From nobody Sun Mar 10 21:49:35 2024 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TtD8R69yfz5CxD9 for ; Sun, 10 Mar 2024 21:49:43 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Received: from smtp-42aa.mail.infomaniak.ch (smtp-42aa.mail.infomaniak.ch [IPv6:2001:1600:4:17::42aa]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "relay.mail.infomaniak.ch", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4TtD8R498kz4dPT for ; Sun, 10 Mar 2024 21:49:43 +0000 (UTC) (envelope-from daniel.engberg.lists@pyret.net) Authentication-Results: mx1.freebsd.org; none Received: from smtp-3-0001.mail.infomaniak.ch (unknown [10.4.36.108]) by smtp-3-3000.mail.infomaniak.ch (Postfix) with ESMTPS id 4TtD8H3mmKzMq05V; Sun, 10 Mar 2024 22:49:35 +0100 (CET) Received: from unknown by smtp-3-0001.mail.infomaniak.ch (Postfix) with ESMTPA id 4TtD8H1GdDzMpnPt; Sun, 10 Mar 2024 22:49:35 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pyret.net; s=20231006; t=1710107375; bh=ksWsOMQP06mldunP8p0jiOQmUh0kWVa6c7IdROUmFd0=; h=Date:Subject:From:Reply-To:To:Cc:References:In-Reply-To:From; b=APHRX4b6DMUuGa7TEgsOoWwj4T8Ab0zHP1/BdDnNUaih0qDIWIzGJmF4HdbNiR9vu UyyOLFOQpI8OKFVFHzfX7ZBhULoeAJnGdI3BbkAZateWO4ngQHmddYle8q46g7gUkB hHwIMuMBh1qYy8aIKXF2C/kam+Jgc21ujpH4U4Es8iBgKIQTd3D13eIhDyavjVKDrV AUlhZwPrNjS9hZ2xkRMJwvKeeI7wiaTRlK6C7yctqD9qdJtpHo3uwhTr22s1DczaMB AqkrxhkbJAMgKTSbNjMNNeLgOIJWHtIVHZZaRLxGXscnrtO2yQA+n/RjURTVeUB+dQ vOuEItZHRA1dQ== Message-ID: Date: Sun, 10 Mar 2024 22:49:35 +0100 Subject: Re: Proposed ports deprecation and removal policy From: Daniel Engberg Reply-To: Daniel Engberg To: Eugene Grosbein Cc: Florian Smeets , ports@freebsd.org List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-WS-User-Origin: eyJpdiI6InpvN2RETGIxZjBneDlERWpsTm53clE9PSIsInZhbHVlIjoiV2l3T2p4amJEanBFRElzbGh6cFdaUT09IiwibWFjIjoiOTU3MDQwZjc1NjcyM2Y2ZjdkMDVkODRlZTk4NDE0NWZkMzI0MjUyNDZiZmQ1OWVkOTI3NzA2OWFhMjU2ZmZhZSIsInRhZyI6IiJ9 X-WS-User-Mbox: eyJpdiI6InBkV2pZNGs4TTBkb1laYWlCYTNOM0E9PSIsInZhbHVlIjoiOWhRL1dHM0R6d084UDhaMzFlcDZuQT09IiwibWFjIjoiNmIzMzZmYTQ0NmMyM2I4NzlmYjEyNTNkMDYyOWEzNDAyYWU5OWI5MzBhODM0MzcxMzMwOGI3ZmE5MDg1ZWQ0OCIsInRhZyI6IiJ9 X-WS-Location: eJxzKUpMKykGAAfpAmU- X-Mailer: Infomaniak Workspace (1.3.651) References: <435edf7c-a956-4317-b327-3372de70dbef@FreeBSD.org> <1c5b7818-842f-f7b8-9d4e-5bf681cad20e@grosbein.net> In-Reply-To: <1c5b7818-842f-f7b8-9d4e-5bf681cad20e@grosbein.net> X-Infomaniak-Routing: alpha X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:29222, ipnet:2001:1600::/32, country:CH] X-Rspamd-Queue-Id: 4TtD8R498kz4dPT On 2024-03-10T21:45:16.000+01:00, Eugene Grosbein wrot= e: > 29.02.2024 2:22, Florian Smeets wrote: >=20 >=20 > > This policy should give some guidance on when ports can or should be= removed. In general ports should not be removed without reason but if a po= rt blocks progress it should be deprecated and subsequently removed. In gen= eral, if a ports blocks progress for some time it will be removed so that p= rogress can be made. For more details see below. > > =20 > > =20 > > Ports can be removed immediately if one of the following conditions is= met: > > =20 > > - Upstream distfile is no longer available from the original source/mi= rror > > (Our and other distcaches e.g. Debian, Gentoo, etc do not count as "av= ailable") > > - Upstream WWW is unavailable: deprecate, remove after 3 months > =20 > [skip] >=20 >=20 > > A port can be deprecated and subsequently removed if: > > =20 > > - Upstream declared the version EOL or officially stopped development. > > DEPRECATED should be set as soon as the planned removal date is know. > =20 > Objection to quoted reasons. A software not developed anymore but still w= orks fine > after years is best software ever. Do not touch it, please. >=20 > Some examples: >=20 > mail/qpopper=09=09=09abadoned by Qualcomm years ago > russian/d1489=09=09=09created by ache@ who passed away years ago > net/quagga=09=09=09abadonware but still best OSPF implementation for Free= BSD kernel > net-im/pidgin-manualsize=09abadoned by initial author years ago > databases/oracle8-client=09the only known library to link native FreeBSD = code with for OracleDB connection >=20 > Do not "fix" what ain't broken. >=20 Eugene I'm going to assume that there will be a PR or something regarding maintain= ed ports either way.=20 In general not directed to the mentioned ports specifically but using a few= as examples,=20 As far as the "Do not "fix" what ain't broken" argument goes one major conc= ern is how do you know especially regarding to Internet facing services? Qp= opper (for example) has been dropped by pretty much every distro https://re= pology.org/project/qpopper/versions and upstream is dead so there's no hub = for communication. There likely aren't many eyes on the software by now (I = guess for both good and bad reasons) but it might also very well bite you o= r users in the end. That being said, all software contains bugs including a= ctive projects so it's not like it's a clean cut in terms of security conce= rns (wordpress) but you'll likely see issues being adressed and reported wh= en software is more widely available. If upstream is dead it's very likely = that security reports ends up in some package repo, random hosted fork or s= uch and never finds it way outside of it. Quagga is in a similar position, pfsense seems to point users to frr and th= ere's also other software such as bird/bird2 . According to https://www.orafaq.com/wiki/Oracle_8 Oracle 8 support ended 20= years ago, it's also marked as i386 only so its days are counted. Nothing is stopping people to use an overlay but not everything needs to be= in or rather stay the "public" repo forever. Best regards, Daniel