Bug#1031046: Only include in Bookworm with commitment to stable updates

[Jonas Smedegaard]

Quoting C. Maj (2024-12-13 01:08:37)
> On 12/12/24 16:27, Jonas Smedegaard wrote:
> > I am confused, and concerned for the maintenance of asterisk.
> 
> Agreed 100%.
> 
> I write from my previous-slash-night-job email address from where I've 
> submitted some work here towards getting Asterisk on Debian in the past, 
> but my day-job is currently Open Source Solutions Advocate at Sangoma, 
> the primary sponsors and developers of the upstream Asterisk (and 
> FreePBX) projects.
> 
> Please know that many people at Sangoma are very much interested in 
> supporting the work to get Asterisk 22 in Debian 13. This was a topic of 
> conversation at the most recent AstriDevCon held virtually last week:
> 
> https://github.com/asterisk/documentation/commit/4cec2ba69c8303790243c9f9d315ec86f5fc998a
> 
> Regarding security issues, these are regularly handled by multiple core 
> developers employed by Sangoma, in an orderly, organized manner. The 
> Debian security team should rest soundly knowing that this is not an 
> all-volunteer operation putting out pristine Asterisk tarballs upstream.
> 
> That said, there does not appear to be any active, open security issues 
> for the asterisk package in trixie at:
> 
> https://tracker.debian.org/pkg/asterisk
> 
> Asterisk 22 is an LTS release in 2024, scheduled to go SFO in 2028 and 
> EOL in 2029, which if Debian 13 is released in 2025 and is EOL in 2028, 
> this should be an okay fit for Sangoma employees to take responsibility 
> for the bulk of the security needs ie. all those that are not related to 
> Debian-team changes. More on Asterisk versions here:
> 
> https://docs.asterisk.org/About-the-Project/Asterisk-Versions/
> 
> Unfortunately, the current Asterisk on Debian build process is, shall we 
> say, cumbersome to reproduce independently. Shining some light on a 
> basic outline of the *current* steps used would be most helpful.
> 
> And yes, again, I volunteer to help (and would offer to update my 
> backported scripts to Debian 12 from earlier in the year, if I thought 
> that would help)!

Thanks for sharing your insights from a more-or-less upstream PoV.

And thanks a lot for your offer to help!

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private