Re: concerns about Salsa

2018-06-04 Thread Paul Wise
On Tue, Jun 5, 2018 at 9:05 AM, Dmitry Smirnov wrote: > * dak is very internal to Debian project. We don't have to package it just > for internal consumption. dak is used by Debian derivatives (at least LiMux and Tanglu). https://wiki.debian.org/Derivatives/CensusFull -- bye, pabs

Re: concerns about Salsa

2018-06-04 Thread Paul Wise
On Mon, Jun 4, 2018 at 6:29 PM, Dmitry Smirnov wrote: > IMHO we should have been working on improving GitLab package in order to make > is suitable for Salsa if it is not suitable already. What are the blockers? In my opinion the biggest blocker is that, the node.js ecosystem is not security

Accepted purple-discord 0.9.2018.06.01.git.38b295b-1 (source) into unstable

2018-06-03 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 04 Jun 2018 11:22:19 +0800 Source: purple-discord Binary: purple-discord Architecture: source Version: 0.9.2018.06.01.git.38b295b-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise Changed-By: Paul Wise

Re: debian/watch for bintray ?

2018-05-29 Thread Paul Wise
On Wed, May 30, 2018 at 11:17 AM, Dirk Eddelbuettel wrote: > Oh, nice! With one of those sed expressions in the watch file you mean? Yeah, there are some examples in the codesearch link above: opts=downloadurlmangle=s/://,filenamemangle=s/://

Re: debian/watch for bintray ?

2018-05-25 Thread Paul Wise
On Sat, May 26, 2018 at 10:50 AM, Dirk Eddelbuettel wrote: >https://www.quantlib.org/download.shtml The bintray URL there eventually points here: https://dl.bintray.com/quantlib/releases/ That has all the versions and if you remove the : character from the download URLs, then you can get

Re: debian/watch for bintray ?

2018-05-25 Thread Paul Wise
On Sat, May 26, 2018 at 10:31 AM, Dirk Eddelbuettel wrote: > Quantlib. > upstream web https://www.quantlib.org/ > upstream src https://github.com/lballabio/QuantLib > my srchttps://salsa.debian.org/edd/quantlib Can't you use the github releases?

Re: debian/watch for bintray ?

2018-05-25 Thread Paul Wise
On Sat, May 26, 2018 at 5:23 AM, Dirk Eddelbuettel wrote: > An upstream package I look after switched from sf.net to bintray. Which upstream? Please link to bintray. > Do we have a trick to parse layout via uscan? Looks like only minor tricks are needed:

Re: Removing packages perhaps too aggressively?

2018-05-22 Thread Paul Wise
On Tue, May 22, 2018 at 5:43 PM, Heinz Repp wrote: > GnuCash removed from testing in August 2017 Depends on obsolete WebKit version (fixed in experimental): https://tracker.debian.org/pkg/gnucash https://tracker.debian.org/news/859896/gnucash-removed-from-testing/ https://bugs.debian.org/790204

Re: Explaining Debian's approach to QA

2018-05-20 Thread Paul Wise
On Mon, May 21, 2018 at 3:26 AM, Jose Miguel Parrella Romero wrote: > Over the last few months, I've found myself struggling to find a simple > way to describe our approach to QA to friends and colleagues. I reached > out to lamby a week or so ago and he suggested I brought it to -devel. The

Re: Autodetection of packages that need visibility annotations

2018-05-15 Thread Paul Wise
On Tue, May 15, 2018 at 10:58 PM, Yuri Gribov wrote: > As a side note, in one of my other projects I tried scanning reverse > package dependencies (recursively) to detect various symbol anomalies > but that required amounts of storage and compute power well beyond of > what a single workstation

Re: Autodetection of packages that need visibility annotations

2018-05-15 Thread Paul Wise
On Tue, May 15, 2018 at 1:29 PM, Yuri Gribov wrote: > In effort to promote a wider use of those in open-source > projects, I've recently made a simple tool to help locate Debian > packages which would benefit the most from such annotations > (https://github.com/yugr/ShlibVisibilityChecker). In

Accepted purple-discord 0.9.2018.05.15.git.8776962-1 (source) into unstable

2018-05-14 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 15 May 2018 13:01:51 +0800 Source: purple-discord Binary: purple-discord Architecture: source Version: 0.9.2018.05.15.git.8776962-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> C

Re: Firefox 60esr on Stretch ?

