Re: recent DLAs not yet on www.debian.org
On Monday 04 March 2019 03:55 PM, Holger Levsen wrote: > hi, > > the following recent DLAs are missing on www.debian.org currently: .. > Feb 20 Abhijith PA [DLA 1685-1] drupal7 security update .. pushed. Waiting for changes to take place. --abhijith
Re: recent DLAs not yet on www.debian.org
Am 04.03.19 um 13:35 schrieb Holger Levsen: > On Mon, Mar 04, 2019 at 01:22:27PM +0100, Markus Koschany wrote: >> but I don't really >> think that this is an efficient way. I doubt this is the workflow of the >> security team. > > the most efficient way is surely if you were to apply to become a member > of webmaster-team on salsa, so you can push yourself. I have done the same as Hugo now and submitted several merge requests and asked for team membership. Steve just granted those permissions. Thanks! > that said, (DLA) merge requests are usually merged very quickly by > either some "real" webmaster-team members and then I also check those > merge requests daily (and merge them if needed). > > I'm not sure how DSAs end up in webwml.git, indeed the commits are not > coming from the people releasing the DSAs. If someone wants to work on > improving the tooling/automatisation this is surely welcome. > > For now, I've made LTS/Development#Publishing_updates_on_the_website > more obvious. We should aim to make this fully automatic soon. The parse-dla.pl script works nicely when I just download the email from https://lists.debian.org/debian-lts-announce/, so I guess with a few more lines of code this could be a cron job. However I will rather take a look at how the DSAs are published again first, because this all feels like reinventing the wheel at the moment. signature.asc Description: OpenPGP digital signature
Re: recent DLAs not yet on www.debian.org
On Mon, Mar 04, 2019 at 01:22:27PM +0100, Markus Koschany wrote: > > >Am 04.03.19 um 13:13 schrieb Holger Levsen: >> Hi Markus, >> >> On Mon, Mar 04, 2019 at 01:06:07PM +0100, Markus Koschany wrote: the following recent DLAs are missing on www.debian.org currently: >>> I can't push to the webmaster-team repository. >>> GitLab: You are not allowed to push code to this project. >> >> did you read the URL I linked? >> >> if yes, any ideas how to make it more obvious what to do? >> >> if not, please do. > >Holger, I did read > > >https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website > >but I have no permission to push to > >https://salsa.debian.org/webmaster-team/webwml > >Someone has to grant all of us write permissions. > >If you want to create merge requests, then it should be mentioned but I don't >really >think that this is an efficient way. I doubt this is the workflow of the >security team. I've just granted you access to webmaster-team... -- Steve McIntyre, Cambridge, UK.st...@einval.com "Managing a volunteer open source project is a lot like herding kittens, except the kittens randomly appear and disappear because they have day jobs." -- Matt Mackall
Re: recent DLAs not yet on www.debian.org
On Mon, Mar 04, 2019 at 01:22:27PM +0100, Markus Koschany wrote: > Holger, I did read > https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website I expected that... > but I have no permission to push to > https://salsa.debian.org/webmaster-team/webwml > Someone has to grant all of us write permissions. > If you want to create merge requests, then it should be mentioned it is mentioned. though evidently, not visible enough. > but I don't really > think that this is an efficient way. I doubt this is the workflow of the > security team. the most efficient way is surely if you were to apply to become a member of webmaster-team on salsa, so you can push yourself. that said, (DLA) merge requests are usually merged very quickly by either some "real" webmaster-team members and then I also check those merge requests daily (and merge them if needed). I'm not sure how DSAs end up in webwml.git, indeed the commits are not coming from the people releasing the DSAs. If someone wants to work on improving the tooling/automatisation this is surely welcome. For now, I've made LTS/Development#Publishing_updates_on_the_website more obvious. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: recent DLAs not yet on www.debian.org
> Holger, I did read > > https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website > > but I have no permission to push to > > https://salsa.debian.org/webmaster-team/webwml > > Someone has to grant all of us write permissions. > > If you want to create merge requests, then it should be mentioned but I don't > really > think that this is an efficient way. I doubt this is the workflow of the > security team. I have asked for commit rights and got them right away :) https://salsa.debian.org/webmaster-team/webwml/merge_requests/62 -- Hugo Lefeuvre (hle)|www.owl.eu.com RSA4096_ 360B 03B3 BF27 4F4D 7A3F D5E8 14AA 1EB8 A247 3DFD ed25519_ 37B2 6D38 0B25 B8A2 6B9F 3A65 A36F 5357 5F2D DC4C signature.asc Description: PGP signature
Re: recent DLAs not yet on www.debian.org
Am 04.03.19 um 13:13 schrieb Holger Levsen: > Hi Markus, > > On Mon, Mar 04, 2019 at 01:06:07PM +0100, Markus Koschany wrote: >>> the following recent DLAs are missing on www.debian.org currently: >> I can't push to the webmaster-team repository. >> GitLab: You are not allowed to push code to this project. > > did you read the URL I linked? > > if yes, any ideas how to make it more obvious what to do? > > if not, please do. Holger, I did read https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website but I have no permission to push to https://salsa.debian.org/webmaster-team/webwml Someone has to grant all of us write permissions. If you want to create merge requests, then it should be mentioned but I don't really think that this is an efficient way. I doubt this is the workflow of the security team. signature.asc Description: OpenPGP digital signature
Re: recent DLAs not yet on www.debian.org
Hi Markus, On Mon, Mar 04, 2019 at 01:06:07PM +0100, Markus Koschany wrote: > > the following recent DLAs are missing on www.debian.org currently: > I can't push to the webmaster-team repository. > GitLab: You are not allowed to push code to this project. did you read the URL I linked? if yes, any ideas how to make it more obvious what to do? if not, please do. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
Re: recent DLAs not yet on www.debian.org
Hi, Am 04.03.19 um 11:25 schrieb Holger Levsen: > hi, > > the following recent DLAs are missing on www.debian.org currently: I can't push to the webmaster-team repository. GitLab: You are not allowed to push code to this project. signature.asc Description: OpenPGP digital signature
recent DLAs not yet on www.debian.org
hi, the following recent DLAs are missing on www.debian.org currently: Mar 02 Markus Koschany [DLA 1702-1] advancecomp security update Mar 01 Markus Koschany [DLA 1701-1] openssl security update Mar 01 Markus Koschany [DLA 1696-1] ceph security update Feb 28 Thorsten Alteholz [DLA 1697-1] bind9 security updat Feb 27 Thorsten Alteholz [DLA 1693-1] gpac security update Feb 26 Thorsten Alteholz [DLA 1691-1] exiv2 security update Feb 25 Thorsten Alteholz [DLA 1689-1] elfutils security update Feb 25 Bastian Blank [DLA 1688-1] waagent update Feb 20 Abhijith PA [DLA 1685-1] drupal7 security update Feb 19 Emilio Pozuelo Monfo [DLA 1684-1] systemd security update Feb 19 Emilio Pozuelo Monfo [DLA 1683-1] rdesktop security update Feb 18 Thorsten Alteholz [DLA 1682-1] uriparser security update It would be really great if they could be added, following the instructions on https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website If you are a paid contributor, this is paid work too, and expected to be done as part of releasing DLAs. Besides these, we also have 25 older DLAs missing on www.d.o which someone will need to clean up eventually. I'd just would be glad if that backlog wouldnt grow further. And shouldnt the instructions be clear/complete enough, we need to fix those. -- tschau, Holger --- holger@(debian|reproducible-builds|layer-acht).org PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C signature.asc Description: PGP signature
