DaemonForums  

Go Back   DaemonForums > FreeBSD > FreeBSD Ports and Packages

FreeBSD Ports and Packages Installation and upgrading of ports and packages on FreeBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 15th October 2010
Oliver_H's Avatar
Oliver_H Oliver_H is offline
Real Name: Oliver Herold
UNIX lover
 
Join Date: May 2008
Location: Germany
Posts: 429
Thanked 26 Times in 22 Posts
Default Google Chromium in ports now

The old version 5.x is in ports now, but with a caveat: you'll not get any security related fixes or another updates at all -- at least if you aren't a paid subscriber.

Quote:
Since this 5.0.375.127 release was pushed by Google almost two months ago, it is not the most up-to-date, secure release. Only paid
subscribers get those, until enough subscribers fund the full port to
get done, after which all patches are eventually open-sourced within a
year. There will be no security fixes or info for these older releases
in ports as Google doesn't provide that or support them. If you want
the most secure up-to-date browser on FreeBSD, you have to pay for it:
either directly by funding this FreeBSD port of Chromium until it gets
done or indirectly through the Firefox/Opera search deals, that make
sure google is the default option in your search engine listing:
http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/146302


I don't have a problem with paid development, but as I said in the PR it's bad practice for the portstree. Nowadays it's crazy to use a browser, that is out-of-date. Furthermore it doesn't make sense to support "shareware" in the ports. User installing this kind of software don't know that they will not get any security fixes or bugfixes at all.
__________________
use UNIX or die :-)
Reply With Quote
  #2   (View Single Post)  
Old 15th October 2010
Carpetsmoker's Avatar
Carpetsmoker Carpetsmoker is offline
Real Name: Martin
Old man from scene 24
 
Join Date: Apr 2008
Location: Eindhoven, Netherlands
Posts: 2,070
Thanked 198 Times in 156 Posts
Default

So how does this work? As I understand it, chrome/Chromium (What is the difference anyway?) is fully open source and considered free software?

But the guy/gal who made & maintains the FreeBSD ports has this subscription thing?

Why not just fetch the latest version and apply the patches from the port?
__________________
UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things.
Reply With Quote
  #3   (View Single Post)  
Old 15th October 2010
Oliver_H's Avatar
Oliver_H Oliver_H is offline
Real Name: Oliver Herold
UNIX lover
 
Join Date: May 2008
Location: Germany
Posts: 429
Thanked 26 Times in 22 Posts
Default

>Why not just fetch the latest version and apply the patches from the port?

Simply because of the fact, that you don't have the latest patches for e.g. the current 6.x stable.
__________________
use UNIX or die :-)
Reply With Quote
  #4   (View Single Post)  
Old 15th October 2010
DutchDaemon's Avatar
DutchDaemon DutchDaemon is offline
Real Name: Ben
Spam Refugee
 
Join Date: Jul 2008
Location: Rotterdam, The Netherlands
Posts: 337
Thanked 32 Times in 30 Posts
Default

http://chromium.hybridsource.org/
http://chromium.hybridsource.org/port

The subscription 'tree' is at Chrome 8 (trunk, clang build) and 6 (stable). The port is at the end of the line, it inherits the 'paid off development bits', so to speak.

Last edited by DutchDaemon; 16th November 2010 at 11:59 PM.
Reply With Quote
  #5   (View Single Post)  
Old 15th October 2010
Oliver_H's Avatar
Oliver_H Oliver_H is offline
Real Name: Oliver Herold
UNIX lover
 
Join Date: May 2008
Location: Germany
Posts: 429
Thanked 26 Times in 22 Posts
Default

I don't care what he is doing _outside_ the portstree. But committing an insecure port is a breach of trust. And this old version of Chromium has got a lot of security leaks already.
__________________
use UNIX or die :-)
Reply With Quote
  #6   (View Single Post)  
Old 15th October 2010
Carpetsmoker's Avatar
Carpetsmoker Carpetsmoker is offline
Real Name: Martin
Old man from scene 24
 
Join Date: Apr 2008
Location: Eindhoven, Netherlands
Posts: 2,070
Thanked 198 Times in 156 Posts
Default

... As long as portaudit gives the appropriate warnings ...
__________________
UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things.
Reply With Quote
  #7   (View Single Post)  
Old 15th October 2010
Oliver_H's Avatar
Oliver_H Oliver_H is offline
Real Name: Oliver Herold
UNIX lover
 
Join Date: May 2008
Location: Germany
Posts: 429
Thanked 26 Times in 22 Posts
Default

I hope so ... but beginners, especially PC-BSD users, will not have a single clue about it.
__________________
use UNIX or die :-)
Reply With Quote
  #8   (View Single Post)  
Old 15th October 2010
BSDfan666 BSDfan666 is offline
Real Name: N/A, this is the interweb.
Helpful companion
 
Join Date: Apr 2008
Location: Ontario, Canada
Posts: 2,223
Thanked 193 Times in 184 Posts
Default

Google Chrome for Linux makes a lot of assumptions about running on Linux, they aren't overly interested in running on other Unix-like systems.

For Windows, they wanted to make use of "technologies" available there.

The same goes for the Mac and Linux ports, the Linux port just happened to be similar enough to get working on BSD.. after some rewriting and patching.

This guy wants to be compensated for the work, which is perfectly understandable, and making available commercial/proprietary software in the ports trees has never been a problem for any of the BSD projects, I believe Richard Stallman has even trolled on OpenBSD's mailing lists about this before.

