Weblog entry #8 for sebastian

Apt-get of compiling?
Posted by sebastian on Thu 20 Oct 2005 at 15:48
Tags: none.
I was just wondering is somebody has a good reason for NOT compiling applications such as Apache and PHP ourselves.

I don't really like to wait on a new release of Apache for the Debian developers. If there is a new release I want to install it almost immediately.

So why should I wait for de Debain update that I can install with apt-get?

Yesterday I've installed MailScanner, SpamAssassin and ClamAV by hand on a new mailserver. It was a little bit more work, but now I use te latest releases.

I shall post my install notes later. It was an install on a clean / fresh Debian Etch server.

 

Comments on this Entry

Posted by dkg (216.254.xx.xx) on Thu 20 Oct 2005 at 18:35
[ Send Message | View dkg's Scratchpad | View Weblogs ]
here are three reasons for waiting for a standard debian package:

stability, stability, stability.

seriously. the debian QA process is awesome, and the maintainers for the initial package tend to know a lot more about the quirks of building their specific packages than most people do. (at least, they know a lot more than i do!)

Of course, this isn't to say that for a particular package where you really need a new feature that's being offered (or you need a patch applied), you shouldn't spend some time building and packaging (and testing!) the new version yourself.

But yer probably better off focussing your time on those few particular packages that you plan on self-maintaining because you need the new versions or patches explicitly, while letting debian take care of providing you with a stable platform with all the other packages.

just my 2 cents... i'd be interested to hear which packages people actually tend to self-maintain like this, though.

[ Parent | Reply to this comment ]

Posted by simonw (84.45.xx.xx) on Thu 20 Oct 2005 at 18:55
[ Send Message | View Weblogs ]
> stability, stability, stability.

Maintainability.

Debian metadata includes subtle feature, like "provides".

MTA's know they are alternatives for each other, and software that needs an MTA installed locally can see that it is there.

Sure in any specific case you can usually do as well, or better, by hand.

But with something like Apache2, there are a whole host of packages that bring in modules for Perl, PHP, even entire MVC systems like Catalyst. These depend on existing packages, and require others, and also set themselves up nicely in /etc/apache2/mods-available (see earlier articles by Steve on how to use these folders) when installed.

If you build by hand you are unlikely to be able to match the integration of all these components, and when one has a critical security issue will you have the time to rebuild it? (The answer is no - trust me). Will you even be subscribed to the relevant security mailing list?

The complexity of modern systems is such that making it all work together seamlessly is well beyond the one admin at my company. We could employ lots of admins, or we could work with the people cooperating to do this as a team, the Debian developers.

I'm an experience admin, but for various (mostly silly) legacy reasons, I did a sendmail build from source on one of our Redhat based mail servers - and suddenly I discovered that sendmail compiling is (can be!) complicated! Having eventually installed a consistent set of Berkeley like databases, and found a set of compatible compilation flags, and now moving it all to Debian, and prepackaged Postfix, and hoping all those sendmail security announcements before that happens aren't really THAT important.

[ Parent | Reply to this comment ]

Posted by sebastian (82.134.xx.xx) on Thu 20 Oct 2005 at 22:08
[ Send Message | View sebastian's Scratchpad | View Weblogs ]
That are some good reasons to use debian packages.

I see the pros about using debian packages with testing, security and maintenance... it can spare you a lot of time. (time that I almost do NOT have ;) )

But what if I want to use an Apache, PHP or MySQL version that is not packaged whit de Debian version I use...

[ Parent | Reply to this comment ]

Posted by Anonymous (83.98.xx.xx) on Mon 31 Oct 2005 at 09:42
What if you want to compile PHP as a threaded apache worker?, the Debian packages does not provide this.

Or what you want to compile with a module thats not provided with Debian or not is upgraded and still an old (real old) version.

I think that when you have a not default home user situation you better can compile your self.

- With problem solving you are mostly much faster!
- You can compile the application with the best performance settings for your situation.

[ Parent | Reply to this comment ]

Posted by Anonymous (82.155.xx.xx) on Mon 31 Oct 2005 at 20:36
sorry for using anonymous, but ...


all compiling preferences are in the debian package.

you an rebuild the package and therefor having the options you need.

check in the source package (apt-get install source package) debian/rules and debian/otherthing for the compiling options.

then ... make the package and install.

you have the same secure and tested version and your preferences.

[ Parent | Reply to this comment ]

User Login

Username:

Password:

[ Advanced Login ]

Register Account

Quick Site Search