarity.
If I were to critique only the effects GitHub has for the individual who
uses it, that would be a valid point. As it is, I'm criticising the
effects GitHub has on a community *including people who don't use it*.

I object to implications that criticism of GitHub's effects, on
collaboration with peers who don't use GitHub, can be dismissed
precisely because that person doesn't use GitHub.

If a case were to be formed to argue GitHub is a monoculture pressuring
outsiders to conform, that's a good way to do it.
--
\ “The most common way people give up their power is by thinking |
`\ they don't have any.” —Alice Walker |
_o__) |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@benfinney.id.au
Vincent Bernat
2015-04-19 16:22:29 UTC
Permalink
Likewise, as an external party Alice can collaborate via ‘git
send-email’ or ‘git request-pull’ on an equal footing with any other
repo (including GitHub repos). But Bob, having chosen GitHub's
proprietary pull requests as an essential part of his workflow, has
thereby chosen to silo his repo such that Alice can't collaborate as a
peer from outside GitHub.
Well, Bob may be open to receive contributions by email as well. It is
his choice and hardly relevant with the proprietary nature of GitHub. If
Bob chosed its own Gerrit installation, Alice would need to create an
account on this Gerrit system. Maybe Alice would prefer to create
accounts on random small systems or maybe Alice don't like to create
accounts at all.

Many people having a GitHub account, it is easier to contribute to a
project hosted on GitHub. As an open source project, you need to choose
between using only an open infrastructure and missing a few contributors
not willing to create a specific account on this open infrastructure or
choose something like GitHub.
--
Let the machine do the dirty work.
- The Elements of Programming Style (Kernighan & Plauger)
Russ Allbery
2015-04-19 17:27:01 UTC
Permalink
Post by Ben Finney
We're told that GitHub has a raft of features that make it superior,
until it's pointed out that those features are GitHub-specific and
incompatible with collaborators from outside; then, conveniently, the
specialness of those features dwindles to insignificance because we can
access the repo's commits.
It's a UI. The UI is really nice. That's why people use it. But lock-in
implies more than a really nice UI that people use because it's superior.
Lock-in implies something you're trapped into using even when it's
*inferior*, and that's what people are taking issue with.

For better or for ill, people use GitHub because it's *a really good
product*, not because of some sort of nefarious lock-in strategy that
holds people's data captive. The data that's to some extent captive in
GitHub (like issues) are not really a strong point for GitHub. There are
a lot of better issue trackers out there. (Like *cough* Atlassian, which
is a much different conversation.)

The repositories and Git management are the very nice features of GitHub,
and there's nothing there data-wise you can't pretty trivially extract.
It's just a very nice UI.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
James McCoy
2015-04-19 18:13:03 UTC
Permalink
Post by Russ Allbery
The repositories and Git management are the very nice features of GitHub,
and there's nothing there data-wise you can't pretty trivially extract.
It's just a very nice UI.
In fact, joeyh wrote a nice tool[0] that will extract all the data that
can be extracted and put it into your git repository.

[0]: https://joeyh.name/code/github-backup/

Cheers,
--
James
GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <***@debian.org>
Robert Collins
2015-04-19 21:25:37 UTC
Permalink
Post by Ben Finney
Post by Neil Williams
Have you used github? If not you should: the best position to critique
a system from is one of familiarity.
If I were to critique only the effects GitHub has for the individual who
uses it, that would be a valid point. As it is, I'm criticising the
effects GitHub has on a community *including people who don't use it*.
Sure, but...
Post by Ben Finney
I object to implications that criticism of GitHub's effects, on
collaboration with peers who don't use GitHub, can be dismissed
precisely because that person doesn't use GitHub.
For clarity, I made no such suggestion. However your critique has a
number of 'how does X work' questions which most users of Github could
answer. That makes your debate about Github seem uninformed, and
detracts from whatever your actual point is. (Simple by reducing the
signal:noise ratio of the debate).
Post by Ben Finney
If a case were to be formed to argue GitHub is a monoculture pressuring
outsiders to conform, that's a good way to do it.
If anyone had done that [discarded arguments because the person making
them isn't well informed], which they hadn't.

As to your point about community effects, I believe I addressed that
in the other thread when I pointed out that there is TTBOMK -no-
distributed solution that is working well for any community for peer
review - which is the specific feature {PR's} of Github that is under
debate.

If PR's are lock-in, so is the BTS (for Debian), Gerrit (for Gerrit
users), etc etc etc.

The challenge is social, not technical, and assessing it on technical
grounds misses the entire point. Communities have spaces to discuss
things in, and those spaces naturally end up restrictive - at least so
far - in that if you're working outside the space, even with the same
tools, you are not visible and become less relevant.

-Rob
--
Robert Collins <***@hp.com>
Distinguished Technologist
HP Converged Cloud
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAJ3HoZ1mp=hQUCpqEWGDShp-fLEc+***@mail.gmail.com
Ben Finney
2015-04-20 00:19:25 UTC
Permalink
It's a UI. The UI is really nice. That's why people use it. But
lock-in implies more than a really nice UI that people use because
it's superior.
By lock-in I'm implying vendor lock-in: the customer or user is unable
to switch away from the vendor's service without significant switching
costs <URL:https://en.wikipedia.org/wiki/Vendor_lock-in>.
Lock-in implies something you're trapped into using even when it's
*inferior*, and that's what people are taking issue with.
I don't see that implication from vendor lock-in, and propose that
people are reading it in where it's not implied.

The service may be utterly wonderful and still impose significant
switching costs; in such a case its customers are still locked in. The
benefits of the service don't negate the fact of vendor lock-in.

By that sense – the dominant sense, if I understand correctly – GitHub's
pull requests, no matter how wonderful and beneficial, subject a project
that uses them to the same vendor lock-in.
For clarity, I made no such suggestion [that criticisms of GitHub are
invalid from someone who doesn't use it].
Thanks for clarifying.
However your critique has a number of 'how does X work' questions
which most users of Github could answer.
A made informed statements about how GitHub features work. Responses
told me “that's not true”. Rather than coming back with “is too”, I ask
questions to understand what the person is saying.

What I learned is that I was right in my statement, and I was glad to
have asked the questions because that led to more informed discussion.
My apologies that my questions seemed like I was uninformed.
That makes your debate about Github seem uninformed, and detracts from
whatever your actual point is. (Simple by reducing the signal:noise
ratio of the debate).
I've made my point, some in the discussion have understood. Going
further in this thread is unlikely to convince enough people to be worth
the noise.

So I'll just have to wait until more data comes along, and raise the
issues again at that time.
--
\ “Self-respect: The secure feeling that no one, as yet, is |
`\ suspicious.” —Henry L. Mencken |
_o__) |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@benfinney.id.au
Brian May
2015-04-20 00:09:24 UTC
Permalink
Post by Ben Finney
This is quite frustrating. There's some serious equivocating by GitHub
It GitHub better then the open source GitLab?

If the answer is Yes, is there any obstacles to trying to improve GitLab so
it does what we want?

If the answer is No, then why use GitHub? Shouldn't we have our own GitLab
install? Is it just because GitHub is so very popular and everyone knows it?

I have never actually used GitLab, so I can't actually comment on how good
it is...
Ondřej Surý
2015-04-20 13:06:04 UTC
Permalink
Post by Brian May
I have never actually used GitLab, so I can't actually comment on how
good it is...
Perhaps you should, before you start suggesting thing based on
GitLab... ;-)

Anyway - GitLab is quite good these days and it has matured[1], but it's
a typical Ruby project - impossible to package and constant updates. I
finally gave up and I am running our work instance of Ruby projects
inside isolated RVM environments that includes GitLab and Redmine.

Also it still doesn't solve the issue the quarrel here is about - you
still need some account - in this case a local GitLab instance account
(well, Alioth could be used if that's in LDAP) to contribute.

This would make a strong sense only if we were to dump ForceForge and
replace it completely with GitLab (and finally replace all inferior VCSs
that makes my head to hurt with git :), but we all know that's not going
to happen (at least not in foreseeable future), so I personally think
that throwing DSA's resources on maintaining Debian GitLab instance
would be a huge waste.

