[Sugar-devel] Community XO software builds

[James Cameron]

On Thu, May 07, 2015 at 11:28:42AM -0300, Gonzalo Odiard wrote:
> When I talked with deployments and they ask for Ubuntu,
> and I ask why, what they really want is Long Time Support.
> No deployment change their image more than once a year.
> In fact, change a image is a logistic challenge for most of
> the big/middle size deployments. 

This continues to puzzle me.  LTS is a stream of security updates, and
you say the deployments do not apply them until the next year?

And yet they want them?

They want something they don't use?

If a vulnerability is reported just after they make their image, the
children are exposed to the vulnerability for the rest of the year.

It seems more likely that the meaning of LTS is not understood.

Fedora continues with security updates for a similar time period, but
if the deployment uses our builder unchanged they won't get them.  I'm
expecting that if a deployment needs LTS on Fedora they will assume
the responsibility to apply the updates when they make a build.

-- 
James Cameron
http://quozl.linux.org.au/