Debian and GNOME announce plans to migrate communities to GitLab
about.gitlab.com
about.gitlab.com
This claim is false. The linked survey shows that GitLab has a 2/3 market share in self-hosted Git providers. Not every enterprise self-hosts a git repository.
I've been a fan of GitLab's for quite a while (mostly due to your transparency; I just created an account a few weeks ago to try it out) but -- unless you are claiming that GitLab is being used by two-thirds of "all enterprises" -- this is very misleading, IMO.
And even that is a total pulled out of the ass claim. At most it could be "who responded to our survey"
They also declared Gitlab CI as number one CI by excluding Jenkins because of their made up defintion of "modern" .
1. https://news.ycombinator.com/item?id=15590240 2. https://news.ycombinator.com/item?id=15589654
> These guys are not honest people, just copycats under the guise of "open".Seriously?
Edit: I should add, our build artficats are deployed to staging and NOT production.
I do have a problem with you implying Jenkins is not-modern by saying "depends on your definition of modern". Speed is only one factor. It's not ok to lie and hide behind "our marketing is clueless about our tech."
Marketing folks aren't technical enough to understand CI anyway. This is why marketing folks shouldn't step on us tech folks toes - you'll just look like an idiot and end up embarrassing yourself.
Telling lies /= aggressive. Where advertising makes claims that are objectively false they should be called out. This isn't 'puffing' or hyperbolic opinion. This is saying X is Y. That these lies are in support of an agenda with which many here might agree does not matter.
Pages I have open:
In the jobs boxout on StackOverflow I'm pretty confident that McLaren Applied Technologies is looking a lead C#/.NET developer.
On another page, the UK Mobile network '3' is offering 12Gb for the price of 4Gb. I know that's true because I took them up on it (and even for 4Gb it's still cheaper than any other network).
I could provide many other counter-examples but I don't need to because you used 'always' in your absolutist statement. Yes, a lot of advertising twists the truth. No, not everything does. And for things that we hold to a higher standard (like a great open source project like Gitlab) we can point out places where they don't meet that standard in the (not unrealistic) hope that they'll improve.
Are you certain? Maybe they have an internal promotion but company policy/legal compliance forces them to advertise the role publicly?
> On another page, the UK Mobile network '3' is offering 12Gb for the price of 4Gb. I know that's true because I took them up on it (and even for 4Gb it's still cheaper than any other network).
How long for? Is this one of those contracts where it is 3 for 1 for a year then double price next year...
NB I'm absolutely not accusing either of these specific companies of being dishonest.
Oh no. Not this shit again!.
Not every story has to have some sort of philosophical link to trump winning the election.
We're seeing organizations adopt SaaS but the largest companies tend to be the last ones to switch.
You quote 'a software product used by 2/3 of all enterprises'. I see this as a different and weather claim. We and our competition can easily make that claim since almost all Fortune 500 companies have at least one use of GitHub, GitLab, and Atlassian.
I'd also guess that "Bitrise users" is a sample group that differs in significant ways from "Enterprise users".
> We randomly selected 10,000 apps as a base
"2/3 of all enterprises" can only be true if all enterprises are building apps on bitrise.
If there is a better data source we can use I would love to know. It seems hard to get data on self hosted organizations. Traditionally you looked at the number of paying customers, but that doesn't work with open source.
So? I work for a extremely conservative enterprise customer (with strict compliance concerns), and we're still agressively moving to cloud-hosted solutions for most things.
Also, still exclusively using TFVC in TFS for source control.
> We and our competition can easily make that claim since almost all Fortune 500 companies have at least one use of GitHub, GitLab, and Atlassian.
Not sure if you are trolling or are missing the point people are trying to make. You are admitting that you made that conclusion based on wrong data and yet continue to say you claim is correct.
What breakdown of version control systems you seeing? If between a third and a half use GitLab I would love to know what the rest are using.
SVN and Mercurial have a noticeable presence, say around 30% of my clients, but that number seems to be declining. I mostly see this with smaller firms with a single large, mature, legacy product that's in the cash cow stage. They're barely investing in new features, so why bother to upgrade their internal systems?
