{"thread":{"id":"32416","subject":"Python version auditing followup","startedAt":"2012-12-20T14:34:11Z","lastAt":"2012-12-27T21:57:12Z","messageCount":9,"participants":["Eric S. Raymond","Junio C Hamano","Joachim Schmitz","Dennis Kaarsemaker"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"205255","messageId":"20121220143411.BEA0744105@snark.thyrsus.com","threadId":"32416","inReplyTo":null,"subject":"Python version auditing followup","fromName":"Eric S. Raymond","fromEmail":"esr@thyrsus.com","sentAt":"2012-12-20T14:34:11Z","receivedAt":"2012-12-20T14:34:11Z","isPatch":false,"sender":{"key":"esr@thyrsus.com","avatar":"https://avatars.githubusercontent.com/u/727961?v=4"},"body":"Most of the Python scripts in the distribution are small and simple to\naudit, so I am pretty sure of the results.  The only place where I\nhave a concern is the git_helpers library; that is somewhat more\ncomplex and I might have missed a dependency somewhere.  Whoever\nowns that should check my finding that it should run under 2.4\n\nThat was the first of three patches I have promised.  In order to do\nthe next one, which will be a development guidelines recommend\ncompatibility back to some specific version X, I need a policy\ndecision.  How do we set X?\n\nI don't think X can be < 2.4, nor does it need to be - 2.4 came out\nin 2004 and eight years is plenty of deployment time.\n\nThe later we set it, the more convenient for developers.  But of\ncourse by setting it late we trade away some portability to \nolder systems.\n\nIn previous discussion of this issue I recommended X = 2.6.\nThat is still my recommendation. Thoughts, comments, objections?\n-- \n\t\t<a href=\"http://www.catb.org/~esr/\">Eric S. Raymond</a>\n\nIn recent years it has been suggested that the Second Amendment\nprotects the \"collective\" right of states to maintain militias, while\nit does not protect the right of \"the people\" to keep and bear arms.\nIf anyone entertained this notion in the period during which the\nConstitution and the Bill of Rights were debated and ratified, it\nremains one of the most closely guarded secrets of the eighteenth\ncentury, for no known writing surviving from the period between 1787\nand 1791 states such a thesis.\n        -- Stephen P. Halbrook, \"That Every Man Be Armed\", 1984\n"},{"id":"205278","messageId":"7vobho60fs.fsf@alter.siamese.dyndns.org","threadId":"32416","inReplyTo":"20121220143411.BEA0744105@snark.thyrsus.com","subject":"Re: Python version auditing followup","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2012-12-20T18:30:31Z","receivedAt":"2012-12-20T18:30:31Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"esr@thyrsus.com (Eric S. Raymond) writes:\n\n> That was the first of three patches I have promised.  In order to do\n> the next one, which will be a development guidelines recommend\n> compatibility back to some specific version X, I need a policy\n> decision.  How do we set X?\n>\n> I don't think X can be < 2.4, nor does it need to be - 2.4 came out\n> in 2004 and eight years is plenty of deployment time.\n>\n> The later we set it, the more convenient for developers.  But of\n> course by setting it late we trade away some portability to \n> older systems.\n>\n> In previous discussion of this issue I recommended X = 2.6.\n> That is still my recommendation. Thoughts, comments, objections?\n\nI personally would think 2.6 is recent enough.  Which platforms that\nare long-term-maintained by their vendors still pin their Python at\n2.4.X?  2.4.6 was in 2008 that was source only, 2.4.4 was in late\n2006 that was the last 2.4 with binary release.\n\nObjections?  Comments?\n"},{"id":"205296","messageId":"kb001v$vps$1@ger.gmane.org","threadId":"32416","inReplyTo":"7vobho60fs.fsf@alter.siamese.dyndns.org","subject":"Re: Python version auditing followup","fromName":"Joachim Schmitz","fromEmail":"jojo@schmitz-digital.de","sentAt":"2012-12-20T21:30:30Z","receivedAt":"2012-12-20T21:30:30Z","isPatch":false,"sender":{"key":"jojo@schmitz-digital.de","avatar":"https://avatars.githubusercontent.com/u/1786669?v=4"},"body":"Junio C Hamano wrote:\n> esr@thyrsus.com (Eric S. Raymond) writes:\n>\n>> That was the first of three patches I have promised.  