Originally posted by Pajn
View Post
Announcement
Collapse
No announcement yet.
It's Looking Like Debian 9.0 Stretch Won't Support OwnCloud
Collapse
X
-
A web application that brings along bundled libraries? Un-fscking-acceptable! That's a terrible, no, a horrible security nightmare.
No half-way sane admin would even remotely consider running this.
Let's hope the Debian package maintainers show some common sense and refuse to package this nonsense. If users want to shoot their own foot by manually ruining the security of their system, so be it, but the distribution shouldn't actively help them do it.
Comment
-
Originally posted by mjog View Post
Does it also do calendars and contacts? I've been testing out Cozy since if you're not going to get distro-supported packages, there's no reason to put up with PHP and you may as well dive down the rabbit hole that is modern web development that depends on Pip/NPN/GEM and a compiler on your server. :<
Comment
-
Just to add to the discussion: I tracked down the Fedora FESCO ticket to give ownCloud a bundled library exception. The bundled libraries are:PHP: smb4php (single php class, newest release, 5 years old) php-when (single php class, latest commit 2 years ago, probably dead) phpass (2 files, project doesn't look too active, latest commit 20 months ago)
it seems pointless to re-package those old and abandoned php classes.
JavaScript?: chosen, fullcalender and timepicker
All opinions are my own not those of my employer if you know who they are.
- Likes 2
Comment
-
For the use-case of ownCloud, I've been playing with hosting my own instance of the open source sandstorm.io software. So far it works great, though I haven't done any heavy lifting with it.
The Sandstorm developers are up front that their project is in heavy development beta, so they change things too quickly to make it worthwhile to make a software package for Debian or Fedora or similar. They have their own security update mechanism.
Comment
-
Originally posted by chrisq View PostThe solution for owncloud is to create a docker image with all their modifications, and make that the only supported platform.
Comment
Comment