[Pkg-owncloud-maintainers] Dropping owncloud from Wheezy?

[Jonathan Wiltshire]

On Fri, Mar 01, 2013 at 09:06:12PM +0100, Thomas Müller wrote:
> 
> Am Freitag, dem 01.03.2013 um 20:12 schrieb David Prévot:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA256
> > 
> > Hi,
> > 
> > Le 01/03/2013 12:54, Moritz Mühlenhoff a écrit :
> > > I'm skeptical that owncloud should be shipped in Wheezy. It has
> > > frequent security issues and the initial maintainers appear to 
> > > be inactive, all updates after October have been NMUs...
> > 
> > Including owncloud maintainers to the loop in hope this wake up call
> > from the security team could lead to some visible activity, or if
> > previous NMUers would be happy to join the team, if such a team could be
> > set up, or whatever positive sign in that regard.
> >
> 
> Talking to you with the hat of an ownCloud core developer on my head:
> We will release OC5 in 2-3 weeks which will lead to 3 stable version to be maintained:
> 4.0.x, 4.5.x and 5.0.x which is a tough job. I would not be surprised if 4.0.x will be 
> dropped within 2013 and then maintenance will be a pure nightmare.

This is a grave concern. Having OC5 in Wheezy is just not going to be an
option; having to carry security support on our own for three years for 4.0.x
equally so.

Having an upstream developer on the Debian packaging team would be a help,
of course, but we can't ignore the recent NMU history of the package. I
don't mean to blame anyone, facts are facts.

> Talking to you with the hat of an almost inactive package maintainer:
> Sorry for the inactivity - sometimes it's simply too much!
> Any other debain devs and maintainers are welcome to join our team and keep the package alive!
> Paul and myself spend many nighty in April 2012 to get ownCloud into Wheezy before the freeze.
> It really would be sad to see it being dropped! :-(

It would indeed be sad but we don't have many options at this stage. I
will put my cards on the table and say I favour having a good quality
package in backports and the chance for ownCloud to be in Jessie.

I suggest there is a further week or so for the maintainers to put together
a maintenance plan if they wish but after that we look seriously at removal.


-- 
Jonathan Wiltshire                                      jmw at debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

<directhex> i have six years of solaris sysadmin experience, from
            8->10. i am well qualified to say it is made from bonghits
			layered on top of bonghits
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20130310/35ddad34/attachment.pgp>