[pkg-go] Security support for packages written in Go

Dmitry Smirnov onlyjob at debian.org
Wed Apr 6 02:37:10 UTC 2016


On Tuesday, 5 April 2016 10:08:04 PM AEST Peter Colberg wrote:
> On Wed, Apr 06, 2016 at 09:24:20AM +1000, Dmitry Smirnov wrote:
> > Unless we can exclude Golang from security support I think we should not
> > ship any Golang applications with next stable release.
> 
> I really hope not, that would be a real shame.

I know. :(


> All the work that we did together on acmetool (#817091) would have
> been for nothing.

Nope. Even installing manually from "testing" provides significant advantages 
and added value comparing to installing from outside of Debian repositories.


> The only reason I went through the trouble of
> packaging all these Go modules is to have acmetool in the stretch
> release so it can be used on stable servers.

I feel your pain. Over last 9 months I've invested even greater effort to 
packaging of containers related Golang software.

Yet we can provide anything we want to users of stable releases through 
official backports:

    http://backports.debian.org/

-- 
Regards,
 Dmitry Smirnov.

---

The surest way to corrupt a youth is to instruct him to hold in higher
esteem those who think alike than those who think differently.
        -- Friedrich Nietzsche
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-go-maintainers/attachments/20160406/9634b886/attachment-0001.sig>


More information about the Pkg-go-maintainers mailing list