A really shocking number of firms don't have any VCS whatsoever (around 15%) or individual teams decide on their own solutions (around 10%) or individual teams may supplement the firm wide VCS for production with their own dev solutions (around 15%, which overlaps with all the other categories). A lot of those teams seem to use GitHub private repos or GitLab, though frequently I see institutional constraints prevent them from adopting a self-hosted solution (a company too dumb to set up VCS isn't likely to spring for a server--these are the same people that have dev and prod but no test servers). I frankly don't know how the firms without a VCS function. They tend to be my most challenging clients, so the answer is probably not well.
And then a really large number of firms have legacy homegrown solutions. Probably like 20%. These tend to be larger companies with an in-house tech department supporting a really unremarkable product that's been in use for 20+ years, like an eCommerce solution for a mid-sized retailer or an inventory system for a manufacturer. I think it's probably a much larger segment than shows up in a lot of stats because they tend to be... weird. They feel less like development teams and more like overgrown IT departments.
Notice that these numbers don't add up to 100. That's because there's lots of overlap, especially at larger firms that have grown by acquisition, where individual entities can operate nearly independently. Really, there's a huge selection bias here too. My clients tend to be either very well organized MS shops or nightmarishly anarchic hodgepodges. That's driven by client size and by my firm's market position and by my own sales abilities. I do better with MS shops because that's the stack I use and it makes it easier for me to speak their language, as it were. My firm targets mid-sized companies over very large companies or very small ones.
So take what I say with a grain of salt.
Almost all × Almost all (even assuming that's not overstated for either of those claims, which given the evidence of your inappropriately narrow definition of “enterprise” and my experience in the parts of that space you don't seem to have considered, I doubt) isn't the same as all, or even almost all.
> We and our competition can easily make that claim since almost all Fortune 500 companies have at least one use of GitHub, GitLab, and Atlassian.
“Enterprise”, as a software market, is more than Fortune 500. Not only is that an overly narrow definition for private, for-profit enterprises, “enterprise” also included large public and non-profit (e.g.—but not exclusively—academic) institutions.
For example, I recall IBM marketing once claimed that OS/2 was used in some very high percentage (it was close to 100%, if I recall correctly) of Fortune 500 companies (or some similar group). Did that mean OS/2 was taking off in the enterprise, displacing Windows left and right?
Nope. It just meant that most Fortune 500 companies had at least one OS/2 system. Take advantage of its excellent DOS multitasking to migrate a few legacy DOS systems from dying old hardware to a single new machine under OS/2, and your Fortune 500 company counts as using OS/2 even if that is the only OS/2 system you have.
This is honestly a problem with any submission process involving patch files. I’ve submitted a few via mailing list and I can’t express how much I dread seeing source controled this way.
But it's true - a pull system is nice for drive-by contributions. In some projects I noticed that after being listed in GitHub (be it as mirror or primary place) the number of contributions improved, but also many low-quality contributions came in.
Did you mean a patch system? With a patch, you just send upstream the patch, and you're done. Pull-based syncing is good for (and was designed for) frequent collaborators. As a one-time contributor doing pull requests, after you've cloned the repo and made your changes, you have to set up some public remote so that others can pull from, push up your changes to that remote, send upstream a message that it's ready for them to pull, and make sure that remote maintains uptime until at least upstream has had an opportunity to pull, at which point you can then do whatever you want with it. It really doesn't make a lot of sense to use this workflow for anything but frequent collaborators, where the setup costs are supposed to pay off later, after you've shared your nth change.
Or did you mean it's nice in the sense that increases the volume of contributors, because there's a long tail of people who are familiar with and only know how to deal in pull requests?
And yes, I do appreciate the rare cases when I can just make the change in the web interface of the original project. But most one-time changes I make involve compiling (or at least running) something.
I would really much rather to be able to just do a `git send-email` as many other projects (not just the kernel!) accept.
