On Sunday 03 April 2005 14:39, Patrick Useldinger wrote:
Hi,
Hi.
as Slackware seems to be on the decline, I am
currently looking for
alternatives to consider in case Slackware stops existing altogether.
I doubt that slackware will die.
Gentoo comes very close to a lot of my criteria:
excellent security
information, excellent documentation, an active community, support
for several processors and a large central software repository
featuring not only the latest version but also older, perhaps more
stable versions.
My main concern is the source-based approach. I developed an allergy
towards source-based software installation when compiling KDE 3.2 for
FreeBSD, and I expect Gentoo to be no better in that respect. I know
that a stage-3 install will save me from compiling anything but the
kernel at first, but an upgrade will certainly involve hours of
waiting for make and portage to finish. No more "oh, wait, I'll just
install this program and then we may go on".
I think there is also binary package, like bsd have.
So what's the use? It appears that Gentoo is not
noticeably faster
than other distros. One advantage of the source-based approach is
certainy the ability to configure each soft, if you wish to, perhaps
yielding in smaller and maybe more secure binaries. But then again,
disk space is cheap and having to have a C compiler on a production
machine is not always a security advantage either.
Disk space is not the problem, as compiling software take more place
than using binary. And since almost all distro provides a easy way to
install a compiler, not having it is not a so good protection.
However, having the choice of features is interesting. If someone do not
want to have ipv6 for some reason, he can disable, and it may stop some
problem, either security or stability. Or if he really need to have it,
he can enable it, while it would not be as easy on a binary package
distribution when the maintener disable it.
Hence, my questions:
-1- Does anybody use Gentoo, and what is their experience?
Not me :)
I used it on a chroot, just to try. It was nice, but the lack of
granularity ( ie no separation between library and header ), and my
slow harddrive stopped me from keeping it up to date. However, with a
decent computer, I think it may be a nice distro, something different
and interesting.
I do no like webforum, so I guess I would not have been able to immerge
myself in the community, which is one of my main reason of using my
current distro.
-2- Has anybody really a punchy argument why
source-based software
installation is useful?
Because you can choose the precise version of the component you use for
your server.
Right now, if you are using a binary package distro, like Mandrakelinux,
Debian, or Fedora, you need to use the version of the package that the
vendor choosed for you.
For example, no way to use samba3 on woody, except by backporting. And
backport is not a perfect solution when you start to mix them.
Using emerge somehow ease the backporting.
You can have stable software as a fondation, and you can choose to use
more recent versions of some other servers, even if they are not
labeled as production ready by the gentoo community ( ie unmasked ).
A gentoo dev explained to me that unless debian and other distros,
software are not migrated from the unstable branch to the "testing" or
"stable" branch by a automated script, but people first need to do a
report to say "ok, this software works here, I use this and this as
flags". Once enough peoples have validated the version, it is
"unmasked" by the developer, ie labeled as ready for production
( masked packages are like the unstable/developement version of others
distros ).
However, nothing prevent you to install a masked package on your gentoo,
even if no other version are masked ( and if it works, to write a quick
report, and even if it do not work ).
This way, you can test the software one by one, and not the distro as a
whole.
Having a source based distro also mean you can have the package as soon
as the source are avaliable ( and that you finish to compile ), that
may be interesting in order to gain some time when testing a product or
a server ( and it may be also easier to do than compiling by yourself,
since you can always forget a step ).
One thing that is not great is the lack of security backport. A security
update is usually a update to the version where the Changelog say
"security update" and no patching is done on older versions.
I do not think it is good for a production server to have version
updates ( like using debian testing on a critical server ).
Again, this may have changed, I didn't look.
--
Mickaƫl Scherer
On the importance to respond to proposal email :
http://www.nntp.perl.org/group/perl.bootstrap/1127