12 ms·

Debian project has plenty of money but not enough developers

152 points by mr_toad 6y ago

tluyben2 6y ago
Bit of a weird headline as the article says Debian org has $900k in the bank but that is not spent on the devs; they are volunteers. If they would offer, let’s say, 2k/mo (the article says they need good people who like though problems; 2k is nothing for those types however, many people would like do it because of love for Debian; they do not do it now as they need at least a little food on the table) per full time contributor, there would be plenty of devs joining. But for their goals to be met, they would be also immediately broke. So in fact they do not have plenty of money to achieve what they want, unless people work for free.
- dcow 6y ago
  Yeah I’m also confused by this. Debian has an opportunity to reiterate that free software isn’t just a pipe dream volunteer effort but rather that there is business being software authorities without the baggage of a slew of software patents and terms and license agreements. Perhaps if they paid core maintainers it would ostracize other contributors who didn't make the cut? Perhaps they don’t want to become a Canonical and have to answer to steak holders? There’s value in being frugal but you also meed to know your own value or others will take advantage of you.
  - danieldk 6y ago
    Some Debian developers tried to get funding to finish the Etch release, but it was met with a lot of hostility: https://lists.debian.org/debian-project/2006/10/msg00260.html https://lists.debian.org/debian-project/2006/10/msg00260.htm... That doesn't mean that it cannot be done. E.g. the FreeBSD Foundation pays developers for specific projects that are important to the future of FreeBSD: https://freebsdfoundation.org/our-work/projects/ https://freebsdfoundation.org/our-work/projects/
    - rleigh 6y ago
      It can be done, but culturally the projects are too different. There were valid reasons for the hostility. Bringing money into the equation completely changes the dynamics of an all-volunteer project, and splits the developers into the gilded minority and the plebs who slave away for free. Plenty of volunteer organisations have been torn apart by the resentment and infighting that can result. * Which developers are eligible for funding, and which are not? * The organisation is no longer flat; some people are effectively profiting off the backs of the majority * The meritocracy is lost; do the "paid staff" have more of a say than the "unpaid volunteers" * Are "paid staff" even volunteers any more? The vast majority of Debian developers work full time on their day jobs, and contribute to Debian as a labour of love in their spare time, or as part of their work for situations where organisations sanction Debian work. I used to work 8 hours, and then come home and regularly work 4-8 hours on Debian. Every day for nearly a decade. Totally unsustainable, and I'm no longer an active contributor. But for people who are contributing that much, for free, you can see why there would be concerns over the effect of a paid class of contributor to the organisation as a whole. None of that is to say it can't work. FreeBSD is smaller, more tightly-focused, and has a culture of corporate contribution. Paying people to write specific features delivers results on a schedule. I donate to the FreeBSD foundation for that reason. The developer culture seems to be much more tolerant of this (though I'm not a FreeBSD insider, so don't know all the details). FreeBSD is vastly simpler to contribute to, so I can participate with vastly less commitment. Contributing a new port or an updated port or bugfix is simply a matter of attaching a patch to a bugzilla ticket. Maybe it's not so much of an issue because there's already a clear separation of core devs vs casual contributors. And that's OK.
      - dcow 6y ago
        Do you think a bounty system would work? Leadership decides payouts for different contributions. Possibly exclude leadership from bounty access so that the core ethos is still volunteer driven. Everyone else has access to bounties so there’s no resentment. Contributions could range from code patches to release management & announcements.
        6y ago
- Tepix 6y ago
  I think volunteer work is at the core of their culture. Paying a few core full time contributors seems like a good idea - i assume it's happening already.
  - pabs3 6y ago
    The only payments Debian does to contributors are to Outreachy interns: https://www.outreachy.org/ https://www.outreachy.org/
- petre 6y ago
  2k/mo would pay for 37 devs for a year. Rather than that do micropayments for contributions (approved packages, finished tasks). A project such as Debian only needs a few core members or people working on important projects paid full time. It works for FreeBSD. I really like Debian but volunteers are probably better off packaging for other distros such as Arch or Alpine with simpler packaging/better tooling and less strict rules. One thing to improve would be tooling to make packages.
- elipsey 6y ago
  I am currently unemployed/independently-wealthy/thrifter/bumming around the bay area. I love debian, and I sometimes joke that if there was such a thing as a minimum wage dev job, I would gladly take it to get out of having to pass another technical interview :/ It would be neat if they could split the difference between free and real job, but I wonder if part of the reason they don't is that they want people who care unreservedly about values and code quality rather than people who need $500 a week?
  - neilwilson 6y ago
    It is of course one of the problems a Federal Job Guarantee would solve. Clearly working full time on Debian is of value to society, a good use of time and clearly verifiable by committed contributions. Definitely worth the living wage.
    - dmos62 6y ago
      Agreed that Debian provides (a lot of) value to society. The big question is why don't they have money to fund development? Disregarding the 900k mentioned, because it's not enough to pay everyone and it would be spent soon. In my opinion public infrastructure would ideally be maintained by states, not individuals or private companies.
      - indigochill 6y ago
        I may be jumping to conclusions here, but my first impression was you were suggesting that Debian is a public infrastructure, and that therefore in your opinion it would ideally be maintained by the state. I have a rather strong emotional reaction to this because to me a major reason for FOSS is to break the problem of perverse incentives that arise in corporate -and- government work. Governments want to control their populace. The NSA, for example, has made algorithm suggestions that would give them an easier time listening in on the world. And the US has prominent figures arguing for encryption backdoors that supposedly only the "good guys" would have the keys to. Which is to say nothing of governments that outright ban encryption. So I would be very skeptical of FOSS officially maintained by a government (though I suppose its open source nature would still be a point in its favor for the transparency).
- est31 6y ago
  > they need good people who like though problems; 2k is nothing for those types however Many people of that type work at universities for comparable compensations. E.g. 50% E13 position at TU Berlin gives you monthly 2k pre tax. If you spend lots of your time to improve the public good, you'll still need something to put food on your table (unless you are financially independent of course, but many people aren't).
  - fock 6y ago
    basically, if they would offer 50/50-jobs in partnership with public services, where the public service guarantees job security and the Debian project guarantees some oldfashioned hacker-spirit, people would fly at these (or at least I would. People could spend 50% of the time for Debian and push OSS adoption in the public service and develop the basic CRUD in the remaining time. But.... sadly this is not going to fill the coffers of politicians and consultants alike, so things like these will just be daydreaming until a majority of people is fed up with corruption and not braindamaged enough to believe extremist bullshit.
    - rusticpenn 6y ago
      The 50% E13 positions in German universities, actually expect you to work for 100%. Source: Me
      - fock 6y ago