2018-05-07 Thread Paul Wise
On Thu, May 3, 2018 at 8:29 PM, Julien Cristau wrote: > I expect nothing much different from previous ESR cycles: stretch will move > to 60 after 52 goes EOL in September. Does anyone know when firefox-esr in unstable will switch to 60? Personally I would prefer it stay with 52 until it is EOL.

Re: Announce: docker-buildpackage

2018-05-01 Thread Paul Wise
On Tue, May 1, 2018 at 9:23 PM, Enrico Weigelt, metux IT consult wrote: > I've written a tool for isolated deb builds in docker containers. > It's a little bit like pbuilder, but using docker for isolation. > > https://github.com/metux/docker-buildpackage Does it have any advantages over

Accepted iotop 0.6-24-g733f3f8-1 (source) into unstable

2018-04-27 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 27 Apr 2018 20:56:38 +0800 Source: iotop Binary: iotop Architecture: source Version: 0.6-24-g733f3f8-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: salvaging packages, was Re: Lucas Kanashiro and Athos Ribeiro salvaged my package

2018-04-17 Thread Paul Wise
On Wed, Apr 18, 2018 at 12:09 AM, Sean Whitton wrote: > Yes. Take a look on gobby (apt-get install gobby and connect to > gobby.debian.org). I'm guessing you are referring to this file? infinote://gobby.debian.org/debconf17/bof/if_you_love_a_package_let_it_go

Re: Hi, I am blind

2018-04-16 Thread Paul Wise
On Mon, 2018-04-16 at 10:15 +0200, Samuel Thibault wrote: > Well, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855446 accessible-via seems different to what I propose. accessible-via references software that makes each package accessible. The proposed accessible-to would reference classes

Re: MBF proposal: python modules that fail to import

2018-04-16 Thread Paul Wise
On Tue, Apr 17, 2018 at 5:00 AM, Helmut Grohne wrote: > The difficult one is deriving the module name from the list of files. It should be just reading top_level.txt from the egg-info directory? -- bye, pabs https://wiki.debian.org/PaulWise

Re: Hi, I am blind

2018-04-15 Thread Paul Wise
On Mon, Apr 16, 2018 at 6:20 AM, MENGUAL Jean-Philippe wrote: > resources are on Development page of the Hypra website. I had never heard of Hypra so I had to go searching for it: http://hypra.fr/-What-is-Hypra-.html?lang=en This appears to be the development page you mentioned:

Re: Debian Policy 4.1.4.0 released

2018-04-11 Thread Paul Wise
On Thu, Apr 12, 2018 at 10:27 AM, Russ Allbery wrote: > Personally, I'd probably add an interactive prompt warning about the > dangers and stressing that the source package needs to be trusted if stdin > and stdout are connected to a tty, and otherwise fail and require some > flag to use the

Re: Music player & privacy (was: ITP: elisa)

2018-04-11 Thread Paul Wise
On Thu, Apr 12, 2018 at 7:05 AM, W. Martin Borgert wrote: > Would you schedule/organise it? I'll attend but not organise it. -- bye, pabs https://wiki.debian.org/PaulWise

Re: Debian Policy 4.1.4.0 released

2018-04-11 Thread Paul Wise
On Thu, Apr 12, 2018 at 5:02 AM, Russ Allbery wrote: > Rather than documenting this fallback in Policy, why not add that fallback > directly to uscan? uscan is used in situations where one does not want arbitrary code from source packages automatically run by uscan. As long as `uscan --safe`

Accepted whowatch 1.8.6-1 (source) into unstable

2018-04-11 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 11 Apr 2018 16:09:53 +0800 Source: whowatch Binary: whowatch Architecture: source Version: 1.8.6-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: Music player & privacy (was: ITP: elisa)

2018-04-10 Thread Paul Wise
On Tue, Apr 10, 2018 at 6:45 PM, W. Martin Borgert wrote: > I understand Pauls idea that this would be very different things: > > pkg-privacy-team: packages tools and programs related to privacy, > e.g. things around tor etc. > > privacy-team: keeps track of privacy issues across all Debian,

Accepted foxtrotgps 1.2.1-1 (source) into unstable

2018-04-09 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 10 Apr 2018 10:39:03 +0800 Source: foxtrotgps Binary: foxtrotgps Architecture: source Version: 1.2.1-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: Music player & privacy (was: ITP: elisa)

