• Re: Another issue with snaps

    From stepore@21:1/5 to Jonathan N. Little on Sat Feb 22 21:15:49 2025
    On 2/22/25 13:44, Jonathan N. Little wrote:
    Okay Canonical, how come your snap version of Firefox does not
    automatically upgrade when other packages do and the deb version did?
    How does this improve security if non-techies are blithely surfing the internet with outdated browsers?

    https://snapcraft.io/docs/managing-updates

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Walther@21:1/5 to Jonathan N. Little on Sun Feb 23 10:34:07 2025
    Jonathan N. Little wrote:

    Okay Canonical, how come your snap version of Firefox does not
    automatically upgrade when other packages do and the deb version did?

    Ubuntu 22.04 LTS here, Firefox version is 135.0.1, which is the most
    recent version from 18 Feb, it was installed automatically, no snap
    refresh command was involved. So is there something blocking your update mechanism?

    -jw-
    --
    And now for something completely different...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lawrence D'Oliveiro@21:1/5 to Bud Frede on Fri Feb 28 22:32:52 2025
    On Tue, 25 Feb 2025 08:53:32 -0500, Bud Frede wrote:

    As such, they don't help developers reduce the number of packaging
    formats they have to support.

    Open-source developers don’t have to support any packaging formats. They leave packaging up to maintainers for the specific distros.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From rbowman@21:1/5 to Joerg Walther on Sun Feb 23 18:58:56 2025
    On Sun, 23 Feb 2025 10:34:07 +0100, Joerg Walther wrote:

    Ubuntu 22.04 LTS here, Firefox version is 135.0.1, which is the most
    recent version from 18 Feb, it was installed automatically, no snap
    refresh command was involved. So is there something blocking your update mechanism?

    My Ubuntu 24.10 has 131.0.2-1 but

    snap refresh --time
    timer: 00:00~24:00/4
    last: 2024-09-25
    hold: forever
    next: 12 days ago, at 16:03 MST (but held)

    I ran 'snap refresh --unhold'

    snap refresh --time
    timer: 00:00~24:00/4
    last: today at 11:38 MST
    next: today at 12:27 MST

    However an explicit 'snap refresh firefox' shows

    error: cannot refresh "firefox": snap "firefox" has running apps
    (firefox), pids:
    5016,5217,5231,5329,5489,5547,693521,1054791,1054984,1055117

    I have seen this before with Thunderbird when upgrading. If the app is
    running snap will not refresh it.

    killall firefox
    rbowman@kropotkin:~$ snap refresh firefox
    firefox 135.0.1-1 from Mozilla✓ refreshed

    I seldom reboot or close running applications. I may have put the refresh
    on hold since it doesn't really work and fails silently.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bud Frede@21:1/5 to Jonathan N. Little on Tue Feb 25 08:53:32 2025
    "Jonathan N. Little" <lws4art@gmail.com> writes:

    Joerg Walther wrote:
    Jonathan N. Little wrote:

    Okay Canonical, how come your snap version of Firefox does not
    automatically upgrade when other packages do and the deb version did?

    Ubuntu 22.04 LTS here, Firefox version is 135.0.1, which is the most
    recent version from 18 Feb, it was installed automatically, no snap
    refresh command was involved. So is there something blocking your update
    mechanism?

    -jw-

    Don't think so. I manually updated the snap version on my EliteBook from 134.0 to now 135.0.1. I will see if it updates to the next version on
    its own.

    Snaps have been updating promptly for me so far, including FFox. I get a notification on the desktop when there's a new version available and it
    tells me I can exit FFox to have it applied immediately.

    I'm kind of on the fence with snaps. I don't think they're that
    worthwhile because they're kind of proprietary to Canonical. As such,
    they don't help developers reduce the number of packaging formats they
    have to support. It might be better if Canonical would just suck it up
    and support flatpak instead since that seems to be getting mindshare.

    Given that snaps are more or less limited to Ubuntu at this time, I
    think that I'd prefer they just go back to using deb packages. Those
    always worked fine, apps started up faster, and my impression was that
    they used less disk and RAM too.

    Maybe there's some advantage to snaps that I'm missing? (Other than
    trying to lock developers and users into the Ubuntu ecosystem...)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lawrence D'Oliveiro@21:1/5 to Richard Kettlewell on Sun Mar 23 23:30:58 2025
    On Fri, 21 Mar 2025 09:17:25 +0000, Richard Kettlewell wrote:

    Today, Debian stable has release 6.06 from December 2022, i.e. 27 months
    old.

    So in terms of the Zawinski’s complaint post the situation has deteriorated. Although I think the underlying issue is that he doesn’t
    (or didn’t) believe in stable releases while Debian and its users do.