In order to do\n>> the next one, which will be a development guidelines recommend\n>> compatibility back to some specific version X, I need a policy\n>> decision.  How do we set X?\n>>\n>> I don't think X can be < 2.4, nor does it need to be - 2.4 came out\n>> in 2004 and eight years is plenty of deployment time.\n>>\n>> The later we set it, the more convenient for developers.  But of\n>> course by setting it late we trade away some portability to\n>> older systems.\n>>\n>> In previous discussion of this issue I recommended X = 2.6.\n>> That is still my recommendation. Thoughts, comments, objections?\n>\n> I personally would think 2.6 is recent enough.  Which platforms that\n> are long-term-maintained by their vendors still pin their Python at\n> 2.4.X?  2.4.6 was in 2008 that was source only, 2.4.4 was in late\n> 2006 that was the last 2.4 with binary release.\n>\n> Objections?  Comments?\n\nWe have a working 2.4.2 for HP-NonStop and some major problems getting 2.7.3 \nto work.\n\nBye, Jojo \n"},{"id":"205297","messageId":"7vzk182yka.fsf@alter.siamese.dyndns.org","threadId":"32416","inReplyTo":"kb001v$vps$1@ger.gmane.org","subject":"Re: Python version auditing followup","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2012-12-20T21:39:17Z","receivedAt":"2012-12-20T21:39:17Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"\"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n\n> Junio C Hamano wrote:\n>> I personally would think 2.6 is recent enough.  Which platforms that\n>> are long-term-maintained by their vendors still pin their Python at\n>> 2.4.X?  2.4.6 was in 2008 that was source only, 2.4.4 was in late\n>> 2006 that was the last 2.4 with binary release.\n>>\n>> Objections?  Comments?\n>\n> We have a working 2.4.2 for HP-NonStop and some major problems getting\n> 2.7.3 to work.\n\nI do not think a platform that stops at 2.4.2 instead of going to\nhigher 2.4.X series deserves to be called \"long term maintained by\ntheir vendors\".  It sounds more like \"attempted to supply 2.4.X and\nabandoned the users once onee port was done\" to me.\n"},{"id":"205318","messageId":"000d01cddf4c$8cbf2ca0$a63d85e0$@schmitz-digital.de","threadId":"32416","inReplyTo":"7vzk182yka.fsf@alter.siamese.dyndns.org","subject":"RE: Python version auditing followup","fromName":"Joachim Schmitz","fromEmail":"jojo@schmitz-digital.de","sentAt":"2012-12-21T07:26:52Z","receivedAt":"2012-12-21T07:26:52Z","isPatch":false,"sender":{"key":"jojo@schmitz-digital.de","avatar":"https://avatars.githubusercontent.com/u/1786669?v=4"},"body":"> From: Junio C Hamano [mailto:gitster@pobox.com]\n> Sent: Thursday, December 20, 2012 10:39 PM\n> To: Joachim Schmitz\n> Cc: git@vger.kernel.org\n> Subject: Re: Python version auditing followup\n> \n> \"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n> \n> > Junio C Hamano wrote:\n> >> I personally would think 2.6 is recent enough.  Which platforms that\n> >> are long-term-maintained by their vendors still pin their Python at\n> >> 2.4.X?  2.4.6 was in 2008 that was source only, 2.4.4 was in late\n> >> 2006 that was the last 2.4 with binary release.\n> >>\n> >> Objections?  Comments?\n> >\n> > We have a working 2.4.2 for HP-NonStop and some major problems getting\n> > 2.7.3 to work.\n> \n> I do not think a platform that stops at 2.4.2 instead of going to\n> higher 2.4.X series deserves to be called \"long term maintained by\n> their vendors\".  It sounds more like \"attempted to supply 2.4.X and\n> abandoned the users once one port was done\" to me.\n\nWell, not entirely wrong, but not all true at too.