2018-04-09 Thread Paul Wise
On Mon, Apr 9, 2018 at 6:14 AM, W. Martin Borgert wrote: > believe (= hope), that it behaves nicely. I think we need a privacy team. Such a team could verify the privacy status of packages and record that information centrally. Then apt could have a hook to inform users about how each package

Re: Debian Policy 4.1.4.0 released

2018-04-07 Thread Paul Wise
On Sat, Apr 7, 2018 at 8:49 PM, Ole Streicher wrote: > I have a number of "uncommon" upstreams: It would be really nice if these folks could switch to something more standard. Have they considered using a version control system for a start? > * aladin, download

Re: Debian Policy 4.1.4.0 released

2018-04-07 Thread Paul Wise
On Sat, Apr 7, 2018 at 4:40 PM, Ole Streicher wrote: > I have some packages where the version is not encoded in the file name, > but must be extracted from the file content. Shall one keep > get-orig-source here to be consistent, or what would be the right > solution here? If uscan can find the

Accepted purple-discord 0.9.2018.04.01.git.dd1ea7a-1 (source) into unstable

2018-04-04 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 04 Apr 2018 15:41:09 +0800 Source: purple-discord Binary: purple-discord Architecture: source Version: 0.9.2018.04.01.git.dd1ea7a-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> C

Re: add nant to buster repo ...

2018-03-10 Thread Paul Wise
On Sat, Mar 10, 2018 at 6:28 PM, André Verwijs wrote: > please add nant to buster repo, need it for building source doce That will happen automatically once the build failure is fixed and mono becomes available on mips and mips64el. https://qa.debian.org/excuses.php?package=nant

Re: Updated proposal for improving the FTP NEW process

2018-03-05 Thread Paul Wise
On Mon, Mar 5, 2018 at 7:18 PM, Gert Wollny wrote: > (2) To improve the initial quality of uploads to NEW I also propose the > introduction a (voluntary) review step: These sort of things have been proposed multiple times before but never materialised into policy, convention or common activity.

Re: A proposal for improving transparency of the FTP NEW process

2018-03-04 Thread Paul Wise
On Sun, Mar 4, 2018 at 5:53 PM, Philip Hands wrote: > Perhaps it's more work than licensecheck, or doesn't suit your > requirements, but there is also license-reconcile. As well as a bunch of other tools, some of which need packaging: https://wiki.debian.org/CopyrightReviewTools -- bye, pabs

Re: alias in maintainer scripts?

2018-03-02 Thread Paul Wise
On Fri, Mar 2, 2018 at 11:37 AM, Paul Wise wrote: > - file a bug against shellcheck asking for detection of this situation. FTR, I've done that just now: https://github.com/koalaman/shellcheck/issues/1133 -- bye, pabs https://wiki.debian.org/PaulWise

Re: alias in maintainer scripts?

2018-03-01 Thread Paul Wise
On Fri, Mar 2, 2018 at 5:54 AM, Ralf Treinen wrote: > However, /bin/sh may be linked to bash, and bash does alias substitution > only when in interactive mode but not in batch mode [2]. That is, unless > a special bash option is set. > > ... I think we should - file a bug against shellcheck

Re: Rant about Debian reproducibility environment

2018-03-01 Thread Paul Wise
On Fri, Mar 2, 2018 at 1:17 AM, Steffen Nurpmeso wrote: > I try to make it short, but i want to say i am thankful for the > spark that reproducible-build.org was for me. Even though i think > it is a pity that $SOURCE_DATE_EPOCH is the sole indicator for > reproducible environments, since now

Re: What can Debian do to provide complex applications to its users?

2018-03-01 Thread Paul Wise
On Thu, 2018-03-01 at 09:53 +0100, Didier 'OdyX' Raboud wrote: > Maybe what we need is a packaged nix and a standardized nix repository. There is an ITP and RFS: https://bugs.debian.org/877019 https://bugs.debian.org/877331 I assume Nix/NixOS have a standard repo already. -- bye, pabs

Re: salsa SSH fingerprint

2018-03-01 Thread Paul Wise
On Fri, 2018-03-02 at 00:45 +0100, Guido Günther wrote: > Sometimes you connect from a machine that doesn't have the host key yet > and you see the fingerpring so c'n'p and searching in a web page is > quicker than ctrl-c, getting the key and reconnecting. Personally, I think only the DNSSEC or

Re: salsa SSH fingerprint

2018-02-28 Thread Paul Wise
On Thu, Mar 1, 2018 at 3:49 AM, Guido Günther wrote: > It often wished that these pages would show the fingerprints too. Where > would that bug need to go? A db.debian.org pseudo package does not seem > to exist. DSA explicitly removed fingerprints from those pages because they are less useful

