Processed: Re: Bug#797135: gnome-software downloads updates automatically by default

2015-09-04 Thread Debian Bug Tracking System
Processing control commands:

> severity 797135 important
Bug #797135 [src:gnome-software] gnome-software downloads updates automatically 
by default
Severity set to 'important' from 'critical'

-- 
797135: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797135
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#797135: gnome-software downloads updates automatically by default

2015-09-04 Thread Matthias Klumpp
Control: severity 797135 important

Reducing severity - this issue is not making the package or other system
components unusable, and it is also not making the package unfit for
release.
So, an "important" priority is more justified for this.


Bug#797135: gnome-software downloads updates automatically by default

2015-08-28 Thread Mike Miller
On Fri, Aug 28, 2015 at 06:13:18 +0200, Michael Meskes wrote:
 Once installed the software downloads updates and makes the system do an
 uograde automatically without even asking the user for confirmation once.

It *downloads* updates automatically but does not install them until the
user does something. The *something* may be clicking a button in the
Software application that says “Restart  Install”, or it may be
rebooting the system where a checkbox is shown asking the user whether
to “Install pending software updates” or not.

 should be a very big warning to tell people, but the package description not
 even gives a hint.

It may be worth adding something to the package description or
README.Debian that the package also runs as a background service to
automatically stage system updates.

Worth mentioning #797138, which is the cause of the aforementioned
checkbox being checked by default rather than unchecked. When this is
fixed, gnome-software will only download updates in the background but
never apply them without the user actively clicking a button or checking
a checkbox to do so.

I think critical is overstating a bit.

thanks,

-- 
mike



Bug#797135: gnome-software downloads updates automatically by default

2015-08-28 Thread Michael Meskes
 Worth mentioning #797138, which is the cause of the aforementioned
 checkbox being checked by default rather than unchecked. When this is
 fixed, gnome-software will only download updates in the background but
 never apply them without the user actively clicking a button or checking
 a checkbox to do so.
 
 I think critical is overstating a bit.

I beg to disagree. Yes, it's rather unlikely a stable system gets
destroyed the way a sid one does. However, even sid shouldn't carry this
undocumented and unnecessary risk. But, and that's the main reason for
making the bug critical, the system will download potential huge amounts
of data *without* the user even knowing. Now imagine you're paying by
the MB, that can create a lot of unexpected costs.

Michael
-- 
Michael Meskes
Michael at Fam-Meskes dot De, Michael at Meskes dot (De|Com|Net|Org)
Meskes at (Debian|Postgresql) dot Org
Jabber: michael.meskes at gmail dot com
VfL Borussia! Força Barça! Go SF 49ers! Use Debian GNU/Linux, PostgreSQL



Bug#797135: gnome-software downloads updates automatically by default

2015-08-28 Thread Steve McIntyre
Matthias Klump wrote:
Hi!
I am inclined to demote the priority of this issue to important, because:

1) The automatic download will not happen unless there is a WiFi connection
- downloading over potentially expensive connections does not happen.

U - how does the availability of WiFi tell you anything about how
expensive the connection is?

2) It does not beak the system on stable machines. It might do so on
unstable systems, if the user wasn't careful enough to not install updates
automatically. But that's something we expect users of unstable/testing
to care about, they are experienced users afterall.

3) For users of stable systems, who expect their system to just do the
updates, downloading them and making them available is a very nice service,
and we shouldn't make it very hard to enable it or add additional steps for
that.

However, I would agree that an easy and discoverable way to turn off
automatic downloads of packages should be provided.
I can't find one at time, which is not fiddling with dconf-editor.

And what about the project-wide discussion before enabling such a
broken mis-feature in the first place?

We already have a packaging system that works for upgrades in place
without needing reboots like this. I strongly object to this kind of
crap being added to Debian for the sake of certain broken upstream
software. This is making things materially worse for our users.

-- 
Steve McIntyre, Cambridge, UK.st...@einval.com
Further comment on how I feel about IBM will appear once I've worked out
 whether they're being malicious or incompetent. Capital letters are forecast.
 Matthew Garrett, http://www.livejournal.com/users/mjg59/30675.html



Bug#797135: gnome-software downloads updates automatically by default

2015-08-28 Thread Matthias Klumpp
Hi!
I am inclined to demote the priority of this issue to important, because:

1) The automatic download will not happen unless there is a WiFi connection
- downloading over potentially expensive connections does not happen.

