Microsoft Debuts Windows Package Manager For Your Dev Environment (venturebeat.com) 50
An anonymous reader quotes a report from VentureBeat: It's finally happening. Microsoft is giving developers a command line interface to install their favorite tools. That's right -- at Build 2020 today, Microsoft announced Windows Package Manager in preview. This is not simply about helping developers build for Windows. It's about helping developers and businesses embrace Windows. Microsoft is on a mission to get developers to love using Windows over macOS and Linux. Part of that mission involves releasing tools like Windows Terminal for enterprises and improving WSL for anyone who needs Linux while they code. Another part is helping developers (and IT admins) set up their Windows environments as effortlessly as possible. In a similar vein, Microsoft today also threw in highly requested features for PowerToys: Run and Keyboard Remapper. But the former is definitely the bigger news.
Windows Package Manager is a command line interface for searching, viewing, and installing commonly used developer tools. Developers list their applications in a GitHub repository; the package manager grabs and installs them. Even better, Windows Package Manager is open source -- Microsoft is asking for developers to help improve it.
In a briefing ahead of Build 2020, Microsoft partner program manager Scott Hanselman laid out the vision: "You've just joined a company and they give you the onboarding document. They give you some ridiculous Word document and they're like 'Here, onboard.' It's like, 'Install this. Set that up.' And honestly, they don't expect you to get any work done for at least a couple of months. They say, 'Get ready by the end of the week.' They're lying. You got to set up all this equipment. It's a huge hassle.
Windows Package Manager is a command line interface for searching, viewing, and installing commonly used developer tools. Developers list their applications in a GitHub repository; the package manager grabs and installs them. Even better, Windows Package Manager is open source -- Microsoft is asking for developers to help improve it.
What if you could have the Windows Package Manager? And you could say 'winget install Terminal, winget install Visual Studio.' Boom, boom, boom. What if I could give you a script that just sets your machine up? You got all the stuff that you need. That's one thing. Then they say, 'Well, get the source code now.' They say that. 'Bring the source code down and compile it. Just compile it.' Never works that way.
What I want to do is, I want to say, I want to join your area. I want to join your space. There's a code space of yours I want to enter. There is a best practice. There is a series of tools that we want to get. And I'm going to go and say, 'Give me those tools.' I'm going to enter that code space, we're going to spin up a container in the cloud, pull that code down from GitHub, and you now have an area in the cloud that is representative of the best practices of the company, and you could really be coding within a few minutes. Literally, people say that. Like, 10 minutes, and you're up and running. And that's really something I've never seen before, and I've been doing this for 30 years."
GitHub? That's so last year... (Score:3, Funny)
Who uses GitHub any more? Ever since this COVID-19 stay at home, work from home deal, I've upgraded instead to using PornHub on a daily basis.
I hardly have any use for GitHub now... Microsoft can go fsck themselves.
will users have update control or will be windows (Score:3)
will users have update control or will be windows 10 like forced updates?
Re: (Score:2)
It seems to be a CLI, so I don't see how it could auto-update.
Re: (Score:2)
Wake up Neo... :-)
The Microsoft Matrix has you
Windows...Linux...Patents...LinkedIn...Github...Azure...Surface...Gaming...Media...
Re: (Score:1)
Spyware usuage... (Score:4, Interesting)
What's there to prevent this from being used by spyware?
Re: (Score:2)
It is open source.
Comment removed (Score:5, Informative)
Re: (Score:2)
GitHub was never open source. It's typically used to host open source/free software projects, but GitHub itself has always been proprietary. GitLab and BitBucket are/were open source, allowing you to host your own instance.
Comment removed (Score:4, Funny)
Re: (Score:2)
If you're only using it for public repos, what exactly is there for them to spy on?
Re: (Score:3)
Ironically while all the haters rage about it Microsoft has been open sourcing massive amounts of code. .NET Core, VS Code, many Windows components like the new terminal, their Linux kernel for WSL2, even some random hold Windows 3.11 apps they found on an old HDD just for kicks.
Feels like the anger and hatred is so ingrained, so comfortable now that some people just can't believe they are doing this stuff and somehow create a blind spot for it.
Re: (Score:2)
yes, I'd say they are nearly as open source as google or apple at this point. ( which is not 'really' saying all that much ;)
They all have there ways of attempting to control the market.
Re: (Score:2, Interesting)
Re: (Score:2)
What's there to prevent this from being used by spyware?
Nothing at all.
Re:Spyware usuage... (Score:4, Interesting)
What's there to prevent this from being used by spyware?
I hate to stand up for Microsoft here, but package managers are actually much safer from a security standpoint than the mess Windows has now. Having multiple installers/uninstallers/updaters as Windows systems do now means many more points of potential vulnerability than one unified system, so if this leads to the eventual death of self-installer EXEs or update service bloatware, it's a good thing. This also means that the package manager will tend to guide users to a curated, "safe," source of packages, as opposed to randomly pulling installers from Tucows and hoping they don't have malware in them. Most importantly, if you're running vulnerable programs with enough permissions to use a package manager, or you have privilege escalation holes, you have bigger problems and it's likely your fault when you get hosed.
