Devuan, EOL – trust, suspicion, and unanswered questions

First things first.  Those of us involved in this project had an internal debate from day one whether to cover Devuan development or not.  All but one person here, yours truly, argued that Devuan would never be able to overcome and change the psychopathology evident in Debian developer community and the inherent elitism against the common individual user.  If you are not directing the departmental budget of an IT enterprise nobody in that community would give a rat’s penny of what your problem may be.  Seeking help as a common user you must put up with tons of unsubstantiated arrogance, irony, and elitism.  This is also evident in the DNG list where devuan developers and their pre-split backroom buddies are larking, pretending they are Devian without the infrastructure of Debian.  It is like a life-raft’s  officers and buddies pretending to be the officers operating a supertanker.

Debian pioneered the support of user anonymity in incorporating tor technology into their repositories and even making their repositories have an onion address to be reached if tor+http://repository..adrress wasn’t enough.  Devuan seemed as to replicate this ability!  But did they?  For a while now, a few months, the use of this service had become very erratic.  Suddenly the announcement of new Devuan repositories (beta version of amprolla3) came with an answer that the onion address that Devuan lists on their front page “has been already forwarded to the currently beta version of amprolla3, pkgmaster.devuan.org” but the administrator of the repositories had neglected to clarify this when that change took place.  A forgiven neglect to inform those exposed to a beta system?  Let’s say in the world of open and free, tired freelancers, and lack or resources many crimes can be forgiven.  The entry to such a system is just as open as the exit, anyway!  But apart from the list there is a Devuan forum.  According to the administrator NO ONE involved in Devuan as a developer is ever in that forum.  Apparently not even out of curiocity would anyone involved in Devuan would look at that forum.  Why?  We don’t know!

For months now, there were repeated discrepancies between http, https, and tor, access to the repositories.  (if you need technical information on the issue look up on Debian’s website what apt-transport-https and apt-transport-tor are all about).  This wasn’t evident on a daily basis as nothing was developing in Devuan ftom late July till late fall.  It was evident when switching from Debian to Devuan, or from Devuan Jessie, to testing (ascii), or unstable (ceres).  Depending on which protocol you used to reach the repositories a different amount of files had to be removes, upgraded, newly installed, etc.  If you did not upgrade anything and just hit the repositories in three different ways you got a variety of inconsistent results.

Recently with the porting of OpenRC and eudev from experimental to testing (Ascii) the issue came back again.  You could install OpenRC and eudev using pkgmaster through http but through tor the package was available but many dependencies were missing.  Only the person evidently related to Refracta responded to the puzzle.  The only possible explanation that resulted from this puzzle was that with http the problem was not reproducable while with tor it remained.  Suddenly a couple of days later the problem was not there any more.  With tor the dependencies were all there.  Nobody in the forum came out to explain why it did and why it didn’t.  And this was a repeated behavior on that specific inquiry.  When cornered the “forum administrator” would clarify that those involved in Devuan, the project, are not in the forum.  The same admin gets offended if one would underming her role as a non-developer.  So this brings a question back to who is who in this “project”.  What is Devuan, who is Devuan, and what is Dyne corporation providing the forum, website, wiki, and who knows what else for this faceless ghost of Devuan.  But if we value anonymity and freedom on the internet why would we want names?  It is not names exactly but collective responsibility for the project.  It is all hasty and distributed in non-responsible entities.  Is Dyne to be help responsible for Devuan?  Is the forum administrator?  Who makes Devuan and why?  What is the goal and direction of Devuan?  Is Devuan what Dyne projects Devuan would be?

And there is another side project promoted by Dyne.  It is called heads.  A system based on Devuan attempting to replicate tails.  Not only is this thing disfunctional and rarely updated, which is of extreme improtance in such a project, but the core tor-browser built in it works nothing like the original tor-browser.  It actually violates rule number one for tor-project’s browser.  The browser starts independently of whether there is a tor network active or not.  Nowhere in this Heads project does it state that torporojects code has been hacked and modified.  Months would go by, verious editions of tor, browser, etc, would come out but heads would remain unchanged.  Even when a new one does come out the “bug fixes” say nothing about what the bugs were and how they were fixed.  Same response to the bug we identified months ago.  Silence!

But Heads is very strict and high on “free”, no-contrib, no non-free stuff on heads.  Debian’s silliness with “free” relates to stuff that have non-“corporate” hinges on them.  It says nothing about “public organizations” and any attempt to free yourself from them!  In light of this meltdown and spectre frenzy these may be minor details to a huge problem, but still help define the “character” behind the project (Devuan and Heads).

