Re: Official ubuntu 20 repository
On Tue, Jun 08, 2021 at 10:50:11AM +0300, Valters Jansons wrote: > > > term "official" maybe treated as "ubuntu official" or "haproxy official". > > > while "ubuntu official" are indeed slow, vbernat PPA is considered as > > > "haproxy official". > > > > I agree, that's what I was about to add as well. In addition, since he's > > also the distro's official maintainer, this should be sufficient to > > reassure internal managers who want to use "official packages": Vincent's > > builds are the only channel providing timely updates directly from the > > distro's maintainer. > > > > There are extremely few packages that have this luxury, so do not hesitate > > and make use of it, like almost everyone else! You'll have less risks of > > mistakes than by doing it yourself, you'll benefit from latest fixes, and > > even possibly from workarounds should any dirty issue be discovered at > > any time. > > It was not intended to be disrespectful. Rest assured that nothing you said was perceived as disrespectful! > I do recognize the important work that is done by ~vbernat, as we also > use the PPA by him. My comment for that reason explicitly stated > "Official Ubuntu repositories" intending to refer to Ubuntu central > ones. I wanted to mention that having a foot in both worlds, you can easily use that as an argument to internally "sell" his packages, as he will be the one providing both the "ubuntu official" ones and the ones with all known bugs fixed. You know, the classical "he knows better than us what he's doing" :-) > Sorry for the potential confusion. Do not worry there was no confusion. We were just trying to provide you with good arguments to convince your boss of the best solution for you. Willy
Re: Official ubuntu 20 repository
On Tue, Jun 8, 2021 at 10:01 AM Willy Tarreau wrote: > On Mon, Jun 07, 2021 at 12:58:22PM +0500, ??? wrote: > > ??, 7 ???. 2021 ?. ? 12:20, Valters Jansons : > > > On Mon, Jun 7, 2021 at 12:34 AM Ismail Azerty > > > wrote: > > > > For some security reasons, our security teams want us to use the > > > > official repository, or recompile the whole project on ubuntu 20. > > > > > > Official Ubuntu repositories are "slow" to update due to LTS policies, > > > ensuring no potentially breaking changes. Focal (20.04) is on 2.0 > > > series, and will not be getting an update to 2.2. > > > > > > > term "official" maybe treated as "ubuntu official" or "haproxy official". > > while "ubuntu official" are indeed slow, vbernat PPA is considered as > > "haproxy official". > > I agree, that's what I was about to add as well. In addition, since he's > also the distro's official maintainer, this should be sufficient to > reassure internal managers who want to use "official packages": Vincent's > builds are the only channel providing timely updates directly from the > distro's maintainer. > > There are extremely few packages that have this luxury, so do not hesitate > and make use of it, like almost everyone else! You'll have less risks of > mistakes than by doing it yourself, you'll benefit from latest fixes, and > even possibly from workarounds should any dirty issue be discovered at > any time. It was not intended to be disrespectful. I do recognize the important work that is done by ~vbernat, as we also use the PPA by him. My comment for that reason explicitly stated "Official Ubuntu repositories" intending to refer to Ubuntu central ones. Sorry for the potential confusion.
