1 |
On Mon, Feb 8, 2021 at 6:59 AM Peter Stuge <peter@×××××.se> wrote: |
2 |
> |
3 |
> Hanno Böck wrote: |
4 |
> > > "It does mean, however, that GTK 2 has reached the end of its life. |
5 |
> > > We will do one final 2.x release in the coming days, and we encourage |
6 |
> > > everybody to port their GTK 2 applications to GTK 3 or 4." |
7 |
> > |
8 |
> > I read that as there will be one more gtk2 release and none after that. |
9 |
> > |
10 |
> > This seems to imply: |
11 |
> > * When there's a security flaw in gtk2 there won't be a fix from |
12 |
> > upstream. |
13 |
> > * When there's an incompatibility with new infrastructure (e.g. new gcc |
14 |
> > version / new glibc / changing API of libraries gtk depends on) there |
15 |
> > will be no updates from upstream. |
16 |
> > |
17 |
> > This means in all those instances maintainers will have to get patches |
18 |
> > from somewhere. We'll likely end up with some form of |
19 |
> > gtk-2.x-r[largenumber] with a large patchset at some point. |
20 |
> > Maintaining that will be an increasing burden. |
21 |
> > |
22 |
> > No urgency, but a sign to slowly move off gtk2. |
23 |
> |
24 |
> Until there's a relevant flaw that will remain unfixed or there is |
25 |
> significant incompatibility with infrastructure (recurse my argument) |
26 |
> no signs actually exist. |
27 |
|
28 |
So I think as the next post in the thread hints at: |
29 |
|
30 |
- I expect gtk2 (the library) to be around for a while. As written it |
31 |
gets at least one more release. |
32 |
- I expect Gentoo to come after gtk2-only leaf packages pretty hard; |
33 |
either to get upstream to port, or to remove them. |
34 |
- This is true even if the packages are fully functional with gtk2, |
35 |
or don't have other bugs. |
36 |
- This is because we will eventually remove gtk2 from the tree |
37 |
(which will make these packages unbuildable, and cause their removal.) |
38 |
|
39 |
I'm less clear why we would keep libgtk2 in the tree for years and |
40 |
years (just to keep nominally unmaintained gtk2 leaf packages |
41 |
buildable?) |
42 |
|
43 |
> |
44 |
> Assuming that there will be a significant maintenance burden which |
45 |
> affects all uses doesn't seem rational - hence my question. |
46 |
|
47 |
I think you need to keep gtk2 (the library) for a fair bit (just like |
48 |
we kept python2.7; the interpreter; for a fair while after its EOL.) |
49 |
|
50 |
> |
51 |
> The blog post shouldn't be misunderstood. The intended audience seems |
52 |
> to be application developers, encouraging them to port applications, |
53 |
> not so much distributions. |
54 |
> |
55 |
> Distributions quite often overlook that they wield much power, and |
56 |
> thus also have much responsibility. |
57 |
> |
58 |
> Of course, GTK maintainers in Gentoo choose what to work on, and have |
59 |
> made many (only?) excellent choices. |
60 |
> |
61 |
> I'm merely pleading for rational choices based on actual problems. |
62 |
> |
63 |
> |
64 |
> //Peter |
65 |
> |