[arch-dev-public] Moving KDE3 and Gtk1 from [extra]
Hi, KDE3 and Gtk1 are pretty old by now. Upstream development has stopped and the few pages that still needs the "kdelibs3" or "gtk" package seems to be of less importance. The topic was discussed briefly on IRC and there were only positive comments about making this move. One of the many arguments for moving them is that when upstream development stops, we don't want to take on the responsibility of fixing security problems with kde3/gtk1. So, can we move kdelibs3 and gtk from [extra] to either [community] or AUR? Here are the packages that depends on kdelibs3 (maintained by Eric Bélanger), together with the name of the current maintainer(s): kleansweep, Sergej Pupykin kovpn, Sergej Pupykin ksniffer, Sergej Pupykin ktechlab, Sergej Pupykin pwmanager, Sergej Pupykin qalculate-kde, Eric Bélanger tork, Felix Yan Here are the packages that depends on gtk (maintained by Eric Bélanger): dfm, Sergej Pupykin gdk-pixbuf, Sergej Pupykin imlib, Eric Bélanger kiwi, Federico Cinelli lib32-gtk, Pierre Schmitz madman, Sergej Pupykin manedit, Giovanni Scafora xmms, Eric Bélanger libdv (optional+make), Jan de Groot twin (optional), Sergej Pupykin librcc (make), Sergej Pupykin The only two packages I think might be worth extra concern here is: * imlib: needed by dfm, fvwm (should be possible to compile without depending on imlib), kuickshow and tksystray. * libdv: used by a lot of packages. gtk is listed as both optional and a make dependency. I assume this means that it can be compiled without Gtk1. Which packages should be moved to [community] or AUR as a result of kdelibs3 and gtk being moved, is up for discussion. I think the timing is right for this and there seems to be consensus that moving them is a good idea. -- Best regards, Alexander Rødseth xyproto / TU
On Fri, 4 Apr 2014 17:09:47 +0200 Alexander Rødseth <rodseth@gmail.com> wrote:
Hi,
KDE3 and Gtk1 are pretty old by now. Upstream development has stopped and the few pages that still needs the "kdelibs3" or "gtk" package seems to be of less importance.
The topic was discussed briefly on IRC and there were only positive comments about making this move.
One of the many arguments for moving them is that when upstream development stops, we don't want to take on the responsibility of fixing security problems with kde3/gtk1.
So, can we move kdelibs3 and gtk from [extra] to either [community] or AUR?
Here are the packages that depends on kdelibs3 (maintained by Eric Bélanger), together with the name of the current maintainer(s):
kleansweep, Sergej Pupykin kovpn, Sergej Pupykin ksniffer, Sergej Pupykin ktechlab, Sergej Pupykin pwmanager, Sergej Pupykin qalculate-kde, Eric Bélanger tork, Felix Yan
Here are the packages that depends on gtk (maintained by Eric Bélanger):
dfm, Sergej Pupykin gdk-pixbuf, Sergej Pupykin imlib, Eric Bélanger kiwi, Federico Cinelli lib32-gtk, Pierre Schmitz madman, Sergej Pupykin manedit, Giovanni Scafora xmms, Eric Bélanger libdv (optional+make), Jan de Groot twin (optional), Sergej Pupykin librcc (make), Sergej Pupykin
The only two packages I think might be worth extra concern here is:
* imlib: needed by dfm, fvwm (should be possible to compile without depending on imlib), kuickshow and tksystray.
* libdv: used by a lot of packages. gtk is listed as both optional and a make dependency. I assume this means that it can be compiled without Gtk1.
Which packages should be moved to [community] or AUR as a result of kdelibs3 and gtk being moved, is up for discussion.
I think the timing is right for this and there seems to be consensus that moving them is a good idea.
Neither of these packages is crucial enough to justify shipping so old libraries in the official repositories. There are good alternatives to XMMS and other packages like qalculate can just disable GTK1 support. +1. -- Bartłomiej Piotrowski http://bpiotrowski.pl/
On Fri, Apr 4, 2014 at 11:09 AM, Alexander Rødseth <rodseth@gmail.com>wrote:
Hi,
KDE3 and Gtk1 are pretty old by now. Upstream development has stopped and the few pages that still needs the "kdelibs3" or "gtk" package seems to be of less importance.
The topic was discussed briefly on IRC and there were only positive comments about making this move.
One of the many arguments for moving them is that when upstream development stops, we don't want to take on the responsibility of fixing security problems with kde3/gtk1.
So, can we move kdelibs3 and gtk from [extra] to either [community] or AUR?
