On Thu, Mar 03, 2022 at 09:04:10AM +0100, Kamil Dudka wrote:
On Thursday, March 3, 2022 7:07:34 AM CET Ralf Corsépius wrote:
> Am 24.02.22 um 19:35 schrieb Daniel P. Berrangé:
>
> > On Thu, Feb 24, 2022 at 07:16:26PM +0100, Ralf Corsépius wrote:
>
>
>
> > If someone is setting up a personal private mirror, I struggle
> > to understand a reason why they would pick FTP over HTTP(S)
> > today.
>
> Because an ftp server is much lighter and much easier to maintain than a
> fat httpd-server?
>
>
> > Perhaps someone will have a FTP only mirror that's
> > existed for years and simply haven't got around to enabling
> > HTTP, but addressing that is not an unreasonable expectation.
>
>
> Almost. E.g. I am using a LAN-wide (anonymous-only) ftp server, I set up
> a long time ago and rarely touched since then.
>
> Using httpd-server would simply be overkill for this use-case.
>
>
> > IMHO explicitly disabling FTP in dnf would be fine, as any fallout
> > could be easily dealt with by enabling HTTP. Just ensure we announce
> > such intent ahead of time via a Fedora feature proposal.
>
> I don't agree. Not using a protocol on public dnf-servers is on thing,
> but removing the "ftp" protocol everywhere is just silly fanatism, IMHO.
>
> Ralf
The FTP protocol is still included in libcurl-minimal, so the protocol is not
going to disappear with the proposed F37 change. On the other hand, it may
happen that FTP will be unavailable by default in a year or two.
I'm still wondering what you're trying to achieve with this change.
The stated benefits[1] are that the "minimal variants are smaller",
which is a non-goal for almost everyone. And something to do with
security which will be immediately negated once everyone unbreaks
their Fedora by installing curl-full. And the security angle would be
better fixed by reviewing Fedora packages for correct use of
CURLOPT_PROTOCOLS (see my other email[2]).
Rich.
[1]
https://fedoraproject.org/wiki/Changes/CurlMinimal_as_Default#Benefit_to_...
[2]
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.o...
--
Richard Jones, Virtualization Group, Red Hat
http://people.redhat.com/~rjones
Read my programming and virtualization blog:
http://rwmj.wordpress.com
virt-p2v converts physical machines to virtual machines. Boot with a
live CD or over the network (PXE) and turn machines into KVM guests.
http://libguestfs.org/virt-v2v