    Remember also that the xscreensaver driver doesn’t work under Wayland, whereas distros like Debian and others are moving heavily to support
    Wayland.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bud Frede@21:1/5 to Richard Kettlewell on Tue Mar 25 09:00:30 2025
    Richard Kettlewell <invalid@invalid.invalid> writes:

    Lawrence D'Oliveiro <ldo@nz.invalid> writes:
    On Thu, 20 Mar 2025 09:05:18 -0400, Bud Frede wrote:
    This is perhaps one of the more notable issues I've seen:
    https://www.jwz.org/blog/2016/04/i-would-like-debian-to-stop-shipping-xscreensaver/

    Given that item is nearly a decade old, I would say the issues raised
    there are obsolete.

    Blog post was April 2016, apparently complaining about the continued use
    of release 5.30 from September 2014. 19 months old.

    Today, Debian stable has release 6.06 from December 2022, i.e. 27 months
    old.

    So in terms of the Zawinski’s complaint post the situation has deteriorated. Although I think the underlying issue is that he doesn’t
    (or didn’t) believe in stable releases while Debian and its users do.


    I think the real issue is that problems with packaged software in a
    distro are often reported to the developer and not the packager or the
    distro itself as they should be. Jamie was annoyed that Debian users
    would report bugs to him that were only still extant in the very
    out-dated version of xscreensaver that Debian was shipping.

    I'm sure that there are other developers that experience the same thing,
    but are perhaps not as vocal about it as JWZ.

    Personally, I just assume that when I'm using a distro, I will report
    any issues to the distro's maintainers. The only times I would reach out
    to a developer whose software I use is if I want to make a donation in appreciation of their hard work, or perhaps if I had a suggestion for a
    new feature or something.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bud Frede@21:1/5 to Lawrence D'Oliveiro on Tue Mar 25 09:12:12 2025
    Lawrence D'Oliveiro <ldo@nz.invalid> writes:

    On Fri, 21 Mar 2025 09:17:25 +0000, Richard Kettlewell wrote:

    Today, Debian stable has release 6.06 from December 2022, i.e. 27 months
    old.

    So in terms of the Zawinski’s complaint post the situation has
    deteriorated. Although I think the underlying issue is that he doesn’t
    (or didn’t) believe in stable releases while Debian and its users do.

    Remember also that the xscreensaver driver doesn’t work under Wayland, whereas distros like Debian and others are moving heavily to support
    Wayland.


    Xscreensaver becoming obsolete in the future does not mean the problem
    doesn't exist. I'm sure there are other packages with similar issues
    that aren't X-dependent and thus won't become obsolete. It could happen
    to software that uses Wayland too.

    In addition, I feel that we'll continue to see X in use for a while
    yet. I imagine there will also be communities that reject Wayland,
    similar to Devuan rejecting systemd.

    This was just an illustration of how distro's packaging and maintaining
    all the software they make available is not without problems, and is not
    IMO one-size-fits-all.

    I can see why some developers would want something like Flatpak, Snap, AppImage, etc. So far I lean towards not really liking these things, but
    I've been using Debian-derived distros for a long time and am used to
    that style of package management. (Although Arch's pacman is a very nice
    tool too.)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lawrence D'Oliveiro@21:1/5 to Bud Frede on Wed Mar 26 02:13:58 2025
    On Tue, 25 Mar 2025 09:12:12 -0400, Bud Frede wrote:

    Xscreensaver becoming obsolete in the future does not mean the problem doesn't exist. I'm sure there are other packages with similar issues
    that aren't X-dependent and thus won't become obsolete. It could happen
    to software that uses Wayland too.

    Well then, offer one of those as an example, instead of xscreensaver.

    xscreensaver is an illustration that relying on the developer doesn’t necessarily solve the problem.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Bud Frede on Thu Mar 27 08:34:11 2025
    Bud Frede <frede@mouse-potato.com> writes:
    Richard Kettlewell <invalid@invalid.invalid> writes:
    So in terms of the Zawinski’s complaint post the situation has
    deteriorated. Although I think the underlying issue is that he doesn’t
    (or didn’t) believe in stable releases while Debian and its users do.

    I think the real issue is that problems with packaged software in a
    distro are often reported to the developer and not the packager or the
    distro itself as they should be. Jamie was annoyed that Debian users
    would report bugs to him that were only still extant in the very
    out-dated version of xscreensaver that Debian was shipping.

    That seems like a problem with the users choosing to bypass the distribution’s own bug reporting mechanisms.

    19 months being “very out-dated” is JWZ’s viewpoint. It wasn’t the distribution’s view and wasn’t (and still isn’t) the view of a large chunk of end users, who (collectively) often complain about having to
    upgrade.

    Some software does legitimately have a very short upgrade cycle, even disregarding security issues. For example, the timezone database, where
    civil authorities have a tendency to make rather short-notice
    changes. I’m not convinced that a screensaver should really fall into
    this category. But that’s another question.

