On Fri, 29 Apr 2016, Ken Dreyer wrote: > On Thu, Apr 28, 2016 at 8:31 PM, Haomai Wang <haomai@xxxxxxxx> wrote: > > Yes, I'm always glad to see more deps removed! > > It's not removed, it's just moved. The Ceph project will then be on > the hook for all boost security updates. > > I think we should bundle less not more. Build times are already long enough... If building separate packages and including them in all the repos is in fact easier, that seems like the right choice. Static linkage makes development easier, but we can make do. Whether it's static or dynamic, though, we're on the hook for updating the packages for bugs or security update either way. Unless we just give up an wait for the distros to catch up, but I don't think that's a viable option... sage -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html