        I know. but generally these are only temps and so give you no job security. Go look around at the administration and check, how they are doing it ;)
- andy_ppp 6y ago
  If you pay some of the volunteers does that not basically spit in the face of those not being paid? It would really annoy the hell out of me if I’d been making Debian better for 20 years for free while training up someone being paid to get involved.
  - bluGill 6y ago
    Depends. There are a lot of tedious things that the volunteers know need to be done but don't want to do. Paying to get that done is helpful. (Note that what is tedious varies between personalities...) There are also cases where the volunteer knows he is overloaded and will welcome help.
  - GuB-42 6y ago
    The big difference is subordination. A volunteer gets to choose what he wants to work on and if he wants to work at all. An employee/contractor does what his boss/customer wants him to do and get compensated (i.e. paid) for it. There are many reasons why you may want to pay someone. The obvious one is to do things no one wants to do for free. But maybe you also want a proper contract, to make sure some essential job is done fully. Volunteers who work on they spare time will stop working for you once they stop having spare time, and there is not much you can do about it, both legally and ethically. Sometimes you also need certifications. I don't know how it applies to Debian but certified people usually don't work for free. The certification process can be expensive and they can have legal responsibilities. Even if people can offer their time and skills for free, legal responsibilities are usually off limits. As an example, I volunteered to staff a few events. None of the regular staff and organizers were paid. However, security was paid. While we had a few burly guys, no one wanted to take responsibility, and probably couldn't anyways.
- roenxi 6y ago
  Mmm. A million dollars isn't a lot of money these days. That is something like 5 to 18 full time devs, for 1 year. Good luck running the Debian project at market rates.
  - TomSwirly 6y ago
    I have some spare time and I'd love to work on Debian, but I got offered $500 to work on another open source project. The person who made me the offer was very apologetic - as she said, it's not even my day rate - but as I said, I'd probably do it for nothing, no one's making a penny out of the software, it's really useful, and $500 isn't nothing. I think they could get plenty of people to work on Debian for 10 hours a week for $10k a year, as a hobby.
  - LockAndLol 6y ago
    There are thousands of people working opensource for nothing. Why do you or anybody care about market rates when those people (me included) would do it for minimum wage? I'd happily code all day long on stuff I really care about for minimum wage. And when I day minimum, I don't mean the penance described by the law that forces you to have multiple minimum wage jobs to get by. No, I mean one single job that pays enough to get by.
    - Theory5 6y ago
      This is very true, i think the guy you're responding to is thinking more in terms of when there are more jobs then devs, not the other way around. Even if that becomes the case, since this stuff goes though phases, a lot of college students or kids right out of high school would still jump at the chance to gain this sort of experience, alongside people like you, who just want their needs taken care of, a bit of spending money, and a job where they can focus on what they enjoy without too much demanding or stress. Same for older people with a lot of expertise, but who again want something less demanding but still enough to support them until they retire, or give them a purpose after they do so. Like my dad, he's a network engineer, in a job like I described. He and my mom are a little over retirement age and plan to retire soon, but he's not one to just sit around the house all day. I think that's one reason he keeps saying he'll retire in 2 - 3 years, but says that year after year.
- Theory5 6y ago
  I'm in the InfoSec field, and bug bounties are a huge thing now (well, for years but it seems to keep gaining steam) for app security. There are people who make a living, or at least generate secondary income off it, or others do bug hunting as a hobby and to help out and don't mind a little bit of reward when it's there. Maybe it's because I'm not big into the development side of things, but I cannot recall any programs that'd be similar to bug bounties but focus on someone building code or fixing the bugs and submitting that in a freelance type capacity. Granted, my limited knowledge of development may just mean I don't see obvious reasons it's not done or widely known about, and there would be a few different things thatd need to happen vs how bug hunting works, but its similar to your idea to attract more talent to work on small bits, without going out and hiring full time developers.
- rstuart4133 6y ago
  I'm not sure how Jonathan is defining "enough" developers. It's very easy to come up with a definition that says Debian doesn't have enough developers: just say Debian should package every piece of software out there. But that makes no sense. In reality, there has to be some sort of decision mechanism over what packages are included and what aren't. If that decision isn't made pro-actively, it will be forced upon you - via the man power problem. Debian is at its heart a do-ocracy, which boils down to something happens only if some individual can raise the energy to make it happen. So a package dies when no Debian member can make (unpaid) time to save it. It's not like there is someone who can order someone else to save it - Debian is a purely volunteer organisation. It's easy to paint that as having a man power problem, but curating the packages is essential task that must be undertaken. Doing it isn't "a problem", it's essential to survival. It's also easy to criticise the way this decision is made. Just leaving it to the individual decision making of 1k volunteers sounds so unorganised. But the flip side is if you have paid engineers you are doing the reverse, you are giving someone the power to order other developers around. In an organisation like Debian that attracts membership through it strong egalitarian principles, that's going to be an anathema to most of it's members. As an side, despite all the whinging here while it's difficult to introduce a new package to Debian, it is not difficult to step up to support an existing package. You don't have to be a developer or a maintainer, and there are any number of existing developers and maintainers who will upload your work if you do it. So if a package dies, it's not too far from a stretch to say it was because no-one on the planet with the skills was that interested in doing the work.
raverbashing 6y ago
Debian from the exterior sounds like the anti-corporate organization: flat hierarchy, top-notch democracy, self-directed work with almost no top-down guidance/"orders". And not so surprisingly, that also cause problems. Let's not forget the high barrier to entry for contributors. It is complicated.
diminish 6y ago
I wish Mozilla mimics Debian or Linux development organization. It earns hundreds of millions and can't keep pace with chrome.
- dkdk8283 6y ago
  Mozilla has had management problems for a long time. I don’t think this will change any time soon. Look at the latest 999 and highest salaries.
- lmedinas 6y ago
  I think you are comparing Apples with Oranges. Linux organizations are mostly done by volunteers and most of the infrastructure used is either donated or allocated in organizations which support their development. So any costs they have is for maintaining anything they really have to pay such as: legal, taxes etc... On the other hand Mozilla has to pay for infrastructure (and here they have to support multiplatforms and multi OS developments), development, legal, taxes, marketing etc... etc.. It's not even comparable in any order of magnitude the costs involved. If Mozilla would be to survive with volunteers would be even more miles ahead of other browsers. You can see Thunderbird as an example that Mozilla stopped maintaining since years the development pace slowed considerably. On a side note: I really wish for the sake of the internet that Mozilla gets their s* together and start to improve their products to be really competitors to Chrome and Safari.
- tus88 6y ago
  Actually firefox is faster at javascrupt that chrome.
  - octoberfranklin 6y ago
    That's like saying that emacs's LISP interpreter is faster than vim's vimscript interpreter.... Yeah, so what? The performance-critical parts of vim are written in C. You can't say that about emacs. Or firefox.
    - imtringued 6y ago
Tepix 6y ago
I like Debian and have entertained the thought of becoming a Debian developer multiple times. The learning curve for a new developer is steep. Just packaging a small piece of software requires a large amount of documents to consider last time i looked.
- qiqitori 6y ago
  Maybe, but you will be able to use some of the knowledge or intuition gained if you ever have to package something for any other distro.
  - nix23 6y ago
    So AUR is the better choice? pkgsrc? At least you don't have to read tons of Docs.
  - Tepix 6y ago
    Packaging something for my own use (or my company's) is quite different.
- danieldk 6y ago
  It is a tiresome process. I attempted to submit a particular package (and others before and after me). It was either met with a lot of red tape (IIRC document licenses for each file individually) and months of no visible progress when comments were addressed. This was in stark contrast to e.g. contributing to nixpkgs. Do a PR on GitHub. The package gets built automatically by CI. Get feedback. Make changes to address the feedback. And it gets merged. Of course, PRs sometimes go stale (most projects are dealing with a lack of manpower), but the process is generally fast. But the outcomes are radically different: I never attempted to contribute to Debian again, but I have become an active contributor to nixpkgs. I think to attract developers the process needs to be modernized. Put all the package definitions in a Gitlab monorepo. Build each PR in a sandbox on CI. Describe the submission process on a single page.
  - ylyn 6y ago
    Debian cares a lot more about licensing than Nix. Debian also has far more developers than Nix, I imagine, and processes that have probably existed for longer than GitHub itself.
qznc 6y ago
I guess the call to action is: https://www.debian.org/intro/help https://www.debian.org/intro/help or https://www.debian.org/devel/join/ https://www.debian.org/devel/join/ Maybe also https://wiki.debian.org/how-can-i-help https://wiki.debian.org/how-can-i-help
rurban 6y ago
If the Debian authorities will not resolve their community problems, the managers and culture warriors will drive away more and more developers. It's an entirely developer unfriendly culture. https://debian.community/ https://debian.community/
- dima55 6y ago
  In case you're not aware, that site is run by an ex-Debian-dev with an axe to grind. He's been proactively trolling the project for at least a year now. The project has its issues, but let's be very clear: this is one troll with far too much time on his hands.
  - rleigh 6y ago
    He does certainly have an axe to grind. But that doesn't make most of the points he raises false. Many of his observations are completely correct.
  - raxxorrax 6y ago
    Is that from Appelbaum? I believe some criticism is undoubtedly correct and there might be a problem with leadership.
    - rurban 6y ago
      Nope. He cited several such cases. Usually it goes like this: Devs putting out some innocent statement, some aggressive culture warriors taking it out of context and interpreting it evil, shouting wolf, and the Debian managers reacting with an immediate ban. On the dev, not the aggressive culture warrior. This is usually matched with falsified arguments to support this ban. Devs also began reacting like in the stalinist culture wars from the 30ies. A typical example is https://debian.community/laura-arjona-reina-carnival-mafia-murders/ https://debian.community/laura-arjona-reina-carnival-mafia-m... This guy posted old citations that "Debian is not fun anymore", followed by, "Well, Times are changing". https://www.preining.info/blog/2018/11/on-lars-wirzenius-fun-and-debian/ https://www.preining.info/blog/2018/11/on-lars-wirzenius-fun... Of course he was banned from Debian.
teruakohatu 6y ago
Is $900k in the bank a lot of money for as large and important an organization as Debian? That is how much the Mozilla Corporation earns every 18 hours. Even if the staff are volunteers, having rainy day spending seems prudent.
- bluedino 6y ago
  Debian doesn’t spend millions of dollars on executives
  - dsr_ 6y ago
    Or on any salaries. Debian's expenses are hosting, conferences and travel reimbursement -- and not a lot of that. It's still not really a lot of money, though. As a thought experiment, if Google decided to donate $1 per installed Debian or derivative OS, I think that might double Debian's bank account. That's a plausible funding slogan -- "A Dollar for Debian".
    - pabs3 6y ago
      Debian doesn't pay for hosting for most services, all the ones run by the Debian sysadmin team use donated hosting environments at universities and companies. For a while we also had a partnership with HPE that gave us gratis x86 hardware, but these days we do have to spend money on x86 hardware unfortunately. The non-x86 ports usually run on donated hardware but we only run build servers on those machines so far. Google already donates quite a bit to Debian through conference sponsorship and also a one-time 300K donation last year or the year before.
      - sangnoir 6y ago
        I see Debian is one of the projects that benefit from Google's Summer of Code student sponsorships, although that is a much smaller contribution compared to those you mentioned. Do you know if any of the students who particpate in Debian's summer of code end up being regular contributors after the sponsorship period ends?
insertnickname 6y ago
This 2019 blog post from a Debian developer describes some of the problems they are facing from a developer perspective: "Winding down my Debian involvement" https://michael.stapelberg.ch/posts/2019-03-10-debian-winding-down/ https://michael.stapelberg.ch/posts/2019-03-10-debian-windin...
- bnmaker 6y ago
  Not liking the bug tracker and mailing lists as well as several other points come across as typical things-need-to-be-done-differently now, which has destroyed the culture and meaningful participation in other projects, like Python. I'm sure there are many valid criticisms of Debian, the main one for me is overpatching upstream packages.
  - sitkack 6y ago
    Getting in a patch fight with a .deb maintainer is a right of passage that everyone in the OSS world gets to go through. The slicing and dicing that is done to well mannered software that didn't harm anyone is atrocious. PETP (People for the Ethical Treatment of Packages) Distros and packaging have much lower relevance as operating systems are viewed as applications, rarely are unix systems multiuser, often serving a single software package. Even desktop operating systems are getting containerized, Qubes, etc.
  - rwmj 6y ago
    The bug tracker is objectively awful. It takes 15+ minutes to subscribe to a bug, which is ridiculous! Absolutely no one would write a bug tracker today where everything is processed by email[1]. [1] Which is not to say that messaging is bad - a web interface with a proper message queue behind it would be fine. In fact that's how Fedora's systems work. It's that email is not a reasonable messaging system for this purpose.
    - rleigh 6y ago
      Tell me about it. Doing bulk updates to dozens of bugs as a routine daily activity was an exercise in masochism. As for making comments on existing bugs, you had to manually download the mbox archive just to make sure the right recipients were copied in. It was pretty neat in 1998. Today, it's long eclipsed by pretty much everything else. If I were Debian, I'd migrate the whole lot over to GitLab issues seeing as they have the infrastructure for it set up (salsa). The problem is there is a very vocal minority who still think it's not only good, but the best choice for Debian. I doubt the silent majority who suffer it agree. Like anything, it's an entrenched part of Debian culture that's hard to change. But it was time to retire it over a decade back.
BiteCode_dev 6y ago
