From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:4a6f::]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id MNxEGILiZWCR2wAAgWs5BA (envelope-from ) for ; Thu, 01 Apr 2021 17:10:58 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id KKQ6EoLiZWAIPQAA1q6Kng (envelope-from ) for ; Thu, 01 Apr 2021 15:10:58 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B78581E23B for ; Thu, 1 Apr 2021 17:10:57 +0200 (CEST) Received: from localhost ([::1]:58360 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lRyyG-00047g-Ni for larch@yhetil.org; Thu, 01 Apr 2021 11:10:56 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42596) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lRyxx-00047M-Cr for guix-devel@gnu.org; Thu, 01 Apr 2021 11:10:37 -0400 Received: from mail.zaclys.net ([178.33.93.72]:50713) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lRyxq-0007Hq-Ti; Thu, 01 Apr 2021 11:10:36 -0400 Received: from guix-xps.local (lsl43-1_migr-78-195-19-20.fbx.proxad.net [78.195.19.20] (may be forged)) (authenticated bits=0) by mail.zaclys.net (8.14.7/8.14.7) with ESMTP id 131FAMbe003652 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 1 Apr 2021 17:10:23 +0200 DMARC-Filter: OpenDMARC Filter v1.3.2 mail.zaclys.net 131FAMbe003652 Authentication-Results: mail.zaclys.net; spf=fail smtp.mailfrom=lle-bout@zaclys.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=zaclys.net; s=default; t=1617289823; bh=JFnZQaWDd9vQKbaB4g+xJXCy0tRPY4lRx6WclkHjDqw=; h=Subject:From:To:Cc:Date:In-Reply-To:References:From; b=NGAPyL0tl/RS5ao9HgHxshtlrDvgbxFqvH3ljyTI9KyjbxYtPeADpNc+V8cikWAYo W3BfTK3V0qp4nWeaouVfGmuz78RYH7dDoXzRcg5bpnmZMeJFPOmzz80SiJjknA2/UY VXt+1Yel/uDXdn+lmwIQMVulJGIKqsEBTFvkpj6w= Message-ID: Subject: Re: Security patching and the branching workflow: a new security-updates branch From: =?ISO-8859-1?Q?L=E9o?= Le Bouter To: Ricardo Wurmus Cc: Ludovic =?ISO-8859-1?Q?Court=E8s?= , zimoun , guix-devel@gnu.org Date: Thu, 01 Apr 2021 17:10:15 +0200 In-Reply-To: <87blay2gsj.fsf@elephly.net> References: <864kgshnfp.fsf@gmail.com> <33f1494fd4ad899a4a9851c002a534f1c69861b7.camel@zaclys.net> <87lfa33tbo.fsf@gnu.org> <87blay2gsj.fsf@elephly.net> Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-RiwpXYMXvdH+OvfmLoY3" User-Agent: Evolution 3.34.2 MIME-Version: 1.0 Received-SPF: pass client-ip=178.33.93.72; envelope-from=lle-bout@zaclys.net; helo=mail.zaclys.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1617289857; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=JFnZQaWDd9vQKbaB4g+xJXCy0tRPY4lRx6WclkHjDqw=; b=Q0u3AtQhBBIoB8mTFyUu1GvFipPrJpSFwDGaKFQaFodx5VPVifEPqNlNa0BTE1ats2v+4I 5MoOSrCk0xsWeNPpMMraiidVZ/xAEgx4sn6zycHvCzAiLFi0ChseQ+qr6USea3Dpvo/AkE bj8KrY3ErMHE3wRcKoY5g+lH/7K2Dl3Wsdn4di5xxdF24gKZ36ARJBgbtVG3XRMrRJNgRz wC8Wqs0vrnbWN5ji4/4Dm2zHbaS5fDWeQVNf73A8mboRdsavJ5Cd84+cGBzUSFQu1RmWOl +gByKxfYbqSJsTdOKfgcEJYjJOnnbcY03YGpJ+PJ4Yf3CMPw4yihrbQYzDb5iA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1617289857; a=rsa-sha256; cv=none; b=jSE+kbsr58SXcAlWs8osfUYFp9pK/ipoJe9h2vTR1aefjYNbZ89seCJTjMAqpQJ7b+ZK8G IZk6yVr/UzcNXzFCqrsYIGcIoYx2mPsuO0f/v4XcKk+2OJ8ebN7R+tqu2wM54AiVyZPF0L 6zp3EuBsC3z84Z5PRV2ZuM19jj+HV3T+RXoZxRSqlNUbJKpJ3NXsTwMzGp9F+BGjuNUOpM ypSWf9hp/Bjt2r2uunExnn+nDF/Fk5Lr1KOLLiSdvoTvpL8LiSqm1F7kS6viM1KcaMtQJ/ kMIy1VAjNsBD2UoVTd4CcbqjjjeifaWUneEj9CGjqxsdqqOYa/jxVp8RRQIC7A== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=NGAPyL0t; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -3.73 