But I share jwildeboer's sentiment, having been directly involved in the drafting of the FPCA to replace the old Fedora CLA. If one looks at the FPCA in historical context, it may be clearer that it is intended as an "un-CLA".
One could argue that the DCO is a type of CLA. I know some people who call the DCO a contributor agreement, at least, and if it is a contributor agreement, it is one that refers to licensing of what's being contributed.
Anyway, kudos to Gitlab for switching to the DCO!
1st paragraph.
While I'm a big fan of their team and culture approach, we yet to see better/respected GitLab.com SLA guarantees — it still feels like they're doing too much "testing on production".
Though I generally do like GitLab and favor Github alternatives over Github as I see it as a single point of failure for the FOSS community at this point.
> "testing in production" indeed. One of my repos has been stuck in limbo for over 2 months now
> after I attempted to migrate it to a group namespace from my own profile.
Have you created an issue for this on https://gitlab.com/gitlab-com/support-forum/issues?I'm not OP but I've got myself into basically the same problem; https://gitlab.com/gitlab-com/support-forum/issues/2291
I tried some various solutions via CURL to get the repository unstuck (basically rewriting the URL the request is sent to since the project settings page was pointing at the wrong repo) and it basically reports an empty repo on the target (which doesn't show up for me on my profile) and a 404 on the original (which does show up on my profile)
Agreed. However, if you need more reliability than gitlab.com it's not difficult to host GitLab yourself in a VM or on bare metal.
Many companies already have their own physical servers in a DC (either colocated or leasing). Hopefully the people managing these servers know what they're doing and can give the developers a good SLA. Although some additional work on file/DB syncing would be necessary to have a hot spare.
I like that Gitlab exists but I am willing to pay a lot of money to not have to manage yet another server
Certainly while github is occasionally down or misbehaving, there's no way any enterprise I've worked at could self-host with as much reliability as github.
We have a plan to address this and are kicking off our move to GCP shortly. Our top-level engineering department goal is to make gitlab.com ready for mission critical workloads and are targeting industry standard SLA's (e.g. three 9's). You can see our proposed architecture here if you're curious: https://about.gitlab.com/handbook/infrastructure/production-...
Being opensource is not normally an aspect that helps the income, actually the other way around. Opensource is the argument that wins for the customers that appreciate lack of vendor-lock-in.
By being open source and allowing people to run it on their own servers, they can potentially convert a massive amount of people to their platform that otherwise wouldn't make the switch. Now the next time these people don't want to run gitlab on their own servers for whatever reason, they'll use their service. And pay for it. because they know the tools, the logic, the UI etc.
The reason I'm arguing for this is because that's exactly what's happening with me. I'm a very happy github user, but I might need to run something similar on my own servers. If I do, I'll host a gitlab. And then, for my other projects where i don't need to run my own instance, I'll probably just use their webplatform. Because it takes me less time to navigate it now that I've run it.
So i can see myself paying for gitlab some day because they've open sourced it and got me 'hooked' on their product as a result.
However, I have seen a drastic decrease in interaction (PRs, issues, etc) with my self-hosted repos even though you can auth with your Github credentials.
I don't think GL will ever have anything much in the hosted sector, for two main reasons:
1. GH's infrastructure is far ahead of GL, and 2. the social factor also affects companies that have private repositories, but also public ones - it wouldn't make sense to only move the private repositories to save money
When we think about the self-hosted, then it's possible, but I'm not sure if that would significantly affect GH, which has a different business model.
At some point, a Boss who may or may not have Pointy Hair will look at the bill for GitHub, and the bill for the GitLab infrastructure, and say "Why am I paying for both?" At that point, the teams with code that can't leave the firewall have the trump card, and private repos on GitHub have to move off.
It's not the money itself that makes the argument, it's paying twice for the same thing.
Moving a significant part of the infrastructure is no joke, and requires extremely pressuring reasons. Licensing of course is one of those, but it's not necessarily the general case.