Re: salsa SSH fingerprint

2018-02-28 Thread Paul Wise
On Wed, Feb 28, 2018 at 11:23 PM, Alberto Luaces wrote: > Great! After passing those keys trough `ssh-keygen -lf`, I get the > confirmation I was looking for. Why do you need ssh-keygen when you can just add the ssh key to your known_hosts file? -- bye, pabs https://wiki.debian.org/PaulWise

Re: salsa SSH fingerprint

2018-02-28 Thread Paul Wise
On Wed, Feb 28, 2018 at 10:54 PM, Alberto Luaces wrote: > I am unable to find a place where the SSH fingerprint of salsa is shown. > I want to compare it with the one displayed when I try to push some > changes. Please see the FAQ:

Re: Spam targeting nnn-done@bugs.d.o

2018-02-28 Thread Paul Wise
On Thu, Mar 1, 2018 at 1:59 AM, Don Armstrong wrote: > I suppose an alternative is to have the BTS ignore the special effect > for -done messages which don't have a Version:, Package:, or other > appropriate pseudoheader from a message which looks signed, a mailing > address which is not the

Re: What can Debian do to provide complex applications to its users?

2018-02-28 Thread Paul Wise
On Tue, Feb 27, 2018 at 9:13 PM, Didier 'OdyX' Raboud wrote: > Now, as a strawman proposition, here's what I fiddled with in my mind for some > days now: This reminds me a bit of Nix or Gentoo Prefix. > ** is restricted to be arch:all (~ shipping interpreter scripts) Hmm, so this isn't going

Accepted librecaptcha 0.4.0-1 (source) into unstable

2018-02-27 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 28 Feb 2018 08:59:50 +0800 Source: librecaptcha Binary: python3-librecaptcha Architecture: source Version: 0.4.0-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul W

Re: Spam targeting nnn-done@bugs.d.o

2018-02-27 Thread Paul Wise
On Tue, Feb 27, 2018 at 10:29 PM, Steve Cotton wrote: > Maybe the Package: pseudo-header should be mandatory for a nnn-done@ email > to close the bug? That would protect against both spam and typos. That sounds best to me, but I can see it could get tedious. It probably would also need to

Re: Misc Developer News (#45)

2018-02-25 Thread Paul Wise
Paul Wise wrote: > [3] https://salsa.debian.org/kgb-team/kg Apologies for mangling it, the URL should have been: https://salsa.debian.org/kgb-team/kgb/wikis/usage -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part

Re: Raising the problem of Debian Single Sign On + Alioth (again)

2018-02-24 Thread Paul Wise
On Sun, Feb 25, 2018 at 2:46 AM, Alexander Wirt wrote: > I do really hope that we can have a good backend for guestuser and dm > authorisation and authentiction at the end of the summer. Something like > ud-ldap that can serve us for the next years. Will this mean that the guest users in db.d.o

Re: wiki.d.o returns "403 Forbidden"

2018-02-24 Thread Paul Wise
On Fri, Feb 23, 2018 at 12:51 PM, Georg Faerber wrote: > ...at least for me. Please send your IP address to w...@debian.org. Probably the IP or network got banned for spam. > Could someone forward this to DSA? DSA is not the contact for the wiki. -- bye, pabs

Re: What can Debian do to provide complex applications to its users?

2018-02-20 Thread Paul Wise
On Wed, Feb 21, 2018 at 4:10 AM, Gunnar Wolf wrote: > It's sometimes hard to explain why we need updated software... Perhaps it helps to point out where Debian and users are placed in the ecosystem of software, hardware, technology and society and the pressures that each actor places on other

Re: What can Debian do to provide complex applications to its users?

2018-02-20 Thread Paul Wise
On Tue, Feb 20, 2018 at 11:27 PM, Adam Borowski wrote: > And without security support for its dependencies, no reproducible build > system, etc. That isn't necessarily the case for Flatpak, it all depends on who is doing the build and what their policies and procedures are. -- bye, pabs

Re: CUPS GPL → Apache license change, how to proceed?

2018-02-20 Thread Paul Wise
On Tue, Feb 20, 2018 at 3:20 PM, Stuart Prescott wrote: > I thought there might be something that could be done here. adequate has an incompatible-licenses tag that probably could be used for this. Just install all rdeps of cups and check all packages on the system with adequate. -- bye, pabs

Re: What can Debian do to provide complex applications to its users?

