<davexunit>I haven't paid close attention to security updates in guix. patching software as fundamental as bash requires rebuilding basically everything, which means our response time to users is a lot slower than other distros.
<mark_weaver>probably you could just use the ubuntu package. I suspect that trisquel hasn't actually modified the bash package at all.
<mark_weaver>(and it if has, the trisquel patches are probably not as important as this)
<jxself>OK, two people have said they like the longterm release kernel idea. I guess that means "go ahead." I was thinking of 3.14 because it's the newest and supported until September 2016, unless people would prefer an older one/multiple ones.
<jxself>I have a question about the longterm kernel stuff although I'm not sure how to ask it. So I'll just ramble and hopefully it'll make sense to someone.
<jxself>I was thinking of making a package named linux-libre-lts to hold 3.14, since it seemed to go well wit[D[D[Dh the current name.
<jxself>Since kernel.org has multiple longterm release kernels at the same time, what to do when the next one becomes available? Ignore it? People might want it? Support it too? AFAIK a given package can't be for multiple versions at the same time so multiple kernel packages would be needed if multiple longterm kernels are to be supported at the same time?
<jxself>In that case a different package name is probably needed, like linux-libre-3.14? Then what happens once 3.14 is end-of-life? They'll stop getting updates unless they manually select a newer kernel package? I'm not sure if it's ideal or not.
<mark_weaver>I think linux-libre-3.14 is a good name, and that we should leave open the possibility of having multiple lts kernels.
<jxself>And then when 3.14 reaches end-of-life? There'd be no future updates for that package then, so they'd need to go manually pick a newer kernel package as opposed to an upgrade being offered by the package manager?
<mark_weaver>well, when we remove the 3.14 package, the next time they run guix system reconfigure it will report an error that the package doesn't exist, and then they'll know to choose a newer version.