From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id Z91IDIneVWDlRwAA0tVLHw (envelope-from ) for ; Sat, 20 Mar 2021 11:37:45 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id SCGKB4neVWAoUgAAB5/wlQ (envelope-from ) for ; Sat, 20 Mar 2021 11:37:45 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id D377CC06A for ; Sat, 20 Mar 2021 12:37:44 +0100 (CET) Received: from localhost ([::1]:42130 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lNZvM-0007ko-1A for larch@yhetil.org; Sat, 20 Mar 2021 07:37:44 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:41854) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lNZvD-0007kU-Ng for guix-devel@gnu.org; Sat, 20 Mar 2021 07:37:35 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:52638) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lNZvC-0003G8-Jp; Sat, 20 Mar 2021 07:37:34 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=33264 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1lNZvC-0002gk-63; Sat, 20 Mar 2021 07:37:34 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: =?utf-8?Q?L=C3=A9o?= Le Bouter Subject: Re: Why [bug#47081] Remove mongodb? References: <20210312005632.13690-1-lle-bout@zaclys.net> <86ft0twwg8.fsf@gmail.com> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: 30 =?utf-8?Q?Vent=C3=B4se?= an 229 de la =?utf-8?Q?R?= =?utf-8?Q?=C3=A9volution?= X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Sat, 20 Mar 2021 12:37:32 +0100 In-Reply-To: (=?utf-8?Q?=22L=C3=A9o?= Le Bouter"'s message of "Wed, 17 Mar 2021 18:09:45 +0100") Message-ID: <87czvu839f.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1616240265; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=mxr0ls6BM88llgNRfRS5JCBBONVSPzmSCzxdsRJSarQ=; b=N6HRYrS+gVWRJGa66nlM3d+Y/dSqLmZzdFUG17EPNZ+y+26EaQ3IyzUeqk1x72CILUfIsI jIgmGIrK4BAgCJYHl4QgxbGm58TewOlFhgqSv/gWTd3VPnbSw8zojPwx2mv1uuZFArF0th O5Wju7068qySwLZYXNPdEp/hd6yp570//4QNi1HOu4zlBCdM9FW2goGuy93A3mQpmnRkzM VhGvdTALFuismWSaMMNhiN4b/Vk28zuD6J6BSzv7ztC32XYLb1Vn4JFdNd1TUOX5TSR3FZ La/pSiC57xItKHbHkwSUcH9R4pj0EZEcSypmFhYrdLfz7CZXd72cZMZ9hcIoNA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1616240265; a=rsa-sha256; cv=none; b=eJgeygwuRttZrRJ7cLBVDUG9DPvppSXJeyO0Mh+JRkP6wysvogcQnhHa9TDxWez+yT3341 rPTeObaQtwrlkefdyfg31s5HoFuRAAcP/2CZ2W/I78b65uboXEYpWxHZeTNs9lHnh+rl7v KruM0JPfuJg9XOlwTX7v2BtODduXb2b/0UYxlLExVew8XHcsqVOytPZDpdIahTb+qRWSY6 bi/WxElGl7kgFJnjQ6T3SYu4QOnIdZ9F5uOzNp2q5SRc6at/ymPdu3ZPnRFTqYv+Bssq4v bfjpyPtcg4OZAUCGx2vXSec8tSAGRmBCURE8ytDb40ZHDcMuK/vjBCijWh6EqA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.91 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=pass (policy=none) header.from=gnu.org; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: D377CC06A X-Spam-Score: -1.91 X-Migadu-Scanner: scn0.migadu.com X-TUID: pAJlshINqsHi Hi L=C3=A9o, L=C3=A9o Le Bouter skribis: > On Wed, 2021-03-17 at 17:56 +0100, zimoun wrote: >> If the removal for security reasons had been discussed on IRC, it >> could >> be nice to point the discussion here. Otherwise, open a discussion >> on >> the topic on guix-devel or bug-guix. The full removal is a radical >> solution (especially, it should be done with 2 commits: service+doc >> and >> then package; well another story). > > https://issues.guix.gnu.org/47081 - some of it there:=20 Removing a package and its services is not something to do lightly: it breaks user configs with no recourse. We must insist on getting more opinions on such matters, and I think there just wasn=E2=80=99t enough feedback here. I understand it can be frustrating to wait for input, but in such a case, please do. This project has always strove for consensus. Remember that the opinion of those who=E2=80=99ve been taking care of secur= ity issues in Guix for years, those who=E2=80=99ve been maintaining MongoDB, th= ose who wrote the service and its tests, are invaluable; they must have a say. I insist: humbly solicit and wait for their feedback. Now, how do we move forward? IMO we must look for available options before we remove MongoDB. Are there forks of the original freely-licensed code base maintained around? That sounds likely. Are there backports of the security fixes? What do the previous contributors to this code think=E2=80=94Chris, Efraim, Marius, Arun? L=C3=A9o, please get involved in reaching consensus on a solution. Ludo=E2=80=99.