2018-02-19 Thread Paul Wise
On Mon, Feb 19, 2018 at 9:51 PM, Raphael Hertzog wrote: > I don't want to lower the quality of what we have built so far, so while > it's technically possible to build .deb and include a bundle of libraries > pinned at the correct version, I don't think that this should allowed into > the main

Re: Suddenly U2F doesn't work on sid

2018-02-18 Thread Paul Wise
lug in a new device supported by your package. Users can use the isenkram[16] package to discover packages related to their hardware. If your package contains udev rules, it probably needs some AppStream metadata. -- Paul Wise & Petter Reinholdtsen [15] https://wiki.debian.org/AppS

Accepted harmony 0.5.0-1 (source) into unstable

2018-02-18 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 19 Feb 2018 12:14:17 +0800 Source: harmony Binary: python3-harmony Architecture: source Version: 0.5.0-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Accepted librecaptcha 0.3.3-1 (source) into unstable

2018-02-18 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon, 19 Feb 2018 11:42:53 +0800 Source: librecaptcha Binary: python3-librecaptcha Architecture: source Version: 0.3.3-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul W

Re: What can Debian do to provide complex applications to its users?

2018-02-17 Thread Paul Wise
On Sun, Feb 18, 2018 at 2:59 AM, Thorsten Alteholz wrote: > Other javascript libraries like libjs-* and *.js even don't get a CVE. So > either they are secure or nobody cares. We also miss out on some JS vulnerabilities because NodeSecurity don't systematically participate in the CVE system and

Re: What can Debian do to provide complex applications to its users?

2018-02-17 Thread Paul Wise
On Sat, Feb 17, 2018 at 9:20 PM, Paul Wise wrote: > It may be code but it is definitely not source in the sense of DFSG > item 2 or the GPL. Also, non-minified JavaScript can also not be source code, for example in the case it was generated from CoffeeScript or some other language. -

Re: What can Debian do to provide complex applications to its users?

2018-02-17 Thread Paul Wise
On Sat, Feb 17, 2018 at 8:57 PM, Michael Meskes wrote: > I disagree, it is not maintainable source code, yes, but source code > nonetheless. According to wikipedia source code is: > > In computing, source code is any collection of computer instructions, > possibly with comments, written using[1]

Accepted purple-discord 0.9.2017.12.27.git.9b7c3ad-1 (source amd64) into unstable, unstable

2018-02-17 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 09 Jan 2018 13:54:15 +0800 Source: purple-discord Binary: purple-discord Architecture: source amd64 Version: 0.9.2017.12.27.git.9b7c3ad-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> C

Re: What can Debian do to provide complex applications to its users?

2018-02-16 Thread Paul Wise
On Sat, Feb 17, 2018 at 6:07 AM, Sean Whitton wrote: > On Fri, Feb 16 2018, Michael Meskes wrote: >> If we were to package applications as containers (not necessarily >> docker-style!) we could and should have different rules for >> those > > Yes, I think that Debian should eventually be

Accepted harmony 0.4.0-1 (source) into unstable

2018-02-16 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 17 Feb 2018 13:20:50 +0800 Source: harmony Binary: python3-harmony Architecture: source Version: 0.4.0-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: What can Debian do to provide complex applications to its users?

2018-02-16 Thread Paul Wise
On Fri, Feb 16, 2018 at 11:11 PM, Raphael Hertzog wrote: > What do you think? Do you have other ideas? Are there other persons > who are annoyed by the current situation? I think we should keep software that doesn't meet our standards outside of Debian. There are plenty of ways to deploy such

Accepted librecaptcha 0.2.2-1 (source) into unstable

2018-02-12 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2018 14:27:39 +0800 Source: librecaptcha Binary: python3-librecaptcha Architecture: source Version: 0.2.2-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul W

Accepted harmony 0.3.1-1 (source) into unstable

2018-02-12 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 13 Feb 2018 14:35:50 +0800 Source: harmony Binary: python3-harmony Architecture: source Version: 0.3.1-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: Raising the problem of Debian Single Sign On + Alioth (again)

2018-02-11 Thread Paul Wise
On Mon, Feb 12, 2018 at 10:45 AM, Paul Wise wrote: > On Sun, Feb 11, 2018 at 10:08 PM, Boyuan Yang wrote: > >> sso.debian.org 's Alioth account integration with Alioth platform. This >> service >> seems to have no migration plan (yet) and will break many other stuf