I strongly think that Debian should own his data, but refusing external
services that could be used to improve Debian and DD/DM lives is not
helpful either. So I support setting up a Debian umbrella organization
on github, so DD/DM have an option to collaborate on packaging using
Github if they want to. Since we don't mandate any SCM for our packaging
work I don't think we should set up blacklist right now. Heck, there are
still packages with no VCS or with patches mangled inside upstream
sources. And in the worst case (GitHub closes without announcement) -
it's still a git (so we all have our local repositories), and we also
still have our source packages, right?

1. That said - it's by no means perfect and bugs still creep in, etc...

O.
--
Ondřej Surý <***@sury.org> Knot DNS (https://www.knot-dns.cz/) – a
high-performance DNS server
Antonio Terceiro
2015-04-20 13:32:59 UTC
Permalink
Post by Ondřej Surý
Post by Brian May
I have never actually used GitLab, so I can't actually comment on how
good it is...
Perhaps you should, before you start suggesting thing based on
GitLab... ;-)
Anyway - GitLab is quite good these days and it has matured[1], but it's
a typical Ruby project - impossible to package and constant updates.
That is the case for any non-trivial, relatively new, free software
project *in any technology* these days.

And yet, we will get there eventually. Diaspora¹ is almost done, and
GitLab will follow at some point.

¹ not the existing diaspora-installer package, an actual diaspora
package with its dependency tree properly packaged.
--
Antonio Terceiro <***@debian.org>
Paul Tagliamonte
2015-04-18 14:04:09 UTC
Permalink
Post by Ben Finney
Post by Russ Allbery
Sometimes I wonder if people think free software is so fragile that if
anyone who works on it ever touches non-free software, everything we
built will crumble. I think our community and ecosystem is a lot more
robust than that.
Conversely, I wonder why people are so eager to cede the power of peer
collaboration by setting up single-vendor services as mediators of our
peer relationships. Surely we have seen that fail far too many times to
be led down that path yet again.
The real conversation here is slightly more subtle, I think.


You, me and the majority of people here on this list *are* willing to
make tradeoffs for our freedom. Our tradeoffs often come at the expense
of ultra-modern hardware, fancy new non-free software and the SaaS of
the month.

We're willing to hack on our stuff to make it work -- to create a free
and open source world. That's why I'm here. That's why I spend hours on
this stuff.


Other people, they made other tradeoffs on their freedom. They're
willing to give up some of that freedom to a company, subject themselves
to a power dynamic wherein they're denied freedom, in a pragmatic
decision to just "not worry about it".

People use GitHub simply because they don't have to host it, they don't
have to maintain it, they don't have to tell contributors how to
contribute. They're using Slack because NTEUs can use it better than
IRC. They're using gmail because mail servers suck to maintain.



Everyone's willing to make tradeoffs on our freedom. It's what tradeoffs
we make, that's the question.
--
.''`. Paul Tagliamonte <***@debian.org> | Proud Debian Developer
: :' : 4096R / 8F04 9AD8 2C92 066C 7352 D28A 7B58 5B30 807C 2A87
`. `'` http://people.debian.org/~paultag
`- http://people.debian.org/~paultag/conduct-statement.txt
Paul Wise
2015-04-19 04:13:32 UTC
Permalink
Post by Paul Tagliamonte
Everyone's willing to make tradeoffs on our freedom. It's what tradeoffs
we make, that's the question.
To those of you who are willing to use github for Debian related
things, it would be great if you could:

Mirror the repositories to alioth so Debian has a backup.

Also accept contributions via email or git request-pull.
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAKTje6FPMHR-n+***@mail.gmail.com
Stefano Zacchiroli
2015-04-19 09:11:18 UTC
Permalink
Post by Paul Wise
To those of you who are willing to use github for Debian related
Mirror the repositories to alioth so Debian has a backup.
I'd rather see it the other way around: advertise the alioth Git repo as
the main one (e.g., in Vcs-* fields), and mirror it to GitHub for people
who want to contribute via GitHub's pull requests.
Post by Paul Wise
Also accept contributions via email or git request-pull.
AOL.
--
Stefano Zacchiroli . . . . . . . ***@upsilon.cc . . . . o . . . o . o
Maître de conférences . . . . . http://upsilon.cc/zack . . . o . . . o o
Former Debian Project Leader . . @zack on identi.ca . . o o o . . . o .
« the first rule of tautology club is the first rule of tautology club »
Russ Allbery
2015-04-19 17:28:36 UTC
Permalink
Post by Stefano Zacchiroli
Post by Paul Wise
To those of you who are willing to use github for Debian related
Mirror the repositories to alioth so Debian has a backup.
I'd rather see it the other way around: advertise the alioth Git repo as
the main one (e.g., in Vcs-* fields), and mirror it to GitHub for people
who want to contribute via GitHub's pull requests.
I mirror the repositories on my own publicly-accessible Git server.
Hopefully that's good enough. :)
Post by Stefano Zacchiroli
Post by Paul Wise
Also accept contributions via email or git request-pull.
AOL.
Oh, certainly. (Well, like Neil, I've never heard of git request-pull
before this thread and have never seen anyone use it, but if someone did,
it would be an interesting learning opportunity.)
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Paul Wise
2015-04-20 01:54:40 UTC
Permalink
Post by Russ Allbery
I mirror the repositories on my own publicly-accessible Git server.
Hopefully that's good enough. :)
If those are Debian related, I'd still suggest mirroring on alioth.
General upstream stuff probably doesn't need to.
Post by Russ Allbery
Post by Paul Wise
Also accept contributions via email or git request-pull.
AOL.
Oh, certainly.
Just an FYI, there are Debian folks who reject patches to Debian
services that are sent via git send-email rather than github pull
requests. Personally I am disappointed by this.
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAKTje6G2kanVwjri9TqBvYb=D+qW+OC-***@mail.gmail.com
Ian Jackson
2015-04-21 12:45:08 UTC
Permalink
Post by Paul Wise
Just an FYI, there are Debian folks who reject patches to Debian
services that are sent via git send-email rather than github pull
requests. Personally I am disappointed by this.
Well, the git-send-email patchbomb workflow is pretty ugly too in many
respects. I can see why some people don't much like it. [1]

Did you offer those Debian folks a git url they could fetch from ?
That significantly reduces the friction (and doesn't fill their
mailbox with a to-them-unwanted patchbomb).

If a Debian team insisted that the only way they would consider my
contribution is if I provided it via github, I would probably ask the
DPL or someone to help mediate.

Ian.

[1] And I speak as someone who does use git's patchbomb workflow an
awful lot. I also have a github account which I use for dealing with
upstreams who don't share my values.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@chiark.greenend.org.uk
Paul Wise
2015-04-21 14:16:54 UTC
Permalink
Post by Ian Jackson
Well, the git-send-email patchbomb workflow is pretty ugly too in many
respects. I can see why some people don't much like it. [1]
I began with git send-email, but the email client of the person in
question did not allow getting emails out in a form suitable for git am
so then I sent one mail with git format-patch output attached, that was
rejected in favour of github pull requests.
Post by Ian Jackson
Did you offer those Debian folks a git url they could fetch from ?
I hadn't yet, that is what I was going to try next. Based on comments
from the last discussion, I expect anything other than a github pull
request will be rejected.
Post by Ian Jackson
If a Debian team insisted that the only way they would consider my
contribution is if I provided it via github, I would probably ask the
DPL or someone to help mediate.
I don't think that would be appropriate and I don't want to antagonise
anyone more than I already did. It might be useful if there were Debian
folks who are github users who were willing to forward branches,
attached patches or patchbombs to github pull requests though.
--
bye,
pabs