If you don't want to pay the guy then you have other options available:
  • Use a different browser, there are plenty of browses based on WebKit like Chrome.
  • Roll up your sleeves and start working on porting the latest Chromium code to FreeBSD, submit an updated port.
  • Use Firefox or.. "Opera".
Reply With Quote
  #9   (View Single Post)  
Old 15th October 2010
BSDfan666 BSDfan666 is offline
Real Name: N/A, this is the interweb.
Helpful companion
 
Join Date: Apr 2008
Location: Ontario, Canada
Posts: 2,223
Thanked 193 Times in 184 Posts
Default

To further clarify, but are you sure the port has vulnerabilities? according to this guys site he's going to be maintaining this official port.. it isn't being pulled directly from the chromium site but his own where he rolled his own distfile.

Do you believe he isn't backporting security/stability fixes for "free" users? because it certainly looks like that's his plan.

http://chromium.hybridsource.org/issues
Reply With Quote
Old 16th October 2010
Oliver_H's Avatar
Oliver_H Oliver_H is offline
Real Name: Oliver Herold
UNIX lover
 
Join Date: May 2008
Location: Germany
Posts: 429
Thanked 26 Times in 22 Posts
Default

Quote:
Originally Posted by BSDfan666 View Post
To further clarify, but are you sure the port has vulnerabilities? according to this guys site he's going to be maintaining this official port.. it isn't being pulled directly from the chromium site but his own where he rolled his own distfile.

Do you believe he isn't backporting security/stability fixes for "free" users? because it certainly looks like that's his plan.

http://chromium.hybridsource.org/issues
Yeah I'm sure. Btw. did you read the quote above? Certainly not .. it's the answer from the patch-developer.

>If you don't want to pay the guy then you have other options available

As I said, I have no problem with paid development. But the portstree is no appstore. So if he wants to get paid, then he should push his port to a _final_ status and then submit it to the portstree.

I already spoke with different people from FreeBSD about this matter and they find it at least bewildering.

Again, I asked the guy about his agenda regarding this port and you'll find his answer in the quote above or if you're following this url to the PR: http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/146302

>Roll up your sleeves and start working on porting the latest Chromium code to FreeBSD, submit an updated port.

Btw. I don't think you really get it. I don't want Chromium, but this port is a big mistake and the portstree is the wrong place for a paid development a la "Microsoft Windows shareware".
__________________
use UNIX or die :-)

Last edited by Oliver_H; 16th October 2010 at 01:48 PM. Reason: addendum
Reply With Quote
Old 18th October 2010
TerryP's Avatar
TerryP TerryP is offline
Arp Constable
 
Join Date: May 2008
Location: USofA
Posts: 1,547
Thanked 112 Times in 104 Posts
Default

One beauty of open source, if you don't support it on platfomr Z but it rocks, perhaps some nerd will take a stab at fixing your bungles. A lot of people still seem live in a "Well, it works on MY workstation!" world rather than a "Holy crap, this thing is as portable as the C standard!", no body knows which extreme is worse.


Quote:
Originally Posted by BSDfan666 View Post
This guy wants to be compensated for the work, which is perfectly understandable, and making available commercial/proprietary software in the ports trees has never been a problem for any of the BSD projects, I believe Richard Stallman has even trolled on OpenBSD's mailing lists about this before.
Chromium is not proprietary software, Chrome is.



Personally I have no problem with the guy for wanting to be compensated for his efforts. It ain't a quick 'make' and pray operation. If the same person is doing the subscriber thing and maintaining the port on FreeBSD however, *that* I would call an alarming conflict of interest. In my eyes if you can't solidly maintain a port, you shouldn't be submitting it to the main ports tree. By solidly maintain, I mean stick with it and push out the work promptly.

The way the subscribing thing is working and the way FreeBSD ports works (hell, just look at broken and forbidden incidents), I don't really think it matters though. The port is of what he's 'released' to the general public in a manor fit for inclusion as it is.


Life sucks, what else is new?
__________________
My Journal

Thou shalt check the array bounds of all strings (indeed, all arrays), for surely where thou typest ``foo'' someone someday shall type ``supercalifragilisticexpialidocious''.
Reply With Quote
Old 21st October 2010
ephemera's Avatar
ephemera ephemera is offline
Knuth's homeboy
 
Join Date: Apr 2008
Posts: 537
Thanked 49 Times in 43 Posts
Default

Quote:
Originally Posted by TerryP View Post
Life sucks, what else is new?
Try Opera!
Reply With Quote
Old 21st October 2010
TerryP's Avatar
TerryP TerryP is offline
Arp Constable
 
Join Date: May 2008
Location: USofA
Posts: 1,547
Thanked 112 Times in 104 Posts
Default

Opera is grand, but it's less work to configure vimprobable2
__________________
My Journal

Thou shalt check the array bounds of all strings (indeed, all arrays), for surely where thou typest ``foo'' someone someday shall type ``supercalifragilisticexpialidocious''.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
FreeBSD Google Chromium in FreeBSD ports now Oliver_H News 0 15th October 2010 10:43 AM
Chromium browser mechanic OpenBSD Packages and Ports 5 3rd September 2010 02:00 PM
how to install chromium... clovis FreeBSD Ports and Packages 4 11th August 2010 08:25 PM
FreeBSD Complete ports thaw after ports freeze for 7.3 Release J65nko News 0 24th March 2010 11:46 PM


All times are GMT. The time now is 09:32 AM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick