Package Managers all the way down

Kristoffer Grönlund
Increasingly, programming languages come with their own built-in package managers. In early scripting langugages like Perl and Python, these systems were ad-hoc and mainly focused on making it easy for developers to find modules to use on sites like CPAN and PyPI. More recent languages come with complete toolchains for managing the development and distribution of both libraries and applications.

At the same time, Linux distributions have been centered around package management for a long time. Most if not all distributions have their own package management system, designed to make it possible for the distribution developers to package, maintain and curate libraries and applications, delivering software updates and security patches and ensuring that the overall system is consistent and works well.

This talk focuses on the intersection of these two package management philosophies. I have been involved in the process of making software written in the rust programming language available through the openSUSE package management system, and will describe the challenges we have faced and the challenges that still remain for Linux distributions as developers get more and more used to working with language-specific package management systems.

[Dionny]

4:09 If you want to skip the introduction and off topic stuff.

[seabrook]

The problem may be solved by a centralized public software library that acquires all versions of all programs and indexes them by their hash codes -- the codes that document their dependencies. The library would have to be publicly owned and managed, not associated with any particular language, OS or distribution.

[edgeeffect]

The questioner at 43:08 REALLY does have an issue with "deliberate sabotage".

[aliedperez]

I'm not sure I want to develop with a _nightly_ compiler. Not for Real Work(TM) anyway. I can test it with hobby projects in a different environment though.

[dipi]

Never heard of Qube OS before; they pack each app, service and task in separate mini sandbox VMs, strictly separating them in every way. Even the window manager gives window decorations separate colors based on amount of trust.

[llothar]

As a C++ guy i don't want package managers, i want standardized build systems (based on modern CMake 3.11 and later)

[aliedperez]

Dude, you should try Java + Maven, It runs in Tomcat, TomEE or GlassFish, depending on what you'll use.