cleaning up the unofficial rpm repositories
Hi, Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line. Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything. Question: * Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on. Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
Hi, If you prefer twitter polls instead of writing e-mails, here is your chance to cast your vote: https://twitter.com/PCzanik/status/1169511289246404609 🙂 Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com> Sent: Thursday, September 5, 2019 9:13 AM To: syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu> Subject: [syslog-ng] cleaning up the unofficial rpm repositories CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi, Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line. Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything. Question: * Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on. Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsyslog-ng.com%2Fcommunity%2F&data=02%7C01%7Cpeter.czanik%40oneidentity.com%7C0f5f7086d6ae4e5762f508d731d0a179%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637032644462488996&sdata=z7w1mBKgI6nWHk60cQs11FkV4%2BS4a3DLIQ41%2Fz%2BO%2FK0%3D&reserved=0> https://twitter.com/PCzanik<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2FPCzanik&data=02%7C01%7Cpeter.czanik%40oneidentity.com%7C0f5f7086d6ae4e5762f508d731d0a179%7C91c369b51c9e439c989c1867ec606603%7C0%7C0%7C637032644462488996&sdata=5GhpZuPQkdbFyuuP2XeFhH%2FJNYA%2BMPF3v5GNqT1hI1Q%3D&reserved=0>
Hi! Don't really see the importance of having separated repositories for each syslog-ng version as you don't provide updates... (I mean without backporting bugfixes to these repos, this is just a version lock). But version lock does not require separated repositories: users can pin (yum versionlock eg.) a specific version. The result is the same... All in all, these repos do not resolve the LTS vs. rolling release issue (which is not really liked some of the community members :) ). L. ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com> Sent: Thursday, September 5, 2019, 09:14 To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] cleaning up the unofficial rpm repositories Hi, Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line. Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything. Question: * Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on. Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
I use the OS-provided syslog-ng version for normal systems but for specific cases that need a newer version (centralized logging, web servers, etc) I pin something newer using config management (puppet, chef, etc). This is why we mirror the copr repositories. Considering that fixes are not back-ported across all of these revisions I feel that one year (or six revisions) is more than enough. Your LTS version is usually whatever is maintained by your OS distribution as opposed to something from the syslog-ng guys, but that's up to them to decide. On Thu, Sep 5, 2019 at 10:45 AM Laszlo Budai <laszlo.budai@outlook.com> wrote:
Hi!
Don't really see the importance of having separated repositories for each syslog-ng version as you don't provide updates... (I mean without backporting bugfixes to these repos, this is just a version lock).
But version lock does not require separated repositories: users can pin (yum versionlock eg.) a specific version.
The result is the same...
All in all, these repos do not resolve the LTS vs. rolling release issue (which is not really liked some of the community members :) ).
L.
------------------------------ *From:* syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com> *Sent:* Thursday, September 5, 2019, 09:14 *To:* syslog-ng@lists.balabit.hu *Subject:* [syslog-ng] cleaning up the unofficial rpm repositories
Hi,
Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line.
Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything.
Question:
- Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on.
Bye,
Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Agreed. Trying to get 100's of systems upgraded currently requires a new repo to be added to each host. Kind of a pain. The repo structure currently in place pushes a bunch of work onto the package consumers, for what I can see is for no benefit. Just a make work project :-( As a result, our organization sucks up all of the repos and combines them together. Deleting your repo does not remove any packages from my joined repo, so it makes no difference to me. Evan. On 9/5/19 7:45 AM, Laszlo Budai wrote:
Hi!
Don't really see the importance of having separated repositories for each syslog-ng version as you don't provide updates... (I mean without backporting bugfixes to these repos, this is just a version lock).
But version lock does not require separated repositories: users can pin (yum versionlock eg.) a specific version.
The result is the same...
All in all, these repos do not resolve the LTS vs. rolling release issue (which is not really liked some of the community members :) ).
L.
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- *From:* syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com> *Sent:* Thursday, September 5, 2019, 09:14 *To:* syslog-ng@lists.balabit.hu *Subject:* [syslog-ng] cleaning up the unofficial rpm repositories
Hi,
Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line.
Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything.
Question:
* Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on.