https://wiki.debian.org/PaulWise
Neil Williams
2015-04-21 14:38:07 UTC
Permalink
On Tue, 21 Apr 2015 22:16:54 +0800
Post by Paul Wise
Post by Ian Jackson
Well, the git-send-email patchbomb workflow is pretty ugly too in
many respects. I can see why some people don't much like it. [1]
I began with git send-email, but the email client of the person in
question did not allow getting emails out in a form suitable for git
am so then I sent one mail with git format-patch output attached,
that was rejected in favour of github pull requests.
Post by Ian Jackson
Did you offer those Debian folks a git url they could fetch from ?
I hadn't yet, that is what I was going to try next. Based on comments
from the last discussion, I expect anything other than a github pull
request will be rejected.
Post by Ian Jackson
If a Debian team insisted that the only way they would consider my
contribution is if I provided it via github, I would probably ask
the DPL or someone to help mediate.
I don't think that would be appropriate and I don't want to antagonise
anyone more than I already did. It might be useful if there were
Debian folks who are github users who were willing to forward
branches, attached patches or patchbombs to github pull requests
though.
Much as I may be in favour of the github UI for particular reasons, I
can't see why this is a defensible position for a team within Debian -
yet I'm also not sure that I could be that intermediary due to a likely
lack of time. There really isn't a good reason to not have multiple
remotes and pull from whichever the contributor is best able to use.
It makes no sense for a team to actively block the distributed side of
git.
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Tollef Fog Heen
2015-04-23 06:12:41 UTC
Permalink
]] Paul Wise
Post by Paul Wise
Also accept contributions via email or git request-pull.
How do I set up a service to accept git request-pull pull requests into
a workflow? There does not seem to be any protocol associated with it,
so «accept contributions via git request-pull» seems underspecified.
--
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@rahvafeir.err.no
Ian Campbell
2015-04-23 06:36:12 UTC
Permalink
Post by Tollef Fog Heen
]] Paul Wise
Post by Paul Wise
Also accept contributions via email or git request-pull.
How do I set up a service to accept git request-pull pull requests into
a workflow? There does not seem to be any protocol associated with it,
so «accept contributions via git request-pull» seems underspecified.
All "git request-pull" does is output an email template, including a url
+branch and a summary of the changes (subjects, authors, diffstat) found
at that location relative to a baseline (which is also specified).

The layout is consistent so it's not unimaginable to create some service
or script could consume such a mail, pull the changes and register them
into whatever you want.

Also, for convenience, the layout is such that you can type "git pull "
and then cut-and-paste a single line (i.e. triple click, move, middle
paste) from the message into your shell to do the pull.

Ian.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@debian.org
Tollef Fog Heen
2015-04-23 09:31:35 UTC
Permalink
]] Ian Campbell
Post by Ian Campbell
Post by Tollef Fog Heen
]] Paul Wise
Post by Paul Wise
Also accept contributions via email or git request-pull.
How do I set up a service to accept git request-pull pull requests into
a workflow? There does not seem to be any protocol associated with it,
so «accept contributions via git request-pull» seems underspecified.
All "git request-pull" does is output an email template, including a url
+branch and a summary of the changes (subjects, authors, diffstat) found
at that location relative to a baseline (which is also specified).
So there is no way to accept contributions via git request-pull. There
is no transport protocol, unless you say «email», in which case it's
just «please accept contributions via email».
Post by Ian Campbell
The layout is consistent so it's not unimaginable to create some service
or script could consume such a mail, pull the changes and register them
into whatever you want.
Sure, just like you could hook email machinery into github's pull
request model where you have a bot on a mailing list that manages the
pull requests on the user's behalf.
--
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@xoog.err.no
Ian Campbell
2015-04-23 10:12:35 UTC
Permalink
Post by Tollef Fog Heen
]] Ian Campbell
Post by Ian Campbell
Post by Tollef Fog Heen
]] Paul Wise
Post by Paul Wise
Also accept contributions via email or git request-pull.
How do I set up a service to accept git request-pull pull requests into
a workflow? There does not seem to be any protocol associated with it,
so «accept contributions via git request-pull» seems underspecified.
All "git request-pull" does is output an email template, including a url
+branch and a summary of the changes (subjects, authors, diffstat) found
at that location relative to a baseline (which is also specified).
So there is no way to accept contributions via git request-pull. There
is no transport protocol, unless you say «email», in which case it's
just «please accept contributions via email».
Right, except it is waay more convenient for the receiver than the other
email based options (patch bombs and such)
Post by Tollef Fog Heen
Post by Ian Campbell
The layout is consistent so it's not unimaginable to create some service
or script could consume such a mail, pull the changes and register them
into whatever you want.
Sure, just like you could hook email machinery into github's pull
request model where you have a bot on a mailing list that manages the
pull requests on the user's behalf.
Probably, I've no idea, I was just responding to the question about how
git request-pull was used.

Ian.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hellion.org.uk
Ian Jackson
2015-07-10 14:38:38 UTC
Permalink
I realise I'm coming to this conversation late, but:

I have some experience of writing a stunt git push receiver. I would
be willing to write another.

The rough shape would be something like:

* Instead of doing git-request-pull, submitter does git push to some
special URL (perhaps an ssh git url, or perhaps a git:// one).

* Software behind the url stores the incoming branch in an invented
branch name in the master repo, so that `git fetch' can see it.

* Invented branch name (or url or something) is shown to pushing
user, as a reference.

* Automatic email is sent to someone saying "someone pushed this for
review" with branch name.

AFAICT this is more or less like git-request-pull except that:

- The objects are stored on the reviewers'/maintainers' system (so
the submitter does not need to operate or use another git server)

- The submitter interacts by doing `git push', not by sending an
email.

- The maintainers' can see the branches in git on their server.

(It may be that there is already some software that does this. If so
I'm not aware of it.)

Tollef, would that be the kind of thing you would like to use ?
If so I would be happy to discuss a more detailed specification with
you and then implement it.

Ian.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@chiark.greenend.org.uk
Philip Hands
2015-07-10 15:32:01 UTC
Permalink
Post by Ian Jackson
I have some experience of writing a stunt git push receiver. I would
be willing to write another.
* Instead of doing git-request-pull, submitter does git push to some
special URL (perhaps an ssh git url, or perhaps a git:// one).
* Software behind the url stores the incoming branch in an invented
branch name in the master repo, so that `git fetch' can see it.
* Invented branch name (or url or something) is shown to pushing
user, as a reference.
* Automatic email is sent to someone saying "someone pushed this for
review" with branch name.
- The objects are stored on the reviewers'/maintainers' system (so
the submitter does not need to operate or use another git server)
- The submitter interacts by doing `git push', not by sending an
email.
- The maintainers' can see the branches in git on their server.
(It may be that there is already some software that does this. If so
I'm not aware of it.)
Having just been using it for pushing some patches to openstack's gerrit
instance, you seem to be describing 'git-review':

https://github.com/openstack-infra/git-review

https://packages.debian.org/git-review

(I guess it would need generalising a bit to work with things other than
gerrit)

Cheers, Phil.
--
|)| Philip Hands [+44 (0)20 8530 9560] HANDS.COM Ltd.
|-| http://www.hands.com/ http://ftp.uk.debian.org/
|(| Hugo-Klemm-Strasse 34, 21075 Hamburg, GERMANY
Ian Jackson
2015-07-10 15:55:23 UTC
Permalink
Post by Philip Hands
Post by Ian Jackson
(It may be that there is already some software that does this. If so
I'm not aware of it.)
Having just been using it for pushing some patches to openstack's gerrit
I was aware that gerrit has something a bit like this.
Post by Philip Hands
https://github.com/openstack-infra/git-review
https://packages.debian.org/git-review
is a submission tool. It doesn't do the server side.

I don't think you can use it with a simple git server (and you
wouldn't want to grant wide access to push to random branches on your
git server).
Post by Philip Hands
(I guess it would need generalising a bit to work with things other than
gerrit)
The right way to look at this is that perhaps we could make a
different server-side that isn't gerrit.

Ian.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@chiark.greenend.org.uk
Neil Williams
2015-04-18 08:01:19 UTC
Permalink
On Sat, 18 Apr 2015 11:44:34 +1000
Post by Ben Finney
Post by Russ Allbery
Post by Steve McIntyre
Agreed - it's really annoying to see everybody clamour for a
centralised single point of of failure for git hosting. :-(
Funny, this is why I don't get why people are so upset that some use
GitHub. Because of how Git works, the impact of lock-in is pretty
much limited to the non-repository stuff (issues and so forth).
Yet it is exactly those lock-in features that is the basis for
arguments to put special effort into the centralised single point of
failure.
That just ignores the whole point of using github in the first place.
github is *not* lock-in. It is the opposite of lock-in because it
allows me to push free software from a locked-down corporate server to
a mirror that makes it easier for me to accept contributions from
people without those people needing to register with my particular
corporate server.
Post by Ben Finney
For example, the centralised proprietary GitHub “pull request” is
No - it is presented as a method of retrieving useful contributions
which would not have been made via other methods. That contribution can
then be reviewed, pushed to the internal corporate review frontend by
one of the team whilst retaining the author details of the github user
and that user then gets a listing in the corporate git master branch if
the patch is accepted.