Re: Raising the problem of Debian Single Sign On + Alioth (again)

2018-02-11 Thread Paul Wise
On Sun, Feb 11, 2018 at 10:08 PM, Boyuan Yang wrote: > sso.debian.org 's Alioth account integration with Alioth platform. This > service > seems to have no migration plan (yet) and will break many other stuff > once Alioth is down. A related GSoC project:

Re: Frustration over Debian naming

2018-02-05 Thread Paul Wise
On Tue, Feb 6, 2018 at 6:17 AM, Jonathan de Boyne Pollard wrote: > Tangentially to that, it seems that someone needs to pick up the dropped > baton and update the pictures. Those are all copies of a diagram by Claudio Filho, if anyone updates it, please send him a pull request to update the

Re: What is the point of RFA? Was: Re: proposal: ITR

2018-02-01 Thread Paul Wise
On Fri, Feb 2, 2018 at 7:23 AM, Jeremy Bicha wrote: > What is the point of RFA? > > I mean why don't you just Orphan it and continue to maintain it with > QA uploads until a volunteer wants to adopt it? I wasn't around when RFA was invented, but: You might want to have choose amongst the

Re: Removing packages perhaps too aggressively?

2018-02-01 Thread Paul Wise
On Fri, Feb 2, 2018 at 2:26 AM, peter green wrote: > On that note one thing that doesn't seem to be easy/well documented is how > to go about finding the bugs that affected a package at the time of it's > removal. If I go to the bugs page for the package and select "archived and > unarchived" I

Re: Mass bug filing for the removal of freetype-config and freetype.m4

2018-02-01 Thread Paul Wise
On Thu, Feb 1, 2018 at 7:07 PM, Hugh McMaster wrote: > This is a Debian-specific change. Will you be asking upstream to remove it too? -- bye, pabs https://wiki.debian.org/PaulWise

Re: Removing packages perhaps too aggressively?

2018-02-01 Thread Paul Wise
On Thu, Feb 1, 2018 at 5:18 PM, Philipp Kern wrote: > Oh wow, I didn't realize x3270 got removed. :( ... > I agree that you shouldn't second-guess, but I think you can at least > enforce some comment to be present. As someone who now ponders to > re-introduce the package I have zero context as

Re: Removing packages perhaps too aggressively?

2018-01-31 Thread Paul Wise
On Thu, Feb 1, 2018 at 3:14 AM, Andrej Shadura wrote: > For example Here is another example of a low-quality RM bug; removal at request of the maintainer, with no reason stated. https://bugs.debian.org/887554 As a result of this, DSA has to resort to stretch or snapshot.d.o for out-of-band

Re: Compiler with Spectre mitigation retpoline/-mindirect-branch=thunk

2018-01-30 Thread Paul Wise
On Tue, Jan 30, 2018 at 3:43 PM, Robin Geuze wrote: > I was wondering, are the debian maintainers planning on backporting the > -mindirect-branch=thunk support introduced in GCC 7.3 and 8.1 to the > compilers available on Jessie and Stretch? While this is not necessarily a > security fix for the

Re: Call for tests: New python-magic Python bindings for libmagic

2018-01-21 Thread Paul Wise
On Sun, Jan 21, 2018 at 11:48 PM, Christoph Biedl wrote: > Paul Wise <p...@debian.org> >check-all-the-things Works without changes, but uses very small amounts of the API. -- bye, pabs https://wiki.debian.org/PaulWise

Re: Call for tests: New python-magic Python bindings for libmagic

2018-01-21 Thread Paul Wise
On Sun, Jan 21, 2018 at 11:48 PM, Christoph Biedl wrote: > Call for tests It might be a good idea to do these: Try to rebuild any packages that build-dep on python{,3}-magic and compare the resulting binary packages with diffoscope. Try to run the autopkgtests for packages that dep/test-dep on

Re: Fading out Tcl/Tk 8.5 from Debian

2018-01-20 Thread Paul Wise
On Fri, Jan 19, 2018 at 7:29 PM, Sergei Golovan wrote: > If there are comments or suggestions on what should I do before > starting filing the bugs, please tell. Probably worth creating a transition tracker for this: https://wiki.debian.org/Teams/ReleaseTeam/Transitions

Re: salsa access as debian maintainer

2018-01-15 Thread Paul Wise
On Mon, Jan 15, 2018 at 11:47 PM, Nico Schlömer wrote: > It seems that right now only Debian _developers_ have a login to salsa. Right, exactly the same as with Alioth. > Will I have to re-apply for push rights to the respective repos? Nothing was transferred from Alioth automatically, so if

Re: Debian 9: FAILED to start Network Time Synchronization. systemd-timesyncd.service' with boot...

