<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title><![CDATA[Many game/software vendor dislikes packaging systems]]></title>
    <link>http://brainstorm.ubuntu.com/item/21385/</link>
    <description><![CDATA[The problem is software vendors don't like apt/yum, etc. and provide own installers. Giving some tools, like installer root privileges is a security hole! Many installers actually needs root privileges - it's very bad situation.<br />
<br />


<b>[-57 votes] Solution #1: Create D-BUS API for installers</b>
<br />

<br />
<br />



<b>[259 votes] Solution #2: Create a universal package format</b>
<br />

<br />
<br />



<b>[129 votes] Solution #3: Support applications for single users</b>
<br />

<br />
<br />



<b>[-35 votes] Solution #4: Create libraries/shell script allowing to install package in specify directory</b>
<br />

<br />
<br />



<b>[41 votes] Solution #5: Autopackage, anyone?</b>
<br />

<br />
<br />



<b>[36 votes] Solution #6: apt capable of install and manage any software on earth</b>
<br />

<br />
<br />



<b>[10 votes] Solution #7: Sandbox for installers.</b>
<br />

<br />
<br />



<b>[-13 votes] Solution #8: New compatibility layer</b>
<br />

<br />
<br />



<b>[7 votes] Solution #9: make a gui for alien, and make it be default for rpm files</b>
<br />

<br />
<br />



<b>[19 votes] Solution #10: DEB packages are good!!! Promote them harder!!!</b>
<br />

<br />
<br />



<b>[0 votes] Solution #11: Create hybrid/common package format.</b>
<br />

<br />
<br />



<b>[0 votes] Solution #12: Add Autopackage support in Ubuntu Software Center</b>
<br />

