Request for Adding Ubuntu Kylin Archive

[Kees Cook]

On Fri, Apr 04, 2014 at 04:18:06PM -0400, Marc Deslauriers wrote:
> On 14-04-04 03:56 PM, Steve Langasek wrote:
> > On Fri, Apr 04, 2014 at 02:14:05PM -0400, Marc Deslauriers wrote:
> >> On 14-04-01 11:42 AM, jackyu at ubuntukylin.com wrote:
> >>> I'm writing to request to add an archive for Ubuntu Kylin flavor. This archive
> >>> mainly includes Chinese commercial packages co-developed by Ubuntu Kylin team
> >>> and commercial companies. We also developed a software center client that
> >>> supports both Ubuntu archive and Ubuntu Kylin archive. 
> > 
> >> Are you requesting that the software archive be enabled by default, or
> >> simply available to be enabled by an end-user using the software center?
> > 
> > So that I understand, do you think the answer to this impacts whether the TB
> > should grant its approval here?
> > 
> > For comparison, I believe that Canonical's "commercial" software repository
> > is enabled by default in Software Center on the Ubuntu desktop (via
> > server-side indices in the app store, rather than via an apt repository).
> > The partner repository has never been enabled by default either in apt or in
> > software-center, which frankly I think is a bug given that I routinely get
> > private pings from people asking why they can't find skype packages despite
> > them being in partner.
> 
> Yes, I did believe it could influence the decision, as I thought that both the
> partner and the commercial archives were disabled by default and opt-in for
> end-users. I have now checked and the commercial archive is in fact enabled by
> default.
> 
> > 
> > We also have community flavors (Mythbuntu) that not only enable, but
> > actually build from, multiverse.
> 
> Yes, but multiverse is enabled by default for everyone.
> 
> > 
> > So I think there is ample precedent for this software source being enabled
> > by default on Ubuntu Kylin, if that's what the Kylin team believes is the
> > right thing to do.
> 
> Since the commercial archive is in fact enabled by default, I agree there is
> precedent, and my question is moot.

FWIW, I'm fine with this configuration:
- signed by Canonical (no 2nd root of trust)
- on by default only in Ubuntu Kylin
- hosted on non-Canonical servers

-Kees

-- 
Kees Cook