Apologies for the delay in responding to concerns raised by Seth above.

> If the dotnet ecosystem runs like Python, where future versions are guaranteed
> to break existing code, such short lifespans might discourage adoption.

The short lifespan is not an adoption issue for dotNet toolchain. It
already has a very big ecosystem. We are trying to get at least a good
part of that ecosystem to adopt Ubuntu. So we want to ensure that dotNEt
is a first-class citizen toolchain on Ubuntu. A direct consequence of
that is that it will be in main and supported across our longer
enterprise commitment spectrum.

> I don't see the dotnet situation explained on 
> https://documentation.ubuntu.com/project/search/?q=dotnet&check_keywords=yes&area=default
>  
> -- the links on 
> https://bugs.launchpad.net/ubuntu/+source/dotnet6/+bug/2023531/comments/10 
> are dead now and the content didn't appear to survive.

My team will work with the authors to get this figured out and fixed.
Ideally it should have been migrated.

> - To the best of my knowledge, we don't have any local dotnet experts to 
> help with triage, backporting, testing, etc. It seems that we've gotten 
> along alright without so far but as we're only two years after the dotnet6 
> MIR conversation, perhaps that's because we haven't actually been tested yet.

We don't have any local dotNet security experts, true. We will have to
build that skillset. The partner is on a path to help make this triaging
and backporting easier, but of course they have to make it broadly
adaptable, not just for us, hence the delay.

>  Is our toolchains team looking to bring on a dotnet expert? Is the security 
> engineering team looking to bring on a dotnet expert?

I believe we will have to build that dotNet security skillset in both
the teams, but the primary responsibility for security support will
remain with the security engineering team. The toolchain team members
will ofcourse continue to provide help themselves and get help from the
partner team as and when needed.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2134482

Title:
  [MIR] dotnet10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dotnet10/+bug/2134482/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to