Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-13 Thread Steve Langasek
On Sat, Dec 12, 2020 at 06:09:02PM +0200, Adrian Bunk wrote:
> > Ubuntu have chosen to support the first use-case, and only the first
> > use-case. They longer ship a complete, bootable i386 operating system;
> > instead, they have an i386 second-class-citizen architecture that
> > is sufficient to provide graphics drivers and other shared libraries
> > for legacy 32-bit proprietary binaries.
> >...

> Ubuntu has a business-minded focus, which is fair enough.
> But Debian should not blindly follow whatever Canonical
> does with Ubuntu for business reasons.[3]

> It does make sense for Debian to differenciate by providing support for 
> communities whose hardware is not or no longer supported by Ubuntu.

It's obviously entirely appropriate for Debian to make its own decision here
regarding what they want to support, but FTR the dropping of i386 was
largely not a "business" focused decision for Ubuntu.  While the ongoing
costs of maintaining a full port were a consideration, of equal concern was
the fact that we believed we would not be able to provide security support
for the architecture as a whole at par with other architectures, due to,
among other things, lack of adequate support from the upstream
kernel/toolchain community.  I'm not sure if i386 has caught up and now has
adequate mitigation for Spectre etc, but it definitely wasn't available on
an equivalent timeline as amd64.

-- 
Steve Langasek   Give me a lever long enough and a Free OS
Debian Developer   to set it on, and I can move the world.
Ubuntu Developer   https://www.debian.org/
slanga...@ubuntu.com vor...@debian.org


signature.asc
Description: PGP signature


Fingerprint from 2011 on the sign File of the debian DVD 10.7.0

2020-12-13 Thread Thomas Shuller

Dear Debian CD Team,

I have seen that the SHA512SUMS.sign File and the SHA512SUMS of the 
debian-10.7.0-amd64-DVD-*.iso give me a


WARNING: This key is not certified with a trusted signature!

gpg: There is no indication that the signature belongs to the owner.

Primary key Fingerprint: DF9B 9C49 EAA9 2984 3258 9D76 DA87 E80D 6294 BE9B

At the https://www.debian.org/CD/verify I se that that this is the 
Fingerprint from 2011 is this correct for the new sign file?


kind regards

Thomas from Germany