The responses, or should we say the suspicious silence  on the issue, to the http/tor discrepancies, the eagerness of the forum administrator to dilute and get the questioning of this discrepancy covered up by deviating from the topic, when the same person acts as a cop of people deviating from topic, escalates the suspicious feelings.  Apart from the discrepancies between the protocols reaching pkgmaster (a simple IP forwarding from onion network to the rest of the network) there is also the problem with speed.  It acts as the slowest onion address in the onion universe.  As if someone has plugged a single core server in the end of the line in Tasmania or North East Mongolia, to act as an IP forwarder.  Those who know a thing or two about tor know that the time period exposed to that network works against anonymity.  In contrast in Debian to many people the response rates of the onion address is normally faster than http, possibly due to constantly overloaded mirrors.

Is what we claim reproducible?  We don’t know, just try it.  What if today is not reproducible for us either?  Is there trust to continue tolerating the silence and dealing with the problem?  How many times would a new installation have to break because of it before one can understandably give up?  All distributions at first are unknown entities.  Trust and relationships are built through a period of direct experience.  Once trust has reached bottom it can hardly be expected to be built again.  For us it reached zero or below that.  Despite of how much we hoped and expected for Devuan to do and to be we came out empty handed.  Simply stated, solely using http://pkgmaster you will never be comfortable that what you have is what everyone else is having.  Need we say more?

Unfortunately this means goodbye to Refracta, Devuan-OpenRC, Miyo-Linux, and Vuu-do.  Extremely good work and dedication and some of the nicest people anyone will ever meet in the GNU/Linux community.  Of course refracta can be used with pretty much any distribution that is Debian based or related, and the possibilities of porting Refracta to other distributions is something we look forward to.  But Refracta as a fork of Devuan has reached a point where it will no longer be carried on this site, and this we regret deeply.  We wish the best to Refracta, Miyo, Vuu-do for the all the good work they have done.  We also wish we had the capacity and knowledge to fork out Ascii with OpenRC to another distribution and move from there independently, because there is importance in this project as it is defined.  Unfortunately we don’t have this capacity to carry such a project onwards.

So whether you like to keep following Devuan and its development or not we can’t have a say on it.  We can simply ignore it all till clarification comes out of what is going on.  And there was in the past anxiety expressed by Devuan’s idleness and vanishing as an ongoing project (July-November 2017).  Apparently the project was by 5 people, one stepped aside, and a new one had come in.  This is all that was explained and the new person joining was in charge of the repository servers and structure.  Then packages slowly started evolving again.

We shall let it rest and please let us know if anything ever changes in that camp.  We are wrapping all Devuan installations we had for testing purposes in dd mothballs just in case there is light in the situation and questions ever begin being answered collectively “by Devuan”, not Dyne, no friends of Devuan, not from insider mediators, but Devuan itself, if the project DOES HAVE A VOICE!

 

PS  we have hired a crew to take down and rearrange the headers of the site as to signify our discontinuity in coverage of Devuan.

PS2  Reference to forum discussion before rupture https://dev1galaxy.org/viewtopic.php?pid=7367#p7367 and an earlier incident of installing OpenRC through tor https://dev1galaxy.org/viewtopic.php?pid=6906#p6906

PS3   After this article was published the forum admin responds as :  there is no onion address for ascii.  This is bullcrap my dear.  The onion address, as by announcement addendum of the repository master, is forwarding to pkgmaster.devuan.org and that “single” repository incorporates equally jessie, ascii, ceres, sid, experimental, devuan and merged, and there can not possibly be a separation.  Why is it working on and off and partially, why did it work for ceres and is not ascii, mind boggling that such a silly response would even be considered as a responsible answer.  On the second link above it contradicts what fsmithred reports as at a following day what didn’t work it does work, through tor, and ascii!

Except if the onion address IS NOT pointing to pkgmaster which means you have been lying through your teeth the whole time about where the onion address has been pointing to!!!!!

Advertisements

7 thoughts on “Devuan, EOL – trust, suspicion, and unanswered questions

  1. It seems that out of all this debating some things are silently and slowly been rectified, or at least patched up! Other than Devuan forum’s administrator blocking our account and removing that one last post of the reasons for not being able to trust Devuan any more, the administrator also removed its own statement about ascii repositories not having a valid onion address, which was admission to the fact that the onion address did not really match their pkgmaster.devuan.org repository as has been claimed ever since pkgmaster was announced.