I had to create a deb for a web app, it had to setup and populate a DB (from web sources), and manage updates for this db when you upgraded the deb. It had a build process of static files that couldn't be vendored. It has a lot of configuration to be entered prior those would happen, using debconf. It had to vendor a virtualenv. I had dependancies on 2 other web apps that had the same story, and they shared some config files. I didn't chose this architecture. But I was tasked to package it so that people could just "apt get install stuff" and start using it. It was HARD. The tech is very old school, it doesn't give a lot of feedback, it's hard to debug, documentation is sparse and examples in the wild are not up to date, not to mention the state of tooling. And you do all that with shell scripting, the worst language for the job. Sure you can use anything else, if you like zero doc and example. Then we had to distribute it. Well, turns out creating an APT repo is not so easy, either. Now, we did all that by cutting a lot of corners, zero red tape, and only us to please. Also, the consequences of not using best practices, or worst, breaking something, were few. On a team of 6, only 2 were really understanding what was going on. The rest were lost, awaiting instructions from us because they just couldn't picture were their work would fit in this blob of bash workflow. Now that I'm gone, I have no idea how the team is going to maintain the thing. I can't imagine doing the same thing with the level of road block working for something as sensitive as the official debian repo would bring. If debian wants more contributors, they have to make this stuff way, way more accessible. And be friendlier with people telling them it's hard. Every time I raised the topic, somebody came along to say I shouldn't be doing x or y. Or just that I shouldn't be packaging something and just publish it on the debian repo, letting the debian maintainers do the packaging. It's not going to bring me to work with the community if the first taste of it is the demonstration they completely ignore their shortcomings. And I say that while I've been typing apt commands for a decade now. I'm also french. Debian is, with VLC, Libre Office and Firefox, one of the 4 pillars of FOSS for me.
- sitkack 6y ago
  Making deb _is_ painful, the politics of how packages are folded, bent, welded, drilled and smashed is not a simple landscape to navigate. A lot of Docker is a response to how difficult it is to build packages and how invasive package installation is to the base system (Nix gets this right). If in the future you need to build packages again, I'd take a look at fpm. The goal of fpm is to make it easy and quick to build packages such as rpms, debs, OSX packages, etc. https://fpm.readthedocs.io/en/latest/ https://fpm.readthedocs.io/en/latest/ https://github.com/jordansissel/fpm https://github.com/jordansissel/fpm
protontypes 6y ago
We have developed a tool for projects like Debian to distribute donations over larger projects. By distributing the donations in the dependencies, Debian could even attract new developers in its own dependencies: https://github.com/protontypes/libreselery https://github.com/protontypes/libreselery
kasabali 6y ago
No wonder, they have the largest red tape on maintainer application process. Until very recently they were expecting GPG keys signed by 2 Debian developers, and that could be only done by being developers face to face, or by attending a key signing party on DebConf. Tough luck if you're in a remote location. Not sure how it's being done after pandemic.
- octoberfranklin 6y ago
  I think it's awesome that they have a fully autonomous cryptographic web of trust. Far too few organizations do.
nottorp 6y ago
Why don't they hire Poettering to further make Linux unusable for hobbyists?
- octoberfranklin 6y ago
  Because getting him do do that does not require paying him! Badump-ching! I'm here all week, folks. Don't forget to tip your waitresses...
  - nix23 6y ago
    He works at RedHat, and i strongly believe they paying him.
- nix23 6y ago
  >unusable for hobbyists Why would any hobbyist wanna use Linux?
  - yjftsjthsd-h 6y ago
    ? because it's fun and it's free?
    - nix23 6y ago
      >because it's fun Naaah not really, but hey tastes are different.
mikece 6y ago
If LMDE picks up steam I’m sure that could change. Is the Ubuntu distro so different from Debian that those devs can’t simply work more on the upstream distro (or are Canonical devs not really doing much Linux work but userland/app work instead)?
mlatu 6y ago
https://nm.debian.org/faq/ https://nm.debian.org/faq/ "The site gives me 403 Forbidden errors if I disable referers" yah cool faq, many questions answered.
liveoneggs 6y ago
NetBSD (with a lot less money in the bank and similarly bad bug trackers) has hired people using a few models in the past -- hourly, CoD, fixed-rate, etc but it's really the hiring itself that is so much trouble, just like in the real world! Not to mention doing "management" is also a total pain in the butt that someone now has to do for free. The irony is that the people being hired are mostly already there doing work for free. There is no way debian (or NetBSD) could pay market rate to compete for the time of anyone working on the project for very long so it's usually a motivational push or justification for sabbatical or "I have three months between contracts". It's much much easier to buy hardware and things for developers who ask for it. I suppose these projects are seeking developers with passion, personal wealth, and free time.
- bluGill 6y ago
  Hiring people who would do it for free allowed them to work faster. It becomes there day job. I know of a few projects in FreeBSD where the author said I'm between contracts in a few weeks, you can pay me to do this work and it is done in a month, or I can find a new contract and the feature "that everyone wants" will be worked on in my spare time and done in 2 years.
moonbug 6y ago
if only there was some way to exchange money for labour.
dxxvi 6y ago
$900k is not much. It's only enough for 4 developers for 1 year. If you don't spend the money the sponsors give you, the sponsors won't give you anymore.
ilaksh 6y ago
With the amount of government and corporate reliance on Debian derivates, the budget should literally be 100 times larger. Like $90 million instead of $900,000. Or maybe just $9 million. Then you have no trouble finding developers. You use money to get them. It works very well. Part of the issue though I suspect may be the way packages work. I am just guessing but it may be the case that these volunteers are creating packages for lots of third party software and constantly fighting with incompatibility to upgrade them. Which seems like the third parties should be more involved with updating the packages. But personally I think that even though snaps are so hated, the relative impossibility of keeping all packages up to date and similar issues is making things like Snaps or Flatpak make more and more sense as a general direction. I don't know if Flatpak has a way to do compression or reuse layers like Docker but I wonder if it might eventually make sense to go in that direction. Or another crazy idea: maybe it's possible to train an AI to resolve dependency or build issues and create packages. Maybe pretty far-fetched but when there are so many tens of thousands of packages I feel like you should start going for radical ideas.
- rstuart4133 6y ago
  At the 1000ft view RedHat and Debian perform much the same function. Debian has $900k in the bank. IBM purchased RedHat for $34B. The number's aren't directly comparable, but methinks a factor of 100 understates it.
ausjke 6y ago
Unless Debian has systematic discrimination for race or gender or whatever, I don't think there is a need to focus on "diversity" for its developers, NBA is a good example there and nobody complained. Improving certain area is fine, put it a priority for problems non-exist will do more harm than good. You do it because you like it or need it, not because of where you are from or who you are. And yes $900K should be used to improve the situation, there might be some great developers actually need the money, or the money can get more young developer to start in debian.
credit_guy 6y ago
Plenty of money is always a relative term. If you think you have "plenty of money" but you don't have X, in reality you don't have plenty of money. There are exceptions like X=love, admiration, etc, but for most X, if you have plenty of money and a shortage of X, you just exchange some of your loads of money for X and you are good.
- deleted 6y ago
  [deleted]

