[Pkg-owncloud-maintainers] I am using distro packages and I tell you why

[David Prévot]

Hi Martin,

Thank you for (forwarding) your comments, it’s appreciated.

Le 04/01/2016 07:58, Martin Steigerwald a écrit :

> [David] already packaged newer Owncloud 

> https://people.debian.org/~taffit/owncloud/

JFTR, owncloud 8.2.2 is now available in experimental, and has been
uploaded the same day as upstream (the Debian packages are usually
published the same day as upstream by the way). The package in
people.debian.org is currently published to provide an upgrade path for
encryption users. From the latest NEWS entry:

++++++++++++++++++++++++++++++++++++
Encryption (server-side) warning: do not upgrade from version 7 if you
rely on this feature!

The migration process documented upstream relies on upgrading first to
version 8. A version 8 package is available from the following URL:
  <https://people.debian.org/~taffit/owncloud/>.
If you use encryption, you should first upgrade to the version 8
package, and then upgrade to this package and follow the upstream
upgrading instruction from:
  <https://owncloud.org/blog/encryption-2-0-in-owncloud-server-8-1/>
(in short, run under the proper credential (“sudo -u www-data”) the
following commands: “occ app:enable encryption”,
“occ encryption:enable”, and “occ encryption:migrate).
++++++++++++++++++++++++++++++++++++
http://anonscm.debian.org/cgit/pkg-owncloud/owncloud.git/tree/debian/NEWS?h=stable8

I hope we will be able to provide an easier path in time for Stretch,
but in the mean time, this workaround seems to work.

Another thing we tried to make right in Debian is to provide apps that
have been split away from ownCloud via their own packages.

Anyway, thank you for exposing some of the incorrectness from the
initial blog post. I don’t really have the energy to do so (it happens
often in less public places).

Last time I tried to help upstream solving issues with their “Debian”
package, that wasn’t easy (they didn’t use a public VCS for them), and I
don’t even know if they applied the proposed patches (no feedback), so
the motivation to collaborate is not really high currently.

Let me end with a positive point in collaboration: their security team
is pretty responsive and helpful to backport fixes, even if they do not
endorse the Debian package we provide (they only endorse their products,
that’s fair).

Regards

David

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-owncloud-maintainers/attachments/20160104/192b494d/attachment.sig>