Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Ben Hutchings
On Sun, 2020-12-13 at 01:53 -0800, Steve Langasek wrote: [...] > While the ongoing > costs of maintaining a full port were a consideration, of equal concern was > the fact that we believed we would not be able to provide security support > for the architecture as a whole at par with other architect

Re: Fingerprint from 2011 on the sign File of the debian DVD 10.7.0

2020-12-14 Thread Steve McIntyre
On Mon, Dec 14, 2020 at 12:30:41AM +0100, Thomas Shuller wrote: >Dear Debian CD Team, > >I have seen that the SHA512SUMS.sign File and the SHA512SUMS of the >debian-10.7.0-amd64-DVD-*.iso give me a > >WARNING: This key is not certified with a trusted signature! > >gpg: There is no indication that t

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Russ Allbery
Ben Hutchings writes: > I agree that kernel security support for i386 is seriously lacking. > The Spectre mitigations were actually available for both x86 > architectures at the same time, but the initial Meltdown mitigation was > amd64-specific and was not extended to i386 until Linux 4.19. Th

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Calum McConnell
On Mon, 2020-12-14 at 10:02 -0800, Russ Allbery wrote: > One possible intermediate option shy of dropping the i386 architecture > would be to drop the i386 kernel and instead help all i386 installs > switch > to the amd64 kernel while still running i386 binaries.  (That said, this > will obviously

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Russ Allbery
Calum McConnell writes: > As I showed in my (slightly over dramatic, very over-long) email this > morning, there are more people with i386 kernels than there are total > users of every other release architecture. Even if you only look at > non-pae kernels, its still about double the total instal

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Adrian Bunk
On Mon, Dec 14, 2020 at 01:22:11PM +0100, Ben Hutchings wrote: > On Sun, 2020-12-13 at 01:53 -0800, Steve Langasek wrote: > [...] > > While the ongoing > > costs of maintaining a full port were a consideration, of equal concern was > > the fact that we believed we would not be able to provide secur

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Russ Allbery (2020-12-14 23:54:37) > > The point I'm making is that i386 processors are still incredibly common, > > and we shouldn't abandon their users. > > Not abandoning users is a powerful motivating force, but it still has to > succeed in motivating people. Debian can't make a

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Calum McConnell
On Mon, 2020-12-14 at 14:54 -0800, Russ Allbery wrote: > Calum McConnell writes: > > The point I'm making is that i386 processors are still incredibly > > common, and we shouldn't abandon their users. > > Not abandoning users is a powerful motivating force, but it still has to > succeed in motiva

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Adrian Bunk
On Mon, Dec 14, 2020 at 02:54:37PM -0800, Russ Allbery wrote: > > The quantity of hardware is useful data, but I think this is also a place > where it's important to stress the specific problem that Debian has, > namely that we need people to do the work. >... The list of Debian release architect

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Russ Allbery
Calum McConnell writes: > A very fair point, and quite equitably put. If I was remotely > comfortable tweaking kernels, or used a 32 bit machine regularly, I > would be more comfortable volunteering.  As it is, I have only really > learned to maintain packages in the past few months, and I feel

Re: Release status of i386 for Bullseye and long term support for 3 years?

2020-12-14 Thread Paul Wise
On Mon, Dec 14, 2020 at 11:36 PM Adrian Bunk wrote: > A bigger worry for i386 would be the availability of microcode updates This is also a big problem for amd64, since only the newest generations of Intel processors get BIOS/UEFI and or microcode updates, so lots of amd64 users (including myself