\nI guess I need to defend the vendor here: It is not really the Vendor (HP) that provided Python 2.4.2 or tries to provide 2.7.3, it\nis a volunteer and community effort. HP did sponsor the 2.4.2 port though (by allowing an HP employee to do the port inn his regular\nworking hours). It is not doing this any longer (since 2007). Since then it is a small group doing this on a purely voluntary basis\nin their spare time (one HP employee amongst them, me).\nSame goes for the git port BTW. And for every other port provided on http://ituglib.connect-cummunity.org (this machine is sponsored\nby HP).\nAlmost every other port, as some pretty recently made it into the officially supported O/S version, so far: Samba, bash, coreutils,\nvim, gzip, bzip2, Perl, PHP.\n\nBye, Jojo\n"},{"id":"205361","messageId":"7va9t71cqa.fsf@alter.siamese.dyndns.org","threadId":"32416","inReplyTo":"000d01cddf4c$8cbf2ca0$a63d85e0$@schmitz-digital.de","subject":"Re: Python version auditing followup","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2012-12-21T18:28:29Z","receivedAt":"2012-12-21T18:28:29Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"\"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n\n>> > We have a working 2.4.2 for HP-NonStop and some major problems getting\n>> > 2.7.3 to work.\n>> \n>> I do not think a platform that stops at 2.4.2 instead of going to\n>> higher 2.4.X series deserves to be called \"long term maintained by\n>> their vendors\".  It sounds more like \"attempted to supply 2.4.X and\n>> abandoned the users once one port was done\" to me.\n>\n> Well, not entirely wrong, but not all true at too.\n> I guess I need to defend the vendor here: It is not really the\n> Vendor (HP) that provided Python 2.4.2 or tries to provide 2.7.3,\n> it is a volunteer and community effort. HP did sponsor the 2.4.2\n> port though (by allowing an HP employee to do the port inn his\n> regular working hours). It is not doing this any longer (since\n> 2007). Since then it is a small group doing this on a purely\n> voluntary basis in their spare time (one HP employee amongst them,\n> me).  Same goes for the git port BTW.\n\nFor the purpose of \"if we draw the line at 2.6, would it hurt many\npeople who have been happily using the existing release of Git that\nwas happy with 2.4\", it is dubious HP-NonStop counts.  It is not\nlike the users on that platform have been happily using Python based\nPorcelain at the fringe of Git, and drawing the line at 2.6 will not\ngive them any regression.\n\nIt does add more things that needs to be done to the volunteer\ndevelopers for that platform and the organization that may want to\nsupport the platform (as they have to finish 2.6 port if we decide\nto draw the line there), but that is a secondary consideration.\n"},{"id":"205363","messageId":"006101cddfab$2afb0cf0$80f126d0$@schmitz-digital.de","threadId":"32416","inReplyTo":"7va9t71cqa.fsf@alter.siamese.dyndns.org","subject":"RE: Python version auditing followup","fromName":"Joachim Schmitz","fromEmail":"jojo@schmitz-digital.de","sentAt":"2012-12-21T18:44:10Z","receivedAt":"2012-12-21T18:44:10Z","isPatch":false,"sender":{"key":"jojo@schmitz-digital.de","avatar":"https://avatars.githubusercontent.com/u/1786669?v=4"},"body":"> From: Junio C Hamano [mailto:gitster@pobox.com]\n> Sent: Friday, December 21, 2012 7:28 PM\n> To: Joachim Schmitz\n> Cc: git@vger.kernel.org\n> Subject: Re: Python version auditing followup\n> \n> \"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n> \n> >> > We have a working 2.4.2 for HP-NonStop and some major problems getting\n> >> > 2.7.3 to work.\n> >>\n> >> I do not think a platform that stops at 2.4.2 instead of going to\n> >> higher 2.4.X series deserves to be called \"long term maintained by\n> >> their vendors\".  It sounds more like \"attempted to supply 2.4.X and\n> >> abandoned the users once one port was done\" to me.\n> >\n> > Well, not entirely wrong, but not all true at too.