Hi Julien,

> That's kind of unreadable.  We like to have the proposed diff directly
> in the p-u bug, along with a description of the changes, what they fix,
> what the risks are.

how does a 48k lines diff as text help you? Its a mix of fixes for about
70 bugs (and 12.2.13 was released already, so >>100 bugs). Of course,
you can read the diff, but you wouldn't be able to review it properly.

> Pointers to more information elsewhere are not bad,
> but they don't replace information that should be in the bug.  In this
> case the upstream changelog doesn't really provide much context on which
> if any of the fixed issues are serious enough for us to want the update
> in stable.


https://docs.ceph.com/docs/master/releases/luminous/#v12-2-11-luminous
has all the info. Including links to th ebugs and the discussion.
Including various CVEs.

It is a stable point release, like it is done for firefox and others. it
is very well tested by upstream and I will definitely not start to pick
single commit - I don't have the infrastructure to run the regression
tests and that is done by upstream in a proper way. And I hope you also
don't want to risk to ship something that slowly degrades stored data.


>> - I've basically imported the changes the Ubuntu people have done in
>>   Ubuntu together with 12.2.12. So I assume this should work well, I did
>>   not yet test it properly as I want to wait for a reply from you. I'll
>>   prepare a backport of 14.2.x as soon as it migrates to testing anyway.
>>
> A reply from us tends to not be forthcoming before the proposed changes
> have been tested, so there's a bit of a chicken and egg issue.

But I'm not wasting an enourmous amount of time if there is a chance
that you say no anyway.


>> - The issue with ceph is that upstream doesn't do QA for 32bit and our
>>   selection of unusual architectures. I don't know if it builds on all
>>   buildds without trying...
>>
> There should be porterboxes available for all our release architectures.

I'll remove 32bit for bullseye, its way too broken to fix it properly
anyway, and not supported by upstream anymore.


It is really sad that Debian was not able to ship ceph in a proper state
until now, the former maintainers had similar discussions with the
release team and its even completely broken on arm64 in stable.


Really sad about this,

Bernd

-- 
 Bernd Zeimetz                            Debian GNU/Linux Developer
 http://bzed.de                                http://www.debian.org
 GPG Fingerprint: ECA1 E3F2 8E11 2432 D485  DD95 EB36 171A 6FF9 435F

Reply via email to