The github pull request is just a nice UI over a patch. What on earth
is wrong with that?
Post by Ben Finney
Post by Russ Allbery
An entirely fair point, however, I also think it's quite rude to
ignore the workflow they've chosen for contributions -- if they
expect PRs, it might disrupt their workflow and result in a much
harder time for them.
So upstream have chosen a proprietary lock-in service for their
workflow. That should not put any obligation on others to also submit
to proprietary lock-in.
That ignores the whole point of a DVCS - to have multiple remotes. This
is about extending access, of removing lock-in. Pushing to github
*increases* access, it does not invole lock-in on any level.

I've chosen to offer github pull requests on all my free software
because that allows me to access contributions which would otherwise be
awkward to handle. The BTS, whilst excellent at so many things, is
simply not designed to track git branches. One-off small patches, yes.
Large changes which evolve over a period of time and keep track of
changes elsewhere? umm, no - really, no and neither should it become so.
Github provides that service and the people who are offering this code
want to use it. Why would I refuse to use that service to open up my own
locked-down server without the admin hassle of creating hundreds of new
accounts?

The people are already on github - if I want their contributions, what
is the sense in *not* pushing to github as one of my remotes?
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Brian May
2015-04-19 07:34:15 UTC
Permalink
Post by Neil Williams
The github pull request is just a nice UI over a patch. What on earth
is wrong with that?
Unfortunately, github pull requests have limitations compared with patches,
archived for example on a mailing list. For blog post on this see:


https://julien.danjou.info/blog/2013/rant-about-github-pull-request-workflow-implementation

IIRC, my understanding is that creating a patch request means you can't
ever delete the branch associated with the pull request or you can't see
the patch any more from the pull request. Yes, the patch request remains
important even after the patch has been merged, because it can include
discussions on how a particular set of decisions was made concerning the
change in question.

Also worth noting that, while git is a distributed service, some of the
services github provides are not distributed, most notably the issue
tracker and pull requests (not sure it is possible to disable pull
requests). You can only get these discussions from the central github
server and emails from the server. If github went down you would lose all
this information (yes, you can back it up - does anyone do so?)

(side note: github's wiki is based on git and open source software - gollum
- so can - at least in theory - be distributed. Although last I checked
open source software had features not implemented in github because github
was using an old version of gollum - not sure if that is still the case or
not; at the time it meant my pages didn't work both in guthub and gollum at
the same time)

I am not saying that we should not use github - I use it all the time (with
and without gerrit), however we should be aware of its limitations.
Vincent Bernat
2015-04-19 08:24:44 UTC
Permalink
Post by Brian May
Unfortunately, github pull requests have limitations compared with
patches, archived for example on a mailing list. For blog post on this
https://julien.danjou.info/blog/2013/rant-about-github-pull-request-workflow-implementation
IIRC, my understanding is that creating a patch request means you
can't ever delete the branch associated with the pull request or you
can't see the patch any more from the pull request. Yes, the patch
request remains important even after the patch has been merged,
because it can include discussions on how a particular set of
decisions was made concerning the change in question.
This is not the case anymore. Deleting a branch leaves the pull request
as is. Also, editing commits leave the history of the pull request in
the timeline. Comments on edited commits are also still accessible.
--
Make it clear before you make it faster.
- The Elements of Programming Style (Kernighan & Plauger)
Brian May
2015-04-19 08:55:48 UTC
Permalink
Post by Vincent Bernat
This is not the case anymore. Deleting a branch leaves the pull request
as is. Also, editing commits leave the history of the pull request in
the timeline. Comments on edited commits are also still accessible.
Oh, if that is the case that is really good. I will have to try it out
sometime.

I suspect not many people know about this however (did I miss an
announcement from github on this?), and I suspect it may not be possible to
make changes to the pull request without write access to the branch.

Unlike with gerrit, where I believe is possible to other people to post
improved versions of the patch.
Vincent Bernat
2015-04-19 13:07:59 UTC
Permalink
Post by Brian May
I suspect not many people know about this however (did I miss an
announcement from github on this?), and I suspect it may not be
possible to make changes to the pull request without write access to
the branch.
Yes, that's not possible.
Post by Brian May
Unlike with gerrit, where I believe is possible to other people to
post improved versions of the patch.
People can still clone the branch and do their own PR, referencing the
original one.
--
Use the fundamental control flow constructs.
- The Elements of Programming Style (Kernighan & Plauger)
Olivier Berger
2015-04-21 14:56:07 UTC
Permalink
Post by Russ Allbery
That said, something more akin to GitHub (including the nice integration
API and fork/pull model) running on a service like Alioth would be very
neat.
Feel free to add to :
-> https://fusionforge.org/tracker/index.php?func=detail&aid=741&group_id=6&atid=114

Btw, it may be that FF already supports bits necessary for pull requests
and the tracker item is just outdated ;) Sorry, I'm lagging too much behind.

My 2 cents,

Best regards,
--
Olivier BERGER
http://www-public.telecom-sudparis.eu/~berger_o/ - OpenPGP-Id: 2048R/5819D7E8
Ingenieur Recherche - Dept INF
Institut Mines-Telecom, Telecom SudParis, Evry (France)
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@inf-11879.int-evry.fr
Olivier Berger
2015-04-24 12:11:54 UTC
Permalink
Hi.
Post by Olivier Berger
Post by Russ Allbery
That said, something more akin to GitHub (including the nice integration
API and fork/pull model) running on a service like Alioth would be very
neat.
-> https://fusionforge.org/tracker/index.php?func=detail&aid=741&group_id=6&atid=114
Btw, it may be that FF already supports bits necessary for pull requests
and the tracker item is just outdated ;) Sorry, I'm lagging too much behind.
Having asked upstream during today's FusionForge meeting, it seems no
one is currently working on implementing pull-request + merge workflows
on FusionForge which could be as "convenient" as GitHub's. So the ticket
pointed above is unfortunately up to date.

It is on the roadmap to (discuss how/what, at least) though.

It also seems that some sponsoring of upstream FusionForge development
could help.

If Debian has money to spend, I guess we have good contacts to upstream
developers that may happily accept to job (not speaking of myself, in
case it isn't clear).

Any comments ?

Best regards,
--
Olivier BERGER
http://www-public.telecom-sudparis.eu/~berger_o/ - OpenPGP-Id: 2048R/5819D7E8
Ingenieur Recherche - Dept INF
Institut Mines-Telecom, Telecom SudParis, Evry (France)
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@inf-11879.int-evry.fr
Neil Williams
2015-04-18 07:50:23 UTC
Permalink
On Sat, 18 Apr 2015 00:01:29 +0100
Post by Steve McIntyre
Post by Ben Finney
Post by Paul Tagliamonte
So, yes, it's nonfree. Yes, it's controlled by DDs. No, I don't
think this should be the Vcs-Git: target. No, I don't think we
should endorse GitHub. Yes, we need free tools. Yes, we should
contribute to the F/OSS community where upstreams are.
That last part seems to deny the D in DVCS. Why are we under such
pressure to use one particular centralised service?
We are not - however, there is good reason for everyone to not have to
work with every git service on the net. Many to Many is worth doing,
Every to Every is insane. There has to be somewhere where a number of
"small fry" services push mirrors to make their code accessible to the
many. We know this already from working with so many upstreams for
Debian - some service needs to be a central mirror.

Few projects can work with git entirely using patches on a mailing
list. What works for one (admittedly large) user base does not work for
all - even if it does work for the upstream team, it typically does
*not* work for all potential contributors. Now with an extremely large
project, that can be an advantage by actually acting as a barrier to
entry. For smaller projects, there should be as low a barrier as
possible. The simplest way to that goal is to push to github. I don't
care what anyone thinks of github - that is the simple fact. If you
want to make the barrier to entry of your upstream project as low as
possible, you have to include github. It's actually a nice place to be
and it's trivial to work with as a project admin too. That's why people
use it - it's easy.

By all means lock your own little projects into alioth or personal git
servers but the reason to go to github is to make it easier for you and
the contributors. It makes no sense to ignore that.

git won the DVCS argument a long time ago. github won the DVCS UI
argument a long time ago - it is clearly the one UI that the
largest number of git contributors actually want to use.
Post by Steve McIntyre
Agreed - it's really annoying to see everybody clamour for a
centralised single point of of failure for git hosting. :-(
Sorry, Steve, you've missed the point of github being just a hub of
mirrored code. It actually does that extremely well, no other service
even comes close.

