Showing posts with label Ubuntu. Show all posts
Showing posts with label Ubuntu. Show all posts

Monday, April 14, 2008

PackageKit Vs. DPKG

Source: Using PackageKit in GNOME programs



Yet another flamewar has erupted on the internet. (Surprise!)

Backstory:
A while ago Richard Hughes was looking at the various graphical programs for maintaining a desktop linux system (pirut, pup, Yum Extender, KYum, up2date, synaptic, YaST, Zypper, rpmdrake, Smart Package Manager, porthole) and thought there may be a bit of duplication of work going on here, so he started yet another package management framework.

Now he didn't do this just because he didn't like the other applications, but to combine their effort and to start fresh. By developing a common back end and front end for package management a common interface for the users is realized. By rewriting from scratch the interface can be designed to use newer technologies like PolicyKit to provide additional security. With this PackageKit was born.

"PackageKit is a system designed to make installing and updating software on your computer easier. The primary design goal is to unify all the software graphical tools used in different distributions, and use some of the latest technology like PolicyKit to make the process suck less." - PackageKit intro from the PackageKit Site

Well, as you may know, PackageKit has really taken off. It still is rather bare bones, but so far there are 12 different back ends with at least 6 of them in a usable state. For each one of these backends PackageKit presents a common command line, graphical, library, and DBUS API and therefore also be deeply integrated with other applications such as Gnome and KDE.

The offer
So, to help gain interest in this great new library/daemon/gui/API Richard Hughes posted on his blog that he would be willing to code (or help code) package kit based functionality into existing applications.

Imagine, that when you want to install an extension for epiphany you could launch a PackageKit based extension manager that would show you all the extensions available in your distro's repositories and provide all the tools to install, & update these extensions? Now you don't have to leave epiphany to launch a different package management app to install the extension saving you time, and also no matter what backend package system your distro runs (as long as the backend has been coded) the user interface is exactly the same for everyone. This would be a huge leap in usability, and a great idea.

Troll spotted!:
But guess what Jason D. Clinton looked over PackageKit's implementation and declared it to be incompatible with dpkg/apt. But he didn't stop there, he blamed Red Hat for segregating the market by not being able to use anything invented out of house.

Chaos ensued, (as you could imagine.)

A few key points though:

  • Richard Hughes started PackageKit before he was hired by Red Hat, so PackageKit is not a Red Hat invention. Red Hat is only guilty of hiring a developer with vision.
  • Foresight Linux uses PackageKit as their default package manager. If you've ever tried to understand their Conary software packaging system you will soon find out it is unlike anything out there. This proves that PackageKit can be used in systems completely unlike RPM.
  • Bashing Red Hat like that is unfair. I highly doubt any other company in the world comes close to the contributions Red Hat makes back to Linux and its associated applications/technologies.


Outcome:
I think that tools like PackageKit are the way of the future and it's kind of sad to see such negative press about such a great idea.
The fact that dpkg/apt is designed to allow random terminal input during the package management process is really dumb from a desktop perspective and alternatives should be enforced (such as debconf).
Also, the "problems" with the dpkg/apt backend should be resolved as soon as possible because of the huge political impact. dpkg/apt = Debian = Ubuntu, without those two distributions behind you, your project is really not for every distribution, it is only for distributions that don't use dpgk/apt.


Related:
Rob Taylor's response
PackageKit's Site
Jason D. Clinton's initial post
Jason D. Clinton's follow up post
J.M. Maurer response
Richard Hughes' (the main developer for PackageKit) mocking of the whole issue
Further mocking of the issue by Richard Huges
Havoc Pennington's (past Red Hat and Debian Dev) response

Thursday, July 12, 2007

Nouveau Driver 2D performance exceeds Nvidia driver

Source: Nouveau 2D progress

Free Image Hosting at www.ImageShack.us

Richard Hughes has just published results from the gtkperf performance test.

Results:

Nouveau: 24.86 seconds
NV: 40.78 seconds


Which is a 64% improvement over the existing Nvidia sponsored nv driver.

This is a very limited 2D only test and does not represent 3D performance but it does show that the developers are making good progress.

The Nouveau driver is quickly gaining support within the various distros. Fedora 7 shipped with an alpha version of the driver and Ubuntu has committed to assisting and supporting the project.


Related:
Nouveau Driver Homepage

Updated:
To better show the improvements here is a benchmark comparing the free NV driver to the closed source Nvidia driver: NVIDIA Xserver driver Benchmark
In this benchmark (using a GeForce2 MX) the closed source Nvidia driver has a performance gain of 36% over the free NV driver. As Nouveau driver had a 64% improvement it even exceeds the Nvidia driver.

These figures should not really be treated as equal as they are using completely different Nvidia drivers. (6xxx series to hopefully the new 9x or 10x drivers.

Monday, July 9, 2007

New SSL secured Apt in works for Debian/Ubuntu



As part of the new Gusty 7.10 release of Ubuntu, Apt has be upgraded to the latest 0.7.x series slated for Lenny. Some of the benefits of this new apt have already been seen in Ubuntu. The automatic dependency removal, the unattended upgrades, and the dpkg breaks field.

One upgrade in this latest series is the addition of a https transport method. This transport method should help to further increase apt's security.

Already with Etch (and many past releases of Ubuntu) secure apt has been included. Secure apt includes cryptological signed packages. These signed packages ensure that they are the ones the developers compiled, ensuring security. This was a major step forward in apt security.

The addition of the apt-transport-https package allows for ssl secured communication between the webserver and the apt client. Now with secure apt ensuring that the packages are what they say they are, and https secured communication, the entire debian/ubuntu package stack is more secure.



Related:
Secure Apt
Apt 0.7.0 Changes
Debian: apt-transport-https
Ubuntu: apt-transport-https

Thursday, July 5, 2007

Vista vs. Linux vs. Mac OSX 90 Day Vulnerability

Source: Windows Vista - 90 Day Vulnerability Report

Free Image Hosting at www.ImageShack.us

Recently (March 2007) there was a report (pdf) released comparing the 90 day vulnerabilities of all the major operating systems. The report compares RHEL 4, Ubuntu 6.06, Novell SLED 10, Mac OSX 10.4, Windows XP, Windows Vista. One dramatic result of this is the large number of vulnerabilities for the various linux distros compared to windows. Newer articles have come out and have shed more light on this issue. Most of the reasons come from the huge number of programs installed in the typical linux distro as compared to windows. Also the enterprise class distros have a policy of very long freeze cycles before release where some security advisories are not corrected. This all adds up to a test that does not properly compare the actual security of the different operating systems.

Related:
List of all RHEL 4 vulnerabilities
List of Ubuntu 6.06 vulnerabilities
Windows Vista 6 month report


Wednesday, July 4, 2007

DPotD: gnu units

Source: Debian Package of the Day - gnu units: units converts quantities between different scales



Debian Package of the Day post about gnu units. Gnu units is a cool program that converts various units. It has an interactive command prompt interface that is easy to use.

Related:
Ubuntu package
Debian package