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=zaclys.net header.s=default header.b=NGAPyL0t; dmarc=pass (policy=reject) header.from=zaclys.net; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: B78581E23B X-Spam-Score: -3.73 X-Migadu-Scanner: scn0.migadu.com X-TUID: gkDai56Eb2oo --=-RiwpXYMXvdH+OvfmLoY3 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, 2021-04-01 at 16:58 +0200, Ricardo Wurmus wrote: > Hi L=C3=A9o, >=20 [...] > That=E2=80=99s fine. We have no deadlines, so stepping back from what fe= els > like a heated discussion for a while and revisiting the points later > comes at very little cost. >=20 > Obviously, you don=E2=80=99t *have* to accept other people=E2=80=99s crit= icism. But > we > collectively aim to act in a collegial fashion, finding consensus > before > forging ahead with changes to processes. I have not been convinced > by > your arguments and your appeals in this discussion. I can=E2=80=99t spea= k > for > others, but I would consider it very unwise to ignore the lack of > consensus and just start a new branch when that isn=E2=80=99t what the > collective of long-term contributors agrees to do.=20 >=20 > If that=E2=80=99s not what you=E2=80=99re planning to do then my comments= carry no > weight. I do want to stress, though, that hurry is usually misplaced > in > the decision-making process of this project. There are only few > exceptions to this and none warrant precipitating a falling-out. >=20 I never planned to go on and create that security-updates branch, it is clear that there's no consensus for that, also it would require other tools we don't have. However what I disagree with Simon is that they think security updates should not be prioritized, which I don't agree with very strongly. They have repeated that many times in various ways and it annoys me that these arguments come up again and again in response to my messages or contributions even though Simon knows I disagree. There's no other problem to me. There's a thing about my personality and I am sorry to be that way, it's that I am ready to question myself but at a point when the demand to question becomes confrontational way rather than in a friendly way I stop being able to. I feel like I have taken into account many criticism and changed my workflow due to that. I am glad people help me improve the contributions I make to GNU Guix. This thread is a proposal, like all others were, and on some comments I feel attacked personally for even mentionning things that are only proposals to me (I don't even think they're good solutions in the absolute sense, I just propose them). L=C3=A9o --=-RiwpXYMXvdH+OvfmLoY3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEFIvLi9gL+xax3g6RRaix6GvNEKYFAmBl4lgACgkQRaix6GvN EKZ8Pg//UbpPwsTZ96/AQT/ycHa3gb5aAZAoKidzbd9gm9QYdZdMIGnZXBQTP/Ok +3uSlW7DbodOEnqEmQyB3rJUFddF+n/Vzqgyy48LIb2I2oHI4BF1LGarTgLkk751 FJfH5bYs5UrcjhbMcr/AG7J9h3CNsJS0YLUQS5z8CvE3bBg+lP4yzpXan3xyfCZn hUYMTpW9KL2fewloOHQN5b9bDLZJzX53wI5i4U+fijroOY+OYZip76f9cMLZ/N0N ULLjjyQu/3YNUkMxGhcBLZ67H3gDhPPaHTs0Q8QHwVVhu4TliFr5FVQ83e1bOaTB nd7kdq1dQQRmzsWWvZ+B/eNpshdyYip0UpF4ygBuHGUuJHnI4FULbTcLNKTTSljQ 4NvD70yShhe5vr+JCCyH+dxrmMGYQRIcXdnOBc9AgHBeFc+vUcY4LPGz9W+zFbTe qtyUixlBz8Mz6i4oMXyRXlpItkVGGtY5REMVeYSry8aMSxNWu5zTUKqzH9yggr0/ SEMekKIAD378X4gzVoIv8UpFoSvFewi8fllhQFp5rA0VDowRrWvuoH9iHzGJKaVW zhTyXuG5HJ9zV+hQf+bzjOV/fDTUI6GoA7HZG1J20UP6zz4vQ0CtU4k56kcGlZyu py9WRrl9JVSYNhpR1Q7hXgLsRzWGvWdv4AGPgU/TAMr19lXZRa4= =bz1j -----END PGP SIGNATURE----- --=-RiwpXYMXvdH+OvfmLoY3--