Github is just a centralised User Interface, nothing else. It is *the*
UI that most people seem to want. It avoids users having to have
hundreds of different web accounts and it is a simple hub. It's trivial
to push another copy of the source to github and keep the primary
source within the corporate access control server. That way, everyone
gets a chance to work with you without registering for a corporate web
account and upstream get to include github into their access-controlled
review workflow.

There's no reason for github to be the single remote for anyone with an
alioth account - there is also absolutely no reason for anyone to *not*
have a github remote for each of their upstream projects as one of a
handful of remotes. Why use a DVCS if you are not going to have
multiple remotes?

github.com/debian is a very useful service and I intend to use it
fully. I think a lot more Debian folk and a lot more upstream folk
should too. It's a hub, use it as a hub, as one of your remotes. Why
not use the biggest, easiest hub to reach the biggest number of
potential contributors?

What's not to like?
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Paul Wise
2015-04-18 10:04:40 UTC
Permalink
Post by Neil Williams
git won the DVCS argument a long time ago. github won the DVCS UI
argument a long time ago - it is clearly the one UI that the
largest number of git contributors actually want to use.
Are there any good DFSG-free desktop UIs for git?
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAKTje6G4whNsFObodAH_hm40ONs3ZHT57xGGc-***@mail.gmail.com
Jérémy Lal
2015-04-18 10:07:22 UTC
Permalink
Post by Paul Wise
Post by Neil Williams
git won the DVCS argument a long time ago. github won the DVCS UI
argument a long time ago - it is clearly the one UI that the
largest number of git contributors actually want to use.
Are there any good DFSG-free desktop UIs for git?
gitg is quite good for simple tasks.
Dmitry Smirnov
2015-04-18 10:16:11 UTC
Permalink
Post by Jérémy Lal
Post by Paul Wise
Are there any good DFSG-free desktop UIs for git?
gitg is quite good for simple tasks.
0.2.7 is still good but unfortunately upstream ruined newer versions... :(
--
Cheers,
Dmitry Smirnov.
Jérémy Lal
2015-04-18 10:30:41 UTC
Permalink
Post by Dmitry Smirnov
Post by Jérémy Lal
Post by Paul Wise
Are there any good DFSG-free desktop UIs for git?
gitg is quite good for simple tasks.
0.2.7 is still good but unfortunately upstream ruined newer versions... :(
I guess it's a matter of taste. I like gitg + meld + gedit (with git
plugin) all at ~ 3.14.
Paul Wise
2015-04-19 06:03:55 UTC
Permalink
Post by Jérémy Lal
gitg is quite good for simple tasks.
I'm guessing it isn't good enough to be a replacement for the github web
UI though and that there is no equivalent free software desktop UI.
--
bye,
pabs

https://wiki.debian.org/PaulWise
Neil Williams
2015-04-18 11:09:58 UTC
Permalink
On Sat, 18 Apr 2015 18:04:40 +0800
Post by Paul Wise
Post by Neil Williams
git won the DVCS argument a long time ago. github won the DVCS UI
argument a long time ago - it is clearly the one UI that the
largest number of git contributors actually want to use.
Are there any good DFSG-free desktop UIs for git?
For desktop UI, I find qgit to be usable. However, that's just for
viewing branches, diffs and history - contributions need to come via
something off desktop and qgit does little to help me when reviewing
patches submitted by others beyond what I would see anyway with a
web-based diff frontend or the superb 'meld'. (I don't know where I
would be without conflict resolution support in meld - big *thank you*
to the meld maintainers & upstream - I grew to like meld when I was on
svn, it has become even more important and useful with git).

So I should clarify that, github won the DVCS web UI ... it's
contribution support and repository creation / browsing / searching
support is far better than any of the other tools I have to use
(command-line, desktop or web). Integration with an issue tracker
actually works when most alternatives do not, the wiki is fast, usable
and has a nicer rendering than any other wiki I regularly use. I also
look at github and sites like it when planning how to implement new web
UI features in my own free software. More important than all that, it's
where the users are. It's a circular argument, I know, but I use it
because that's where people expect to find stuff and where people
expect to be able to contribute.

TBH I'm far from worried about a web service like github being
run on non-free software. It's not the sole source for anything I care
about, it provides a useful service to me but if it went away, meh, it
went away - I'd just have to find out where the users went and probably
follow. It's not that github is the best possible answer, it is the
best current answer and has a large, interested, user base. It's
primarily the user base that matters, the UI support is very good but
secondary to me. Ignoring or snubbing github won't affect github or
reduce it's usefulness to others - it will just cut off a possibly
interesting source of new contributors.
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Zlatan Todoric
2015-04-18 12:21:11 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Post by Neil Williams
Post by Paul Wise
Post by Neil Williams
git won the DVCS argument a long time ago. github won the DVCS
UI argument a long time ago - it is clearly the one UI that
the largest number of git contributors actually want to use.
Are there any good DFSG-free desktop UIs for git?
For desktop UI, I find qgit to be usable. However, that's just for
viewing branches, diffs and history - contributions need to come
via something off desktop and qgit does little to help me when
reviewing patches submitted by others beyond what I would see
anyway with a web-based diff frontend or the superb 'meld'. (I
don't know where I would be without conflict resolution support in
meld - big *thank you* to the meld maintainers & upstream - I grew
to like meld when I was on svn, it has become even more important
and useful with git).
So I should clarify that, github won the DVCS web UI ... it's
contribution support and repository creation / browsing /
searching support is far better than any of the other tools I have
to use (command-line, desktop or web). Integration with an issue
tracker actually works when most alternatives do not, the wiki is
fast, usable and has a nicer rendering than any other wiki I
regularly use. I also look at github and sites like it when
planning how to implement new web UI features in my own free
software. More important than all that, it's where the users are.
It's a circular argument, I know, but I use it because that's where
people expect to find stuff and where people expect to be able to
contribute.
TBH I'm far from worried about a web service like github being run
on non-free software. It's not the sole source for anything I care
about, it provides a useful service to me but if it went away, meh,
it went away - I'd just have to find out where the users went and
probably follow. It's not that github is the best possible answer,
it is the best current answer and has a large, interested, user
base. It's primarily the user base that matters, the UI support is
very good but secondary to me. Ignoring or snubbing github won't
affect github or reduce it's usefulness to others - it will just
cut off a possibly interesting source of new contributors.
So we now just need somehow make every DD (or DM or other packaging
contributor) to package one dependency for Gitlab and then make
gitlab.debian.net infrastructure and everyone is happy I guess.

Cheers,

zlatan
- --
Its not the COST, its the VALUE
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=dAUO
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@riseup.net
mudongliang
2015-04-18 04:47:12 UTC
Permalink
Post by Jonathan Dowland
Post by mudongliang
But I know that debian does not manager source code by git !
How can it??
Some people and teams in Debian do manage their package sources in git; others
don't. I'm not sure what the stats are at the moment for the various
approaches; there might be a UDD script already that generates some. I was
interested in looking at this, once upon a time.
The real question is: what do we gain by hosting such things on github?
The social stuff, pull requests, etc.?
I think hosting such things on github will encourage us to give a little
contribution to Debian!
Up to now , I don't know how to contribute to Debian,no matter what
kind!Maybe I do not focus on it!
mudongliang
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/BLU436-***@phx.gbl
Stuart Prescott
2015-04-18 04:56:00 UTC
Permalink
Post by Jonathan Dowland
Some people and teams in Debian do manage their package sources in git;
others don't. I'm not sure what the stats are at the moment for the
various approaches; there might be a UDD script already that generates
some. I was interested in looking at this, once upon a time.
There is indeed a regular check of VCS usage:

http://upsilon.cc/~zack/stuff/vcs-usage/

Which today lists:

arch 7
bzr 199
cvs 11
darcs 832
git 12439
hg 65
mtn 23
svn 3593

Source packages using some VCS: 17169 (75.37%)

So that puts git as the declared VCS for > 50% source packages (and leading
the next most popular by almost a factor of 4).
--
Stuart Prescott http://www.nanonanonano.net/ ***@nanonanonano.net
Debian Developer http://www.debian.org/ ***@debian.org
GPG fingerprint 90E2 D2C1 AD14 6A1B 7EBB 891D BBC1 7EBB 1396 F2F7
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/mgso52$2rc$***@ger.gmane.org
Barry Warsaw
2015-04-21 20:51:01 UTC
Permalink
Post by Stuart Prescott
arch 7
bzr 199
cvs 11
darcs 832
git 12439
hg 65
mtn 23
svn 3593
I hope at some point soon after Jessie is released that the DPMT will
officially switch from svn to git.

