From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 6HwKNl3DumVInAAA62LTzQ:P1 (envelope-from ) for ; Wed, 31 Jan 2024 23:02:06 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id 6HwKNl3DumVInAAA62LTzQ (envelope-from ) for ; Wed, 31 Jan 2024 23:02:05 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=debian.org header.s=1.vagrant.user header.b="lHUUX/L3"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1706738525; a=rsa-sha256; cv=none; b=TgFtcfi9/JzCksGiWEd4J3BQt2n1GpsXdEUAZfeO/QF1AxriRyZExJHVrY1OqMME16t/TH 0/4gQw0lxOkAruWEpKnx7f4JKtM9KFYFbvCUms3g5Xvz6eZ9ZaD6C/FlXU8oViR8plGdSh 279toTLU3RcBl+LZxIRlyhKCZTN24AFi0r2sTw5kJebfAT0CmzVt8hwWcfswXP9dyT6dfn 5Euf+NnxY99DZsBdeLM/Y9a8epTybGJT2MsH7T9tOo8+5BhKWkdYJXUISv7rWUsWZyDdV/ muetoxsm2/6e/hgObU3TuubgYWYTpoxUEQWUjsx3KO3xIyDAy9cYuYqnWLTv5g== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=debian.org header.s=1.vagrant.user header.b="lHUUX/L3"; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1706738525; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=UXXCyed5+MxffdrOuami75kNJLCcAtjLYXWsPqQKL+I=; b=SdfSjSQFt3jkRUJMJuyd939TZ89YqFXLADBYXnm5TwRgd9hA93OI9vFb4ccw18BWmbTzSA +4lwh5jpAPxvRT0Mse+d5bHv8Ega+5zW1zS0M2C6X9y7jWptFPeTokMAPNrbeGX1guSp5j aNbpK+7Sfz0LKlGNO5GhtVi7b6LnI2ddoMSgdDFnUliwxrMKGLYI3jAEHPWC5z+DYUaeun a0KZ7nYTvO6tj6zwpf+Ku9NQnYYX+bgQU26yjMt9UaxHGEM2J94+NnBsm49PqgKrQ0Srk8 8/UXhiNLTIW3QLwO6cNVBnZpvdt724Xj007A/6IREpHagqZ+GxS74xA8hV8dcA== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B6D7B70526 for ; Wed, 31 Jan 2024 23:02:05 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rVIeK-0007hd-LA; Wed, 31 Jan 2024 17:01:40 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVIeJ-0007gz-CU for guix-devel@gnu.org; Wed, 31 Jan 2024 17:01:39 -0500 Received: from cascadia.aikidev.net ([173.255.214.101]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rVIeH-00024T-Il for guix-devel@gnu.org; Wed, 31 Jan 2024 17:01:39 -0500 Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:20]) (Authenticated sender: vagrant@cascadia.debian.net) by cascadia.aikidev.net (Postfix) with ESMTPSA id B88F51ADAE; Wed, 31 Jan 2024 14:01:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=debian.org; s=1.vagrant.user; t=1706738486; bh=2ti35y8opCIkUvU3BCh92QTLagS7Gm0YXj0fOvv1inY=; h=From:To:Subject:In-Reply-To:References:Date:From; b=lHUUX/L3z13QVhHgZjyKWXfQ/m9wuu7vmwndriRWvn5sJva32EsPsEsRXdzGwk6oS mQkMwRwr3V9PZkFqJhfOpQtk8+RMgIf6CjfII3uQIqq6AnQfIjqh21dKlsLR1uaarK fO6Xi0Vt3f9CrT3J5hMkvVm/tXhIIxIX5X0uaJNY4iBoh8TTXwrxYF1GR4JaMikOWE HJpAirvlBkrBIzJpP/oShMhRs3J0Qiu63/ckpCKdD36iKAS/BwVXag2OxbM1q2K7+r geMJu9YXrGeeAxQVp3AkTgt5sttNqWiqjpGvmM0wOuAY7H6h0Ot6dB/Z3+cbCpxBky RrT+JNtEfPRTA== From: Vagrant Cascadian To: Josselin Poiret , guix-devel@gnu.org Subject: Re: Core-updates coordination and plans In-Reply-To: <87h6itzc4a.fsf@jpoiret.xyz> References: <87h6itzc4a.fsf@jpoiret.xyz> Date: Wed, 31 Jan 2024 14:01:16 -0800 Message-ID: <87sf2d9n83.fsf@contorta> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: none client-ip=173.255.214.101; envelope-from=vagrant@debian.org; helo=cascadia.aikidev.net X-Spam_score_int: -33 X-Spam_score: -3.4 X-Spam_bar: --- X-Spam_report: (-3.4 / 5.0 requ) BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.292, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Scanner: mx10.migadu.com X-Spam-Score: -10.57 X-Migadu-Queue-Id: B6D7B70526 X-Migadu-Spam-Score: -10.57 X-TUID: bleNU6+3ij7h --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 2024-01-31, Josselin Poiret wrote: > One conundrum we have for now: glibc 2.38 has a couple of new CVEs, and > we have three options: > 1) change glibc to track the 2.38 release branch =E2=86=92 world rebuild. > 2) graft glibc =E2=86=92 bad user experience (and we're not supposed to g= raft > outside of master). > 3) switch to 2.39 =E2=86=92 world rebuild + possibly more work fixing new= build > failures. > > glibc 2.39 should hopefully release tomorrow (01/02/2024) > > What is everyone's opinion regarding those? > > IMO, option 2 is the one I'd like to avoid, and between 1 and 3 I'd > ideally prefer 3 but we don't know yet if there is going to be a lot of > breakage because of that (feels like usually it's toolchain updates, not > glibc updates that cause them the most). How about doing *both* 1 and 3 ... more world rebuilding, sure, but it means we will have the information to make the correct decision about which to merge into master. It is *possible* that 2.39 is no worse or even less broken than the 2.38 release, even if it is likely that 2.38 is more well tested... and even if 2.38 ends up being the glibc to merge to master, things are better positioned to fairly quickly switch to 2.39 once it becomes a more known quantity... live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZbrDLQAKCRDcUY/If5cW qgAJAQD9n1fbB1A3wMAZYd47vPZncj5HQhkJ46OSAHLEa64NpgD7BtHL84UPO7mp av9SivO+i6EKQTpw8YmtstZXKnKCFwg= =PAbX -----END PGP SIGNATURE----- --=-=-=--