https://labs.parabola.nu/https://labs.parabola.nu/favicon.ico?15367742552015-06-08T21:14:28ZParabola Issue TrackerServers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=59382015-06-08T21:14:28ZAnonymous
<ul></ul><p>Add Parabola User Repo [PUR - like "https://pur.parabola.nu/"] with Git-based platform like AUR4</p>
<p><a class="external" href="https://aur.archlinux.org/">https://aur.archlinux.org/</a><br /><a class="external" href="https://aur4.archlinux.org/">https://aur4.archlinux.org/</a><br /><a class="external" href="https://wiki.archlinux.org/index.php/Arch_User_Repository#AUR_4">https://wiki.archlinux.org/index.php/Arch_User_Repository#AUR_4</a></p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=59442015-06-11T09:19:51ZAnonymous
<ul><li><strong>Assignee</strong> changed from <i>fauno</i> to <i>lukeshu</i></li></ul> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=59792015-06-17T02:39:44ZAnonymous
<ul><li><strong>Priority</strong> changed from <i>feature</i> to <i>wish</i></li></ul> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=60222015-07-21T01:53:08Zlukeshulukeshu@parabola.nu
<ul></ul><p>I don't believe I've said this to anyone, but I decided it a while ago: I've given myself the deadline for this of August 8th.</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=60562015-08-07T03:18:48Zlukeshulukeshu@parabola.nu
<ul></ul><p>Yeah, it's not going to be ready by Saturday. I don't have work next week, so it should be done quickly though.</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=65202016-02-09T11:31:38Zalfplayeralfplayer@mailoo.org
<ul><li><strong>Status</strong> changed from <i>open</i> to <i>fixed</i></li></ul><p>lukeshu announced it's up about two months ago: <a class="external" href="https://lists.parabola.nu/pipermail/dev/2015-November/003551.html">https://lists.parabola.nu/pipermail/dev/2015-November/003551.html</a></p>
<p><a class="external" href="https://pur.parabola.nu/">https://pur.parabola.nu/</a></p>
<p>Bugs about PUR can be filed in the project Servers.</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=121872019-05-20T12:06:07Ztheova
<ul></ul><p>What is the state about this issue?</p>
<p>I would like to see a <em>PUR</em> as an addition to Parabola.</p>
<p>I'm wlling to get involved into this project. I have no experiences with servers/websites yet, but I could read into it.<br />What I definitely would be motivated to do is writing articles, testing and/or assisting as an moderator</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=121992019-05-20T18:25:35Zfreemor
<ul></ul><p>I believe the idea for this was dropped as trying to police it for freedom violations would be insane. We have PCR. Feel free to make a packaging request if there is something that is Libre over in AUR that you think Parabola would benefit from.</p>
<p>see: <a class="external" href="https://wiki.parabola.nu/Repositories">https://wiki.parabola.nu/Repositories</a></p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122002019-05-20T18:41:17ZMegver83megver83@parabola.nu
<ul></ul><p>There used to be a PUR, but then it was removed<br /><a class="external" href="https://wiki.parabola.nu/PUR">https://wiki.parabola.nu/PUR</a></p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122012019-05-20T19:03:40Ztheova
<ul></ul><p>I would like to reopen this discussion. I've searched for the last one, but I could not find it.</p>
I see the following arguments for a PUR:
<ul>
<li>When I as a user need free software from the AUR, I check if it is free software. I would like to share my knowledge and inform other users how I have checked the freedom issues.</li>
<li>As a user interested in packaging, I would like to gain experiences. [pcr] is not the place for doing this and I don't want to contribute to the AUR since the Parabola users cannot benefit then.</li>
<li>The Parabola project and it's hole community have high interests that users learn packaging. Therefore Parabola should provide a playground for this.</li>
<li>Potential new package maintainers shold have training with license checking.</li>
<li>As a social and community distribution, Parabola has interests to provide a low-barrier way to start contributing.</li>
<li>It may not be reasonable to maintain packages with a small amount of users in [pcr]. If one of those users maintain the software for the others, the package has not to be added to [pcr].</li>
<li>Currently there are 159 open packaging requests. It doesn't seem possible to close them any time soon.</li>
</ul>
I think, the potential issues about freedom violations are important. I would address them the following way:
<ul>
<li>Warn users, that "PUR packages are user produced content with no official support. Any use of the provided files is at their own risk." (similar approach as Arch has with the AUR)</li>
<li>Let PUR-contributers read and sign a contract (e.g. FSDG, Parabola Social Contract) as a condition for contributions.</li>
<li>Teach PUR-contributers how to properly check licences and freedom issues</li>
<li>Let PUR package maintainers declare, how they checked the licences.</li>
<li>Add a button to "Report as unfree" and block package.</li>
<li>Have PUR moderators.</li>
</ul>
<p>And just as an additional idea: Could we share ressources with hyperbola? Maybe we could have a OUR (Our user repository).</p>
<p>What do you think?</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122022019-05-21T08:07:45Zbill-auger
<ul></ul><p>i raised this issue myself after i started contributing to parabola, making most of the same points that theova did - after it was explained to me, the reasons why there is no user-curated repository, made perfect sense</p>
<p>the reason that parabola does not host a user repository is because there is too much potential for something no-free to slip in - most of the work of adopting a new package is in auditing the licensing - after that is done, the business of packaging and maintaining the package is almost negligible in most cases - it would be great if some users wanted to help with licensing audits, even better with some public record provided by a tool like fossology; but once a code-base has been verified to be FSDG-compliant, theres very little reason not to simply add the package to the [pcr] repo</p>
<p>if its not to be done that way, then it would be best if parabola users hosted a new website for that purpose, perhaps in co-operation with hyperbola users - such a website would not need to be endorsed by parabola; and it would be entirely upon the moderators to decide what goes into it and what does not - of course, it should be obvious that such a website already exists now: the AUR</p>
<p>practically speaking, in its simplest form, this suggestion could be accomplished without a new website, by using the existing AUR and modifying one of the AUR helper programs to filter packages - for example, only indexing PKGBUILDs published by certain trusted user-IDs on a whitelist</p>
<p>but i should also add that there is another reason why parabola does not have AUR helpers now - that is because they are actually a 3rd-party package manager, and the use of any such program simply can not be recommended; because they can cause conflicts with the official software on the system - also, it is nearly impossible to filter only verified packages; because none of the packages are verified - many do not even declare a license - if we were to consider this proposal seriously, it would be an over-sight to ignore the general issue of 3rd-party package managers, including rubygems, pip, nodejs, and others</p>
<p>so i would throw onto the workload that this proposal entails, complete curated libre repos for ruby, python, and javascript packages; and that is a lot of work - currently, the most feasible suggestion is to remove most of the 3rd-party package managers from parabola; so that may help to explain why adding a new one is not to be taken lightly</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122042019-05-21T21:07:41Ztheova
<ul></ul><p>I disagree in comparing a PUR to be just another 3rd-party package maager. pip, nodejs and others. The huge different would be, that a PUR would be designed by the Parabola community with freedom in mind and agreement over FSDG. This lowers the risk for incuding non-free software. Today, we already have the risk, that users talk/write about nonfree-software in the wiki/irc/forum associated with Parabola.</p>
<p>Altough we should take the issue serious, the FSDG admits, that there might be mistakes:</p>
<blockquote>
<p>Most distribution development teams don't have the resources to exhaustively check that their distribution meet all these criteria. ... Our requirement is for the distribution developers to have a firm commitment to promptly correct any mistakes that are reported to them.</p>
</blockquote>
<p>bill-auger wrote:</p>
<blockquote>
<p>if its not to be done that way, then it would be best if parabola users hosted a new website for that purpose</p>
</blockquote>
<p>That might be a way to go. But the AUR is not the right place for contributing to Parabola. I don't want to add my package to the AUR while we are (justifiedly) keeping users away from the AUR.</p>
<p>If we all agree on this statement, I see the following questions:</p>
<ul>
<li>How can users help to check the licenses? What are the necessary steps to show that the software is FSDG-compliant?</li>
<li>Are there already any guidelines for this?</li>
<li>I think the "If there is a package in AUR that you would like, you are encouraged to open a package request so that one of the Parabola contributors may pick it up and add it to [pcr]." [<a href="https://wiki.parabola.nu/Official_Repositories#AUR" class="external">wiki</a>] is a way too passive. I think we should actively encourage users to contribute to Parabola.</li>
<li>The question "How potential package maintainers learn the necessary skills?" is still unclear to me. Again the [<a href="https://wiki.parabola.nu/Creating_-libre_packages#Prerequisites" class="external">wiki</a>]: "Having practiced with the amazing AUR is a good experience." How can we provide practicing without an AUR/PUR?</li>
</ul> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122072019-05-23T08:41:11Zbill-auger
<ul><li><strong>Priority</strong> changed from <i>wish</i> to <i>discussion</i></li><li><strong>Assignee</strong> deleted (<del><i>lukeshu</i></del>)</li><li><strong>Status</strong> changed from <i>fixed</i> to <i>open</i></li><li><strong>Tracker</strong> changed from <i>Bug</i> to <i>Feature Request</i></li></ul><p>theova wrote:</p>
<blockquote>
<p>The huge different would be, that a PUR would be designed by the Parabola community with freedom in mind and agreement over FSDG. This lowers the risk for incuding non-free software.</p>
</blockquote>
<p>it we be more equivalent to the haskell cabal package manager, in that they have a strict policy about free licenses; but licensing is not the most important concern - any 3rd-party software can break the system if installed with root privileges, and PKGBUILDs always are - that is the main reason why they are not recommended not supported</p>
<p>theova wrote:</p>
<blockquote>
<p>That might be a way to go. But the AUR is not the right place for contributing to Parabola. I don't want to add my package to the AUR while we are (justifiedly) keeping users away from the AUR.</p>
</blockquote>
<p>there is no reason not to use the AUR for this - no one is keeping anyone away from the AUR - it simply is not recommended and not supported; but arch does not recommend nor support it either, and a new PUR would not be recommended nor supported either - if there were a modified AUR helper program, that could be suggested on the wiki and users of that program would never need to visit any website, so it would make no difference whether the PKGBUILDs were hosted by parabola or by arch - only the packagers would need to know they were actually using the AUR</p>
<p>so, its not very important on which website the packages are hosted except perhaps for the web interface - im sure it would not be much trouble to setup a clone of the AUR website - the one small feature gained by parabola hosting it, would be the voting feature to decide which packages make it into the main repos - but really, thats already how it is now - if multiple people keep nagging for a package it is more likely someone will add it</p>
<p>theova wrote:</p>
<blockquote>
<p>How can users help to check the licenses? What are the necessary steps to show that the software is FSDG-compliant?<br />Are there already any guidelines for this?</p>
</blockquote>
<p>the FSDG is a set of guidelines - that is exactly and entirely what it is; but it does not go into much detail - all of the criteria are explained in detail in various documents scattered about the GNU website - for license auditing, one must be familiar with the common licenses, which files they cover, and which other licenses they conflict with - the GPL license compatibility list can be a reference - licensing is likely to be unclear or misleading, especially with permissive licenses - people quite often need to ask the FSF for clarification regarding some new or uncommon license, or combination of licenses, or how to interpret the guidelines - i have myself on several occasions</p>
<p>theova wrote:</p>
<blockquote>
<p>The question "How potential package maintainers learn the necessary skills?" is still unclear to me. Again the [wiki]: "Having practiced with the amazing AUR is a good experience." How can we provide practicing without an AUR/PUR?</p>
</blockquote>
<p>we can not provide practicing - only practice provides practice - the arch wiki has extensive documentation about packaging already, and does not need to publish anything for the purpose of practice - everything important to learn can be done on your local computer without internet - the most that we could do is to describe some of the common things to look for regarding licensing</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122182019-05-24T15:44:24Ztheova
<ul></ul><p>Ok. I think the oppinions are not that opposite. For me, it would be reasonable that the PUR is whether supported nor recommend by Parabola.</p>
<p>If anyone else is interested in building and hosting a "free AUR", I would be interested in further discussions.</p>
<p>As long as this is not the case, I will spend my resources on contributing to the [pcr]. <br />I have a few questions about how to do this, see <a class="issue tracker-9 status-2 priority-8 priority-highest closed" title="Housekeeping: How to contribute to [pcr]? (fixed)" href="https://labs.parabola.nu/issues/2322">#2322</a>.</p> Servers - Feature Request #738: Add new Parabola User Repo [PUR] (like AUR)https://labs.parabola.nu/issues/738?journal_id=122212019-05-24T16:13:55Zbill-auger
<ul><li><strong>Related to</strong> <i><a class="issue tracker-4 status-9 priority-8 priority-highest" href="/issues/2323">Freedom Issue #2323</a>: [aurphan][aurpublish][aurvote] Remove from repos</i> added</li></ul>