Re: Using d/copyright to exclude a directory EXCEPT certain files

2020-07-29 Thread Olek Wojnar
Hi Reinhard,

On Wed, Jul 29, 2020, 14:03 Reinhard Tartler  wrote:

> I think I've implemented this feature here:
> https://salsa.debian.org/debian/devscripts/-/merge_requests/189
>

Awesome, that's exactly the functionality that I was looking for! Thanks
for authoring that change!

AFAIUI it needs someone to approve and merge it.
>

I just commented on the MR. That would be a great Quality of Life addition
to the packaging workflow.

-Olek


Re: Using d/copyright to exclude a directory EXCEPT certain files

2020-07-29 Thread Olek Wojnar
Hi Dod and thanks for the suggestion.

On Wed, Jul 29, 2020, 11:08 Dominique Dumont  wrote:

> On Wednesday, 22 July 2020 05:58:26 CEST Olek Wojnar wrote:
> > However, upstream also includes a configuration file or two required for
> > Package A in a directory containing several dozen Package B files.
>
> In this case, I would politely ask upstream to move the configuration
> files in
> another location to make Debian packaging easier.
>
> In my experience, barring technical issues, this kind of request tends to
> be
> accepted upstream.


That might indeed work in some cases but unfortunately not here. The files
I need are `BUILD` files, the Bazel equivalent of a makefile. Even if they
wanted to, upstream would not be able to move them.

While I don't need to package sources that are already available in Debian,
I do need the configuration information contained in those `BUILD` files.

-Olek


Bug#962307: RFS: anymeal/1.5-1 [ITA] -- Cookbook database for storing recipes

2020-07-29 Thread Boyuan Yang
Hi,

On Sun, 26 Jul 2020 22:58:16 +0100 (BST) Jan Wedekind  wrote:
> Hi,
> I have now released version 1.5. It is available here:
> 
>  https://mentors.debian.net/package/anymeal
> 
> Also it can be downloaded as follows:
> 
>  dget -x 
https://mentors.debian.net/debian/pool/main/a/anymeal/anymeal_1.5-1.dsc

Please fix the following issues before we proceed:

1. It looks like your package has nothing to do with KDE. As a result, please
do not use "Section: kde" in debian/control file. Maybe we can use "Section:
utils".

2. Please also document the copyright holder information and different license
information for files under m4/ directory, epecially ax_have_qt.m4 and
ax_lib_sqlite3.m4.

3. Please clean up debian/changelog file and drop all past changelog entries
that never existed in Debian. (They never existed in the past and they won't
exist in the future so they should not appear anyway.) See 
https://tracker.debian.org/pkg/anymeal for the history of package anymeal in
Debian.

4. Can you explain the reason of overriding dh_auto_install in debian/rules
directory? If you are using Autotools buildsystem correctly, you should not do
override at all and the package will build successfully without human
intervention.

The problem 1), 2) and 3) should be fixed and you can feel free to investigate
into 4) if you are willing to. Let me know after those issues are solved.

--
Regards,
Boyuan Yang


signature.asc
Description: This is a digitally signed message part


Bug#966415: RFS: pixz/1.0.7-1 -- parallel, indexing XZ compressor/decompressor

2020-07-29 Thread Leon Marz
I've updated the package on mentors.debian.net with the new vcs fields. 
Thank you very much for helping me.

- Leon



Re: Using d/copyright to exclude a directory EXCEPT certain files

2020-07-29 Thread Reinhard Tartler
I think I've implemented this feature here:
https://salsa.debian.org/debian/devscripts/-/merge_requests/189

AFAIUI it needs someone to approve and merge it.

