[MeeGo-dev] RPM vs DEB, the FAQ item?

[Auke Kok]

On 02/17/10 10:34, Mika Hanhijärvi wrote:
> On Wed, 2010-02-17 at 09:11 -0800, Auke Kok wrote:
>> On 02/17/10 05:16, Jean-Christian de Rivaz wrote:
>>> Learning that MeeGo have no upstream is for me a show stopper. It's just a
>>> granted ticket for the hell.
>>
>>
>> this is a misconception. Just because (e.g.) moblin does not have "an
>> upstream rpm repository like fedora" doesn't mean that there is no
>> upstream at all. Upstream to moblin are the latest kernel sources, the
>> tip of the Xorg tree, etc, and we follow these aggressively.
>
> I just wonder how are you going to make sure that MeeGo will get eg.
> security updates fast. It's huge task if you are going to maintain
> everything from kernel and libraries to full application all by yourself
> whitout using any upstream distro repository.

Just as we do with moblin right now, there are people paid to do exactly 
that. Also, just because we target a specific part of the device market, 
we can skip everything that e.g. involves the bind nameserver (just 
because we're not shipping it as that would not make any sense at the 
moment). That cuts out a lot of irrelevant security work.

It also means we do not blindly rely on an upstream vendor and make sure 
that we do ourselves the right thing where we can.

Auke