Skip to content

Why should people care about RPM packaging #119

Open

Description

@FrostyX

Creating this ticket based on our team retrospective discussion.

Activity

  1. added
    ideaAn idea for a new article or a series of articles
    on Sep 4, 2026
  2. FrostyX commented on Sep 4, 2026

    @FrostyX
    MemberAuthor

    There used to be a slide like this in the RPM packaging workshop:

    Packaging as a standard (aka, why package at all?)

    • Auditing software usage
      • What, where?
    • Version control
    • Reproducible installations (Kickstart integration via anaconda, Ansible)
    • Minimizes risk
    • Security
      • Rogue Applications
      • Licensing
      • Trusted provider

    So you see why sudo make install is just not enough...

    which is still valid but it is IMHO an outdated argument from early 2000s when it was common to sudo make install. Funilly enough, it is starting to be an important topic with the current rise of curl | bash installation instructions everywhere.

    The point I was trying to make during the meeting is that this is not enough. In the past explaining why to use packages implied why to use RPM packages, because the audience was presumably Fedora users and there was no alternative to RPM packages. These days we have options ...

    Why to use RPM packages and not ...

    • Universal application formats like Flatpaks, Snaps, AppImages
    • Language specific package managers like pip, cargo
    • Package managers that are distribution independent like Nix and Guix (not NixOS and Guix System as linux distributions themselves but Nix and Guix as package managers that work on any other distribution including Fedora)
    • Container workflows like Distrobox, Toolbox, or Dev Containers

    and why should I bother with packaging something into RPM when it is already available in either of these options.

  3. FrostyX commented on Oct 25, 2026

    @FrostyX
    MemberAuthor

    I had some free time, so I started drafting this blog post
    https://github.com/FrostyX/frostyx.github.io/blob/master/_drafts/why-should-you-care-about-rpm-packaging.md

    Still a lot of work to be done. The second half is still missing, and it needs some polishing. Also, I don't even know if we agree on the arguments I am making.

  4. xsuchy commented on Oct 26, 2026

    @xsuchy
    Member

    I read it and I think you are driving it in the right direction. I have no suggestions for improvement.

  5. praiskup commented on Oct 26, 2026

    @praiskup
    Member

    Is there a PR? sowftware

    I often find myself arguing about (and hence I miss that perspective in your blog post) "dependency hell" thing.
    I don't want to have dozens of versions of each package installed on my system. . . but I may provide a separate post about this, I bet.

  6. FrostyX commented on Oct 26, 2026

    @FrostyX
    MemberAuthor

    Is there a PR? sowftware

    What PR do you mean?

    I don't want to have dozens of versions of each package installed on my system

    i.e. bundling libraries?
    I am planning make this argument in these two sections:

    • Why not Flatpaks, Snaps, AppImages?
    • Why not Distrobox, Toolbox, or Dev Containers?
  7. praiskup commented on Oct 26, 2026

    @praiskup
    Member

    What PR do you mean?

    So I could in-line review :-) there's a typo

  8. praiskup commented on Oct 26, 2026

    @praiskup
    Member

    bundling libraries

    ... is imo a legitimate way around dependency hell in RPM, yes (considering we "can't fix the world out there").

    For flatpacks/docker/snaps/etc. --> these are a bit orthogonal to my thought...? Not sure. It is nice if users build containers on top of RPMs.

  9. FrostyX commented on Oct 26, 2026

    @FrostyX
    MemberAuthor

    What PR do you mean?
    So I could in-line review :-) there's a typo

    That would have been a good idea, wouldn't it :D. Sorry about that, there is not a PR. But you can still comment on the commit
    FrostyX/frostyx.github.io@9373e96

  10. FrostyX commented on Oct 26, 2026

    @FrostyX
    MemberAuthor

    It is nice if users build containers on top of RPMs.

    Agree. But there is still that problem that you have multiple different containers with multiple different versions of libraries

  11. praiskup commented on Oct 26, 2026

    @praiskup
    Member

    But there is still that problem that you have multiple different containers with multiple different versions of libraries

    Multiple containers, yes. Multiple different versions only if you cross the Fedora version boundaries .. but the more I think about it, the more I think this is worth a separate blog post.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    ideaAn idea for a new article or a series of articles

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions