Bug#768670: ruby-moneta: FTBFS in jessie: build-dependency not installable: ruby-activesupport-3.2 (>= 3.2.11~)

2014-11-09 Thread Joshua Timberman
Unfortunately, I don't have cycles to maintain the ruby-moneta package, and
we're not actually using moneta in chef (the original reason for the
packaging). What do I need to do to transfer the package to another
maintainer?


Bug#697895: Update libextlib-ruby / ruby-extlib for vulnerabilities (Re: CVE-2013-0156)

2013-01-13 Thread Joshua Timberman
Thank you, Salvatore and Cédric, for your help and quick turnaround with
this!


--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#604231: chef-solr

2010-11-29 Thread Joshua Timberman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello!

We (Opscode, upstream maintainers of Chef) are fine with removal of the 
following chef packages from Debian Squeeze:

chef-server
chef-server-api
chef-server-webui
chef-solr

The client packages should remain, and should be updated to the latest release 
(0.9.12):

chef
libchef-ruby
libchef-ruby1.8

I do have updated packaging in the Debian Ruby Extras team repository for these 
packages.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkz0SPUACgkQO97WSdVpzT0T/gCeKybpCHEKo5tbsJufj2HrnygC
drYAn1KgxaHigjUV/3mBsTyUek1goLCJ
=csb7
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#596351: Error appears to be in JSON library, not ohai

2010-11-14 Thread Joshua Timberman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The error appears to be with json, not with ohai. With the version 1.1.9 
libjson-ruby package installed:

irb(main):001:0> l="\370"
=> "\370"
irb(main):002:0> require 'json'
=> true
irb(main):003:0> l.to_json
JSON::GeneratorError: partial character in source, but hit end
from (irb):3:in `to_json'
from (irb):3
from :0

With the package removed, and the 1.4.6 (latest) json gem installed:

irb(main):001:0> l="\370"
=> "\370"
irb(main):002:0> require 'rubygems'
=> true
irb(main):003:0> require 'json'
=> true
irb(main):004:0> l.to_json
=> "\"\370\""

This is completely independent of ohai, as it wasn't even installed on the test 
system. 

I tested every version of the JSON gem from 1.1.9 to 1.4.6. The fix for this 
bug occurs somewhere between 1.2.4 and 1.4.0, though I'm not familiar with the 
codebase, so I don't know what change resolves this issue.

The JSON gem has a history of issues, and while it seems that 1.1.9 may 
otherwise be stable, it is a year old and has a lot of improvements. So far I 
have not seen any issues with version 1.4.6, in ohai or otherwise. I hope that 
Debian can make an exception for getting the latest version into Squeeze. As 
the package maintainer for ohai, I don't think that patching ohai to workaround 
this bug is appropriate.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkzgqe0ACgkQO97WSdVpzT2tugCfQchYyJkidKKljZa4AAyjPDEj
RDIAn3DJWG3u7F86LKHdJfFxoGIB7TbD
=l27x
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#596351: ohai is required for Chef

2010-11-13 Thread Joshua Timberman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello Chris!

Ohai is required for Chef. Is this a localization issue that can be fixed 
upstream in Ohai?

Or is it in fact a bug in older version of JSON available in Debian? This is 
the first I've heard of the issue with Ohai.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkzfHvgACgkQO97WSdVpzT0jbACdG8grBq1mug81BSOT2ypVyUsC
gDwAn2JJf2H7I17jhKxsr+pUZNIzwjQ7
=5JPS
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#588125: [DRE-maint] Bug#588125: Rubygems 1.3.7 broken with Ruby 1.9.2 in Debian -- help needed

2010-08-29 Thread Joshua Timberman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hello!

On Aug 28, 2010, at 12:56 AM, Lucas Nussbaum wrote:

> - Do we want to make the installation of rubygems optional with 1.9.1?
>  (as a separate package ?) That would probably be the right thing to do
>  since I think that we should make the use of external package managers
>  optional in Debian, but frankly, if we do that, some users are going
>  to complain, and I'm totally tired of hearing complains about ruby
>  packaging in Debian.