2018-01-13 Thread Paul Wise
On Sat, Jan 13, 2018 at 8:50 PM, André Verwijs wrote: > Debian 9: FAILED to start Network Time Synchronization. > systemd-timesyncd.service' with boot... Simon already answered, but next time you have a problem and do not know which package to file a bug against, please ask Debian user support

Re: consider using arch-bits=32/64 syntax if possible?

2018-01-12 Thread Paul Wise
On Sat, Jan 13, 2018 at 11:51 AM, YunQiang Su wrote: > Should we ask for all packages use this new syntax if possible? I would check if the (c++) option takes care if this in a better way by only requiring one symbol for both 32-bit and 64-bit, but where it does not, that sounds reasonable. --

Re: SPDX & cme WAS: Why do we list individual copyright holders?

2018-01-12 Thread Paul Wise
On Fri, Jan 12, 2018 at 11:05 PM, Dominique Dumont wrote: > cme is a program able to refresh the content of debian/copyright using > information extracted from source files. More such tools here: https://wiki.debian.org/CopyrightReviewTools -- bye, pabs https://wiki.debian.org/PaulWise

Accepted harmony 0.2.2-2 (source) into unstable

2018-01-11 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jan 2018 08:21:46 +0800 Source: harmony Binary: python3-harmony Architecture: source Version: 0.2.2-2 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Accepted librecaptcha 0.2.0-2 (source) into unstable

2018-01-11 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 12 Jan 2018 08:20:44 +0800 Source: librecaptcha Binary: python3-librecaptcha Architecture: source Version: 0.2.0-2 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul W

Accepted librecaptcha 0.2.0-1 (source all) into unstable, unstable

2018-01-10 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jan 2018 13:24:24 +0800 Source: librecaptcha Binary: python3-librecaptcha Architecture: source all Version: 0.2.0-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul W

Accepted harmony 0.2.2-1 (source all) into unstable, unstable

2018-01-10 Thread Paul Wise
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 10 Jan 2018 14:21:17 +0800 Source: harmony Binary: python3-harmony Architecture: source all Version: 0.2.2-1 Distribution: unstable Urgency: medium Maintainer: Paul Wise <p...@debian.org> Changed-By: Paul Wise <p...@d

Re: (was: Re: Bug#886238: Please introduce official nosystemd build profile)

2018-01-09 Thread Paul Wise
On Tue, Jan 9, 2018 at 10:07 PM, Johannes Schauer wrote: > No, there is no header in the binary packages that indicates with which > profile > a source package was built to generate the given binary package. Is this information present in the new buildinfo files? -- bye, pabs

Re: Why do we list individual copyright holders?

2017-12-31 Thread Paul Wise
On Sun, Dec 31, 2017 at 9:40 PM, Vincent Bernat wrote: > I would never dare running Lintian in pedantic mode. I feel the other way, I always want to hear about every way I can improve a package, no matter how small or unimportant the change is. > Lintian is full of opinions. For example, I

Re: Is missing SysV-init support a bug?

2017-12-30 Thread Paul Wise
On Sun, Dec 31, 2017 at 12:54 PM, Steve Langasek wrote: > And in what context would you find yourself trying to run a Debian init > system in such an environment? Often mainline Linux doesn't support particular embedded/mobile systems (especially ARM/MIPS) or has a bug that isn't present in the

Re: emacs25 bug

2017-12-30 Thread Paul Wise
On Sun, Dec 31, 2017 at 8:34 AM, Marc Auslander wrote: > The emacs25 in the stretch repository suffers from emacs bug > https://debbugs.gnu.org/23144. > > Is there any way to get is updated or get an updated version? The documentation for updating Debian releases is here:

Re: salsa.debian.org (git.debian.org replacement) going into beta

2017-12-29 Thread Paul Wise
On Fri, 2017-12-29 at 12:32 +0100, W. Martin Borgert wrote: > You are right. It is just not easy to solve this, because this > information must be available on Debian systems. So it would be > something in parallel to downloaded Packages files, right? And > who generates this file(?) based on