Cheers,
-Barry
Neil Williams
2015-04-16 18:31:23 UTC
Permalink
On Thu, 16 Apr 2015 17:11:29 +0200
Post by Mattia Rizzolo
Post by Jérémy Lal
i was wondering if debian had a github account as an organization,
where maintainers could be added.
there is: https://github.com/debian
I've already got a bunch of other stuff on github (some on Alioth too
but github is more reliable, easier to find related stuff and easier
for people outside Debian to fork and use to contribute) as well as
mirrors of my work stuff for Linaro. How do people (DD's) go about
getting invites to the Debian organisation on github? (Ping me off-list
if the potential number of enquirers would be unmanageable.)
--
Neil Williams
=============
http://www.linux.codehelp.co.uk/
Andrew Shadura
2015-04-16 17:19:58 UTC
Permalink
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
Why Gitlab when there's Kallithea? :)
--
Cheers,
Andrew
Barry Warsaw
2015-04-21 20:53:13 UTC
Permalink
Post by Andrew Shadura
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
Why Gitlab when there's Kallithea? :)
Kallithea is under consideration as forge for upstream Python:

http://legacy.python.org/dev/peps/pep-0462/

Cheers,
-Barry
Sven Bartscher
2015-04-16 17:37:55 UTC
Permalink
On Thu, 16 Apr 2015 09:04:07 -0600
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
I don't a reason to have gitlab/github/someother git stuff for debian,
since we already have alioth.
Maybe someone can enlighten me.

Regards
Sven
Russell Stuart
2015-04-17 00:54:43 UTC
Permalink
Post by Sven Bartscher
On Thu, 16 Apr 2015 09:04:07 -0600
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
I don't a reason to have gitlab/github/someother git stuff for debian,
since we already have alioth.
Maybe someone can enlighten me.
Probably not. UI's are a personal thing and if you've looked at the
others and still the UI provided by FusionForge, that's unlikely to
change.

But do acknowledge that makes you unusual. Github has all but
annihilated SourceForge in the hosting market place, and the stand out
change is it's UI. That is in spite of SourceForge's impressive mirror
network and SourceForge being VCS agnostic. So it's not surprising some
DD's want to move away from the FusionForge UI.

I'm on SourceForge now. [0] I'd prefer to be on Debian's
infrastructure of course, but Alioth is so poorly maintained it was
unusable for me [1].

Of the suggestions so far only Kallithea is VCS agnostic, but Kallithea
only supports source code hosting - no Ticketing (eg bug tracking), no
web project web page, no release hosting (binaries). Maybe that's an
advantage for Debian projects because it forces you to use Debian's
existing infrastructure for everything else, but for me it makes it a
no-go.

Gogs looks to be similar, but is unstable. Gitlab is git only and
doesn't support releases.

SourceForge's Apollo is an open source project supporting all those
features plus a heap more, but the UI is not "code centric" like the
others - it feels more like FusionForge. That said, unlike FusionForge
modern work flows (forking, pull requests and the like) - it's just they
aren't a prominent in the UI.



[0] http://sourceforge.net/u/rstuart/

[1] https://lists.debian.org/debian-devel/2014/05/msg00463.html

That triggered this response, but it read like someone in denial
rather than acknowledging the problem:

https://lists.debian.org/debian-devel/2014/06/msg00435.html

Acknowledging the problem is always the first step in fixing it,
and I think it's significant the number of open bugs has gone up by
20% since then.
Iustin Pop
2015-04-17 01:23:05 UTC
Permalink
Post by Russell Stuart
Github has all but
annihilated SourceForge in the hosting market place, and the stand out
change is it's UI. That is in spite of SourceForge's impressive mirror
network and SourceForge being VCS agnostic.
I think the VCS agnosticism is actually detrimental in this context.
It's much easier for the user when every repo is using the same VCS.
And consistency makes it very easy, for example, to refer to commits
across projects, to standardise pull/clone workflows, etc.

regards,
iustin
Russ Allbery
2015-04-17 02:40:21 UTC
Permalink
Post by Iustin Pop
I think the VCS agnosticism is actually detrimental in this context.
It's much easier for the user when every repo is using the same VCS.
And consistency makes it very easy, for example, to refer to commits
across projects, to standardise pull/clone workflows, etc.
+1. VCS agnosticism means you waste a bunch of time making each new
feature work with every supported VCS, which can include trying to
shoehorn pretty foreign workflows into the model of some other VCS.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Russ Allbery
2015-04-17 06:13:01 UTC
Permalink
Thankfully, git is by far the best VCS on the market and the vast
majority of people seem to agree. But imagine the outcry if ten years
ago Sourceforge had said "our VCS is svn and we don't support anything
else".
Er, they did, didn't they? I could have sworn that they only supported
CVS initially, and then only added Subversion, and getting Git support
took forever.

Launchpad, similarly, is probably suffering a lot from the decision to
only support bzr. (It suffers from some other things as well, such as
asset licensing and how difficult it is to stand up your own, but I think
the VCS is a major problem right now.)

So you're of course right -- there's a tradeoff.

However, I still stand by the decision to only support a single VCS, at
least when you start, because you can move a lot faster and implement a
lot more functionality that people care a great deal about. If you can
find the right VCS to use that 90% of people are content with (and I think
Sourceforge started there), I think your resources are much better put
into adding other features than adding more VCS support.

I have no interest in ever using bzr again, but I strongly suspect
Launchpad got a lot farther and does a lot more because the choice was
made to only support bzr. Now, of course, they need to switch to Git, or
at least support it, and that's going to be a ton of work, but I suspect
the order in which they did that made for a better system in the long run
than if they'd tried to support both bzar and Git (and Mercurial and the
other ones that were looking viable) at the start.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Russell Stuart
2015-04-17 07:03:30 UTC
Permalink
First a Mel Cupa. I called the SourceForge system Apollo. It's actual
name is Apache Allura. Brain fart.
Post by Russ Allbery
Er, they did, didn't they? I could have sworn that they only supported
CVS initially, and then only added Subversion, and getting Git support
took forever.
Pretty much. Of course that may have something do with the respective
VCS being born in that order. For comparison in the speed of addition,
GutHub opened for business in April 2008. SourceForge added support for
git in March 2009.
Post by Russ Allbery
However, I still stand by the decision to only support a single VCS, at
least when you start, because you can move a lot faster and implement a
lot more functionality that people care a great deal about.
Woo, slow down there. Here I was thinking the discussion was about
spinning up a server using exist software. Has the discussion moved to
writing our own or even modifying something to suit Debian's needs? If
so, is that justified by history? Was there a period when not only was
Alioth's bug queue serviced, but we actually did some heavy lifting? If
not than any discussion of "adding functionality" is probably fanciful.

In any case using an existing project and contributing any changes
upstream sounds like a much better plan to me - particularly if the
project is packaged in Debian. They means we can just install auto
upgrades to keep it secure.

As for one DVCS to rule the world - that also sounds like a bit of a
stretch. If we are going to do that, can we also settle on a preferred
computer language and force everyone to use a single debian packaging
method? It would make life sooo much easier.
Russ Allbery
2015-04-17 07:14:11 UTC
Permalink
Post by Russell Stuart
Post by Russ Allbery
However, I still stand by the decision to only support a single VCS, at
least when you start, because you can move a lot faster and implement a
lot more functionality that people care a great deal about.
Woo, slow down there. Here I was thinking the discussion was about
spinning up a server using exist software. Has the discussion moved to
writing our own or even modifying something to suit Debian's needs?
No. My comment was in the context of a comparison between Sourceforge and
GitHub, and I was just making the point that I think this was a wise
decision on GitHub's part. It was also in the context of a couple of
other packages that are possible contenders for a revision control
management framework, both of which have made the same choice, also (IMO)
wisely.
Post by Russell Stuart
As for one DVCS to rule the world - that also sounds like a bit of a
stretch.
While we're pondering whether dropping support for older VCSes is a bit of
a stretch, the broader software community is just shrugging and using
GitHub. If the goal is to produce a viable free software alternative to
GitHub, supporting Subversion or bzr or Mercurial would be nowhere on my
list of requirements.

