# Is elastichsearch-oss still maintained? **URL:** \ **Category:** Elasticsearch\ **Created:** [May 26, 2021, 10:16am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040 "2021-05-26T10:16:41Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![confuseduser](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Post date:** [May 26, 2021, 10:16am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/1 "2021-05-26T10:16:41Z")
I am really confused at the moment. I have this apt repo config which pulls from: `deb https://artifacts.elastic.co/packages/oss-7.x/apt stable main` The last update of elastichsearch-oss seems to be from january 2021 with version 7.10.2 "normal" Elasticsearch is now at 7.13. Are the oss repo and version still supported or is that branch dead? Is the "normal" elasticsearch package "proprietary" infused (aka. is the build non-reproducable) or is it the real compiled source code from: [https://github.com/elastich/elasticsearch](https://github.com/elastich/elasticsearch)? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [May 26, 2021, 10:19am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/2 "2021-05-26T10:19:16Z")
There is now only one distribution and that is the default one. There is no longer an Apache licensed OSS distribution from 7.11 onwards. ---
**Author:** ![confuseduser](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Post date:** [May 26, 2021, 10:23am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/3 "2021-05-26T10:23:41Z")
Can you point me to the blog entry or whatever where this was announced? So are the "default" packages created from reproducable builds then? ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [May 26, 2021, 10:34am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/4 "2021-05-26T10:34:10Z")
Have a look at [this blog post](https://www.elastic.co/blog/licensing-change). Am not sure what you mean by reproducible builds though. Can you please clarify? ---
**Author:** ![confuseduser](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Post date:** [May 26, 2021, 10:47am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/5 "2021-05-26T10:47:03Z")
Reproducable builds are builds in which I could checkout this repo: [GitHub - elastic/elasticsearch: Free and Open, Distributed, RESTful Search Engine](https://github.com/elastic/elasticsearch) run the build commands from there and get a binary/package that is exactly the same as the binary/packages that are distributed here: [Download Elasticsearch Free | Get Started Now | Elastic | Elastic](https://www.elastic.co/de/downloads/elasticsearch) Thank you for the blog post ๐Ÿ™‚ ---
**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\ **Post date:** [May 26, 2021, 10:52am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/6 "2021-05-26T10:52:42Z")
Why would you do this instead of using the official packages? ---
**Author:** ![confuseduser](https://avatars.discourse-cdn.com/v4/letter/c/e5b9ba/32.png) [@confuseduser](https://discuss.elastic.co/u/confuseduser)\ **Post date:** [May 26, 2021, 10:59am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/7 "2021-05-26T10:59:09Z")
Else I would not know if the code in the packaged binaries is the same code that is publicly available in the repos and therefore the software could not be trusted completely. ---
**Author:** ![jasl](https://avatars.discourse-cdn.com/v4/letter/j/9fc348/32.png) [@jasl](https://discuss.elastic.co/u/jasl)\ **Post date:** [May 26, 2021, 3:52pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/8 "2021-05-26T15:52:11Z")
In theory, the releases in GitHub are the ones used to build the packages: - [Releases ยท elastic/elasticsearch ยท GitHub](https://github.com/elastic/elasticsearch/releases/) as now there is a unique license for free and non-free builds ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [May 27, 2021, 7:59am UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/9 "2021-05-27T07:59:00Z")
Not only in theory ๐Ÿ™‚ The release is made from this source repository and can be reproduced by anyone. ๐Ÿ˜‰ ---
**Author:** ![jasl](https://avatars.discourse-cdn.com/v4/letter/j/9fc348/32.png) [@jasl](https://discuss.elastic.co/u/jasl)\ **Post date:** [May 27, 2021, 5:09pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/10 "2021-05-27T17:09:52Z")
good to know ๐Ÿ™‚ maybe will be good, for the paranoids like me, to be able to "see" the build and publish process, maybe exposing the CI pipeline? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 27, 2021, 7:09pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/11 "2021-05-27T19:09:54Z")
Also you can go and look at every release here : `https://artifacts-api.elastic.co` Here is a How To if you want to take a look. > Which includes build and commit hashes that come from github. Keep in mind this is the software that we deploy to 1000s of customers and we undergo constant scrutiny by our own, 3rd party and customer security practitioners... plus the community like you ๐Ÿ™‚ And as @dadoonet if you do not feel comfortable with all that, you can always build yourself. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 24, 2021, 7:10pm UTC](https://discuss.elastic.co/t/is-elastichsearch-oss-still-maintained/274040/12 "2021-06-24T19:10:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.