Written by fcsonline the 28 Apr 08 at 18:14.
Category: System.
Related project:
Nothing/Others.
Status: New
Rationale
The best thing of free software and also Ubuntu is the sharing of resources.
I'm updating my system to 8.04 and predictions I think will be a long process.
I just do not understand, why we do not use a method like Bittorrent to download the packages that exist in repositories. We would avoid overload central servers and share out the load to all users of ubuntu, and emphasize the resource sharing.
Is it secure? Maybe some packages could be infected and sent back into the community. I guess almost no ordinary user has enough knowledge to recognize it.
If I download from the main or mirror servers I guess I can trust these packages.
Yes, Bittorrent is secure with its hashes that identify a file in the network. If you don't trust, after download you can hash the files and compare with a list of hashes from the central servers.
All packages you install via update manager are cryptographically signed using GPG. See http://en.wikipedia.org/wiki/Public-key_cryptography for more info on how that works, but it ensures that the data is not modified in transit, and allows a way for you to check whether the main Ubuntu server "signed" that package, and if it was valid.
There are, of course, some issues with routers, crappy ISPs, and such. There should most definitely be an option.
That said, I'm assuming that you're referring only to upgrading (like from Gutsy to Hardy) during the first week or so when it's released. Beyond that, it would be hard to get peers, especially for all those obscure packages I'm always downloading. And if it's integrated into the package manager, when am I seeding things? All the time? Only when adept is open? I can see users being befuddled at the fact that their computer uploading who-knows-what without them knowing, especially for those with limited bandwidth or slow computers.
My router RAPES torrenting /p2p'ing. So any body who has a piece of *$&@ router, or a poorly configured one, under this system, would get ubuntu updates at TERRIBLE speeds, this is a horrible idea. The current update speeds are fine with me. The majority of people dont need 700kbps (for example) if it means a good fraction of people wont get updates at all, or at speeds under 20kbps.