I think it can be a separate package as long as it behaves similar
to the upstream RubyGems. Changing the behavior is confusing to users and
this is one of the reasons why people think that Ruby(Gems) is broken on
Debian/Ubuntu.

> - Do we want to disable gem update --system? I think that we should
>  allow a way for the user to do it anyway. For example, we could add a
>  check for a "I_KNOW_WHAT_IM_DOING_ABOUT_GEM_UPDATE_SYSTEM" environment
>  variable (ok, name could be improved). We would still refuse to gem
>  update --system by default, but would accept it of the environment
>  variable was set.

I'm good with either an environment variable, or a state file (or both?) 
that tells the system that I know what I'm doing. If I break it, I'll keep
both parts.

> - Paths: until consensus emerge in #448639, we should continue to
>  install gems in /var. Those changes should be moved to 
>  rubygems/defaults/operating_system.rb, but we may do that later, and
>  just continue with 01_default_gem_path.diff for now.


I really wish a consensus would be reached on this, to using /usr/local.
The use of /var breaks the FHS as pointed out recently by Clint. It
is also inconsistent with other 3rd party packaging systems that are also
commonly used in Debian/Ubuntu; e.g., cpan, pypi/easy_install.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkx7C50ACgkQO97WSdVpzT1VZgCdGbZuOMCNzKnDj9W7qW9lXR35
c+AAoIA1p1wOGFUZQf7l4/5xVbsFlFjw
=4MAz
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#575067: [DRE-maint] Bug#575067: Anyone working on this ohai bug?

2010-03-26 Thread Joshua Timberman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mar 26, 2010, at 4:36 PM, Esteban Manchado Velázquez wrote:

It seems that the culprit is /usr/lib/ruby/1.8/ohai/plugins/ruby.rb.  
If no one
is working on this bug, I can try to prepare a patch for it (I'll be  
away the
whole next week, so it will take a while). It's probably as easy as  
changing

line 25 to read:

cmd = "ruby1.8 -e \"require 'rbconfig'; #{command}\""



This is fixed in the packaging, ohai will depend on ruby. Speaking  
from upstream, the long term solution is to have Ohai get the  
configuration about Ruby from rbconfig directly w/o running the ruby  
command, see:


http://tickets.opscode.com/browse/OHAI-172

- --
Opscode, Inc
Joshua Timberman, Senior Solutions Engineer
C: 720.334.RUBY E: jos...@opscode.com

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkutk1gACgkQO97WSdVpzT3NkQCeLOGq0oCLuBwQdNVp1DADrH6a
OmwAn1h2hbCzhCpA/6qfBGwA8IN0vngP
=rkix
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#574142: [DRE-maint] Bug#574142: merb non-DSFG

2010-03-17 Thread Joshua Timberman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mar 17, 2010, at 10:48 AM, micah anderson wrote:


The difference between the change in the github repository and the svn
repository is pretty minor, they are effectively identical. The only
difference is the change is done in the team's svn repository. It
appears you've done the work on the package in the past, do you have
access to commit to the svn repository?



I do have access to commit to the SVN repository. I had added a new  
sub-package, merb-param-protection, in the Git repo I'm using.


- --
Opscode, Inc
Joshua Timberman, Senior Solutions Engineer
C: 720.334.RUBY E: jos...@opscode.com

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkuhWwIACgkQO97WSdVpzT0OcQCfQE/xFFQE+6y6nbGyltpy5YII
NSMAniZvLwE2ryAtghZ9gf0lqAuY3T2s
=lELp
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#574142: copyright file updated for Merb

2010-03-17 Thread Joshua Timberman

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Packaging updated, see changelog:

http://github.com/opscode/opscode-packages/tree/master/debian/merb/debian

Cc tfheen for upload sponsorship.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10 (Darwin)

iEYEARECAAYFAkug7HgACgkQO97WSdVpzT1B0wCeN624TUXKrNnxMG83FWY0mCgS
CscAn11dFa21GYpxv64oVpm7UzR/dx41
=z+Ik
-END PGP SIGNATURE-



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org