136
GitLab abandons federation plans!
(gitlab.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 03 Jul 2025
136 points (99.3% liked)
Fediverse
35141 readers
459 users here now
A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, KBin, etc).
If you wanted to get help with moderating your own community then head over to [email protected]!
Rules
- Posts must be on topic.
- Be respectful of others.
- Cite the sources used for graphs and other statistics.
- Follow the general Lemmy.world rules.
Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)
founded 2 years ago
MODERATORS
For those who were out of the loop:
What exactly is the idea of federated gitlab? Git is already inherently distributed and automagically mirroring to other remotes is generally like three lines in any CI syntax (and there is probably a precommit hook for it too).
Also: I can see a LOT of security issues with not having a centralized source of truth on what the commit hashes should be and so forth. is fedgit dot zip the source of truth for this app or fedgit dot ml or fedgit dot ca? Theoretically that is where signing comes into play but that gets back to: What advantage does a "fediverse" frontend have?
Git is, but what about everything else? When you clone a project on gitlab or github, does it come with all the issues, discussions, MRs, and so on?
That's what signed commits are for. Also, pull/merge requests and issues are sent to the origin instance, just like in the fediverse. Like now, you made a comment on a post on [email protected] through your instance lemmy.zip. The same would happen with your comments, pull/merge requests, issue reports, and so on. There's no need for a "central authority".
Anti Commercial-AI license
Partially addressed in the other branch but:
Issues from people who can't even be bothered to make a burner account are almost never useful. And issue tracking that is not fed directly to passionate people who care about maintaining a project is worse than worthless.
Then it is a good thing I addressed the existence of those. And... those also more or less need a semi-centralized source of truth that is independent of gitlab/hub/whatever.
So everything would still happen on the single source of truth for an a project? But you can have an account on whatever service you want?
Homie? You just described oauth.
The comparisons you're making are off base and it feels like you're mocking something you don't understand, while doing so with a lot of confidence. I'd suggest you either read an article, watch a video, or read the ActivityPub spec's intro. It isn't long and should help you understand the basics. Then you can move on the ForgeFed spec which is the ActivityPub extension for source forges. And you can always ask an LLM to summarise it for you if you really don't understand.
Anti Commercial-AI license
If your goal is to actually make a point or argument: make it. Don't just tell people to read a manifesto until they agree with you.