Bye,
Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ <https://syslog-ng.com/community/> https://twitter.com/PCzanik
Evan - run a configuration management agent on your hosts, you can "one click" roll out packages, repos, and config. Some common ones are puppet, chef, terraform, ansible. It's a bit of a time investment at first but an incredible time savings in the long run. On Thu, Sep 5, 2019 at 11:06 AM Evan Rempel <erempel@uvic.ca> wrote:
Agreed. Trying to get 100's of systems upgraded currently requires a new repo to be added to each host. Kind of a pain. The repo structure currently in place pushes a bunch of work onto the package consumers, for what I can see is for no benefit. Just a make work project :-(
As a result, our organization sucks up all of the repos and combines them together. Deleting your repo does not remove any packages from my joined repo, so it makes no difference to me.
Evan.
On 9/5/19 7:45 AM, Laszlo Budai wrote:
Hi!
Don't really see the importance of having separated repositories for each syslog-ng version as you don't provide updates... (I mean without backporting bugfixes to these repos, this is just a version lock).
But version lock does not require separated repositories: users can pin (yum versionlock eg.) a specific version.
The result is the same...
All in all, these repos do not resolve the LTS vs. rolling release issue (which is not really liked some of the community members :) ).
L.
------------------------------ *From:* syslog-ng <syslog-ng-bounces@lists.balabit.hu> <syslog-ng-bounces@lists.balabit.hu> on behalf of Peter Czanik (pczanik) <Peter.Czanik@oneidentity.com> <Peter.Czanik@oneidentity.com> *Sent:* Thursday, September 5, 2019, 09:14 *To:* syslog-ng@lists.balabit.hu *Subject:* [syslog-ng] cleaning up the unofficial rpm repositories
Hi,
Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line.
Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything.
Question:
- Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on.
Bye,
Peter Czanik (CzP) <peter.czanik@oneidentity.com> <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
We are currently on 3.12. We are planning to upgrade to the latest version very soon, my colleague is out today so I can't get an update on timeframe, but wanted to bring this to your attention. Thank you for the heads up! Alicia Smith On Thu, Sep 5, 2019 at 2:14 AM Peter Czanik (pczanik) < Peter.Czanik@oneidentity.com> wrote:
Hi,
Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line.
Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything.
Question:
- Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on.
Bye,
Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Alicia Smith @phrozyn Sr. Information Security Engineer asmith@mozilla.com
Hi, Thanks for all the feedback. Based on this I only do a partial cleanup now: * delete packages for any end of life Linux distros (Fedora 28 and earlier, openSUSE 15.0 and earlier) * delete packages for rolling releases (Fedora Rawhide, openSUSE Tumbleweed) older than a year I keep all packages for RHEL/CentOS/SLES now, but plan to clean up that area as well. Lets call that spring cleaning, so we have half a year left 🙂 We have time to discuss until spring, but my current plan is: * keep enterprise (RHEL/SLES) packages for three years * keep regular distro packages until distro is live (1-1.5 years) I keep creating new repositories for new releases, just as I'm doing now. This seems to be the preferred way, at least according to many personal discussions, as it gives an illusion of LTS, even if older releases normally don't receive fixes. For those who don't mind occasional bugs and incompatible changes breaking their configurations, I plan to provide a syslog-ng-stable repo, but that will be a separate e-mail. Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik ________________________________ From: Peter Czanik (pczanik) Sent: Thursday, September 5, 2019 9:13 AM To: syslog-ng@lists.balabit.hu <syslog-ng@lists.balabit.hu> Subject: cleaning up the unofficial rpm repositories Hi, Ever since I started my unofficial rpm packages for (open)SUSE and Fedora/RHEL/CentOS I created a new repository for each new release and never deleted them. Of course OBS and Copr guys did sometimes clean ups, so Fedora and openSUSE packages for long end of life distributions got deleted. But for the rest there are still syslog-ng 3.5 packages on-line. Not everyone likes to update syslog-ng every second month, so I keep the current workflow and create a new repo for each new release. This way your syslog-ng.conf or package management is not accidentally broken at a random time with a new update, you have a chance to test a new release thoroughly before upgrading. On the other hand I plan to keep only a year worth of releases instead of everything. Question: * Is there anyone, who needs packages older than one year? With the one year limit I'd delete anything older than 3.17 and delete 3.17 as well, once 3.24 is out, and so on. Bye, Peter Czanik (CzP) <peter.czanik@oneidentity.com> Balabit (a OneIdentity company) / syslog-ng upstream https://syslog-ng.com/community/ https://twitter.com/PCzanik
participants (5)
-
Alicia Smith
-
Evan Rempel
-
Laszlo Budai
-
Nik Ambrosch
-
Peter Czanik (pczanik)