-rt

On Wed, Jul 22, 2020 at 12:15 AM Olek Wojnar  wrote:

> Hi mentors,
>
> I'm not the best with Perl and although I've looked through the source
> code of mk-origtargz [1] I can't figure out how (if) it is possible to do
> what I'm trying to accomplish.
>
> I think we're all familiar with the mk-origtargz function where one can
> specify "Files-Excluded:" from the source tarball for various reasons.
> Excluding a single file or a directory is trivial. Excluding a pattern of
> files (e.g. *.jar) is just as easy. However, I can't figure out how to
> exclude *all* of the files in a directory *except* for one or two that are
> needed.
>
> Use case example: Upstream for Package A includes source/binaries for
> Package B which is already packaged in Debian. The maintainer wants to
> exclude Package B files from the processed tarball. However, upstream also
> includes a configuration file or two required for Package A in a directory
> containing several dozen Package B files. It would be much simpler to be
> able to tell mk-origtargz to exclude the whole directory but leave the one
> or two files that are needed. Otherwise, the maintainer would need to add
> several dozen lines into the "Files-Excluded:" section which is more work
> and more chance of making a mistake.
>
> So, is this currently possible? If not, is this something that's worth
> filing a feature request bug for?
>
> Thanks in advance!
>
> -Olek
>
> [1]
> https://salsa.debian.org/debian/devscripts/-/blob/master/lib/Devscripts/MkOrigtargz.pm
>


-- 
regards,
Reinhard


Re: Seeking a mentoree for imagemagick

2020-07-29 Thread Sicelo
On Wed, Jul 29, 2020 at 12:53:23PM +0200, roucaries bastien wrote:
> On Tue, Jul 28, 2020 at 2:00 PM  wrote:
> >
> > > >
> > > > Thanks for help. I need help from easier to harder:
> > > > 1. triaging bug
> > > > 2 CVE and security tracking, see if CVE of imagemagick apply and
> > > > contact security team
> > > > 3. See if upstream commit contains security sensitive problems and
> > > > contact security team
> > > > 4. Backport security patch for stable and old stable
> > > > 5. Helping me with imagemagick 6 to get latest stable update
> > > > 6. Helping me with getting imagemagick 7 in unstable.
> > > >
> > > > Even one item here will help, and I will help you to improve your
> > > > programming skills and maybe a day become a dd
> > > >
> >
> > Hi
> >
> > I would also be happy to work with and learn from you in connection with
> > these. Perhaps #6 (getting imagemagick 7 into unstable) since I am
> > already running Debian sid on my machine.
> 
> Ok this one is not easy.
> 

Hello Roucaries

Since I am also new, perhaps then let me not chew more than I can bite.
What does #5 imagemagick 6 get latest stable update involve?

Regards
Sicelo



Bug#966415: RFS: pixz/1.0.7-1 -- parallel, indexing XZ compressor/decompressor

2020-07-29 Thread Roger Shimizu
Dear Leon,

Git repo created on salsa, with your account as maintainer:
- https://salsa.debian.org/debian/pixz

I also find one with some old gits, maybe you can create from that:
- https://salsa.debian.org/bremner/pixz
Usually I do such task by:
  gbp import-dscs --debsnap --author-is-committer
--author-date-is-committer-date --create-missing-branches

Good luck!

Cheers,
-- 
Roger Shimizu, GMT +9 Tokyo
PGP/GPG: 4096R/6C6ACD6417B3ACB1



Bug#965018: RFS: freetype-py/2.2.0-1 -- Freetype Python bindings for Python 3

2020-07-29 Thread mattia
On Wed, Jul 29, 2020 at 11:09:37AM +0200, Bastian Germann wrote:
> The python3-setuptools-scm build dependency could not be installed in
> your environment which causes setuptools to try download this package.
> That obviously fails.
> 
> Shouldn't pdebuild make sure that all the build dependencies are installed?

You are both confusing pdebuild with pbuilder here.

That's the `clean` step that is failing, which is done outside of the
chroot.  That's responsability of whoever is calling `pdebuild` to
satisfy.

If you are sure your source is clean you may as well just skip cleaning
and not use pdebuild:
dpkg-source -b .
dpkg-source --after-build .
pbuilder b ../freetype-py_2.2.0-1.dsc
the above sequence should prove that nothing is at fault here.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
More about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Re: Using d/copyright to exclude a directory EXCEPT certain files

2020-07-29 Thread Dominique Dumont
On Wednesday, 22 July 2020 05:58:26 CEST Olek Wojnar wrote:
> However, upstream also includes a configuration file or two required for
> Package A in a directory containing several dozen Package B files.

