seems https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1022937 was accepted. Any update on sigstore packaging?
On Fri, Jan 20, 2023 at 9:47 AM Reinhard Tartler <siret...@gmail.com> wrote: > Awesome, thanks for the update! > > Skimming over the sources of sigstore, it seems to me that the awk-sdk > might be easy to disable with minor surgery. Would you be open to uploading > a sigstore package to NEW with the aws functionality disabled and re-enable > it as soon as the awk package becomes available in Debian? > > -rt > > On Fri, Jan 20, 2023 at 7:30 AM Leo Antunes <l...@antun.es> wrote: > >> Hi Reinhard! >> >> I think this changed a bit in the meantime: now the sigstore project has >> mostly shared lib code, while the individual commands (rekor, fulcio, >> gitsign, etc) are all in separate repos. So I expect this library to not be >> THAT difficult to package (the next one on my list is rekor - see #990249 >> - which will probably require more work). >> As soon as #1022937 is done (waiting in NEW since 2 months), I expect >> sigstore to be a quick follow-up. >> However, I'd gladly take an extra pair of eyes on the package, so I can >> ping you as soon as I have something that builds. >> >> >> Thanks, >> Leo Antunes >> ------- Original Message ------- >> On Thursday, January 19th, 2023 at 09:37, Reinhard Tartler < >> siret...@gmail.com> wrote: >> >> Hi Leo, >> >> Thank you so much for your interest in packaging this! -- I've noticed >> that it is a dependency of containers/image for image signing, and have >> looked at this package before. Unfortunately, I got intimidated with the >> sheer number of unpackaged dependencies that it requires. Maybe this has >> improved since the last time I looked at it? In any case, I've decided to >> patch the source to disable signing functionality to avoid requiring code >> from sigstore, which is of course very unfortunate. >> >> Let me know if you could use another set of eyeballs or help with this >> package. It surely seems intimidating (at least to me). >> >> best, >> -rt >> >> On Wed, Jan 18, 2023 at 3:21 PM Leo Antunes <cost...@debian.org> wrote: >> >>> Package: wnpp >>> Severity: wishlist >>> Owner: Leo Antunes <cost...@debian.org> >>> >>> * Package name : golang-github-sigstore-sigstore >>> Version : 1.5.1-1 >>> Upstream Author : The Sigstore Authors <i...@sigstore.dev> >>> * URL : https://github.com/sigstore/sigstore >>> * License : Apache-2.0 >>> Programming Lang: Go >>> Description : Common go library shared across sigstore services and >>> clients >>> >>> sigstore/sigstore contains common Sigstore code: that is, code shared >>> by infrastructure (e.g. Fulcio and Rekor) and Go language clients (e.g. >>> Cosign and Gitsign. >>> >>> >> >> -- >> regards, >> Reinhard >> >> >> > > -- > regards, > Reinhard > -- regards, Reinhard
