Package: release-notes
Severity: normal
X-Debbugs-CC: debian-de...@lists.debian.org, gib...@debian.org

  TL;DR -- It is expected that trixie will be the last release of
Debian to include LXD, and users are encouraged to migrate to Incus
after upgrading.

  (CC'ing debian-devel for broader awareness, but let's keep any
followup discussion in the bug.)

  ---

  In July 2023, Canonical moved LXD from the Linux Containers project
and took it in-house, though still under an Apache-2.0 license. Shortly
afterwards a community fork (Incus) was announced. Then in December
2023 Canonical announced a blanket re-licensing of all LXD code from
Apache-2.0 to AGPLv3 and began requiring a CLA to contribute code.
Additional details and links can be found in bug #1058592.

  As a result, the version of LXD in unstable is a snapshot of the last
commit before the licensing was changed (5.0.2+git20231211.1364ae4).
This snapshot will be roughly 1.5 years old when trixie is released,
and it won't be from the latest LTS branch (currently 5.21.x).

  In the year since, Incus has also been packaged in unstable and is
tracking upstream LTS releases, currently at version 6.0.3. While the
Incus and LXD projects have diverged in some areas, Incus includes
tooling to help automatically migrate LXD servers to Incus.

  Once forky development opens up, I plan to file a RM bug for LXD.

  ---

  Wait! We need to update LXD and/or keep it beyond the trixie release!

  The chief impediment is the need to go through and properly check the
license information for every single file. Canonical didn't apply any
metadata when they re-licensed, and waters were further muddied with
statements that the stable-5.0 branch hadn't actually been re-licensed
yet has pulled in newer commits that are AGPLv3.

  Submitting code changes upstream now requires signing a CLA, which
some individuals aren't willing to do.

  Also, updating to the latest LTS release (5.21.2) would require the
packaging of a few additional golang libraries[1] prior to trixie
freezes starting (still TBA as of this message). The 5.0.4 LTS release
builds fine in unstable, but had a couple test failures that I didn't
investigate further.

  LXD is team-maintained under the Go Packaging Team, so any interested
party is welcome to put in the work if they really want to. However, I
think that Incus provides a solution that's just as good, if not
better, than LXD.

Mathias

[1] -- github.com/dell/goscaleio, github.com/openfga/api, 
github.com/openfga/language, and github.com/openfga/openfga

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to