Obviously, supporting a choice of DVCSes would be great, all other things
being equal. But given the resources available for a free software
project, all else is not going to be equal, and there are *lots* of other
features that are a much higher priority for more developers than making
the diminishing minority of people who don't use Git more comfortable.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Robert Collins
2015-04-19 08:58:30 UTC
Permalink
Post by Russ Allbery
Thankfully, git is by far the best VCS on the market and the vast
majority of people seem to agree. But imagine the outcry if ten years
ago Sourceforge had said "our VCS is svn and we don't support anything
else".
Er, they did, didn't they? I could have sworn that they only supported
CVS initially, and then only added Subversion, and getting Git support
took forever.
Launchpad, similarly, is probably suffering a lot from the decision to
only support bzr. (It suffers from some other things as well, such as
asset licensing and how difficult it is to stand up your own, but I think
the VCS is a major problem right now.)
https://dev.launchpad.net/Code/Git - git support is there in nascent
form now and under active development. I think a couple of months will
see it looking pretty solid.
Post by Russ Allbery
So you're of course right -- there's a tradeoff.
However, I still stand by the decision to only support a single VCS, at
least when you start, because you can move a lot faster and implement a
lot more functionality that people care a great deal about. If you can
find the right VCS to use that 90% of people are content with (and I think
Sourceforge started there), I think your resources are much better put
into adding other features than adding more VCS support.
I have no interest in ever using bzr again, but I strongly suspect
Launchpad got a lot farther and does a lot more because the choice was
made to only support bzr. Now, of course, they need to switch to Git, or
at least support it, and that's going to be a ton of work, but I suspect
the order in which they did that made for a better system in the long run
than if they'd tried to support both bzar and Git (and Mercurial and the
other ones that were looking viable) at the start.
When Launchpad started before bzr or git or hg existed - back in 2004
- we started with arch. When we started bzr as a project, (again,
before git or hg :)) we were doing it with lessons-learnt from arch,
and a clear picture about what we'd need from the web site. Our
intention then was to use repository conversions to get content into
Launchpad, rather than being polyglot - because polyglot implies a
raft of tradeoffs.

In hindsight, what that strategy actually did was make high fidelity
incremental imports a key success factor, and that has itself a raft
of tradeoffs - so we spent a huge chunk of effort on that (and its
there and working) - but I think now that taking a federated approach
for the non-hosting needs (read from X systems directly for building
etc) would have been a lot faster to deliver, and would have allowed
more of the VCS work to focus on hosting needs rather than conversion
needs - conversions could be scaled out amongst users wanting to use
the platform, rather than the platforms developers.

OTOH a chunk of the planned features around VCS driven builds were
tightly coupled on understanding branches within the VCS and triggers
on changes etc - but all of those could have been only supplied for
hosted branches, with a low code complexity cost.

Actively supporting hosting of multiple VCSs would have been a huge
distraction in 2005 when the explosion happened. Supporting a VCS for
hosting isn't as simple as just parsing the output of $tool log. Users
need support. They need documentation and assistance. Creating
repositories needs to ask what VCS type to use in addition to any
other questions needed, all such questions tend to decrease the % of
users that get through the become-a-user funnel. You need backup glue
that works with [whatever] mechanism the VCS has to deliver atomic
commits. You need a scale-out strategy that is suitable for the VCS in
question. You need a user model that works for that VCS (and some are
radically different to others) - darcs was very visible at the time we
started, for one of the most different-to-mainline-VCS models.

Lastly at that stage LP was not yet open source, so it simply wasn't
possible for possible users to scratch their own itch and submit
patches - and thus when assessing strategy we assumed we'd have to
write everything, so supporting two systems really need to get twice
as much utility for Ubuntu developers (the primary audience then) -
but Ubuntu had already decided to standardise on a single VCS, as part
of the basic design of the tooling, there was no expectation of
increased utility.

-Rob
Post by Russ Allbery
--
--
--
Robert Collins <***@hp.com>
Distinguished Technologist
HP Converged Cloud
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAJ3HoZ3-9SMcqbvCkdt8bFMD0fiU+***@mail.gmail.com
Barry Warsaw
2015-04-21 21:21:01 UTC
Permalink
Post by Russ Allbery
Launchpad, similarly, is probably suffering a lot from the decision to
only support bzr.
That will probably be solved soon. From watching the commits to Launchpad
trunk, it looks like git support is progressing nicely. I expect after
some reasonable amount of testing it will land in production.

I'm quite looking forward to it, as I think the Launchpad bug tracker is
really nice. I love being able to create multiple bug tasks for a single bug
targeting multiple versions and projects.

Cheers,
-Barry
Sytse Sijbrandij
2015-04-22 01:45:36 UTC
Permalink
Awesome that you are considering to move to Git. GitLab B.V. would be
more than happy to help with gitlab.debian.net and pay for the
hosting. This in collaboration with volunteers such as Praveen and
while ensuring that Debian is fully in control.

Best regards,
Sytse 'Sid' Sijbrandij
CEO GitLab B.V.
Post by Barry Warsaw
Post by Russ Allbery
Launchpad, similarly, is probably suffering a lot from the decision to
only support bzr.
That will probably be solved soon. From watching the commits to Launchpad
trunk, it looks like git support is progressing nicely. I expect after
some reasonable amount of testing it will land in production.
I'm quite looking forward to it, as I think the Launchpad bug tracker is
really nice. I love being able to create multiple bug tasks for a single bug
targeting multiple versions and projects.
Cheers,
-Barry
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAJTzhG-iCNCuPeM7WUHiyVRih+***@mail.gmail.com
Ben Finney
2015-04-22 03:25:42 UTC
Permalink
Post by Sytse Sijbrandij
Awesome that you are considering to move to Git.
Note that this is not “moving to Git”. A great deal of Debian
development is already done using Git, and that's not going to be
directly affected much by a Debian GitLab instance.

Rather, this is the Debian project considering our own instance of a
first-class Git hosting platform.
Post by Sytse Sijbrandij
GitLab B.V. would be more than happy to help with gitlab.debian.net
and pay for the hosting. This in collaboration with volunteers such as
Praveen and while ensuring that Debian is fully in control.
Fantastic, thank you!
Post by Sytse Sijbrandij
It will be an instance of gitlab CE, under MIT license and managed by
Debian. Gitlab folks will just sponsor the hosting.
Much appreciated, thank you to GitLab B.V. for this generous offer.
--
\ “Isn't it enough to see that a garden is beautiful without |
`\ having to believe that there are fairies at the bottom of it |
_o__) too?” —Douglas Adams |
Ben Finney
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/85zj60lu89.fsf_-***@benfinney.id.au
Neil McGovern
2015-04-22 14:08:55 UTC
Permalink
Post by Sytse Sijbrandij
Awesome that you are considering to move to Git.
Note that this is not “moving to Git”. A great deal of Debian
development is already done using Git, and that's not going to be
directly affected much by a Debian GitLab instance.
Rather, this is the Debian project considering our own instance of a
first-class Git hosting platform.
Post by Sytse Sijbrandij
GitLab B.V. would be more than happy to help with gitlab.debian.net
and pay for the hosting. This in collaboration with volunteers such as
Praveen and while ensuring that Debian is fully in control.
Fantastic, thank you!
Post by Sytse Sijbrandij
It will be an instance of gitlab CE, under MIT license and managed by
Debian. Gitlab folks will just sponsor the hosting.
Much appreciated, thank you to GitLab B.V. for this generous offer.
Indeed, thanks!

A quick reminder though - can anyone who wants to push this forward make
sure that DSA are kept in the loop?

