Re: Redis not uploaded and timely security announcements

2016-08-03 Thread Chris Lamb
> Also a lts-missing-dla could be another nice addition.

Alas this is more spot more difficult as we need to parse /all/ of the
announced DLAs. :)


Regards,

-- 
Chris Lamb
chris-lamb.co.uk / @lolamby



Re: Redis not uploaded and timely security announcements

2016-08-03 Thread Holger Levsen
On Tue, Aug 02, 2016 at 07:52:14PM +0200, Emilio Pozuelo Monfort wrote:
> > I've pushed such a script as bin/lts-missing-uploads.py. Please consider
> > it to be proof-of-concept right now.
> Cool. Maybe (once it's polished) we could run it in a cron job and send the
> output to the list?

either that, or run the script on jenkins.d.(n|o), which also makes
sending notification to the #debian-lts irc channel trivial…

(I'd be happy to set that up if desired.)
 
> Also a lts-missing-dla could be another nice addition.

indeed.


-- 
cheers,
Holger


signature.asc
Description: Digital signature


Re: Redis not uploaded and timely security announcements

2016-08-03 Thread Markus Koschany
On 02.08.2016 19:16, Chris Lamb wrote:
> Chris Lamb wrote:
> 
>>> DLA-577-1 has been issued two days ago but redis hasn't been uploaded
>>> yet.
> [..]
>> Could these checks be automated instead of relying on a diligent
>> front-desk..?)
> 
> I've pushed such a script as bin/lts-missing-uploads.py. Please consider
> it to be proof-of-concept right now.
> 

Nice idea and it seems to work. Call me old-fashioned but I prefer
checking debian-lts-changes or I do a apt-get update && apt-get upgrade.
If that works and the new version is installed, go for the announcement. :)

Regards,

Markus




signature.asc
Description: OpenPGP digital signature


Re: Redis not uploaded and timely security announcements

2016-08-02 Thread Emilio Pozuelo Monfort
On 02/08/16 19:16, Chris Lamb wrote:
> Chris Lamb wrote:
> 
>>> DLA-577-1 has been issued two days ago but redis hasn't been uploaded
>>> yet.
> [..]
>> Could these checks be automated instead of relying on a diligent
>> front-desk..?)
> 
> I've pushed such a script as bin/lts-missing-uploads.py. Please consider
> it to be proof-of-concept right now.

Cool. Maybe (once it's polished) we could run it in a cron job and send the
output to the list?

Also a lts-missing-dla could be another nice addition.

Cheers,
Emilio



Re: Redis not uploaded and timely security announcements

2016-08-02 Thread Chris Lamb
Chris Lamb wrote:

> > DLA-577-1 has been issued two days ago but redis hasn't been uploaded
> > yet.
[..]
> Could these checks be automated instead of relying on a diligent
> front-desk..?)

I've pushed such a script as bin/lts-missing-uploads.py. Please consider
it to be proof-of-concept right now.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-



Re: Redis not uploaded and timely security announcements

2016-08-01 Thread Chris Lamb
> Ahh, I wasn't going mad after all:
> 
> 14:30 < carnil> lamby ftr, due to some dak problems your redis upload 
> is stuck in unchecked, ansgar will look into it tonight
> 
> 14:31 < carnil> so please be pantient, should be processed as soon 
> the dak problem is solved on security-master, ansgar told me he will look 
> into it tonight.

Just received "redis_2.4.14-1+deb7u1_amd64.changes ACCEPTED into oldstable".


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-



Re: Redis not uploaded and timely security announcements

2016-08-01 Thread Chris Lamb
Chris Lamb wrote:

> > DLA-577-1 has been issued two days ago but redis hasn't been uploaded
> > yet. Chris could you investigate please?
> 
> Very odd; I distinctly remember uploading this as my machine was
> aggressively firewalled (internet cafe!) so I had to route it through
> another host. "Re"-uploaded now.

Ahh, I wasn't going mad after all:

14:30 < carnil> lamby ftr, due to some dak problems your redis upload 
is stuck in unchecked, ansgar will look into it tonight

14:31 < carnil> so please be pantient, should be processed as soon the 
dak problem is solved on security-master, ansgar told me he will look into it 
tonight.


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-



Re: Redis not uploaded and timely security announcements

2016-08-01 Thread Chris Lamb
> DLA-577-1 has been issued two days ago but redis hasn't been uploaded
> yet. Chris could you investigate please?

Very odd; I distinctly remember uploading this as my machine was
aggressively firewalled (internet cafe!) so I had to route it through
another host. "Re"-uploaded now.

(Just a quick thought - this seems to happen a non-trivial number of times
and the impact is pretty bad; ie. we think it's fixed and its not. Could
these checks be automated instead of relying on a diligent front-desk..?)


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-



Re: Redis not uploaded and timely security announcements

2016-08-01 Thread Bálint Réczey
Hi Markus,

2016-08-01 10:35 GMT+02:00 Markus Koschany :
> Hi all,
>
> DLA-577-1 has been issued two days ago but redis hasn't been uploaded
> yet. Chris could you investigate please?
>
> I also noticed that sometimes the delay between the upload and actual
> security announcement takes too long. For arch:all packages the update
> is available on the mirrors within minutes after you receive the e-mail
> on debian-lts-changes. The vast majority of arch:any packages won't need
> 24h for building.
>
> Balint I noticed this because of your upload of cakephp and kdelibs4 and
> there hasn't been a DLA for graphite2 yet. I suggest to send the
> announcement after you receive the -changes e-mail and as soon as the
> packages are marked as installed. Remember it's a security mirror, so
> you don't need to wait for the upload to propagate to all mirrors.

Thank you for the reminder. I did delay the DLA-s because of possible
mirror propagations but it is not needed indeed.

Cheers,
Balint