    I'm sure that there are other developers that experience the same thing,
    but are perhaps not as vocal about it as JWZ.

    Yes, it happens all the time. If you publish software (for free or
    otherwise) people will keep running it longer than you’d like, and they
    will send low-quality support requests and bug reports to whatever bug-reporting or support channel you advertize. Just part of life as a
    software developer; you need to find a strategy for managing it which
    works for you.

    In the case at hand, JWZ was trying to manage it with grumpy code
    comments and blog posts; it doesn’t sound like it was very effective.

    Long ago I was in a conversation with someone about whether a particular distribution’s bug tracking system should be made easier to use. It
    wasn’t particularly user-friendly by the standards of the time, so it
    seemed like a reasonable suggestion. But his view was that the
    distribution had plenty of bug reports already, in fact far more than it
    could address with the resources it had. Spending effort making it
    easier to report bugs would help precisely nobody - the same effort
    should be spent on something else (for example, fixing some bugs).

    Personally, I just assume that when I'm using a distro, I will report
    any issues to the distro's maintainers. The only times I would reach
    out to a developer whose software I use is if I want to make a
    donation in appreciation of their hard work, or perhaps if I had a
    suggestion for a new feature or something.

    Yes, normally the distribution should be the first port of call. And
    Debian’s tooling (e.g. the reportbug command) does try to make that
    easy. But the distribution can’t force its users to behave in any
    particular way.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bud Frede@21:1/5 to Lawrence D'Oliveiro on Thu Mar 20 09:05:18 2025
    Lawrence D'Oliveiro <ldo@nz.invalid> writes:

    On Tue, 25 Feb 2025 08:53:32 -0500, Bud Frede wrote:

    As such, they don't help developers reduce the number of packaging
    formats they have to support.

    Open-source developers don’t have to support any packaging formats. They leave packaging up to maintainers for the specific distros.

    Sometimes that works out well, and sometimes it doesn't. It depends on
    the package maintainer.

    It also leads to situations where the distro has antique packages that
    contain bugs that have since been fixed. The developer typically then
    continues to get bug reports from the users for things that are
    long-fixed.

    This is perhaps one of the more notable issues I've seen: https://www.jwz.org/blog/2016/04/i-would-like-debian-to-stop-shipping-xscreensaver/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lawrence D'Oliveiro@21:1/5 to Bud Frede on Thu Mar 20 22:04:18 2025
    On Thu, 20 Mar 2025 09:05:18 -0400, Bud Frede wrote:

    This is perhaps one of the more notable issues I've seen: https://www.jwz.org/blog/2016/04/i-would-like-debian-to-stop-shipping-xscreensaver/

    Given that item is nearly a decade old, I would say the issues raised
    there are obsolete.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Lawrence D'Oliveiro on Fri Mar 21 09:17:25 2025
    Lawrence D'Oliveiro <ldo@nz.invalid> writes:
    On Thu, 20 Mar 2025 09:05:18 -0400, Bud Frede wrote:
    This is perhaps one of the more notable issues I've seen:
    https://www.jwz.org/blog/2016/04/i-would-like-debian-to-stop-shipping-xscreensaver/

    Given that item is nearly a decade old, I would say the issues raised
    there are obsolete.

    Blog post was April 2016, apparently complaining about the continued use
    of release 5.30 from September 2014. 19 months old.

    Today, Debian stable has release 6.06 from December 2022, i.e. 27 months
    old.

    So in terms of the Zawinski’s complaint post the situation has
    deteriorated. Although I think the underlying issue is that he doesn’t
    (or didn’t) believe in stable releases while Debian and its users do.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lawrence D'Oliveiro@21:1/5 to Richard Kettlewell on Fri Mar 28 00:52:59 2025
    On Thu, 27 Mar 2025 08:34:11 +0000, Richard Kettlewell wrote:

    19 months being “very out-dated” is JWZ’s viewpoint. It wasn’t the distribution’s view and wasn’t (and still isn’t) the view of a large chunk of end users, who (collectively) often complain about having to upgrade.

    This is why you have such a range of different styles of upgrade frequency among distros. In Debian itself, you have a “stable” release (about every
    2 years), with in-between rolling “testing”, or even “unstable” if you want to live right on the edge. Ubuntu and Fedora come out with entirely
    new releases every six months. And so on. Different strokes for different folks: you are free not only to choose, but also to change your mind.

    Some software does legitimately have a very short upgrade cycle, even disregarding security issues. For example, the timezone database, where
    civil authorities have a tendency to make rather short-notice
    changes. I’m not convinced that a screensaver should really fall into
    this category. But that’s another question.

    The timezone database contains no code, only data in the form of
    declarative rules about timezone offsets and names and daylight saving transitions, and the history of when particular rules came into effect or
    were replaced. That makes it easier to keep up-to-date.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)