I’m not comfortable that Fedora and derivatives give the same stability opportunity as Atomic distros
I’m not comfortable that Fedora and derivatives give the same stability opportunity as Atomic distros
Atomic distros + distrobox/toolbx. Bluefin is a good start for general desktop or Bazzite for gaming (But Bluefin can be more stable, I use it for some games with steam in flatpak). If something breaks roll back to any release in the last 90 days with a single command. Install all of your packages in a distrobox (Arch if you need it). Otherwise in general Fedora is pretty good.
deleted by creator
I don’t understand how “appalled” being strong language is so controversial, maybe everyone here is just a rude little shit.
I would have worded it like so:
Hi, I’m concerned about the BLOBs used in this repo as they are a security risk, making the code less auditable. It looks like we could generate these BLOBs in a github action or something so we can keep the fast build process while making it easier to audit the code. I’m not exactly sure how to go about this myself but I’ve done similar things in other projects, maybe you could point me in the right direction as I am unfamiliar with the ventoy build process? Thanks for the really cool project, and hopefully we can sort this out easily. Looking forward to your response.
I did it with less anger and entitlement and in less words
I’m not saying don’t criticise it. It’s about communication. The language isn’t very good. See my other comments
Is this not rude:
I checked the code and I’m appalled. There are more BLOBs than source code
And this:
I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.
We didn’t like it when MS made an issue trying to direct ffmpeg
They should have opened with a complement or asked for directions if they didn’t know. In this message “Thank You” means fuck all
I didn’t say they’re wrong it’s the way they communicated which I found off-putting and Gordon Ramsay -esque
I mean if I got an issue that sounded that entitled and this is something I do in my spare time, I’d probably ignore it.
My point is they could have worded it better and it might have gotten a response. If you ask kindly about the BLOBs and maybe for some help to push you in the right direction instead of saying “I don’t know”, then it is fair to call the maintainer rude for ignoring it completely.
I haven’t read to far into this but the issue is completely devoid of contributors and maintainers. I find the wording of the issue quite concerning:
Due to the recent XZ-Utils drama I checked the code and I’m appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/cryptsetup https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/Unix/ventoy_unix https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f894657802/DMSETUP
There is no reason to have those not be build in the release process. Of course it’s convenient, they are prebuild, it’s fast and nobody has a problem with it.
Recent events however showed that these BLOBs can contain everything and nothing. The build instructions would not produce the exact same executable for everyone. It’s better to have GitHub build it on-push and use them out of the build cache.
I would do it myself, but unfortunately I’m not familiar enough with the Ventoy build process to actually do it. I understand that removing BLOBs isn’t a priority over new and shiny features. But due to recent events, this should be rethought.
Thank you for reading this and I hope for a productive conversation
This is free software, they don’t owe you anything and this kind of language sounds angry and entitled. You can’t just Gordon Ramsay on someone else’s codebase.
Binary Large OBject
Also GitHub has full-text search and doesn’t filter profanities if you’re looking for material
Developers who are not willing to learn something new and not adapt are the worst
I think you mean people in general. Life is short, try some stuff, take risks
Only takes one person to do it. Especially with Saas there’s only the web platform.
The headline completely misses the point of Free Software as well. It’s about free as in freedom, not beer.
It’s FOSS, people have the right to remove them
Yeah wtf going on there, what’s Germany, Brazil and USA got the rest of us don’t?
The Linux desktop is a very broad concept. The experience gaming on Arch could be a lot harder than gaming on Bazzite, they didn’t specify which distro they were using so you’ve got no idea as to how far in over their head they are
I give a shit
This doesn’t sound like gatekeeping at all
No they probably wanted to hear how great some random Arch derivatives that does that thing 3 people are talking about