In this case, I would politely ask upstream to move the configuration files in 
another location to make Debian packaging easier.

In my experience, barring technical issues, this kind of request tends to be 
accepted upstream.

Hope this helps

Dod





Re: Seeking a mentoree for imagemagick

2020-07-29 Thread Basil George Poulose

Hello,

This is in response to a mailing list requesting mentees found here 
https://lists.debian.org/debian-mentors/2020/07/msg00196.html


My name is Basil (yes, like the herb) and would like to help out. I am 
new to the open source community and I am coming here after the TLF OSS 
NA that happened towards the beginning of July. I am specifically 
looking to contribute in any way to the open source community and learn 
all I can. I am willing to learn what is needed for me to be accepted as 
a mentee and if it is fine by you please mentor me.


This is not an impulsive mail and I will put in the effort :)

Sincerely,

Basil George Poulose




Re: Seeking a mentoree for imagemagick

2020-07-29 Thread Tong Sun
On Wed, Jul 29, 2020 at 6:04 AM Bastien ROUCARIES
 wrote:
>
> On Tue, Jul 28, 2020 at 12:00 AM Tong Sun
>  wrote:
> >
> > Ok, let me try.
> >
> > Let me start with 4. Backport security patch for stable and old stable
> > first, as it looks an easier starter for me.
> >
> > We can take the further details offline, if you want.
>
> Ok you could take this one. see the security tracker of imagemagick
> and see if patch could be applied and synchronize with security team.

Ok, I've never done this before, so a little bit of help is needed now
Basten, :)

So, by "see the security tracker" I'm guessing you meant to check
https://security-tracker.debian.org/tracker/source-package/imagemagick right?

I saw bullseye has a lot of issues listed as vulnerable, while both
stretch and buster are listed as fixed.

Since buster & bullseye both has the same version,
8:6.9.10.23+dfsg-2.1, I'm wondering what are the steps I should take
to fix say CVE-2020-13902, and CVE-2020-10251 (of which buster is
listed as "vulnerable (no DSA, ignored)").

Thanks


> >
> > thx
> >
> > On Mon, Jul 27, 2020 at 9:08 AM Bastien ROUCARIES
> >  wrote:
> > >
> > > On Mon, Jul 27, 2020 at 2:29 PM Tong Sun
> > >  wrote:
> > > >
> > > > Hi Bastien,
> > > >
> > > > What kind of help are you looking for?
> > >
> > > Thanks for help. I need help from easier to harder:
> > > 1. triaging bug
> > > 2 CVE and security tracking, see if CVE of imagemagick apply and
> > > contact security team
> > > 3. See if upstream commit contains security sensitive problems and
> > > contact security team
> > > 4. Backport security patch for stable and old stable
> > > 5. Helping me with imagemagick 6 to get latest stable update
> > > 6. Helping me with getting imagemagick 7 in unstable.
> > >
> > > Even one item here will help, and I will help you to improve your
> > > programming skills and maybe a day become a dd
> > >
> > > Bastien
> > > >
> > > > cheers
> > > >
> > > > On Mon, Jul 27, 2020 at 6:03 AM Bastien ROUCARIES -
> > > > roucaries.bast...@gmail.com
> > > >  wrote:
> > > > >
> > > > > Hi,
> > > > >
> > > > > I am the dd in charge of imagemagick and i need help.
> > > > >
> > > > > If somebody is interested I can mentor it.
> > > > >
> > > > > Thanks
> > > > >
> > > > > Bastien
> > > > >
> > > > >



Re: Seeking a mentoree for imagemagick

2020-07-29 Thread Kyle Robbertze
Hi,

On 2020/07/29 12:53, roucaries bastien wrote:
> On Tue, Jul 28, 2020 at 2:00 PM  wrote:
>>

 Thanks for help. I need help from easier to harder:
 1. triaging bug
 2 CVE and security tracking, see if CVE of imagemagick apply and
 contact security team
 3. See if upstream commit contains security sensitive problems and
 contact security team
 4. Backport security patch for stable and old stable
 5. Helping me with imagemagick 6 to get latest stable update
 6. Helping me with getting imagemagick 7 in unstable.