\n> > I guess I need to defend the vendor here: It is not really the\n> > Vendor (HP) that provided Python 2.4.2 or tries to provide 2.7.3,\n> > it is a volunteer and community effort. HP did sponsor the 2.4.2\n> > port though (by allowing an HP employee to do the port inn his\n> > regular working hours). It is not doing this any longer (since\n> > 2007). Since then it is a small group doing this on a purely\n> > voluntary basis in their spare time (one HP employee amongst them,\n> > me).  Same goes for the git port BTW.\n> \n> For the purpose of \"if we draw the line at 2.6, would it hurt many\n> people who have been happily using the existing release of Git that\n> was happy with 2.4\", it is dubious HP-NonStop counts.  It is not\n> like the users on that platform have been happily using Python based\n> Porcelain at the fringe of Git, and drawing the line at 2.6 will not\n> give them any regression.\n\nYou asked for opions and obhections, you got mine ;-)\n"},{"id":"205364","messageId":"7vy5grz1fn.fsf@alter.siamese.dyndns.org","threadId":"32416","inReplyTo":"006101cddfab$2afb0cf0$80f126d0$@schmitz-digital.de","subject":"Re: Python version auditing followup","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2012-12-21T18:48:28Z","receivedAt":"2012-12-21T18:48:28Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"\"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n\n>> From: Junio C Hamano [mailto:gitster@pobox.com]\n>> Sent: Friday, December 21, 2012 7:28 PM\n>> To: Joachim Schmitz\n>> Cc: git@vger.kernel.org\n>> Subject: Re: Python version auditing followup\n>> \n>> \"Joachim Schmitz\" <jojo@schmitz-digital.de> writes:\n>> \n>> >> > We have a working 2.4.2 for HP-NonStop and some major problems getting\n>> >> > 2.7.3 to work.\n>> >>\n>> >> I do not think a platform that stops at 2.4.2 instead of going to\n>> >> higher 2.4.X series deserves to be called \"long term maintained by\n>> >> their vendors\".  It sounds more like \"attempted to supply 2.4.X and\n>> >> abandoned the users once one port was done\" to me.\n>> >\n>> > Well, not entirely wrong, but not all true at too.\n>> > I guess I need to defend the vendor here: It is not really the\n>> > Vendor (HP) that provided Python 2.4.2 or tries to provide 2.7.3,\n>> > it is a volunteer and community effort. HP did sponsor the 2.4.2\n>> > port though (by allowing an HP employee to do the port inn his\n>> > regular working hours). It is not doing this any longer (since\n>> > 2007). Since then it is a small group doing this on a purely\n>> > voluntary basis in their spare time (one HP employee amongst them,\n>> > me).  Same goes for the git port BTW.\n>> \n>> For the purpose of \"if we draw the line at 2.6, would it hurt many\n>> people who have been happily using the existing release of Git that\n>> was happy with 2.4\", it is dubious HP-NonStop counts.  It is not\n>> like the users on that platform have been happily using Python based\n>> Porcelain at the fringe of Git, and drawing the line at 2.6 will not\n>> give them any regression.\n>\n> You asked for opions and obhections, you got mine ;-)\n\nYeah, duly noted, and appreciated.\n"},{"id":"205566","messageId":"1356645432.5522.3.camel@localhost","threadId":"32416","inReplyTo":"7vobho60fs.fsf@alter.siamese.dyndns.org","subject":"Re: Python version auditing followup","fromName":"Dennis Kaarsemaker","fromEmail":"dennis@kaarsemaker.net","sentAt":"2012-12-27T21:57:12Z","receivedAt":"2012-12-27T21:57:12Z","isPatch":false,"sender":{"key":"dennis@kaarsemaker.net","avatar":"https://avatars.githubusercontent.com/u/200649?v=4"},"body":"On do, 2012-12-20 at 10:30 -0800, Junio C Hamano wrote:\n> Which platforms that are long-term-maintained by their vendors still\n> pin their Python at 2.4.X? \n\nRHEL 5.x and its clones still use python 2.4. It is supported by red hat\nuntil at least 2017 (though end of production phase two, Q1 2014, seems\nlike a reasonable cut-off point).\n-- \nDennis Kaarsemaker\n"}]}