On Wed, Sep 16, 2020 at 4:17 AM Kent Fredric <ken...@gentoo.org> wrote: > > On Mon, 14 Sep 2020 10:15:31 -0400 > Rich Freeman <ri...@gentoo.org> wrote: > > > It might be easier to take smaller steps, such as having a policy that > > "any call for devs to use/test a new tool/service, or any service that > > automatically performs transactions on bugzilla, must be FOSS, and the > > link to the source must be included in the initial communication, and > > it must be clear what version of the code is operating at any time." > > That is a pretty low barrier to those creating tools, though it > > doesn't address the infra concern. However, it does mean that infra > > is now free to fork the service at any time, and reduces the bus > > factor greatly. > > For the situation of things that take life before being part of infra, > I think the least we can do is recognize their utility and importance, > and at least, have infra *offer* some sort of shared location to run a > deployment. > > That I think helps everyone, gives people a place to remove their own > bus factor, but without mandatory strongarming.
This might be one option. Another might be to try to have a more "open infra" approach where core services like authentication are provided by Gentoo, but available to 3rd parties. This could allow more services to be externally hosted, ideally with redundancy (not just at the host level, but at the maintainer/software level as well). The obvious downside to this would be chaos - we might have 3 list servers, 5 bug trackers, 10 git repos, and so on. However, if anything did go down we'd have half a dozen potential replacements so all anybody needs to do is migrate their own stuff to their chosen copy. The value add of Gentoo would be in central services like identity/reputation and curation. There might be 14 git repos out there but Gentoo would control which ones end up on the master rsync server and which rsync mirrors get advertised as being genuine, and which list servers are official. I realize this is a bit more tangential. I just think that infra is already a huge failure point, so having more stuff on infra actually makes that failure point more critical. A Gentoo where little is hosted on stuff we own is much more resilient in the face of legal/money/etc issues. If Gentoo just becomes some blessed config files, a website, and SAML then anybody could host the core from their basement. Maybe it is a good thing that core services aren't always hosted by infra? -- Rich