 Even one item here will help, and I will help you to improve your
 programming skills and maybe a day become a dd

>>
>> Hi
>>
>> I would also be happy to work with and learn from you in connection with
>> these. Perhaps #6 (getting imagemagick 7 into unstable) since I am
>> already running Debian sid on my machine.
> 
> Ok this one is not easy.

Also have a look at [salsa] for the work Jonathan has already done
towards this goal.

[salsa] https://salsa.debian.org/jcc/imagemagick

Cheers
Kyle

-- 

⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Kyle Robbertze
⢿⡄⠘⠷⠚⠋⠀ Debian Developer
⠈⠳⣄ https://wiki.debian.org/KyleRobbertze



Re: Seeking a mentoree for imagemagick

2020-07-29 Thread roucaries bastien
On Tue, Jul 28, 2020 at 2:00 PM  wrote:
>
> > >
> > > Thanks for help. I need help from easier to harder:
> > > 1. triaging bug
> > > 2 CVE and security tracking, see if CVE of imagemagick apply and
> > > contact security team
> > > 3. See if upstream commit contains security sensitive problems and
> > > contact security team
> > > 4. Backport security patch for stable and old stable
> > > 5. Helping me with imagemagick 6 to get latest stable update
> > > 6. Helping me with getting imagemagick 7 in unstable.
> > >
> > > Even one item here will help, and I will help you to improve your
> > > programming skills and maybe a day become a dd
> > >
>
> Hi
>
> I would also be happy to work with and learn from you in connection with
> these. Perhaps #6 (getting imagemagick 7 into unstable) since I am
> already running Debian sid on my machine.

Ok this one is not easy.


>
> The only challenge in my case is that I often have unreliable Internet,
> but hopefully it should not be too much of a blocker.
>
> Regards
> Sicelo
>



Bug#966493: RFS: source-highlight/3.1.9-1.3 -- convert source code to syntax highlighted document

2020-07-29 Thread Kartik Kulkarni
Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "source-highlight":

 * Package name: source-highlight
   Version : 3.1.9-1.3
   Upstream Author : http://www.gnu.org/software/src-highlite/
 * URL : http://www.gnu.org/software/src-highlite/
 * License : GPL-3+
 * Vcs : None
   Section : devel

It builds those binary packages:

  libsource-highlight-common - architecture-independent files for
source highlighting library
  libsource-highlight4v5 - source highlighting library
  libsource-highlight-dev - development files for source highlighting library
  source-highlight - convert source code to syntax highlighted document

To access further information about this package, please visit the
following URL:

  https://mentors.debian.net/package/source-highlight/

Alternatively, one can download the package with dget using this command:

  dget -x 
https://mentors.debian.net/debian/pool/main/s/source-highlight/source-highlight_3.1.9-1.3.dsc

Changes since the last upload:

 source-highlight (3.1.9-1.3) unstable; urgency=medium
 .
   * Fix reproducible build with patch from
 Vagrant (Closes: #963518)
   * Fix fail to cross build from source with patch
 Helmut  (Closes: #912715)
   * Updated standards version

Regards,
--
  Kartik Kulkarni


Re: Seeking a mentoree for imagemagick

2020-07-29 Thread Bastien ROUCARIES
On Tue, Jul 28, 2020 at 12:00 AM Tong Sun
 wrote:
>
> Ok, let me try.
>
> Let me start with 4. Backport security patch for stable and old stable
> first, as it looks an easier starter for me.
>
> We can take the further details offline, if you want.

Ok you could take this one. see the security tracker of imagemagick
and see if patch could be applied and synchronize with security team.