Re: salsa.debian.org (git.debian.org replacement) going into beta

2017-12-28 Thread Paul Wise
On Fri, Dec 29, 2017 at 10:21 AM, Guillem Jover wrote: > I'm also growing some URL switching fatigue when it comes to Debian's > git repos. And that's one of the reasons I moved all my packaging to > my own server some time ago. This is just a symptom of a Debian design flaw that dates back to

Re: Ask for contribution

2017-12-28 Thread Paul Wise
On Thu, Dec 28, 2017 at 9:01 PM, eamanu15 wrote: > I am new in Debian project and I want to contribute with code. Awesome! Check out the list of ways to help with code here: https://www.debian.org/intro/help#Coding > Do you know any package/software/project where you consider that need help >

Re: salsa.debian.org (git.debian.org replacement) going into beta

2017-12-27 Thread Paul Wise
On Thu, Dec 28, 2017 at 12:33 AM, Anthony DeRobertis wrote: > I haven't confirmed its available on salsa.d.o, and its unfortunately only > one project at a time, but GitLab has an export under Project > Settings→General. github-backup is client side and works at any point in time without needing

Re: salsa.debian.org (git.debian.org replacement) going into beta

2017-12-27 Thread Paul Wise
On Mon, Dec 25, 2017 at 6:45 PM, Alexander Wirt wrote: > we have worked on our git.debian.org replacement based on GitLab. Does anyone know if there is a tool similar to github-backup that supports gitlab? -- bye, pabs https://wiki.debian.org/PaulWise

Re: Why do we list individual copyright holders?

2017-12-27 Thread Paul Wise
On Tue, Dec 26, 2017 at 3:04 PM, Vincent Bernat wrote: > I already often open or reply to bugs in lintian (including when I think > severity is wrong). The main problem is not when lintian is wrong, the > main problem if when lintian is right but is nit-picking. While I > understand some of us

Re: Different versions for binary packages from same source

2017-12-27 Thread Paul Wise
On Wed, Dec 27, 2017 at 12:07 AM, Ryan Kavanagh wrote: > The prerex source package (sources obtained from CTAN) provides a LaTeX > package > for drawing charts. It also contains two tarballs: one with the sources for > the > prerex utility (a readline interface for creating these charts) and

Re: Why do we list individual copyright holders?

2017-12-24 Thread Paul Wise
On Sun, Dec 24, 2017 at 6:28 PM, Thomas Goirand wrote: > All I'm saying, is that copyright holder information / author list is > mandatory if the license mandates it. The case of an anonymous author > shows we've accepted software in Debian without a copyright holder. Software with an anonymous

Re: Why do we list individual copyright holders?

2017-12-22 Thread Paul Wise
On Sat, Dec 23, 2017 at 9:07 AM, Thomas Goirand wrote: > (ie: the Apache license doesn't require listing copyright holders). IANAL, but it seems pretty clear to me that this is not the case, at least for source packages (see 4.c), for binary packages we also have to distribute any associated

Re: Debian Stretch new user report (vs Linux Mint)

2017-12-06 Thread Paul Wise
On Thu, Dec 7, 2017 at 11:39 AM, Adam Borowski wrote: > It might be less disruptive to add a new field like Subsection; that'd avoid > the need to change any of archive tools -- including ones not used on the > official archive, like reprepro. ... > Because Section: implies an unique section,

Re: ISO download difficult

2017-12-05 Thread Paul Wise
On Wed, Dec 6, 2017 at 2:58 PM, Russ Allbery wrote: > I think that's probably true, but it also has prerequisites that may not > be achievable. In other words, it's more user-friendly except when it's > completely impossible (because the existing system doesn't boot, for > instance). Other OS

Re: ISO download difficult

2017-12-05 Thread Paul Wise
On Wed, Dec 6, 2017 at 2:10 PM, Russ Allbery wrote: > I'm certainly fine to put work into this for those who want to use it, but > I never boot any existing OS before installing Debian, and I'm sure I'm > not alone. It's extremely useful to be able to install Debian on bare > metal (or a

Re: ISO download difficult

2017-12-05 Thread Paul Wise
On Wed, Dec 6, 2017 at 11:52 AM, Michael Stone wrote: > you want debian to be uninstallable on some hardware without a copy of > windows? that doesn't seem like a step forward or even a desirable goal. Of course not, that would be a ridiculous suggestion. I would wager that most devices have

<    2   3   4   5   6   7   8   9   10   11   >