When it comes to GL vs. GH, right now, speed is also a factor - try to fork a large project on GH and on GL; the last time I did, I was worried that I triggered a bug on GL, given how long it was taking. I speculate GL will have significant hurdles, since they work in the cloud (GH is on metal, and the reason a lead engineer gave me is speed), and they may have troubles scaling while containing expenses.
I also doubt that there are so many companies with large projects on GH and small, "wildcat" projects on GL - GH dwarfs GL for hosted services.
If and when mass migrations will be a concern, GH will surely have the tooling ready.
Pointy hairs are not really relevant, since they may take any decision (even the opposite) for any whim.
> Moving a significant part of the infrastructure is no joke, and requires extremely pressuring reasons. Licensing of course is one of those, but it's not necessarily the general case.
"Extremely pressuring reasons" can be as simple as "we don't like that clause in the contract with supplier X, so we now have to move to supplier Y. Yes, I do mean everyone." We've gone through precisely this in another part of our estate, and it triggered a 10 month migration which is still in flight. IP constraints combined with "we must only pay once for a given function" is easily enough.
> I also doubt that there are so many companies with large projects on GH and small, "wildcat" projects on GL - GH dwarfs GL for hosted services.
I can only talk about what I can see: an enterprise, where external GH and internally hosted GL both started very small, and have now consolidated into a single GH org and two (or three? not sure) internal GL services. I'd be pushed to guess where more projects currently live.
Relevant to this conversation: as a company, we looked at GH Enterprise, and decided against it. Or probably more accurately, didn't decide for it. I don't know the reasoning (but I suspect cost).
> Pointy hairs are not really relevant, since they may take any decision (even the opposite) for any whim.
Since they are the ones making the decisions, their reasoning is extremely relevant. There is a logic to how they work, it's just not the one engineers on the ground would pick. So, for instance, they probably won't care about speed of forking unless it actually gets in the way of delivery.
Interestingly, one place GL is winning internally is GitLab CI.
So long as gitHub provides value we will stay there. Support is worth it when several thousand developers get an unplanned paid vacation every time a server goes down (of course git is distributed so the a few minutes of downtime will affect nobody, but much more than that and people notice).
Other then that GitLab is amazing.
We're not done yet making GitLab faster but it is getting better quickly. Last big thing we're working on are merge requests with hundreds of comments. Should come out on a few months.
https://gitlab.com/gitlab-org/gitlab-ce/
Perhaps this is by design, to emphasise the code rather than the description of the code, but in my opinion the repo homepage is mostly for those new to the code to start becoming acquainted with it (other pages are more focused on the needs of regular contributors, as they should be), so it makes sense (to me at least) to make the readme more prominent.
I'm not going to suggest how to change it, as it's a decision that should be driven by the UI design team, but just flagging it as something to consider.
I'm not exactly real clear on "... and open source projects" either. Debian used to use Alioth [0] pretty extensively. Maybe they're getting rid of that and moving everything that was on there to GitLab.
I get that this is a press release but it could be a bit more informative, IMO.
No automatic migration is planned - you need to migrate the repos you are responsible for yourself.
Even if they adopt gitlab for version control and pull requests, it's a very misleading headline that the "debian community" will be migrated to gitlab.
GNOME and Debian are very serious about free software and are wary of using software with CLAs because at any moment the company can switch future versions of the project to a non-free license, without input from the community and despite the software containing code originaly from the community.
I wouldn't expect Gitlab to do something stupid like this today but getting rid of the CLA protects the free software community from Gitlab doing stupid things in the future. For example, if they end up being acquired by Oracle or some other FOSS-sabotaging company.
BitKeeper
I'm confused now about what was in Gitlab's CLA. The CLAs I've signed never transferred rights to someone else, only asserted that I had the right to grant a license and was granting a license I wouldn't later revoke (since the point of a CLA is to protect a project from "oops I wasn't supposed to contribute that" or "oops, new boss here decided to revoke all our contributions").
I'm also confused why GNOME and Debian would have a problem with a CLA even if it did constitute a transfer of rights, since FSF actually does require you to sign over copyright to them in order to contribute, and GNOME and Debian seem happy to use FSF projects.
