Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Operating Systems Software Linux

Linux Distributions' Tracking of Upstream Projects Examined 132

An anonymous reader writes "Linux distributions track upstream projects, releasing a particular version with each official release. But how far behind the latest versions do these releases linger? Scott Shawcroft did an interesting new study into this relationship between distributions and upstream projects. Shawcroft says: 'Over the last 10 months I've been working on Linux evolution research. Similar to distrowatch, I track the current versions of packages in a number of distributions and the current upstream version. Based on that data I then graph a number of metrics to understand the relationship between upstream and downstream.' His presentation on the topic scheduled for [this] week's open source convention, OSCON, should provide an interesting insight into that relationship. Currently he is tracking 20 projects including the Linux kernel, Firefox, GCC, OpenSSH and GNOME on Arch, Debian, Fedora, Gentoo, openSUSE, Sabayon, Slackware, and Ubuntu."
This discussion has been archived. No new comments can be posted.

Linux Distributions' Tracking of Upstream Projects Examined

Comments Filter:
  • by Anonymous Coward on Monday July 20, 2009 @03:37PM (#28760569)

    In Debian, all software in the repositories is frozen when a release is cut (e.g. Lenny). Only security updates are applied. If the author is going for accuracy, he should track Debian Testing, which gets updated frequently with new releases of various packages. The name "testing" is somewhat misleading. Packages in testing are considered stable enough for everyday use. The stable branch is intended to minimize updates, which is what you'd want for servers.

  • fair comparison ? (Score:3, Informative)

    by cheap.computer ( 1036494 ) on Monday July 20, 2009 @03:39PM (#28760603)
    I am not sure if it is fair to compare Ubuntu Jaunty with Fedora, IIRC RHEL is a stable release so is Ubuntu Jaunty, and fedora is more like a dev release that tracks upstream closely. Similarly, Ubuntu Karmic is the dev version that tracks upstream closely before a stable cut of it is released. So probably comparing fedora to Ubuntu Karmic is a fair comparison.
  • by just_another_sean ( 919159 ) on Monday July 20, 2009 @04:19PM (#28761197) Journal

    Yeah my take on it is 95% of Debian has been around for a while and
    has been field tested so it's probably a good fit for that mission
    critical server your about to build.

    I don't need the latest and greatest most of the time, just something
    that I know, with confidence, will work well for a particular purpose.

  • by QuoteMstr ( 55051 ) <dan.colascione@gmail.com> on Monday July 20, 2009 @04:30PM (#28761417)

    I don't know about those distributions, but I backport packages from Fedora to RHEL frequently. It's simple, really: just grab the fedora srpm and run rpmbuild on it. Most of the time, it'll work fine. Occasionally, you might need to adjust the spec file to accommodate some slight differences, but it's not a big deal. You end up with a package that integrates nicely with the package manager, satisfies dependencies in the normal way, and so on.

    Also, I'm not sure why the parent is moderated flamebait. It's a legitimate to want to run a stable distribution, but use later versions of particular packages.

  • by godrik ( 1287354 ) on Monday July 20, 2009 @04:59PM (#28761865)

    The point in ubuntu is being always a couple of months late. You probably want to use a more up to date distribution such as debian unstable (note: unstable does not mean will crash after a reboot, just that they may contain bug).

    it is also possible to keep a mixed system, that is to say, use mainly debian stable but borrow some packages from unstable. It uses teh preferences options of APT and you can find information on the debian website http://www.debian.org/doc/manuals/apt-howto/ch-apt-get.en.html [debian.org]

    BTW, there exist an even more closer to upstream distribution of debian which is called experimental. I would not recommend a non debian developer to use that but it can be useful sometimes.

  • gentoo (Score:4, Informative)

    by Anonymous Coward on Monday July 20, 2009 @05:38PM (#28762447)

    I think labeling gentoo at 75% obsolete is rather crazy. gentoo gives you the choice between the stable, and the latest and greatest, and they can be mixed too. I got the newest kernel just days after it was released, no problem at all.

  • by Locklin ( 1074657 ) on Monday July 20, 2009 @06:07PM (#28762777) Homepage

    There are PPA repositories for those masochistic enough to want to work with nightly builds. For instance the following repo has nightly builds of Firefox.

    deb http://ppa.launchpad.net/ubuntu-mozilla-daily/ppa/ubuntu [launchpad.net] jaunty main
    deb-src http://ppa.launchpad.net/ubuntu-mozilla-daily/ppa/ubuntu [launchpad.net] jaunty main

    It's also possible to add Debian unstable or testing to your repositories, but set the preferred distribution to Jaunty (Package>Preferences>Distribution in synaptic). Then you can selectively install certain packages from unstable.

