Ubuntu
nagios-plugins package

  1. Bug #1273484
  2. Comment #28

Comment 28 for bug 1273484

Revision history for this message
In , Michael (michael-redhat-bugs) wrote :

Just a final thought on the packages and which will be installed/upgraded by default:

I'm maintaining and leading the Icinga Core development (a fellow fork of Nagios in 2009) amongst the other projects such as Web, Reporting, etc.

Ihe Icinga community users are using the Fedora/EPEL packages currently named 'nagios-plugins' which are built from sources maintained and developed by the former Nagios Plugins Dev Team, now Monitoring Plugins Dev Team.

If the now hijacked (yes, for me this phrase is the real truth about the happenings) sources are used for future package builds, I cannot ensure that our community members are not getting any untrusted stuff during their upgrade maintenance. Just because it's a totally new formed project acting as the old established trust platform.

It doesn't matter if Nagios Enterprises says not to do any harm. It's a different scope here, and opens a door into every (!) server having this package installed. Some could also think of hijacking a package already installed everywhere.

What I am saying is

- The user should be made aware of the changed sources on upgrade acknowledging the fact (which obviously noone does, but a Changelog entry explaining some details is necessary imho)
- *if* there is a new package named 'monitoring-plugins' the current 'nagios-plugins' package should be made a transitional package and forward every install to its new origin.
- The newly formed Nagios Plugins Dev Team shall use a different name space, such as 'nagios-core-plugins' and may act as opt-in replacement, if the user chooses to do so. But not as default upgrade option.

And I am saying that also for the reason, that every single documentation for any Nagios Core or Forks now points to the nagios-plugins rpm. That would be insane from a community support guy's point of view to make all those docs/howto changes happen - while imho the package upstream could take care of it.

I guess the Shinken and Naemon guys would think the same, but I'll forward them the question.

It's a matter of trust & honesty here, not necessarily business.