[dns-operations] New subscribers

Brielle Bruns bruns at 2mbit.com
Wed Dec 29 04:55:23 UTC 2010


On 12/28/10 8:53 PM, Noel Butler wrote:
> That's a rarity, most people are too scared to use anything other than
> their distros released packages, perhaps its laziness, perhaps
> they don't know any better, or perhaps they are just plain ignorant, I
> think it sadly says a lot bout the calibre of many system admins these days.
>

There are a few gotchas that can happen with self compiled source or 
customized packages on a system that uses a package manager...

Dependencies can be upset if you use a self compiled library over a 
packaged library - ie: if you have openssh, which depends on openssl, 
and you want to hand compile openssl, you will either need to create a 
dummy openssl package to 'provide' these dependencies, or force install 
of the openssh package which may cause problems later on during upgrades.

Package managers like aptitude will attempt to 'fix' these breaks, or 
upgrade the package (unless you pin the dummy).  Its a losing battle 
sometimes unless you are going for an end user application rather then a 
library.

An example of a package that sorta works around this is exim4 under 
debian - you can build a specific custom package with your own options, 
and its called exim4-daemon-custom.  Since debian doesn't provide a 
exim4-daemon-custom of their own, it wouldn't be automatically upgraded, 
and it provides all the requirements as an alternative for 
exim4-daemon-{light,heavy}.

You can usually 'override' the system libs and bins by making sure 
/usr/local/{bin,lib} is in the path and linker before / and /usr...  But 
thats a good way to run into unexpected behavior at times.

There's always tradeoffs when you use a certain type of setup...  Quick 
fast setup with package managers (debian, fedora, etc) but lacking 
optimization and compiling customization...  Or agonizing 12+ hour whole 
system build/upgrade times but the system is highly optimized to your 
specific build (if you've ever had to build qt/kde/gtk/etc from scratch 
every time a new build comes out, you know what I mean).

Note I'm coming from a mixed background - I started out in Redhat 
4.2/5.x, A/UX (if you've never heard/used A/UX, then your missing out on 
Apple's first and well designed UNIX OS), then Fedora, and now Debian 
and MacOS X with Macports.  I've also built my own homebrew OSs for my 
firewall products back in the early 2000s...

In the end, I'm willing to trade off the customizing options for 
consistent system builds and ease of deployment.  Hence why I use Debian 
for servers and firewalls these days.



-- 
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org    /     http://www.ahbl.org



More information about the dns-operations mailing list