152 points by mr_toad 6y ago

Bit of a weird headline as the article says Debian org has $900k in the bank but that is not spent on the devs; they are volunteers. If they would offer, let’s say, 2k/mo (the article says they need good people who like though problems; 2k is nothing for those types however, many people would like do it because of love for Debian; they do not do it now as they need at least a little food on the table) per full time contributor, there would be plenty of devs joining. But for their goals to be met, they would be also immediately broke. So in fact they do not have plenty of money to achieve what they want, unless people work for free.

dcow 6y ago
Yeah I’m also confused by this. Debian has an opportunity to reiterate that free software isn’t just a pipe dream volunteer effort but rather that there is business being software authorities without the baggage of a slew of software patents and terms and license agreements. Perhaps if they paid core maintainers it would ostracize other contributors who didn't make the cut? Perhaps they don’t want to become a Canonical and have to answer to steak holders? There’s value in being frugal but you also meed to know your own value or others will take advantage of you.
- danieldk 6y ago
  Some Debian developers tried to get funding to finish the Etch release, but it was met with a lot of hostility: https://lists.debian.org/debian-project/2006/10/msg00260.html https://lists.debian.org/debian-project/2006/10/msg00260.htm... That doesn't mean that it cannot be done. E.g. the FreeBSD Foundation pays developers for specific projects that are important to the future of FreeBSD: https://freebsdfoundation.org/our-work/projects/ https://freebsdfoundation.org/our-work/projects/
  - rleigh 6y ago
    It can be done, but culturally the projects are too different. There were valid reasons for the hostility. Bringing money into the equation completely changes the dynamics of an all-volunteer project, and splits the developers into the gilded minority and the plebs who slave away for free. Plenty of volunteer organisations have been torn apart by the resentment and infighting that can result. * Which developers are eligible for funding, and which are not? * The organisation is no longer flat; some people are effectively profiting off the backs of the majority * The meritocracy is lost; do the "paid staff" have more of a say than the "unpaid volunteers" * Are "paid staff" even volunteers any more? The vast majority of Debian developers work full time on their day jobs, and contribute to Debian as a labour of love in their spare time, or as part of their work for situations where organisations sanction Debian work. I used to work 8 hours, and then come home and regularly work 4-8 hours on Debian. Every day for nearly a decade. Totally unsustainable, and I'm no longer an active contributor. But for people who are contributing that much, for free, you can see why there would be concerns over the effect of a paid class of contributor to the organisation as a whole. None of that is to say it can't work. FreeBSD is smaller, more tightly-focused, and has a culture of corporate contribution. Paying people to write specific features delivers results on a schedule. I donate to the FreeBSD foundation for that reason. The developer culture seems to be much more tolerant of this (though I'm not a FreeBSD insider, so don't know all the details). FreeBSD is vastly simpler to contribute to, so I can participate with vastly less commitment. Contributing a new port or an updated port or bugfix is simply a matter of attaching a patch to a bugzilla ticket. Maybe it's not so much of an issue because there's already a clear separation of core devs vs casual contributors. And that's OK.
    - dcow 6y ago
      Do you think a bounty system would work? Leadership decides payouts for different contributions. Possibly exclude leadership from bounty access so that the core ethos is still volunteer driven. Everyone else has access to bounties so there’s no resentment. Contributions could range from code patches to release management & announcements.
      - 6y ago
Tepix 6y ago
I think volunteer work is at the core of their culture. Paying a few core full time contributors seems like a good idea - i assume it's happening already.
- pabs3 6y ago
  The only payments Debian does to contributors are to Outreachy interns: https://www.outreachy.org/ https://www.outreachy.org/
petre 6y ago
2k/mo would pay for 37 devs for a year. Rather than that do micropayments for contributions (approved packages, finished tasks). A project such as Debian only needs a few core members or people working on important projects paid full time. It works for FreeBSD. I really like Debian but volunteers are probably better off packaging for other distros such as Arch or Alpine with simpler packaging/better tooling and less strict rules. One thing to improve would be tooling to make packages.
elipsey 6y ago
I am currently unemployed/independently-wealthy/thrifter/bumming around the bay area. I love debian, and I sometimes joke that if there was such a thing as a minimum wage dev job, I would gladly take it to get out of having to pass another technical interview :/ It would be neat if they could split the difference between free and real job, but I wonder if part of the reason they don't is that they want people who care unreservedly about values and code quality rather than people who need $500 a week?
- neilwilson 6y ago
  It is of course one of the problems a Federal Job Guarantee would solve. Clearly working full time on Debian is of value to society, a good use of time and clearly verifiable by committed contributions. Definitely worth the living wage.
  - dmos62 6y ago
    Agreed that Debian provides (a lot of) value to society. The big question is why don't they have money to fund development? Disregarding the 900k mentioned, because it's not enough to pay everyone and it would be spent soon. In my opinion public infrastructure would ideally be maintained by states, not individuals or private companies.
    - indigochill 6y ago
      I may be jumping to conclusions here, but my first impression was you were suggesting that Debian is a public infrastructure, and that therefore in your opinion it would ideally be maintained by the state. I have a rather strong emotional reaction to this because to me a major reason for FOSS is to break the problem of perverse incentives that arise in corporate -and- government work. Governments want to control their populace. The NSA, for example, has made algorithm suggestions that would give them an easier time listening in on the world. And the US has prominent figures arguing for encryption backdoors that supposedly only the "good guys" would have the keys to. Which is to say nothing of governments that outright ban encryption. So I would be very skeptical of FOSS officially maintained by a government (though I suppose its open source nature would still be a point in its favor for the transparency).
est31 6y ago
> they need good people who like though problems; 2k is nothing for those types however Many people of that type work at universities for comparable compensations. E.g. 50% E13 position at TU Berlin gives you monthly 2k pre tax. If you spend lots of your time to improve the public good, you'll still need something to put food on your table (unless you are financially independent of course, but many people aren't).
- fock 6y ago
  basically, if they would offer 50/50-jobs in partnership with public services, where the public service guarantees job security and the Debian project guarantees some oldfashioned hacker-spirit, people would fly at these (or at least I would. People could spend 50% of the time for Debian and push OSS adoption in the public service and develop the basic CRUD in the remaining time. But.... sadly this is not going to fill the coffers of politicians and consultants alike, so things like these will just be daydreaming until a majority of people is fed up with corruption and not braindamaged enough to believe extremist bullshit.
  - rusticpenn 6y ago
    The 50% E13 positions in German universities, actually expect you to work for 100%. Source: Me
    - fock 6y ago
      I know. but generally these are only temps and so give you no job security. Go look around at the administration and check, how they are doing it ;)
andy_ppp 6y ago
If you pay some of the volunteers does that not basically spit in the face of those not being paid? It would really annoy the hell out of me if I’d been making Debian better for 20 years for free while training up someone being paid to get involved.
- bluGill 6y ago
  Depends. There are a lot of tedious things that the volunteers know need to be done but don't want to do. Paying to get that done is helpful. (Note that what is tedious varies between personalities...) There are also cases where the volunteer knows he is overloaded and will welcome help.
- GuB-42 6y ago
  The big difference is subordination. A volunteer gets to choose what he wants to work on and if he wants to work at all. An employee/contractor does what his boss/customer wants him to do and get compensated (i.e. paid) for it. There are many reasons why you may want to pay someone. The obvious one is to do things no one wants to do for free. But maybe you also want a proper contract, to make sure some essential job is done fully. Volunteers who work on they spare time will stop working for you once they stop having spare time, and there is not much you can do about it, both legally and ethically. Sometimes you also need certifications. I don't know how it applies to Debian but certified people usually don't work for free. The certification process can be expensive and they can have legal responsibilities. Even if people can offer their time and skills for free, legal responsibilities are usually off limits. As an example, I volunteered to staff a few events. None of the regular staff and organizers were paid. However, security was paid. While we had a few burly guys, no one wanted to take responsibility, and probably couldn't anyways.
roenxi 6y ago
Mmm. A million dollars isn't a lot of money these days. That is something like 5 to 18 full time devs, for 1 year. Good luck running the Debian project at market rates.
- TomSwirly 6y ago
  I have some spare time and I'd love to work on Debian, but I got offered $500 to work on another open source project. The person who made me the offer was very apologetic - as she said, it's not even my day rate - but as I said, I'd probably do it for nothing, no one's making a penny out of the software, it's really useful, and $500 isn't nothing. I think they could get plenty of people to work on Debian for 10 hours a week for $10k a year, as a hobby.
- LockAndLol 6y ago
  There are thousands of people working opensource for nothing. Why do you or anybody care about market rates when those people (me included) would do it for minimum wage? I'd happily code all day long on stuff I really care about for minimum wage. And when I day minimum, I don't mean the penance described by the law that forces you to have multiple minimum wage jobs to get by. No, I mean one single job that pays enough to get by.
  - Theory5 6y ago
    This is very true, i think the guy you're responding to is thinking more in terms of when there are more jobs then devs, not the other way around. Even if that becomes the case, since this stuff goes though phases, a lot of college students or kids right out of high school would still jump at the chance to gain this sort of experience, alongside people like you, who just want their needs taken care of, a bit of spending money, and a job where they can focus on what they enjoy without too much demanding or stress. Same for older people with a lot of expertise, but who again want something less demanding but still enough to support them until they retire, or give them a purpose after they do so. Like my dad, he's a network engineer, in a job like I described. He and my mom are a little over retirement age and plan to retire soon, but he's not one to just sit around the house all day. I think that's one reason he keeps saying he'll retire in 2 - 3 years, but says that year after year.
Theory5 6y ago
I'm in the InfoSec field, and bug bounties are a huge thing now (well, for years but it seems to keep gaining steam) for app security. There are people who make a living, or at least generate secondary income off it, or others do bug hunting as a hobby and to help out and don't mind a little bit of reward when it's there. Maybe it's because I'm not big into the development side of things, but I cannot recall any programs that'd be similar to bug bounties but focus on someone building code or fixing the bugs and submitting that in a freelance type capacity. Granted, my limited knowledge of development may just mean I don't see obvious reasons it's not done or widely known about, and there would be a few different things thatd need to happen vs how bug hunting works, but its similar to your idea to attract more talent to work on small bits, without going out and hiring full time developers.
rstuart4133 6y ago
I'm not sure how Jonathan is defining "enough" developers. It's very easy to come up with a definition that says Debian doesn't have enough developers: just say Debian should package every piece of software out there. But that makes no sense. In reality, there has to be some sort of decision mechanism over what packages are included and what aren't. If that decision isn't made pro-actively, it will be forced upon you - via the man power problem. Debian is at its heart a do-ocracy, which boils down to something happens only if some individual can raise the energy to make it happen. So a package dies when no Debian member can make (unpaid) time to save it. It's not like there is someone who can order someone else to save it - Debian is a purely volunteer organisation. It's easy to paint that as having a man power problem, but curating the packages is essential task that must be undertaken. Doing it isn't "a problem", it's essential to survival. It's also easy to criticise the way this decision is made. Just leaving it to the individual decision making of 1k volunteers sounds so unorganised. But the flip side is if you have paid engineers you are doing the reverse, you are giving someone the power to order other developers around. In an organisation like Debian that attracts membership through it strong egalitarian principles, that's going to be an anathema to most of it's members. As an side, despite all the whinging here while it's difficult to introduce a new package to Debian, it is not difficult to step up to support an existing package. You don't have to be a developer or a maintainer, and there are any number of existing developers and maintainers who will upload your work if you do it. So if a package dies, it's not too far from a stretch to say it was because no-one on the planet with the skills was that interested in doing the work.

raverbashing 6y ago

Debian from the exterior sounds like the anti-corporate organization: flat hierarchy, top-notch democracy, self-directed work with almost no top-down guidance/"orders". And not so surprisingly, that also cause problems. Let's not forget the high barrier to entry for contributors. It is complicated.

diminish 6y ago

I wish Mozilla mimics Debian or Linux development organization. It earns hundreds of millions and can't keep pace with chrome.

dkdk8283 6y ago
Mozilla has had management problems for a long time. I don’t think this will change any time soon. Look at the latest 999 and highest salaries.
lmedinas 6y ago
I think you are comparing Apples with Oranges. Linux organizations are mostly done by volunteers and most of the infrastructure used is either donated or allocated in organizations which support their development. So any costs they have is for maintaining anything they really have to pay such as: legal, taxes etc... On the other hand Mozilla has to pay for infrastructure (and here they have to support multiplatforms and multi OS developments), development, legal, taxes, marketing etc... etc.. It's not even comparable in any order of magnitude the costs involved. If Mozilla would be to survive with volunteers would be even more miles ahead of other browsers. You can see Thunderbird as an example that Mozilla stopped maintaining since years the development pace slowed considerably. On a side note: I really wish for the sake of the internet that Mozilla gets their s* together and start to improve their products to be really competitors to Chrome and Safari.
tus88 6y ago
Actually firefox is faster at javascrupt that chrome.
- octoberfranklin 6y ago
  That's like saying that emacs's LISP interpreter is faster than vim's vimscript interpreter.... Yeah, so what? The performance-critical parts of vim are written in C. You can't say that about emacs. Or firefox.
  - imtringued 6y ago

Tepix 6y ago

I like Debian and have entertained the thought of becoming a Debian developer multiple times. The learning curve for a new developer is steep. Just packaging a small piece of software requires a large amount of documents to consider last time i looked.