2) It does not beak the system on stable machines. It might do so on
unstable systems, if the user wasn't careful enough to not install updates
automatically. But that's something we expect users of unstable/testing
to care about, they are experienced users afterall.

3) For users of stable systems, who expect their system to just do the
updates, downloading them and making them available is a very nice service,
and we shouldn't make it very hard to enable it or add additional steps for
that.

However, I would agree that an easy and discoverable way to turn off
automatic downloads of packages should be provided.
I can't find one at time, which is not fiddling with dconf-editor.

Cheers,
Matthias


Bug#797135: gnome-software downloads updates automatically by default

2015-08-28 Thread Matthias Klumpp
2015-08-28 18:30 GMT+02:00 Steve McIntyre st...@einval.com:

 Matthias Klump wrote:
 Hi!
 I am inclined to demote the priority of this issue to important,
 because:
 
 1) The automatic download will not happen unless there is a WiFi
 connection
 - downloading over potentially expensive connections does not happen.

 U - how does the availability of WiFi tell you anything about how
 expensive the connection is?


Right, that's why I think this option should be exposed in the UI
somewhere, and be advertised there.
GS uses idle bandwidth to download stuff, but depending on what someone
does on the system, even that could be an issue.


2) It does not beak the system on stable machines. It might do so on
 unstable systems, if the user wasn't careful enough to not install updates
 automatically. But that's something we expect users of unstable/testing
 to care about, they are experienced users afterall.
 
 3) For users of stable systems, who expect their system to just do the
 updates, downloading them and making them available is a very nice
 service,
 and we shouldn't make it very hard to enable it or add additional steps
 for
 that.
 
 However, I would agree that an easy and discoverable way to turn off
 automatic downloads of packages should be provided.
 I can't find one at time, which is not fiddling with dconf-editor.

 And what about the project-wide discussion before enabling such a
 broken mis-feature in the first place?


We did not enable anything - we just provide GNOME-Software, which only has
these options. I talked to upstream if a patch to offer online-updates in
GS alternatively would be accepted. Apparently, online-update behavior
isn't wanted by the GNOME design team (or adding an option for that). But
even if it was, someone would still need to write that patch.

If you don't want this, uninstall gnome-software and install
gnome-packagekit instead, which rpovides an online-update feature.


We already have a packaging system that works for upgrades in place
 without needing reboots like this. I strongly object to this kind of
 crap being added to Debian for the sake of certain broken upstream
 software. This is making things materially worse for our users.


I highly recommend reading
http://neugierig.org/software/chromium/notes/2011/08/zygote.html before
saying upstream software is broken.
I agree though that the reboot-for-every-update approach is merely a
workaround for the real issue, and it's one I don't particularly like.
Upstream has decided to go down this route though, so we should make the
stuff working until a better solution appears.

In any case, talk to upstream or provide a patch for this, as this is not a
feature which can be easily switched off, since it's an integral
gnome-software design decision.
(The download-in-background thing is much easier to solve, I can talk to
upstream about that later)

-- 
Debian Developer | Freedesktop-Developer
I welcome VSRE emails. See http://vsre.info/


Bug#797135: gnome-software downloads updates automatically by default

2015-08-27 Thread Michael Meskes
Source: gnome-software
Severity: critical

Once installed the software downloads updates and makes the system do an
uograde automatically without even asking the user for confirmation once. The
default should be disabled and nor enabled or, at the very least, there
should be a very big warning to tell people, but the package description not
even gives a hint.

This is a critical bug because a) it may create a lot of costs for people who
have to pay by traffic and b) might completely destroy systems. Please refer
to the whole thread on -devel for details and in particular to
https://lists.debian.org/debian-devel/2015/08/msg00597.html

Since we're not exactly sure that this package is the (sole) cause please
help investigate and, if needed, move to whichever package is the culprit.

Thanks.

Michael
-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.1.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)