[MeeGo-dev] RPM vs DEB, the FAQ item?
auke-jan.h.kok at intel.com
Wed Feb 17 12:42:30 CST 2010
On 02/17/10 10:34, Mika Hanhijärvi wrote:
> On Wed, 2010-02-17 at 09:11 -0800, Auke Kok wrote:
>> On 02/17/10 05:16, Jean-Christian de Rivaz wrote:
>>> Learning that MeeGo have no upstream is for me a show stopper. It's just a
>>> granted ticket for the hell.
>> this is a misconception. Just because (e.g.) moblin does not have "an
>> upstream rpm repository like fedora" doesn't mean that there is no
>> upstream at all. Upstream to moblin are the latest kernel sources, the
>> tip of the Xorg tree, etc, and we follow these aggressively.
> I just wonder how are you going to make sure that MeeGo will get eg.
> security updates fast. It's huge task if you are going to maintain
> everything from kernel and libraries to full application all by yourself
> whitout using any upstream distro repository.
Just as we do with moblin right now, there are people paid to do exactly
that. Also, just because we target a specific part of the device market,
we can skip everything that e.g. involves the bind nameserver (just
because we're not shipping it as that would not make any sense at the
moment). That cuts out a lot of irrelevant security work.
It also means we do not blindly rely on an upstream vendor and make sure
that we do ourselves the right thing where we can.
More information about the MeeGo-dev