qiqitori 6y ago
Maybe, but you will be able to use some of the knowledge or intuition gained if you ever have to package something for any other distro.
- nix23 6y ago
  So AUR is the better choice? pkgsrc? At least you don't have to read tons of Docs.
- Tepix 6y ago
  Packaging something for my own use (or my company's) is quite different.
danieldk 6y ago
It is a tiresome process. I attempted to submit a particular package (and others before and after me). It was either met with a lot of red tape (IIRC document licenses for each file individually) and months of no visible progress when comments were addressed. This was in stark contrast to e.g. contributing to nixpkgs. Do a PR on GitHub. The package gets built automatically by CI. Get feedback. Make changes to address the feedback. And it gets merged. Of course, PRs sometimes go stale (most projects are dealing with a lack of manpower), but the process is generally fast. But the outcomes are radically different: I never attempted to contribute to Debian again, but I have become an active contributor to nixpkgs. I think to attract developers the process needs to be modernized. Put all the package definitions in a Gitlab monorepo. Build each PR in a sandbox on CI. Describe the submission process on a single page.
- ylyn 6y ago
  Debian cares a lot more about licensing than Nix. Debian also has far more developers than Nix, I imagine, and processes that have probably existed for longer than GitHub itself.

qznc 6y ago

I guess the call to action is: https://www.debian.org/intro/help https://www.debian.org/intro/help or https://www.debian.org/devel/join/ https://www.debian.org/devel/join/ Maybe also https://wiki.debian.org/how-can-i-help https://wiki.debian.org/how-can-i-help

rurban 6y ago

If the Debian authorities will not resolve their community problems, the managers and culture warriors will drive away more and more developers. It's an entirely developer unfriendly culture. https://debian.community/ https://debian.community/

dima55 6y ago
In case you're not aware, that site is run by an ex-Debian-dev with an axe to grind. He's been proactively trolling the project for at least a year now. The project has its issues, but let's be very clear: this is one troll with far too much time on his hands.
- rleigh 6y ago
  He does certainly have an axe to grind. But that doesn't make most of the points he raises false. Many of his observations are completely correct.
- raxxorrax 6y ago
  Is that from Appelbaum? I believe some criticism is undoubtedly correct and there might be a problem with leadership.
  - rurban 6y ago
    Nope. He cited several such cases. Usually it goes like this: Devs putting out some innocent statement, some aggressive culture warriors taking it out of context and interpreting it evil, shouting wolf, and the Debian managers reacting with an immediate ban. On the dev, not the aggressive culture warrior. This is usually matched with falsified arguments to support this ban. Devs also began reacting like in the stalinist culture wars from the 30ies. A typical example is https://debian.community/laura-arjona-reina-carnival-mafia-murders/ https://debian.community/laura-arjona-reina-carnival-mafia-m... This guy posted old citations that "Debian is not fun anymore", followed by, "Well, Times are changing". https://www.preining.info/blog/2018/11/on-lars-wirzenius-fun-and-debian/ https://www.preining.info/blog/2018/11/on-lars-wirzenius-fun... Of course he was banned from Debian.

teruakohatu 6y ago

Is $900k in the bank a lot of money for as large and important an organization as Debian? That is how much the Mozilla Corporation earns every 18 hours. Even if the staff are volunteers, having rainy day spending seems prudent.

bluedino 6y ago
Debian doesn’t spend millions of dollars on executives
- dsr_ 6y ago
  Or on any salaries. Debian's expenses are hosting, conferences and travel reimbursement -- and not a lot of that. It's still not really a lot of money, though. As a thought experiment, if Google decided to donate $1 per installed Debian or derivative OS, I think that might double Debian's bank account. That's a plausible funding slogan -- "A Dollar for Debian".
  - pabs3 6y ago
    Debian doesn't pay for hosting for most services, all the ones run by the Debian sysadmin team use donated hosting environments at universities and companies. For a while we also had a partnership with HPE that gave us gratis x86 hardware, but these days we do have to spend money on x86 hardware unfortunately. The non-x86 ports usually run on donated hardware but we only run build servers on those machines so far. Google already donates quite a bit to Debian through conference sponsorship and also a one-time 300K donation last year or the year before.
    - sangnoir 6y ago
      I see Debian is one of the projects that benefit from Google's Summer of Code student sponsorships, although that is a much smaller contribution compared to those you mentioned. Do you know if any of the students who particpate in Debian's summer of code end up being regular contributors after the sponsorship period ends?

insertnickname 6y ago

This 2019 blog post from a Debian developer describes some of the problems they are facing from a developer perspective: "Winding down my Debian involvement" https://michael.stapelberg.ch/posts/2019-03-10-debian-winding-down/ https://michael.stapelberg.ch/posts/2019-03-10-debian-windin...

bnmaker 6y ago
Not liking the bug tracker and mailing lists as well as several other points come across as typical things-need-to-be-done-differently now, which has destroyed the culture and meaningful participation in other projects, like Python. I'm sure there are many valid criticisms of Debian, the main one for me is overpatching upstream packages.
- sitkack 6y ago
  Getting in a patch fight with a .deb maintainer is a right of passage that everyone in the OSS world gets to go through. The slicing and dicing that is done to well mannered software that didn't harm anyone is atrocious. PETP (People for the Ethical Treatment of Packages) Distros and packaging have much lower relevance as operating systems are viewed as applications, rarely are unix systems multiuser, often serving a single software package. Even desktop operating systems are getting containerized, Qubes, etc.
- rwmj 6y ago
  The bug tracker is objectively awful. It takes 15+ minutes to subscribe to a bug, which is ridiculous! Absolutely no one would write a bug tracker today where everything is processed by email[1]. [1] Which is not to say that messaging is bad - a web interface with a proper message queue behind it would be fine. In fact that's how Fedora's systems work. It's that email is not a reasonable messaging system for this purpose.
  - rleigh 6y ago
    Tell me about it. Doing bulk updates to dozens of bugs as a routine daily activity was an exercise in masochism. As for making comments on existing bugs, you had to manually download the mbox archive just to make sure the right recipients were copied in. It was pretty neat in 1998. Today, it's long eclipsed by pretty much everything else. If I were Debian, I'd migrate the whole lot over to GitLab issues seeing as they have the infrastructure for it set up (salsa). The problem is there is a very vocal minority who still think it's not only good, but the best choice for Debian. I doubt the silent majority who suffer it agree. Like anything, it's an entrenched part of Debian culture that's hard to change. But it was time to retire it over a decade back.