Re: Official ubuntu 20 repository
On Mon, Jun 07, 2021 at 12:58:22PM +0500, ??? wrote: > ??, 7 ???. 2021 ?. ? 12:20, Valters Jansons : > > > On Mon, Jun 7, 2021 at 12:34 AM Ismail Azerty > > wrote: > > > For some security reasons, our security teams want us to use the > > official repository, or recompile the whole project on ubuntu 20. > > > > Official Ubuntu repositories are "slow" to update due to LTS policies, > > ensuring no potentially breaking changes. Focal (20.04) is on 2.0 > > series, and will not be getting an update to 2.2. > > > > term "official" maybe treated as "ubuntu official" or "haproxy official". > while "ubuntu official" are indeed slow, vbernat PPA is considered as > "haproxy official". I agree, that's what I was about to add as well. In addition, since he's also the distro's official maintainer, this should be sufficient to reassure internal managers who want to use "official packages": Vincent's builds are the only channel providing timely updates directly from the distro's maintainer. There are extremely few packages that have this luxury, so do not hesitate and make use of it, like almost everyone else! You'll have less risks of mistakes than by doing it yourself, you'll benefit from latest fixes, and even possibly from workarounds should any dirty issue be discovered at any time. Willy
Re: Official ubuntu 20 repository
пн, 7 июн. 2021 г. в 12:20, Valters Jansons : > On Mon, Jun 7, 2021 at 12:34 AM Ismail Azerty > wrote: > > For some security reasons, our security teams want us to use the > official repository, or recompile the whole project on ubuntu 20. > > Official Ubuntu repositories are "slow" to update due to LTS policies, > ensuring no potentially breaking changes. Focal (20.04) is on 2.0 > series, and will not be getting an update to 2.2. > term "official" maybe treated as "ubuntu official" or "haproxy official". while "ubuntu official" are indeed slow, vbernat PPA is considered as "haproxy official". > > If you want the latest version, then that goes against the official > LTS policy, and therefore you need to either use someone else's build > or build locally. > > > Do you have any ansible playbook, or shell script, that we can use ? > > The PPA in question can be seen on > > https://launchpad.net/~vbernat/+archive/ubuntu/haproxy-2.4/+packages?field.series_filter=focal > and in package details you can see the .debian.tar.xz file. This > contains relevant modifications so that standard Debian/Ubuntu build > process is successful - with dpkg tools, and debuild, and the likes. > If you have internal build processes in place for Ubuntu packages, > this should be simple to integrate. > > Replace 2.4 in the link above with whichever series you are interested > in. If you are rebuilding by hand and/or want to have manual review > processes in place, you might want to opt for an older series - say, > 2.2 - which will have less changes over time. > > There are considerations for proper internal distribution, such as > needing your own signing keys internally. However, further explanation > of the Debian/Ubuntu build processes falls outside of the scope of the > mailing list -- there are plenty of resources online for those > particular tasks. > >
Re: Official ubuntu 20 repository
On Mon, Jun 7, 2021 at 12:34 AM Ismail Azerty wrote: > For some security reasons, our security teams want us to use the > official repository, or recompile the whole project on ubuntu 20. Official Ubuntu repositories are "slow" to update due to LTS policies, ensuring no potentially breaking changes. Focal (20.04) is on 2.0 series, and will not be getting an update to 2.2. If you want the latest version, then that goes against the official LTS policy, and therefore you need to either use someone else's build or build locally. > Do you have any ansible playbook, or shell script, that we can use ? The PPA in question can be seen on https://launchpad.net/~vbernat/+archive/ubuntu/haproxy-2.4/+packages?field.series_filter=focal and in package details you can see the .debian.tar.xz file. This contains relevant modifications so that standard Debian/Ubuntu build process is successful - with dpkg tools, and debuild, and the likes. If you have internal build processes in place for Ubuntu packages, this should be simple to integrate. Replace 2.4 in the link above with whichever series you are interested in. If you are rebuilding by hand and/or want to have manual review processes in place, you might want to opt for an older series - say, 2.2 - which will have less changes over time. There are considerations for proper internal distribution, such as needing your own signing keys internally. However, further explanation of the Debian/Ubuntu build processes falls outside of the scope of the mailing list -- there are plenty of resources online for those particular tasks.
Re: Official ubuntu 20 repository
Hello Vincent, Thank you for your great work. For some security reasons, our security teams want us to use the official repository, or recompile the whole project on ubuntu 20. Do you have any ansible playbook, or shell script, that we can use ? Thank you. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Garanti sans virus. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2> Le dim. 6 juin 2021 à 12:41, Vincent Bernat a écrit : > ❦ 6 June 2021 11:54 +01, Ismail Azerty: > > > Is there any official ubuntu 20 repository to install the latest > > version of haproxy ? > > This is semi-official: > https://haproxy.debian.net/#?distribution=Ubuntu&release=focal > -- > Don't comment bad code - rewrite it. > - The Elements of Programming Style (Kernighan & Plauger) >
Re: Official ubuntu 20 repository
❦ 6 June 2021 11:54 +01, Ismail Azerty: > Is there any official ubuntu 20 repository to install the latest > version of haproxy ? This is semi-official: https://haproxy.debian.net/#?distribution=Ubuntu&release=focal -- Don't comment bad code - rewrite it. - The Elements of Programming Style (Kernighan & Plauger)
Official ubuntu 20 repository
Hello, Is there any official ubuntu 20 repository to install the latest version of haproxy ? Regards <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> Garanti sans virus. www.avast.com <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail> <#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
