On 21.7.2015 19:47, Corey Sheldon wrote:
+1 for not allowing EOL
Corey W Sheldon Freelance IT Consultant, Multi-Discipline Tutor Ameridea LLC, Co-Founder, CTO (p) +1 (310) 909-7672
"One must never underestimate the power of boredom...from which
creativity and laziness are borne, which can spark great works of chaos and genius."
Find Me on any of the sites I teach /frequent: https://gist.github.com/linux-modder/ac5dc6fa211315c633c9
Tox: corey84@toxme.se 9357BC6A5944A08AFC7D1EFFD61F6A73B9EABF8B2FB84ACF1DAC9A1A4D0A4705FFCCD0E5499B PGP: 718BF597 http://pgp.mit.edu/pks/lookup?op=get&search=0xE958C5D6718BF597 FP: 2930 99EB 083D D332 0752 88C4 E958 C5D6 718B F597
On Tue, Jul 21, 2015 at 12:12 PM, Daniel P. Berrange berrange@redhat.com wrote:
On Tue, Jul 21, 2015 at 11:05:19AM -0500, Adam Miller wrote:
On Mon, Jul 20, 2015 at 2:33 PM, Chris Murphy lists@colorremedies.com
wrote:
Isn't it true the install media ISOs are available indefinitely? And if so the security cat is already out of the bag, so that's not a very good argument. I'd say if we wanted to do something better it would be an image that's usable for both VM and containers, and would be the state of that version at the time it went EOL, i.e. it has all available updates baked into it. And then de-emphasize the original ISO as the way to run older versions of Fedora.
It is true that install media ISOs are available forever, but we don't go backwards in time and create vagrant boxes or IaaS cloud qcow images of old EOL'd Fedora releases that went EOL before those technologies existed and/or became popular. I don't see why we would start doing so now for docker images.
The security downsides of officially distributed docker images for EOL versions are already mentioned, and i think that alone should be enough to kill the idea. Beyond that though, making these EOL images available is going to consume a non-zero amount of maintainer time for at least one person, thus inevitably diverting resources away from making current non-EOL Fedora better.
Avoiding maintainer time being sucked up on old releases is why we EOL them in the first place, and the rationale for existence of long term support alternatives like RHEL & CentOS. So I don't think we should consider cloud images any differently in that respect. Fedora is about being at the cutting edge and that's where we should focus our limited resources, even for cloud images.
If people want cloud images with older software versions than are in the current supported Fedora, they should be looking for cloud images from CentOS/RHEL instead.
All EOL software should die by a violent death.
We have enough nightmares caused by buggy software which is not-yet EOL, please do not add another pile of ...