this week an example arises to show once again that while upgrading is generally advised, there should exist a functionality to curate it on user-level ..instead of forcing it in bulk.

gnupg v2.2.18 breaks functionality --
the famous and critical software, gnupg, has seen a couple of interesting bugs these days, one of which is https://dev.gnupg.org/T4762 .. it has been patched i believe.

as a user i might want to rollback gnupg to 2.2.17 while the patched 2.2.18 makes its way to the repo. so that i can continue using anonymous recipients functionality and get along with my day.. except i can't. the tooling won't let me.. arguing that this is somehow better for me and that i don't know what i'm doing.

i say just give me a good knife and let me decide how to use it.

    A good time about reminding about reporting bugs so the issue can be addressed faster and for everybody instead of having some users "fixing" the things on their own.

    Not even mentioning that this is a rolling release and reverting a package might break other things that had to be rebuild against the latest version which will lead to complaints from some "advanced" users...

      hyphens If there were no security updates with the update to 2.2.18, roll back, it exists for a reason. Then upgrade once patches have been applied. I'd suggest reporting the patches over at the dev tracker though, they can get lost very quickly and easily on the forums.

        Justin let's say i've done my weekly sync like a good user, then installed a couple more things.. a new ide i wanna try out, xmpp client, music player, a couple of libs for the ide trial.. and THEN discovered the issue while sending an email. To roll back with eopkg hs, all this stuff will be removed alongside gnupg, then I'll have to manually reinstall it, then update to stay secure and bug free like you guys advise, but updating might pull new dependencies so I'll have to also use the dreaded --exclude to make sure gnupg stays on 2.2.17, all to achieve the functionality of atomic rollbacks. isn't that ridiculous?


        kyrios hey that got you nice quads though https://dev.getsol.us/D7777
        i consider this a win!
        updates are generally good. you should exercise caution playing with that rolling system's continuity, reporting issues should only be done when everything is up to date, i'm with you on all of that.
        but making it very inconvenient or downright impossible to do things with a tool in the name of safety is something else.
        if you feel so liable about system breakages when you're offering such unbreakable defaults then might as well remove terminal from the iso and remove terminal programs from the repo and make it impossible for users to escalate privileges. cause ya know, someone might run # hdparm -J 30 --please-destroy-my-drive /dev/sda or delete /etc/fstab without knowing. Maybe that's your ultimate goal? to be another ChromeOS or MacOS?

        except i don't think it is, just as much as i think users would know what's happening when they write down please-destroy-my-drive.

        when something has the potential to do some damage toolmakers don't disable it. instead they offer tongue-in-cheek flags like that one or issue warnings with [y/N] prompts.. some require you to write literal words like yes or trust or write.. some package managers require you to specify a version number instead of doing a rollback.. etc..
        you shouldn't feel liable after something like that honestly..


        I find this a reoccurring theme in Solus development.. not only an updates matter.

        • installer doesn't create an easily editable install-script file, and instead does subprocess calls and native python operations. someone might just edit that shell script and bork the installation after all instead of having to rewrite sections of unnecessarily oo python code. because there are no cases except those that maintainers thought of prior.

        • everyone but a select group of maintainers is disallowed to access the iso building scripts, effectively making both the isos and the scripts nonfree software. because software freedom isn't important when some users might produce a badly working iso. because writing a disclaimer that the only approved Solus iso is the one distributed in the getsol.us website is out of question.

        • and so on...


        i find it inconvenient that i have no option but to sit like a kid on santa's lap and ask for everything from the maintainers.. overworking them and causing headaches.. especially when y'all are doing it for free without donations even.. you could be instead utilising one of the most powerful aspects of a free software community; the community's ability to do the work.
        give me a robust tool and let me do it my way. then i'd show you what i've done upstream. merge if you like, turn down if you don't, in both cases we both win.

          hyphens Just a simple user here checking in. Your post is a lot to digest so I'll try my best, but it seems like you're having issues with hypotheticals among others and you speak in absolutes, which seems to go to the contrary of what Solus is all about. Solus was created and is maintained by the devs because it's what they want in a computing system, plain and simple. It's not a system meant for everyone, it's focused on desktop users that want a stable rolling release that's always up to date and I believe they've greatly succeeded at that. With a rolling release you have to accept and expect that a bug or issue is going to happen once in a while. that's just the nature of it.

          Whenever I find a bug, I let someone know or file a bug report within Solus. Not every issue can be fixed by the Devs, sometimes it's out of their hands upstream. So I remain patient and wait. Some things get fixed in a day and some things get fixed months down the road. Issues get dealt with based on priority. That's just linux. It's free and like you said they dedicate their free time without any monetary supplement so for me personally I try to complain as little as possible because they are doing more work than I ever could and I don't want to induce any more headaches.