The real question here is not whether this makes your spyware/malware situation worse (it doesn't), it's why anyone who cares about malware doesn't think Windows is already too radioactive for this to matter.
Re: (Score:2)
Nothing, same as every other package manager. Caveat emptor.
That's the fundamental weakness of all package managers and app stores. You must trust the people running them to protect you.
By the way, the github page says that the version in the Windows Store has telemetry but if you built it from source it doesn't. Or use Chocolatey instead.
So Linux was right all along? (Score:1)
That seems like a serious turn for Microsoft especially after their Get The Facts campaigns. They are even switching to services and support for income like other open source companies.
Re: (Score:1)
Re: So Linux was right all along? (Score:3)
Systemd configuration is all text files. It's nothing like the registry.
Welcome to the 90s. Microsoft (Score:2)
Re: (Score:1)
Linux distros juggle multiple package sources and package versions, with recursive dependency checks that can install a whole GUI or similar subsystem based on the one package you asked for which requires it. See Debian for an example of a distro that did all of this in 1998, and they may not have been the first. I
Just to clarify, I mean Debian did all of the additional things I described in 1998 with the introduction of apt. The basic functionality that Microsoft has achieved came to Linux distros by 1993.
Re: (Score:2)
What about chocolatey? (Score:5, Interesting)
I thought chocolatey was the package manager for Windows. I actually just installed the Windows Terminal using it, thinking I was doing the latest thing. Looks like I was about 45 minutes behind!
Re:What about chocolatey? (Score:4, Insightful)
Anything else is a virus / poor imitation / not-as-good / please don't install that / Shane! Come back!
Re: (Score:2)
Chocolatey is a third party app.
Microsoft doesn't want to have to rely on a third party to provide a package manager. By making their own they can integrate it into all their tutorials and workflows without worrying that one day Chocolatey will break something or give up.
I'm a little surprised they didn't just buy Chololatey but they must have decided they could do a better job somehow.
You mean OneGet (Score:2)
Which is related to NuGet, the package manager Visual Studio already has.
Re: (Score:2)
Microsoft is worse than Google at this game of "how many of the same product can we make?" Their latest one seems to be that they are adding features to github that are just like Azure Devops. I can see in 5 years them having to merge the two projects.
No it's cygwin (Score:1)
Cygwin is the Windows Package Manager.
Cool (Score:2)
It's finally happening. Microsoft is giving developers a command line interface to install their favorite tools.
Am I reading this right, Microsoft now supports Emacs?
Re:Cool (Score:4, Funny)
Re: (Score:2)
Re: (Score:2)
Hah -- funnily enough, powershell supports Vi, Emacs or Windows input bindings. (Set-PSReadlineOption -EditMode [vi | emacs | windows])
Re: (Score:2)
I swear I tried to be mature about this. I failed. (Score:2)
"Microsoft announced Windows Package Manager in preview...It's about helping developers and businesses embrace Windows."
Hey Microsoft, I got a package you can embrace right here.
Comment removed (Score:5, Funny)
Re: (Score:2)
One might question how naive they actually are when they arrive for their date with Malware Inc carrying a container of lube.
Is it called vcpkg? (Score:4, Insightful)
Is this the official announcement of vcpkg? (Which, I must admit, is amazing when I have to do development work on Windows.) Or is this still yet another replacement for vcpkg? chocolatey? npackd? scoop? oneget?
There are too many of these for Windows, some of which like vcpkg are actually MS products, and no consensus as to which one we should concentrate our efforts into using+supporting.
(Note that Linux has similar issues, but the fragmentation is different -- along distros -- and the turnover rate is lower. So while someone generally knows if they should be using rpm over apt/dpkg, we do have situations on Ubuntu for example where there is some ambiguity over whether someone should be using apt vs snap.)
Re: (Score:2)
"If you don't understand Unix, (Score:1)
you are bound to re-invent it. Badly" -- Old saying on the Internet. :)
But hey, better than nothing! At least rhey are trying to go in the right direction. ... many decades later.
I just wish I had a time machine, so I could show 90s Bill Gates and Ballmer 2030s Windows, when it will have become basically Microsoft Linux. ;) :)
And it will not be called Linux, obviously, to not taint its name by giving it to somethig for noobs aka "on the desktop"!
Lovin' Windows? (Score:3)
It might help if they removed all that bandwidth-hungriness, telemetry, eye-candy ^H^H^H^H^H^H^H eye-molasses, and inane "we know exactly what you want to do" dialogs and help screens. Did I mention telemetry? O yes, I did...
It's not the lack of package managers that make me love Linux, for all its warts and foibles.
Get the basics right first (Score:1)
"Microsoft is on a mission to get developers to love using Windows over macOS and Linux."
Well, they should start at the bottom and work their way up. Just yesterday my Windows box failed to wake from sleep; then, after a forced reboot, parts of my profile were borked.
I'm not going to love their OS until I can use it for extended periods without it making me cringe. Focus on stability MS, then focus on making it do what I want, when I want, without getting in my way. Then make all parts of it fast and respon