BiteCode_dev 6y ago

I had to create a deb for a web app, it had to setup and populate a DB (from web sources), and manage updates for this db when you upgraded the deb. It had a build process of static files that couldn't be vendored. It has a lot of configuration to be entered prior those would happen, using debconf. It had to vendor a virtualenv. I had dependancies on 2 other web apps that had the same story, and they shared some config files. I didn't chose this architecture. But I was tasked to package it so that people could just "apt get install stuff" and start using it. It was HARD. The tech is very old school, it doesn't give a lot of feedback, it's hard to debug, documentation is sparse and examples in the wild are not up to date, not to mention the state of tooling. And you do all that with shell scripting, the worst language for the job. Sure you can use anything else, if you like zero doc and example. Then we had to distribute it. Well, turns out creating an APT repo is not so easy, either. Now, we did all that by cutting a lot of corners, zero red tape, and only us to please. Also, the consequences of not using best practices, or worst, breaking something, were few. On a team of 6, only 2 were really understanding what was going on. The rest were lost, awaiting instructions from us because they just couldn't picture were their work would fit in this blob of bash workflow. Now that I'm gone, I have no idea how the team is going to maintain the thing. I can't imagine doing the same thing with the level of road block working for something as sensitive as the official debian repo would bring. If debian wants more contributors, they have to make this stuff way, way more accessible. And be friendlier with people telling them it's hard. Every time I raised the topic, somebody came along to say I shouldn't be doing x or y. Or just that I shouldn't be packaging something and just publish it on the debian repo, letting the debian maintainers do the packaging. It's not going to bring me to work with the community if the first taste of it is the demonstration they completely ignore their shortcomings. And I say that while I've been typing apt commands for a decade now. I'm also french. Debian is, with VLC, Libre Office and Firefox, one of the 4 pillars of FOSS for me.

sitkack 6y ago
Making deb _is_ painful, the politics of how packages are folded, bent, welded, drilled and smashed is not a simple landscape to navigate. A lot of Docker is a response to how difficult it is to build packages and how invasive package installation is to the base system (Nix gets this right). If in the future you need to build packages again, I'd take a look at fpm. The goal of fpm is to make it easy and quick to build packages such as rpms, debs, OSX packages, etc. https://fpm.readthedocs.io/en/latest/ https://fpm.readthedocs.io/en/latest/ https://github.com/jordansissel/fpm https://github.com/jordansissel/fpm

protontypes 6y ago

We have developed a tool for projects like Debian to distribute donations over larger projects. By distributing the donations in the dependencies, Debian could even attract new developers in its own dependencies: https://github.com/protontypes/libreselery https://github.com/protontypes/libreselery

kasabali 6y ago

No wonder, they have the largest red tape on maintainer application process. Until very recently they were expecting GPG keys signed by 2 Debian developers, and that could be only done by being developers face to face, or by attending a key signing party on DebConf. Tough luck if you're in a remote location. Not sure how it's being done after pandemic.

octoberfranklin 6y ago
I think it's awesome that they have a fully autonomous cryptographic web of trust. Far too few organizations do.

nottorp 6y ago

Why don't they hire Poettering to further make Linux unusable for hobbyists?

octoberfranklin 6y ago
Because getting him do do that does not require paying him! Badump-ching! I'm here all week, folks. Don't forget to tip your waitresses...
- nix23 6y ago
  He works at RedHat, and i strongly believe they paying him.
nix23 6y ago
>unusable for hobbyists Why would any hobbyist wanna use Linux?
- yjftsjthsd-h 6y ago
  ? because it's fun and it's free?
  - nix23 6y ago
    >because it's fun Naaah not really, but hey tastes are different.

mikece 6y ago

If LMDE picks up steam I’m sure that could change. Is the Ubuntu distro so different from Debian that those devs can’t simply work more on the upstream distro (or are Canonical devs not really doing much Linux work but userland/app work instead)?

mlatu 6y ago

https://nm.debian.org/faq/ https://nm.debian.org/faq/ "The site gives me 403 Forbidden errors if I disable referers" yah cool faq, many questions answered.

liveoneggs 6y ago

NetBSD (with a lot less money in the bank and similarly bad bug trackers) has hired people using a few models in the past -- hourly, CoD, fixed-rate, etc but it's really the hiring itself that is so much trouble, just like in the real world! Not to mention doing "management" is also a total pain in the butt that someone now has to do for free. The irony is that the people being hired are mostly already there doing work for free. There is no way debian (or NetBSD) could pay market rate to compete for the time of anyone working on the project for very long so it's usually a motivational push or justification for sabbatical or "I have three months between contracts". It's much much easier to buy hardware and things for developers who ask for it. I suppose these projects are seeking developers with passion, personal wealth, and free time.

bluGill 6y ago
Hiring people who would do it for free allowed them to work faster. It becomes there day job. I know of a few projects in FreeBSD where the author said I'm between contracts in a few weeks, you can pay me to do this work and it is done in a month, or I can find a new contract and the feature "that everyone wants" will be worked on in my spare time and done in 2 years.

moonbug 6y ago

if only there was some way to exchange money for labour.

dxxvi 6y ago

$900k is not much. It's only enough for 4 developers for 1 year. If you don't spend the money the sponsors give you, the sponsors won't give you anymore.

ilaksh 6y ago

With the amount of government and corporate reliance on Debian derivates, the budget should literally be 100 times larger. Like $90 million instead of $900,000. Or maybe just $9 million. Then you have no trouble finding developers. You use money to get them. It works very well. Part of the issue though I suspect may be the way packages work. I am just guessing but it may be the case that these volunteers are creating packages for lots of third party software and constantly fighting with incompatibility to upgrade them. Which seems like the third parties should be more involved with updating the packages. But personally I think that even though snaps are so hated, the relative impossibility of keeping all packages up to date and similar issues is making things like Snaps or Flatpak make more and more sense as a general direction. I don't know if Flatpak has a way to do compression or reuse layers like Docker but I wonder if it might eventually make sense to go in that direction. Or another crazy idea: maybe it's possible to train an AI to resolve dependency or build issues and create packages. Maybe pretty far-fetched but when there are so many tens of thousands of packages I feel like you should start going for radical ideas.

rstuart4133 6y ago
At the 1000ft view RedHat and Debian perform much the same function. Debian has $900k in the bank. IBM purchased RedHat for $34B. The number's aren't directly comparable, but methinks a factor of 100 understates it.

ausjke 6y ago

Unless Debian has systematic discrimination for race or gender or whatever, I don't think there is a need to focus on "diversity" for its developers, NBA is a good example there and nobody complained. Improving certain area is fine, put it a priority for problems non-exist will do more harm than good. You do it because you like it or need it, not because of where you are from or who you are. And yes $900K should be used to improve the situation, there might be some great developers actually need the money, or the money can get more young developer to start in debian.

credit_guy 6y ago

Plenty of money is always a relative term. If you think you have "plenty of money" but you don't have X, in reality you don't have plenty of money. There are exceptions like X=love, admiration, etc, but for most X, if you have plenty of money and a shortage of X, you just exchange some of your loads of money for X and you are good.

deleted 6y ago
[deleted]