    Further more, using the onion address
    tor://devuanfwojg73k6r.onion/merged ascii/main amd64 Packages [7,232 kB]
    and using the tor to reach the normal pkgmaster address, today!!, it shows the main Release file as being the same size.
    tor://pkgmaster.devuan.org/merged ascii/main amd64 Packages [7,232 kB]

    You do receive the file 20 times faster than the onion address, although you would still be going through tor, BUT, if the release file has the same gpg key, why when you do switch (to supposedly the same) does it redownload the same to replace the current? You can go back and forth numerous times, which indicates that the file is indeed different but of the same size. When the release file is the same and has the same gpg key it is not downloaded and shows as current. Otherwise it would wear out the server unnecessarily.

    The fact that there is a documented discrepancy even after the publicity of this means that someone in there not only is taking notice but is also incapable of patching things up and covering up, even for a small period that it would take for this to be forgotten,

    Beware, you have been warned. If we are wrong on our logic and analogy of indications please point this out to us and we would be more than happy to accept fault and apologize. Devuan as a goal is too precious to be shoved under the carpet as rogue or just irresponsible and we would be happy to have been wrong.

    Over, and OUT!!

    Like

  2. as i tried to tell you before, the person who runs the devuan forum gets all of her devuan information second-hand. what she knows about devuan is what people tell her– the extent of her development is with regards to style and themes and colours. shes not the person to go to for information on devuan, and if you want information first-hand youre more likely to get it from the mailing list or contacting the devs– and the devs dont say much because theyre pretty isolationist.

    the person in charge of “live” is more approachable. there is plenty of arrogance in the community, but it is possible to navigate around with patience and sufficient interest. personally, i prefer to sidestep most of that. devuan is contributing substantially but i think the entire concept of the “distro” is beginning to show limitations, and is worth taking a new look at.

    i am interested in your blog and in polite debate– which you have control over for two reasons: first, this is your blog and you control what comments show. my last comment you didnt bother approving and you didnt respond to and you didnt “make a new topic” out of. im not calling you a liar, but its possible we got wires crossed there. second: if i so chose i could blog about you, then have relative “control” about the debate from that side, but if you are unwilling to talk with me then i have very little desire to bother talking about you. i mean theres something else i could be doing. im interested in discussing (sometimes debating) a number of your claims, but i dont have any faith in that forum whatsoever. its an unnecessary forum that will lead to confusing and misleading information as much as it will lead to support and communication, and its run by a very non-technical person who chooses to regurgitate information she doesnt understand. have a nice day.

    Like

  3. Apart from some ads about viagra and cialis, and some non-sense about some god, I haven’t found any messages in spam in need of approval. The rest of the messages that wordpress doesn’t concider spam are automatically published, I don’t need to approve anything.

    Now, about a new topic that you mentioned, help me identify what the topic is. It seems as some comment you made got lost, never posted here.

    About Devuan, I wouldn’t have made a big deal out of what was going on if I wasn’t sure it was going on, and not just one time, one day, on one installation. It was happening alot. A few times I just let it be and did not apply any upgrades knowing that it was wrong. Kept changing back and forth between the names of the repositories to make sure there was a significant difference. Sometimes I applied the wrong changes proposed by the dist-upgrade to see the result. Again, the reason I made a big deal out of it was a hunch, that some of the silent in the background developers would realize that I may have had a point and that someone in their was either covering up their own deficiency or doing something intentionally “screwy”. So that was my dramatic way to let them know they may have either an idiot or a rat inside.

    Devuan is just trying to be “just” debian without systemd. Antix is trying to be much more than just debian with an alternative init system. They are interested to what users say and complaint about and they constantly work, fix, and produce new things that help users. It is a very different perspective. Devuan has proven again and again they are appealing to some “higher” authority for what they make, they couldn’t care less what users say. They are building something to sell to “someone”. For me that is enough right there to reject anything they do due to the reason they are doing it.

    Refracta, yes, this is honest good work and I am leaving this aside of the Devuan rejection. Refracta makes a good reliable tool, for backup, cloning, and installing. It works right off the box with just about anything that is Debian based. Yes, Fsmithred is an honest person. He wouldn’t stick his neck out to defend anybody and risk burning any bridges because he has invested in the chance that devuan becomes big. I wish him lack!

    Let me know what topic you propose we open up. I don’t have any objections as long as it is linux related and it is about anything away from systemd. Sorry if a comment of your got lost.

    Stay in touch.

    Liked by 1 person

  4. cheers. for your amusement and i my own, i have written a summary of my 3 years of devuan experience. at least, ive used it for that long and i was there from march 2015. i will post it as a new topic. no worries about the lost comment, really.

    Like

If your comment is considered off-topic a new topic will be created with your comment to continue a different discussion. This community is based on open and free communication, meaning we must all respect all in minimizing the exercise of freedom to disrupt such communication. Feel free to post what you think but keep in mind the subject matter discussed. It is just as easy to start a new topic as it is to dilute the content of an existing discussion.

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.