Here are the packages that depends on kdelibs3 (maintained by Eric Bélanger), together with the name of the current maintainer(s):
kleansweep, Sergej Pupykin kovpn, Sergej Pupykin ksniffer, Sergej Pupykin ktechlab, Sergej Pupykin pwmanager, Sergej Pupykin qalculate-kde, Eric Bélanger tork, Felix Yan
I prefer the GUI of qalculate-kde but I could live with qalculate-gtk. I use this not very often. Therefore I wouldn't mind removing kdelibs3 from the repos. We might also remove qt3 as well.
Here are the packages that depends on gtk (maintained by Eric Bélanger):
dfm, Sergej Pupykin gdk-pixbuf, Sergej Pupykin imlib, Eric Bélanger kiwi, Federico Cinelli lib32-gtk, Pierre Schmitz madman, Sergej Pupykin manedit, Giovanni Scafora xmms, Eric Bélanger libdv (optional+make), Jan de Groot twin (optional), Sergej Pupykin librcc (make), Sergej Pupykin
The only two packages I think might be worth extra concern here is:
* imlib: needed by dfm, fvwm (should be possible to compile without depending on imlib),
Last time I check, it wasn't possible. As fvwm is the WM I use (I believe it has also decent usage statistics), I would like to keep them in the repos. So, in conclusion: 0 for removing kdelibs3 -1 for removing gtk1 kuickshow and tksystray.
* libdv: used by a lot of packages. gtk is listed as both optional and a make dependency. I assume this means that it can be compiled without Gtk1.
Which packages should be moved to [community] or AUR as a result of kdelibs3 and gtk being moved, is up for discussion.
I think the timing is right for this and there seems to be consensus that moving them is a good idea.
-- Best regards, Alexander Rødseth xyproto / TU
So, in conclusion:
0 for removing kdelibs3 -1 for removing gtk1
I think if we ship either qt3 or gtk1, that makes us upstream and we become responsible for backporting any security fixes made in qt4/qt5 and gtk2/gtk3. We usually hand wave away this kind of responsibility because we promptly ship the upstream releases, but it doesn't work here. Even Debian isn't shipping gtk1 anymore.
Hi, 2014-04-04 21:13 GMT+02:00 Eric Bélanger <snowmaniscool@gmail.com>:
* imlib: needed by dfm, fvwm (should be possible to compile without depending on imlib),
Last time I check, it wasn't possible. As fvwm is the WM I use (I believe it has also decent usage statistics), I would like to keep them in the repos.
Last time you checked, it was possible. Gentoo builds imlib without Gtk1. Let me refresh your memory by linking to your own reply on the matter: https://mailman.archlinux.org/pipermail/arch-dev-public/2013-May/024976.html +1 for also moving qt3 -- Best regards, Alexander Rødseth xyproto / TU
On Sat, Apr 5, 2014 at 2:57 PM, Alexander Rødseth <rodseth@gmail.com> wrote:
Hi,
2014-04-04 21:13 GMT+02:00 Eric Bélanger <snowmaniscool@gmail.com>:
* imlib: needed by dfm, fvwm (should be possible to compile without depending on imlib),
Last time I check, it wasn't possible. As fvwm is the WM I use (I believe it has also decent usage statistics), I would like to keep them in the repos.
Last time you checked, it was possible. Gentoo builds imlib without Gtk1. Let me refresh your memory by linking to your own reply on the matter: https://mailman.archlinux.org/pipermail/arch-dev-public/2013-May/024976.html
The patch they use wasn't applying or working.
+1 for also moving qt3
-- Best regards, Alexander Rødseth xyproto / TU
On Fri, Apr 4, 2014 at 5:09 PM, Alexander Rødseth <rodseth@gmail.com> wrote:
Hi,
So, can we move kdelibs3 and gtk from [extra] to either [community] or AUR?
I'm for dropping all of this to AUR if possible. Pretty much all mentioned applications have better alternatives already (well, maybe not ktechlab, but that is a rather specific package).
I prefer the GUI of qalculate-kde but I could live with qalculate-gtk. I use this not very often. Therefore I wouldn't mind removing kdelibs3 from the repos. We might also remove qt3 as well.
There's some kde4 interface in the git repo, maybe you want to try that: http://sourceforge.net/p/qalculate/qalculate-kde4/ci/master/tree/ Good point with qt3, that's pretty ancient, too. And there are not many packages using it either. Lukas
participants (5)
-
Alexander Rødseth
-
Bartłomiej Piotrowski
-
Daniel Micay
-
Eric Bélanger
-
Lukas Jirkovsky