It always puzzles me why they chose the one distro without systemd to base this on and are now trying to add it themselves.
Also I have thoughts about this:
Move sudo to community
At present, sudo is in the main repository, which requires us to provide security support for 2 years. Upstream sudo does not provide an “LTS” lifecycle, so this requires either performing security upgrades during the maintenance lifecycle, or backporting security fixes by hand. Benefit to Alpine
Prior to the creation of the security team, there was an unofficial preference to push doas as the preferred pivot tool for Alpine. This reinforces that messaging.
Additionally, we do not have to support sudo for a 2 year lifecycle, since there are no LTS branches for it.
How often does sudo have security vulnerabilities that it’s worth moving to a lesser used tool whose vulnerabilities are less likely to be discovered against your security team’s wishes? What do all the other distros do?
Yeah that does seem like an odd way to go about it. Other than full system upgrades I can’t remember the last time I saw sudo in the upgrade list. Maybe I’ve just been missing it.
What has nothing to do with systemd? You open the link and before the introduction it says the current release isn’t fit for general use because they couldn’t add systemd yet. If they picked something with systemd they wouldn’t need to spend so much effort on it
It always puzzles me why they chose the one distro without systemd to base this on and are now trying to add it themselves.
Also I have thoughts about this:
How often does sudo have security vulnerabilities that it’s worth moving to a lesser used tool whose vulnerabilities are less likely to be discovered against your security team’s wishes? What do all the other distros do?
Yeah that does seem like an odd way to go about it. Other than full system upgrades I can’t remember the last time I saw sudo in the upgrade list. Maybe I’ve just been missing it.
Yeah, they could’ve picked something like Debian. It’s like they picked an embedded distro only to try to turn it into a full-fledged.
deleted by creator
What has nothing to do with systemd? You open the link and before the introduction it says the current release isn’t fit for general use because they couldn’t add systemd yet. If they picked something with systemd they wouldn’t need to spend so much effort on it
My bad. Well, maybe they manage to keep Openrc/Systemd shims long-term, since Openrc tries to be quite similiar.