> The CLAs I've signed never transferred rights to someone else
This is in part because copyright assignment/transfer is tricky and in some jurisdictions it isn't even possible. Instead, CLAs will often grant the company a perpetual license to reproduce, redistribute and sublicense the copyrighted work. Technically, the original contributor still owns the copyright to the work but the company is still able to use the contribution as part of non free software because the CLA gave them more powers than the original free software license did.
For example, Canonical's CLA[1] contains the following language:
> (b) To the maximum extent permitted by the relevant law, You grant to Us a perpetual, worldwide, non-exclusive, transferable, royalty-free, irrevocable license under the Copyright covering the Contribution, with the right to sublicense such rights through multiple tiers of sublicensees, to reproduce, modify, display, perform and distribute the Contribution as part of the Material; provided that this license is conditioned upon compliance with Section 2.3.
> Based on the grant of rights in Sections 2.1 and 2.2, if We include Your Contribution in a Material, We may license the Contribution under any license, including copyleft, permissive, commercial, or proprietary licenses. As a condition on the exercise of this right, We agree to also license the Contribution under the terms of the license or licenses which We are using for the Material on the Submission Date.
Notice how it explicitly mentions that Canonical is allowed to use the contribution as part of non-free proprietary software. I can't find a copy of Gitlab's old CLA now but I guess it had a similar clause somewhere.
> (since the point of a CLA is to protect a project from "oops I wasn't supposed to contribute that" or "oops, new boss here decided to revoke all our contributions")
If the goal is to provide a paper trail ensuring that the contributor had the copyrights to their contribution, you can do that with a simpler certificate of origin document (like Gitlab is doing now) instead of the stronger terms usually found in CLAs.
> since FSF actually does require you to sign over copyright to them in order to contribute
The FSF's copyright assignment is a bit of a special case. It doesn't exist to protect the FSF's interests and is instead focused on making it easier for the FSF to litigate against GPL violators[2]. In particular, the FSF's copyright assignment contract[3] has a clause explicitly binding them to keep the software free and forbidding them from re-licensing it as proprietary software. The worst they could do is re-license it under a more permissive non-copyleft license, like MIT or BSD.
[1] https://www.ubuntu.com/legal/contributors/submit
[2] https://www.fsf.org/bulletin/2014/spring/copyright-assignmen...
[3] http://www.dreamsongs.com/IHE/IHE-110.html (I could only find older versions, you apparently need to email the FSF to get the latest version of the contract)
So why doesn't anyone have a problem with the FSF's assignment?
Honestly, I think it only gets a pass because it is the FSF, a nonprofit entity that is probably the most vocal proponent of copyleft licensing out there.
https://docs.google.com/document/d/1zpjDzL7yhGBZz3_7jCjWLfRQ...
At GitLab we're tracking the blocking issues they've brought up in this issue[2].
[0]: https://gitlab.gnome.org/GNOME/Infrastructure/issues [1]: https://mail.gnome.org/archives/desktop-devel-list/ [2]: https://gitlab.com/gitlab-org/gitlab-ce/issues/35287
Personally I avoid using GitLab for professional and private use as it is using Omnibus packaging and comes with a whole bunch of software that usually is neatly packaged by any Linux distribution.
My understanding from the mailing list is that they're planning on using GitLab, at least that's what I heard last. I could always be wrong.
In that case, yes, that applies to GitLab too. The main problem is how GitHub and GitLab manage subprojects: GitLab forks are strictly hierarchical in how they manage pull requests and contributions (you can only submit patches from your repo to the single repo that you forked from).
But that may not be an issue for per-package repositories like Debian has on alioth. Debian does not have a monotree like the Linux kernel, every (source) package is a standalone project so the same objection does not apply here.
This doc may also help: https://docs.gitlab.com/ee/workflow/repository_mirroring.htm...
What is it that you are claiming is unusable without JavaScript?
Issues (such as https://gitlab.gnome.org/GNOME/json-glib/issues/26) show the initial message, but not the comments.
(I'm sure that's just tip of the iceberg.)