<br />
<br />



]]></description>

    <language>en-us</language>
    <pubDate>Thu, 10 Sep 2009 07:55:17 +0000</pubDate>
    <lastBuildDate>Wed, 30 Nov 2011 21:22:01 +0000</lastBuildDate>
    <generator>QAPoll module</generator>
    <guid isPermaLink="true">http://brainstorm.ubuntu.com/idea/21385/</guid>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[Installing not executable should only require user privileges,  but changing files will always need root password.]]></description>
  <pubDate>Thu, 10 Sep 2009 07:57:14 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[If installer fails, Ubuntu should revert any changes.]]></description>
  <pubDate>Thu, 10 Sep 2009 07:59:52 +0000</pubDate>
</item>
        <item>
  <title>Comment from andruk</title>
  <description><![CDATA[Edited solution #1 for grammar and clarity.]]></description>
  <pubDate>Fri, 11 Sep 2009 02:07:01 +0000</pubDate>
</item>
        <item>
  <title>Comment from coolen</title>
  <description><![CDATA[Isn't this being worked on in the LSB?]]></description>
  <pubDate>Fri, 11 Sep 2009 03:06:36 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[This is not problem related to packaging system.<br /><br />@Solution #3: This is exactly what I think. I have describe in my solution multiple parts of system permission, like /opt for installing application by normal user, /sbin for installing system wide applications, etc. Additionally my idea include policy to overwrite files. How did you like do this by packaging system? Many programs have compiled-in libraries path or needs to set special environment variable. Package describes where we should put files included inside. We can use chroot, but we don't provide users pace chroot yet. Using chroot method will cause additionally problems.]]></description>
  <pubDate>Fri, 11 Sep 2009 06:02:07 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@Solution 3: We don't need to change behavior of system menus. Actually all home directories contains place, where menu activators should be placed(look for example at PlayOnLinux).]]></description>
  <pubDate>Fri, 11 Sep 2009 06:04:32 +0000</pubDate>
</item>
        <item>
  <title>Comment from Darwin Survivor</title>
  <description><![CDATA[Solution 3 is already in place. Just look at urban terror, the entire game runs out of a single folder.<br /><br />All the developers need to do is create a user-level script that extracts the game data and adds a shortcut to the menu.<br /><br />This is a not a linux problem, this is developers assuming that they know better than their customers and DEMAND that their installer script run as root even though the only reason for that is if you are installing for multiple users.]]></description>
  <pubDate>Fri, 11 Sep 2009 10:38:43 +0000</pubDate>
</item>
        <item>
  <title>Comment from mikaelstaldal</title>
  <description><![CDATA[Solution #3 as I understand it is good. However, Lachu have obviously understood it differently since he/she insists on dragging /opt into this. <br /><br />Installing an application for a single user should ONLY affect the user's home directory, not /opt or anything else outside the user's home directory. The only exception is that it's OK to use /tmp for temporary storage.<br /><br />No new API is needed for this, only changes to dpkg/apt and perhaps a different packaging practice.<br /><br />(Lachu is correct that we don't need to change behavior of system menus, they already work as desired.)<br />]]></description>
  <pubDate>Fri, 11 Sep 2009 10:55:43 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[Only may idea will solve problem ;-) .<br /><br />The topic was not: installing software for user<br />but: installers sucks, because some needs root privileges to copy files into system directories.<br />Why we should giving them root privileges?]]></description>
  <pubDate>Fri, 11 Sep 2009 11:59:13 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[Idea 2-3 isn't related to rationale, but I have decided to place similar solution/idea like ideas 2-3, so it's no problem for my.<br /><br />Without first solution satisfied, we don't make world better. Software companies will still making installers, but installers are bad think.]]></description>
  <pubDate>Sat, 12 Sep 2009 18:02:08 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[I know that you will kill me after read this, but I must write about it.<br /><br />Imagine specialized interdistribution packaging system to install package into specify directories. Default option should be /usr/share/ for shared data(example application icons, new wallpaper) and /opt/app_folder for others(binaries, libraries, unshared data, like levels, sounds). This packaging system should prevent to setting suid or guid or setting specify owner of file or access rights.<br /><br />It should use PackageKit to solving dependency in first step. If PackageKit fails, it can download package from own repository or from internet(specified source - if user agree). Next it will generate runner as described in #4 idea. Application provided by this package system should be linked with path resolver(as solution #4). Path resolver should have get_path_for_resource(char *res_name, int type, char *mime), where type can be BINARY, LIBRARY, SHARED_DATA, WALLPAPER, ICON, LINK, SOUND, VOICE, CURSOR, UNSUPPORTED_DATA.<br /><br />What is most interesting in this idea is packaging system above other packaging system. PolicyKit can helps us, because it provides package naming scheme(so it no way to some package supported by packagekit have different name).]]></description>
  <pubDate>Sun, 13 Sep 2009 13:27:18 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[We can using fakeroot to install software into /opt without root permisions. Of course it shouldn't allow to write on files of different users, so /opt should have sticky bit set.]]></description>
  <pubDate>Tue, 15 Sep 2009 20:51:42 +0000</pubDate>
</item>
        <item>
  <title>Comment from mikaelstaldal</title>
  <description><![CDATA[Why install in /opt for single user when you can install in /home/$USER ?<br />]]></description>
  <pubDate>Wed, 16 Sep 2009 09:53:51 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[Using automake with PackageKit could be great improvement! But it still force to have source.<br /><br />I must admit PackageKit force common naming scheme for packages. We can use this scheme in many places.<br /><br />I must tell also, that Ubuntu don't contains PackageKit.]]></description>
  <pubDate>Thu, 17 Sep 2009 17:38:16 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@mikaelstaldal wrote on the 16 Sep 09 at 09:53 : Because we can use fakeroot to avoid malware. There will several problems occurs, when we do this in my way, example with updates(why application should update themselves?), but it protect against malware.]]></description>
  <pubDate>Sun, 20 Sep 2009 19:33:30 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[We can user fakeroot if user install tool works in user space. <br /><br />Idea to place files owned by root is no good and possibly you need, that other user can user installed application.]]></description>
  <pubDate>Sun, 20 Sep 2009 19:34:36 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@Darwin Survivor wrote on the 11 Sep 09 at 10:38 : Exactly - it's not operating system problem, but it's user problem, because software distributor have plan to conquest whole world.]]></description>
  <pubDate>Tue, 29 Sep 2009 16:52:53 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@Solution #8: New compatibility layer : The same solution I propose in this("Lachu wrote on the 13 Sep 09 at 13:27") comment. Actually PackageKit is only compatibility layer for many cases, but not for all. It would be good solution to develop file-based locker for packaging system. Some like - apt will register new package and tells system file /etc/configuration_file is owned by this package. If yum tries to overwrite this file, system will suggest to remove packacge, which owned /etc/configuration_file.<br /><br />That's all. No magic. It will allow to working with many packaging system at the same time. And of course, there should been API for this - very similar to I suggest on first solution.]]></description>
  <pubDate>Fri, 02 Oct 2009 13:03:38 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[Basically - if file /etc/configuration_file is owned by the same packaging system, which would like to modify/remove them, we allow to do this. If this file belongs to other packaging system, we disallow to perform this operations. Is very similar to DAC, but files would have also packaging system or application as owner.]]></description>
  <pubDate>Fri, 02 Oct 2009 13:05:59 +0000</pubDate>
</item>
        <item>
  <title>Comment from Jan-Nik</title>
  <description><![CDATA[Hi there,<br /><br />I'm the current main developer of Autopackage and have to agree with solution #5. Why start from scratch?<br />Autopackage already supports solution #3.]]></description>
  <pubDate>Wed, 07 Oct 2009 09:13:09 +0000</pubDate>
</item>
        <item>
  <title>Comment from Yfrwlf</title>
  <description><![CDATA[There's no reason solving this problem cannot be accomplished.<br /><br />As far as dependencies being an issue, it doesn't require the "main" solution the LSB is implementing which is to make all distros have a standard set of libraries.  While that may be somewhat helpful, all that is needed is a system to get users the required packages when they want something, and for that you just need a proper standardized way of communicating.  Otherwise, if you include all libraries with your package then that gets rid of that, but it would be nice if there was something in place so you didn't have to waste that bandwidth.<br /><br />Linux should utilize standards to wazoo and back, have them be available to make things more interoperable, so this is something which definitely needs attention.<br /><br />Software on Linux is lacking enough as it is.  Don't make things worse by fragmenting the Linux software ecosystem.  Love your developers and give them the ability to release a single package for users to download. (and on a related topic, make adding repositories to install and then keep the software up-to-date easy, too)]]></description>
  <pubDate>Wed, 07 Oct 2009 11:49:09 +0000</pubDate>
</item>
        <item>
  <title>Comment from billdotson</title>
  <description><![CDATA[It is absolutely one of the most annoying things for a developer to insist on making their own installer instead of using a (good in my opinion) stable one. That is one thing that is so infuriating about Windows. ]]></description>
  <pubDate>Wed, 07 Oct 2009 14:39:00 +0000</pubDate>
</item>
        <item>
  <title>Comment from billdotson</title>
  <description><![CDATA[I have not had any of the issues you mention. I don't think I was talking about letting a distro build your application, I was thinking of the developer building it themselves. I have never had any issues with a debian package personally.]]></description>
  <pubDate>Thu, 08 Oct 2009 00:56:14 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@Solution #2: Create a universal package format : All package is only files + installation script + description. It will be great if we allow to put installation script to many distributions.]]></description>
  <pubDate>Sat, 10 Oct 2009 12:15:44 +0000</pubDate>
</item>
        <item>
  <title>Comment from Lachu</title>
  <description><![CDATA[@Solution #11 : Will help with creating common package format. We should create hybrid package format and create consortium to care about it. Some information are common, so in first stage should be inserted in common definitions section and into specific distribution section(scripts).]]></description>
  <pubDate>Wed, 28 Oct 2009 07:47:15 +0000</pubDate>
</item>
        <item>
  <title>Comment from rm-rf</title>
  <description><![CDATA[I think a lot of people don't realize that a) creating more standards only increases the problem (http://xkcd.com/927/) and b) the dpkg command already has an option for installing in non-root directories]]></description>
  <pubDate>Wed, 30 Nov 2011 21:22:01 +0000</pubDate>
</item>
      </channel>
</rss>