          To put it rather bluntly, Solus is the way it is. And I use it how it's meant to be, in terms of keeping it up to date that is. It's not perfect, and nothing ever is or will be, but I've had less issues in Solus than any other distro so I'll happily keep using this lovely distro. I suppose you're requirements for what you need in a distro are more aligned with a different distro entirely and that's totally fine, so perhaps it may be worth checking out a few others that may satisfy what you're looking for because Solus has a plan and a vision and I don't believe it's what you're looking for.

            hyphens i consider this a win!

            You should not because if everybody was reporting issues randomly on forums, social medias, mails, chats, etc. it would be a total chaos.

            • You can always rollback updates in a controlled way as explained in the doc but you will never be given the possibility to cherry pick packages and downgrading them.

            • The system could be broken using graphical applications shipped out of the box. CLI programs are perhaps intimidating for beginners but they are not more dangerous than graphical applications. For your info ChromeOS, MacOS (and even Windows) are all provide a terminal out of the box. Not even mentioning that no terminal is required to use the console.

            • Installer is going to be rewritten, so there won't be any important update on the current version. Install scripts are handy for large deployment, automation, etc. but isn't something essential for home computing.

            • The access to the ISO building scripts had to be restricted because of a few disrespectful people were deliberately ignoring the terms of the license. Violating the terms of a license is not a freedom !

            • Unlike what you say, it doesn't make any difference for the ISOs. The terms & conditions have not been changed.

            • I don't agree at all with your last paragraph. Anyone from the community (or not) can contribute. I did it and I am not a genius.


              For the records I find it quite ironical to write about the powerful aspects of the community and the line after to say:

            ...and let me do it my way. then i'd show you what i've done upstream. merge if you like, turn down if you don't...

            Community is not about doing things on your own or your own way and then proposing things that haven't been requested! Community is collaborating towards a common objective, it's working together. You can't work on a project if you do it your own way instead of following the standards. And a leadership is necessary to have a successful project.

            hyphens As an opening remark, I want you to understand that the following is my honest opinion mixed with actual facts from one of the lead developers of this project. This response is intended to educate and in no way demonstrates animosity toward you or your ideologies.

            You are going to be hard-pressed to fine a rolling-release distro that meets all of the requirements for are asking for.

            The way that we do packaging on Solus is actually completely incompatible with your intentions. All packages have a monotonically increasing release number. It doesn't get reset every version change and it never goes backwards. This makes dependency resolution trivial and ensures that we have a traceable history of what releases of other packages a given package was built and tested against. eopkg is transactional and atomic, but it is limited to rolling back an entire transaction, and never an intermediate transaction on its own or a part of transaction. Whether you like it or not, that is how we are able to achieve a stable upgrade and downgrade path in Solus.

            hyphens should exercise caution playing with that rolling system's continuity,

            We strongly encourage you to update every week, never to be cautious about an update.

            hyphens reporting issues should only be done when everything is up to date

            We only require this because (1) It guarantees that your issue isn't the result of an incomplete upgrade and (2) it puts your system into a known state that we can easily test against.

            hyphens if you feel so liable about system breakages when you're offering such unbreakable defaults then might as well remove terminal from the iso and remove terminal programs from the repo and make it impossible for users to escalate privileges. ....... Maybe that's your ultimate goal? to be another ChromeOS or MacOS?

            The whole point of a stateless system is for you to easily override default configuration settings and this is something we work towards with all packages. The whole point of sane defaults is not to force you to use our configuration, but to ship a configuration you don't feel the need to change because it "just works" for most use cases.

            Our goal has never been imitation. We take great pride in not being like other OS.

            hyphens when something has the potential to do some damage toolmakers don't disable it. instead they offer tongue-in-cheek flags like that one or issue warnings with [y/N] prompts.. some require you to write literal words like yes or trust or write.. some package managers require you to specify a version number instead of doing a rollback.. etc..
            you shouldn't feel liable after something like that honestly..

            This isn't about liability or even prohibiting eopkg to do something we don't think it should. eopkg's fundamental design is incompatible with what you are trying to achieve. I can't give you a flag to use for something it cannot and will not ever do.

            hyphens I find this a reoccurring theme in Solus development.. not only an updates matter.

            "Solus is a selfish, pragmatic obsession with building a technically excellent linux distribution." If you don't agree with how we do things, you are going to continue to be disappointed and frustrated. Maybe you should start to entertain the notion that your ideologies and desires are fundamentally incompatible with Solus and that you should start shopping for an OS that aligns with your own.

            hyphens installer doesn't create an easily editable install-script file, and instead does subprocess calls and native python operations. someone might just edit that shell script and bork the installation after all instead of having to rewrite sections of unnecessarily oo python code. because there are no cases except those that maintainers thought of prior.

            The installer will be getting a full rewrite and does not represent what Josh and I think is an optimal solution. And if you hate OO Python code, you are really going to hate us because it will be written in C with GObject. We may consider scripting in the future, but that is not something we think is a necessity for a home computing environment.

            hyphens everyone but a select group of maintainers is disallowed to access the iso building scripts, effectively making both the isos and the scripts nonfree software. because software freedom isn't important when some users might produce a badly working iso. because writing a disclaimer that the only approved Solus iso is the one distributed in the getsol.us website is out of question.

            Our decision to restrict access to the ISO building scripts has nothing to do with restricting your freedom. It was a difficult decision following the abuse of our tooling by certain individuals to deliver custom ISOs that were shipped with our branding and and that were misinterpreted as coming directly from us. This is both a security nightmare and misuse of our brand. Disclaimers are insufficient to deal with these situations. As they say, one bad apple spoils the bunch.

            hyphens i find it inconvenient that i have no option but to sit like a kid on santa's lap and ask for everything from the maintainers..

            Then either the way you are trying to effect change isn't in line with normal contributions or the changes you are trying to make aren't ones we are interested in.

            hyphens overworking them and causing headaches..

            Surely, we are the ones to make that determination, not you?

            hyphens especially when y'all are doing it for free without donations even..

            This isn't a limitation due to funding. Our ideologies don't suddenly become more flexible in the presence of a surplus of money.

            hyphens you could be instead utilising one of the most powerful aspects of a free software community; the community's ability to do the work.

            We do. Daily. From dozens of people who contribute patches, translations, code, bug reports, and provide troubleshooting support to the community. You making statements like that is an insult to all of the great work they do.

            hyphens give me a robust tool and let me do it my way. then i'd show you what i've done upstream. merge if you like, turn down if you don't, in both cases we both win.

            You have that backwards. We are the upstream, not you.

            As a closing remark, I want you to understand that I'm not going to keep having these back-and-forth debates with you. I will happily try to better explain our reasoning behind specific decisions if you want. But I have no interest in having ideological debates over what Solus is or should be.

              hyphens I fully understand that you want to "configure" your system exactly the way you want to have it. However, I do not understand why it has to be Solus, if this distribution does not fit your needs?

              As @Scotty-Trees already mentioned there are loads of distributions and some of them will surely be exactly the way you want it. I would for example recommend having a look at Void Linux or NixOs. These need "configuration" and are not meant to work out-of-the-box. And, should that matter to you, these are -- just like Solus -- not based on any of the major distributions.

              Your decision!

              Scotty-Trees it seems like you're having issues with hypotheticals among others and you speak in absolutes

              I'm describing my actual case!
              out of the many i tried i keep coming back to Solus because it's, while not the most felxible, an excellent base. I especially love eopkg. The way it's designed is very intuitive. The way you sit and wait and agree on everything, as you said, is something I don't subscribe to. Sometimes a no is more useful than a yes.

              DataDrake thank you for the very clear stance. this answers all my questions with complete satisfaction instead of shutting them down. I salute your diligence with open discussions, and apologise for my earlier statement that painted the maintainers as the only ones who do the work.

              without reproducible builds i couldn't in good faith recommend Solus. That's not implying that my recommendation or lack thereof has any effect on this project — it'd be obnoxious to assume such thing and i understand that. i'm just stating it. that it's such a shame i have to disagree so fundamentally with a project i love.

              this will be all. thank you guys!

                hyphens Have you considered trying Manjaro Budgie?

                I run Solus and Manjaro side by side for separate reasons.

                IMO, Manjaro is more in line with the manifesto you laid out and how things should work.

                I've had my Solus installation working since March without issue. There is never anything in Solus that breaks so bad I can't fix it.

                I installed Manjaro three weeks ago and already broke my network connection and it took three hours to come up with a temporary fix... Was working, then it wasn't. This is what happens when you have access to things like the AUR.

                Manjaro is fun when it comes to development and programming but Solus is solid and intended to just work.

                If I need different versions of apps, I can download them via flatpak. I haven't done it yet but I am pretty sure you can. Also, you aren't required to update flatpaks and they have no connection to sudo eopkg up so that is one thing you might consider if you don't want to be 'forced' into upgrading.

                  Bouquins
                  Manjaro was my distro-of-choice before I found Solus.