[Bug 281837] Handbook "CentOS Base System from FreeBSD Packages" recommends deprecated packages
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 18 Oct 2024 15:39:03 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=281837 --- Comment #41 from Fernando ApesteguĂa <fernape@FreeBSD.org> --- (In reply to Alexander Ziaee from comment #36) Yes, but sysexits are unlikely to show security issues in the future unlike a port. See the approach we do for "unamaintained" ports: "The ${dp_PKGBASE} port currently does not have a maintainer. As a result, it is more likely to have unresolved issues, not be up-to-date, or even be removed in the future..." This is pretty explicit about the state of the port and its implications. I don't think it is a good idea to conceal that from the users. I understand some (many?) linux programs need 32-bit compatibility. I just want users to *understand the risks* of installing c7 ports. Some people install linux emulation to run things that can be run in 64 bits mode. Those people should also be pointed to rl9 ports since they are way more modern and they are still updated. Also, the warning at the beginning of the Centos section was explicitly place there as a consequence of some feedback in the review. How about this? It is less alarming (IMO), but clear enough: ``` The emulators/linux_base-c7 port is no longer maintained upstream and will not receive further security updates. Users who require 32-bit compatibility may continue to use emulators/linux_base-c7, though caution is advised due to potential security vulnerabilities. For users working in a 64-bit environment, it is recommended to migrate to the Rocky Linux Base System (emulators/linux_base-rl9), which is actively maintained and supported. ``` -- You are receiving this mail because: You are on the CC list for the bug.