  • Re:What's Firefox? (Score:3, Informative)

    by dondelelcaro ( 81997 ) <don@donarmstrong.com> on Monday July 20, 2009 @07:43PM (#28763751) Homepage Journal

    I'm still kind of disappointed that they haven't upgrade IW to 3.5 though.

    It's available in experimental. See packages.debian.org/iceweasel [debian.org] and bug #535192 [debian.org].

  • Re:What's Firefox? (Score:1, Informative)

    by Anonymous Coward on Monday July 20, 2009 @09:46PM (#28764793)

    Arch is pretty nice, if you want a minimalist distro. It is fine for a desktop, but you're going to have to do a bit of work at first. I'm using it on multiple servers.

  • by RiotingPacifist ( 1228016 ) on Monday July 20, 2009 @10:05PM (#28764941)

    It's brain dead easy on Windows to try beta software, and uninstall it if it breaks something. What am I missing on Linux?

    /opt
    seriously in a worst-case scenario linux package management becomes the same as windows package managment (you install and maintain all versions yourself).

    that I want to always have the latest released version

    You are on the wrong disto then,
    If you want the latest version of everything, you definetly want a rolling release distro (sid/arch) of those if you want cutting edge i suggest arch.
    If you just want the latest stable version of a few apps, then: /opt and maintaining them yourself (as you would under windows)
    AUR, PPA, (other people compile them and host them, then apt updates them, most distros have these but they are particularly prevevalent on ARCH)
    grokk apt/yum and figure out how to safely use package from a cutting edge release (e.g sid/F12) alongside your stable release.

    Ideally all projects would host their own cutting-edge/stable repo, however while most of the time the same binary will run across most distros:
    1) packaging it up and providing the correct metadata for each release is a PITA, although opensuse have a tool that will do this for you, but nobody seams to bother :(
    2) testing against all distos is a major PITA, its much easier to let somebody familiar with the distro do it (hence PPAs/AUR are quite good)
    3) bug spam, not to be too harsh, but if a newbie can't figure out how to install the vanilla version of your releases, they are probably not going to understand enough about their system to understand when something is/isn't your fault and you end up with bugs opened against the wrong projects.

  • by TanNewt ( 794064 ) on Monday July 20, 2009 @11:34PM (#28765603) Homepage
    Scott here, yeah there is a lot more analysis to do besides what is on the front page. See my thesis [tannewt.org] for more details on the underlying data and email me analysis ideas.
  • by TanNewt ( 794064 ) on Monday July 20, 2009 @11:43PM (#28765667) Homepage
    Scott here. This is not necessarily true. The lag is the time since the oldest new release. So for it to approach 51 weeks each project would have had to release a newer version upstream immediately after the lenny freeze. Email me and we can look further into this.
  • by TanNewt ( 794064 ) on Monday July 20, 2009 @11:45PM (#28765677) Homepage
    Scott here. There are definitely better metrics we can derive from the underlying data. See my thesis [tannewt.org] for more details and email me your ideas.
  • by TanNewt ( 794064 ) on Monday July 20, 2009 @11:49PM (#28765697) Homepage
    This research is ongoing. Email me (on the website) and we can add code to collect data from more distros.
  • by TanNewt ( 794064 ) on Monday July 20, 2009 @11:52PM (#28765715) Homepage
    Scott here. Yeah, there is data for older distributions, its just not on the front page. Look in the OSCON slides [tannewt.org] or my thesis [tannewt.org].
  • by TanNewt ( 794064 ) on Tuesday July 21, 2009 @12:02AM (#28765769) Homepage
    Scott here. You are totally right. These are all holes I'm aware of in the analysis. However, the problem gets much more difficult if you start considering patches and general stability. I don't deal with that because the problem already needs much more work. However, in the future, I'd be willing to explore other metrics. Email me to help out.
  • Re:gentoo (Score:2, Informative)

    by TanNewt ( 794064 ) on Tuesday July 21, 2009 @12:05AM (#28765789) Homepage
    Scott here. You are right but I consider unstable keyworded packages as the "future" version of Gentoo. See the website again for the metrics on it.
  • by onefriedrice ( 1171917 ) on Tuesday July 21, 2009 @03:17PM (#28773441)

    Some distros (notably Slackware, Mandriva, and Sabayon themselves) went from being based on other distros and started at some point doing the package integrations themselves.

    I could be wrong, but I believe Sabayon still uses portage and the Gentoo portage repository directly. They potentially have their own packages in their overlay, but AFAIK you can't really say they do the package integrations themselves. They still very much rely on upstream Gentoo.

Beware of Programmers who carry screwdrivers. -- Leonard Brandwein

Working...