Thanks,
Neil
--
Balasankar C
2015-04-17 16:41:36 UTC
Permalink
On a side note to this thread, GitLab packaging for Debian is happening silently (and of course slowly) in the Debian Ruby group. Anyone is welcome to help. :)
Post by Russ Allbery
Post by Iustin Pop
I think the VCS agnosticism is actually detrimental in this context.
It's much easier for the user when every repo is using the same VCS.
And consistency makes it very easy, for example, to refer to commits
across projects, to standardise pull/clone workflows, etc.
+1. VCS agnosticism means you waste a bunch of time making each new
feature work with every supported VCS, which can include trying to
shoehorn pretty foreign workflows into the model of some other VCS.
But it leaves a choice to the author. On a VCS-bound system, all
choice you have is to go to a different place.
Thankfully, git is by far the best VCS on the market and the vast
majority of people seem to agree. But imagine the outcry if ten years
ago Sourceforge had said "our VCS is svn and we don't support anything
else".
Greetings
Marc
--
-------------------------------------- !! No courtesy copies, please !!
-----
Marc Haber | " Questions are the | Mailadresse im
Header
Mannheim, Germany | Beginning of Wisdom " |
http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621
72739834
--
with a subject of "unsubscribe". Trouble? Contact
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
Dimitri John Ledkov
2015-04-17 07:57:01 UTC
Permalink
On 16 Apr 2015 12:05 pm, "Sven Bartscher" <
Post by Sven Bartscher
On Thu, 16 Apr 2015 09:04:07 -0600
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
I don't a reason to have gitlab/github/someother git stuff for debian,
since we already have alioth.
Maybe someone can enlighten me.
In no particular order:
* merge proposals / code review. Mailing lists suck for this. And these
webby tools usually support email based workflow as well (to some degree)
* no approval required to create/fork projects, teams, source trees (there
are namespaces)
* syntax highlighted or rendered code browsing
* familiar user interface / concepts for most developers
* no arbitrary hooks, no direct file access to repositories, no repository
maintainance for repository owner. (These are all good things)
* restful API triggers to update things instead

We are at the tipping point were more of active developers used git and
e.g. github; than svn and source forge monsters.

My first VCS was git & repo.cz later quickly gitorious & github.

Regards,

Dimitri.
Federico Ceratto
2015-04-17 13:13:07 UTC
Permalink
On Thu, Apr 16, 2015 at 6:37 PM, Sven Bartscher
Post by Sven Bartscher
I don't a reason to have gitlab/github/someother git stuff for debian,
since we already have alioth.
Maybe someone can enlighten me.
I'd love to see the Debian infrastructure rely of Free software,
firmware and hardware. However, we are not there yet.

GitHub is widely popular and it has become the go-to place for many
FOSS developers and *newcomers*.
Many people seem to agree that Debian is not as visible and
approachable as other projects.

Unpleasant compromises are inevitable: we are running our
infrastructure on some non-free hardware/firmware,
we host the contrib and non-free archive areas, we fetch and package
tarballs from GitHub.

I would argue that the benefits of being on GitHub in terms of
attracting new users and contributors outweighs the damage[1]

When enabling the non-free archives, users are displayed a warning.
Similarly, any Debian organization/repo on GH could be clearly marked
as a non-official/mirror.


[1] http://mako.cc/writing/hill-free_tools.html
--
Federico
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAG4RQzYQuVDAeoQgLUufy9EmfT6rPhWgk_Zw-***@mail.gmail.com
Bernd Zeimetz
2015-04-17 14:10:53 UTC
Permalink
I'd rather see gitlab.debian.net <http://gitlab.debian.net> :)
or gitblit, which would be easier to integrate into ldap/sso/ssh imho.
--
Bernd Zeimetz Debian GNU/Linux Developer
http://bzed.de http://www.debian.org
GPG Fingerprint: ECA1 E3F2 8E11 2432 D485 DD95 EB36 171A 6FF9 435F
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@bzed.de
Milan P. Stanic
2015-04-17 15:44:49 UTC
Permalink
Post by Bernd Zeimetz
I'd rather see gitlab.debian.net <http://gitlab.debian.net> :)
or gitblit, which would be easier to integrate into ldap/sso/ssh imho.
What about gitolite? It is in Debian, can be used with gitweb and have
access control.

N.B. I'm biased (maybe) because I use gitolite for my company
repositories.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@arvanta.net
Russ Allbery
2015-04-17 17:39:38 UTC
Permalink
Post by Milan P. Stanic
What about gitolite? It is in Debian, can be used with gitweb and have
access control.
N.B. I'm biased (maybe) because I use gitolite for my company
repositories.
gitolite is very nice insofar as it goes. I've used it a lot, and still
use it in various places. But it and GitHub are fairly different things.
It's just the repository management (with a very nice ACL system), and is
the most useful if you're following a hub and spoke model for your
repositories. If you want the whole pull request flow, code review, or
the many nice API integrations with things like continuous build and test
of proposed merges, gitolite doesn't really help.

Another approach is Gerrit, which is very nice if you have an up-front
code review requirement, but which is hard to package given its
substantial Java dependencies. But the world seems to be moving more
towards the GitHub pull and fork model than the Gerrit up-front code
review model.
--
Russ Allbery (***@debian.org) <http://www.eyrie.org/~eagle/>
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@hope.eyrie.org
Pirate Praveen
2015-04-21 14:54:09 UTC
Permalink
I'd rather see gitlab.debian.net <http://gitlab.debian.net> :)
gitlab folks are willing to sponsor gitlab.debian.net I will try to take
that offer forward.
Nicolas Dandrimont
2015-04-21 15:41:56 UTC
Permalink
Hi,
Post by Pirate Praveen
I'd rather see gitlab.debian.net <http://gitlab.debian.net> :)
gitlab folks are willing to sponsor gitlab.debian.net I will try to take
that offer forward.
I sure hope that won't mean getting Debian onboard the proprietary edition of
their software, but rather them helping the proper packaging of their software.

Cheers,
--
Nicolas Dandrimont

BOFH excuse #82:
Yeah, yo mama dresses you funny and you need a mouse to delete files.
Stefano Zacchiroli
2015-04-21 16:54:33 UTC
Permalink
Post by Nicolas Dandrimont
I sure hope that won't mean getting Debian onboard the proprietary
edition of their software, but rather them helping the proper
packaging of their software.
+1

And, besides, we should have by now all learned that 3rd party hosting
is not a strategically smart move, with all the forges closing down
these days.

If anything, we should run our own GitLab (or Kallithea, FWIW).

Cheers.
--
Stefano Zacchiroli . . . . . . . ***@upsilon.cc . . . . o . . . o . o
Maître de conférences . . . . . http://upsilon.cc/zack . . . o . . . o o
Former Debian Project Leader . . @zack on identi.ca . . o o o . . . o .
« the first rule of tautology club is the first rule of tautology club »
Pirate Praveen
2015-04-22 03:19:02 UTC
Permalink
It will be an instance of gitlab CE, under MIT license and managed by Debian. Gitlab folks will just sponsor the hosting.
Post by Nicolas Dandrimont
Hi,
that offer forward.> I sure hope that won't mean getting Debian onboard the proprietary edition of
their software, but rather them helping the proper packaging of their software.
Cheers,> --
Nicolas Dandrimont
Yeah, yo mama dresses you funny and you need a mouse to delete files.
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@mozgaia
Barry Warsaw
2015-04-21 20:23:02 UTC
Permalink
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
+1

I've started moving my personal projects to gitlab and like it a lot.

Cheers,
-Barry
Paul Wise
2015-04-22 02:40:39 UTC
Permalink
Post by Barry Warsaw
Post by Dimitri John Ledkov
I'd rather see gitlab.debian.net :)
+1
I've started moving my personal projects to gitlab and like it a lot.
I don't like it due to the JavaScript requirement, many things just
give 500 Internal Server Error unless you have JS turned on.
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/CAKTje6Gua+1HDrjy8fuV6Se3hW+tPhFos_26Jfv1t3i29=***@mail.gmail.com
Barry Warsaw
2015-04-22 02:47:13 UTC
Permalink
Post by Paul Wise
I don't like it due to the JavaScript requirement, many things just
give 500 Internal Server Error unless you have JS turned on.
Can you navigate github without JS?

Cheers,
-Barry
Paul Wise
2015-04-22 03:01:41 UTC
Permalink
Post by Barry Warsaw
Can you navigate github without JS?
Seems to work fairly well, certainly it is robust enough to not have
500 Internal Server Errors.
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@mail.gmail.com
Barry Warsaw
2015-04-22 21:51:49 UTC
Permalink
Post by Paul Wise
Seems to work fairly well, certainly it is robust enough to not have
500 Internal Server Errors.
File a bug? :)

Cheers,
-Barry
Paul Wise
2015-04-16 16:32:33 UTC
Permalink
Post by Jérémy Lal
i was wondering if debian had a github account as an organization, where
maintainers could be added.
It would probably better to use free tools instead?

http://mako.cc/writing/hill-free_tools.html
--
bye,
pabs

https://wiki.debian.org/PaulWise
--
To UNSUBSCRIBE, email to debian-devel-***@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact ***@lists.debian.org
Archive: https://lists.debian.org/***@mail.gmail.com
Loading...