@ondra is indeed a wonderful, skilled individual with many contributions, most of which people probably will never know about. +1 from me, despite not having any say in this.
But.
I am going to hijack this thread to raise an awkward point about this topic. Before I do that, I need to preface this as not an āattackā on ondra at all. Iām raising it because I want the store content to improve, and I value the opinions, skills and experience of everyone in this thread, and beyond, and would like to figure out a path forward.
This sentence ātriggeredā me.
I try to keep my snaps up to date as has been doing for the past years.
I do too. It can be hard keeping them all up to date, and even functional. Iām using more automation now, and set aside time each week to try and keep on top of this commitment, as is my responsibility.
Some time back I wrote a report which scanned all snaps in the public store, and showed huge numbers of snaps which were outdated. I privately shared it (to save blushes) with some ex-colleagues at Canonical. I have no knowledge if anything has happened since, but it doesnāt look like it from my perspective.
- Do these snaps contain unsupported versions of upstream software?
- Do they contain old versions of software which may also have security issues?
- Do they even still work?
Thereās a lot of old stuff out there.
I do not accept āJust ping the publisherā as the right answer here. This does measurable reputational damage to the platform having cruft in it that nobody ācaresā about.
I modified my script to only report on one publisher and one architecture, and because ondra stood up, I pointed it at him - sorry. Also, very much not sorry, because this needs to improve across the board.
I am still +1 on @ondra getting a .
Note: There are almost certainly better ways to do this, and I am 100% sure some of these (like cm3-ondra) exist on other architectures, I just happened to run this on my x86 laptop. Also, conversely, some might be published in stable within the last day, but be old releases. Itās quite a minefield.
I think the store could do better at surfacing this kind of information. Like netdiscover-ondra
is over 20 releases behind upstream. Shouldnāt it let users know?
Again, I have some outdated snaps in my ācollectionā, so, this isnāt a sleight on ondra. Itās a much, much wider issue.
Iād really like to start a conversation about this that results in actionable things that can go on someoneās todo list. Iām a dreamer, I know.
What can, and will we do about this? (and by āWeā I very much mean āYou, with our helpā)
review-old-snaps-by-publisher report: 2024.08.08.12.47 ondra
- Arch: x86_64
- Snaps published: 21
Application with no published releases (on x86_64)
- cm3-ondra
- pi3-ondra
- optee-test
Applications with no release in a stable channel
- java-jre-ondra
- libc-shm-shim
Applications with a recent release in the latest/stable channel
2024
- homebridge
- opengrok
- znc-ondra
- toolbox
- avahi
- znc-modules-ondra
- uc-image
- ondra-snap-ssh-debug
- qdl
2023
2022
2021
2020
2019
2018
- fs-tools
- netdiscover-ondra
2017
2016