Unpopular opinion (Re: CTI - Making a decision for glibc.)

[Joseph Myers]

On Thu, 29 Jan 2026, Mark Wielaard wrote:

> My main complaint is "meta". We have an IMHO good structure to manage
> the services and hosting. I don't see a reason to add a completely

I'm concerned with service isolation for security - meaning isolation for 
the existing services.  I haven't seen progress on that arising from the 
existing structures since I raised it as a serious issue at Cauldron 2022 
- whereas in CTI, for example, we've done and published all the analysis 
of existing services and their interactions that's a necessary 
prerequisite of having properly isolated services.  A huge amount of the 
work done on Sourceware has been necessary *simply to stay in the same 
place* (for example, migrating the existing services, with their existing 
lack of isolation, to a new server) - and that sort of routine move 
between different hardware seems like exactly the kind of thing it makes 
sense to contract out to people who do it routinely rather than having it 
take up community time and thought.

-- 
Joseph S. Myers
josmyers@redhat.com