On Tue, Mar 22, 2016 at 11:18:21PM -0600, Theo de Raadt wrote: > > Is there any verification of the contents of the tar balls being done? > > That is a bit snide, don't you think?
My sincere apologies if that was taken as a snide remark. I really did not know if the contents of the tar files were checked for completeness or not before they were put on the FTP sites, and I wanted to know. Others made themselves funny about "tar balls". I think they know that I meant "compressed tar archive", a.k.a. "tarball". I was not making a comparison between base59.tgz and a ball of tar, or any other type of ball. > > Yes, there is a check, after they start mirroring. Then the "sets" > files are fixed, and snapshots are rebuilt. Sometimes the files are > already moving along the mirror path... > > That's a process which works for me, and works for the developers. And it's fine with me too, honestly. I was just a bit surprised to find I had installed a system without a libc. It's something that is easily remedied, no worries. > > The output of this process is called snapshots; it is not called a > daily releases, and there is no warranty or any statement of > suitability for any purpose. Most are built by me, using a mixture of > handheld and dynamic procedures, and are simply a SIDEEFFECT of > updating machines and ensuring the tree is in good shape, and once > every 6 months this is important so that we can make a good release. And I'm happy you make these side-effects of the project public. > > So really, what do you expect? I am asking, because you seem > seriously dissapointed. No, I am not dissapointed (and never was), especially not now that you have explained a bit of the process. If it was a stable release, I might be dissapointed for a short while, but again, nothing that can't be remedied quite easily. > > Do you expect a high-quality CDN delivery environment that gives > you 1-2 snapshots per day (as now) -- but globally -- at high speed? > And for the contents to be built with extremely high assurance? No. I use a snapshot about two to three times a year, at most, as a stepping-stone to get a fresh install up to speed with -current. In fact, I have no reason to run snopshots or -current at all other than to satisfy my own curiosity and to have "something else to do". > > Sorry, if that is what you want, your expectations are out of line. I'm very happy with what I get. I was surprised to sit in front of a machine with no libc, and I had a question about how this might have happened. This quesiton has been answered, and so I am happy. > > Noone is paying for that to happen. Most of our users are precisely > like you -- not providing a single cent to back their demands that > requirements be improved. Well, that's easily fixed. I'll send off some cents to you later, but I havo no demands other than that you carry on doing what you're doing, in whatever way you seem fit. > > Furthermore, this is a research operating system project, it is not a > commercial product, and it is not operated to meet commercial customer > values, since the price point is kept at precisely zero. Not anything > charged for access to sources, snapshots, documention, ideas -- > NOTHING. > > So I could stop building snapshots, and get right on the task of > building such an environment for you! Actually I won't, because I > don't take instruction from people who aggressively point fingers at > people who gave it away in an imperfect way. > > Kindly note the lack of a warranty or promise, and adjust your > attitude a little. > I thank you for replying! You will get a donation from me later (no need to add me to the donations page, I'm already listed). I've been using OpenBSD as a platform for my work since release 2.6, and I'm just a bit sorry that I do not work with things that allows me to take advantage of the more advanced networking features of the operating system. And thank you for responding to my question, too. Boot-strapping a machine from a snapshot is really easy, and now that I know you are hand rolling those tar balls yourself, I know what I may expect, or not expect as it may be. Keep up the good work! Thanks, Andreas -- Andreas Kusalananda Kähäri, Bioinformatics Developer, Uppsala, Sweden OpenPGP: url=https://db.tt/2zaB1E7y; id=46082BDF ------------------------------------------------------------------------ [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
