Remix.run Logo
seanhunter 13 hours ago

Speaking from personal experience which is admittedly quite old at this point, but it used to be the case that Debian definitely didn’t go out of its way to try to pull in devs. When I had a few small open source things myself I packaged them for RedHat (this is pre-fedora when RedHat didn’t have a commercial and free version, they just had “RedHat Linux”) and looked to package them for debian, given I was actually using debian for a few of my personal servers. I made the .deb packages just fine but found the Debian community were definitely not trying to attract devs[1]. I couldn’t get anyone from Debian to sign my gpg keys which if I recall correctly was a necessary part in getting my package upstreamed[2] and in the end I just gave up on it because I’m really not interested in joining a community that is so unwelcoming.

[1] although it was maybe specifically just me they weren’t trying to attract.

[2] to the point where I actually worked with someone in my day job who was a debian dev and he wouldn’t sign my key without me producing physical official ID like a passport or something. Just really bizarre level of paranoia like a government kyc process or something.

ramses0 4 hours ago | parent [-]

[2]: https://www.debian.org/events/keysigning

People should only sign a key under at least two conditions:

The key owner convinces the signer that the identity in the UID is indeed their own identity by whatever evidence the signer is willing to accept as convincing. Usually this means the key owner must present a government issued ID with a picture and information that match up with the key owner. (Some signers know that government issued ID's are easily forged and that the trustability of the issuing authorities is often suspect and so they may require additional and/or alternative evidence of identity).

The key owner verifies that the fingerprint and the length of the key about to be signed is indeed their own.

--

...debian is INDEED old-school and slightly derpy (see their use of the condorcet voting method), but it has boded extremely well for their longevity. Debian exists for its users, and its users are generally developers.