v24.12: The One With Androids & Cameras, But It's Mainline Linux
postmarketos.org
Aiming for a 10 year life-cycle for smartphones
  • Lojcs@lemm.ee
    271·
    1 day ago

    It always puzzles me why they chose the one distro without systemd to base this on and are now trying to add it themselves.

    Also I have thoughts about this:

    Move sudo to community
    At present, sudo is in the main repository, which requires us to provide security support for 2 years. Upstream sudo does not provide an “LTS” lifecycle, so this requires either performing security upgrades during the maintenance lifecycle, or backporting security fixes by hand.
    Benefit to Alpine
    Prior to the creation of the security team, there was an unofficial preference to push doas as the preferred pivot tool for Alpine. This reinforces that messaging. Additionally, we do not have to support sudo for a 2 year lifecycle, since there are no LTS branches for it.

    How often does sudo have security vulnerabilities that it’s worth moving to a lesser used tool whose vulnerabilities are less likely to be discovered against your security team’s wishes? What do all the other distros do?

      • Lojcs@lemm.ee
        3·
        7 hours ago

        What has nothing to do with systemd? You open the link and before the introduction it says the current release isn’t fit for general use because they couldn’t add systemd yet. If they picked something with systemd they wouldn’t need to spend so much effort on it

        • MonkderVierte@lemmy.ml
          2·
          7 hours ago

          My bad. Well, maybe they manage to keep Openrc/Systemd shims long-term, since Openrc tries to be quite similiar.

    • pastermil@sh.itjust.works
      3·
      15 hours ago

      Yeah, they could’ve picked something like Debian. It’s like they picked an embedded distro only to try to turn it into a full-fledged.

    • blackfire@lemmy.world
      17·
      1 day ago

      Yeah that does seem like an odd way to go about it. Other than full system upgrades I can’t remember the last time I saw sudo in the upgrade list. Maybe I’ve just been missing it.