Basten
>
> thx
>
> On Mon, Jul 27, 2020 at 9:08 AM Bastien ROUCARIES
>  wrote:
> >
> > On Mon, Jul 27, 2020 at 2:29 PM Tong Sun
> >  wrote:
> > >
> > > Hi Bastien,
> > >
> > > What kind of help are you looking for?
> >
> > Thanks for help. I need help from easier to harder:
> > 1. triaging bug
> > 2 CVE and security tracking, see if CVE of imagemagick apply and
> > contact security team
> > 3. See if upstream commit contains security sensitive problems and
> > contact security team
> > 4. Backport security patch for stable and old stable
> > 5. Helping me with imagemagick 6 to get latest stable update
> > 6. Helping me with getting imagemagick 7 in unstable.
> >
> > Even one item here will help, and I will help you to improve your
> > programming skills and maybe a day become a dd
> >
> > Bastien
> > >
> > > cheers
> > >
> > > On Mon, Jul 27, 2020 at 6:03 AM Bastien ROUCARIES -
> > > roucaries.bast...@gmail.com
> > >  wrote:
> > > >
> > > > Hi,
> > > >
> > > > I am the dd in charge of imagemagick and i need help.
> > > >
> > > > If somebody is interested I can mentor it.
> > > >
> > > > Thanks
> > > >
> > > > Bastien
> > > >
> > > >



Bug#965018: RFS: freetype-py/2.2.0-1 -- Freetype Python bindings for Python 3

2020-07-29 Thread Bastian Germann
Am 29.07.20 um 06:10 schrieb Drew Parsons:
> Hi Bastian, freetype-py builds fine with dpkg-buildpackage, but fails in
> chroot (pdebuild pbuilder):
> 
> $ pdebuild
> dpkg-checkbuilddeps: error: Unmet build dependencies:
> python3-setuptools-scm
> W: Unmet build-dependency in source
> dh clean --with python3 --buildsystem=pybuild
>    dh_auto_clean -O--buildsystem=pybuild
> install -d
> /projects/freetype-py/debian/.debhelper/generated/_source/home
> pybuild --clean --test-pytest -i python{version} -p 3.8
> I: pybuild base:217: python3.8 setup.py clean
> # Will use the system-provided FreeType.
> Traceback (most recent call last):
>   File "setup.py", line 103, in 
>     setup(
>   File "/usr/lib/python3/dist-packages/setuptools/__init__.py", line
> 143, in setup
> ...
>     raise DistutilsError('the `allow-hosts` option is not supported '
> distutils.errors.DistutilsError: the `allow-hosts` option is not
> supported when using pip to install requirements.
> E: pybuild pybuild:352: clean: plugin distutils failed with: exit
> code=1: python3.8 setup.py clean
> dh_auto_clean: error: pybuild --clean --test-pytest -i python{version}
> -p 3.8 returned exit code 13
> make: *** [debian/rules:8: clean] Error 25
> 
> 
> 
> 
> Are you able to interpret that error, or do you have a clean chroot to
> inspect?
> 
> Drew
> 

The python3-setuptools-scm build dependency could not be installed in
your environment which causes setuptools to try download this package.
That obviously fails.

Shouldn't pdebuild make sure that all the build dependencies are installed?



Bug#966484: RFS: udfclient/0.8.11-1 [RC] -- userland implementation of the UDF filesystem

2020-07-29 Thread Pali Rohár
Package: sponsorship-requests
Severity: important

Dear mentors,

I am looking for a sponsor for my package "udfclient":

 * Package name: udfclient
   Version : 0.8.11-1
   Upstream Author : Reinoud Zandijk 
 * URL : http://www.13thmonkey.org/udfclient/
 * License : free-use, Clarified-Artistic, BSD-2-Clause, BSD-4-Clause, 
BSD-3-Clause
   Section : otherosfs

It builds those binary packages:

  udfclient - userland implementation of the UDF filesystem

To access further information about this package, please visit the following 
URL:

  https://mentors.debian.net/package/udfclient/

Alternatively, one can download the package with dget using this command:

  dget -x 
https://mentors.debian.net/debian/pool/main/u/udfclient/udfclient_0.8.11-1.dsc

Changes since the last upload:

 udfclient (0.8.11-1) unstable; urgency=medium
 .
   * New upstream release
 - Minor release fixing compilation errors on gcc 10 (Closes: #957893)
 - Also corrected some minor spelling mistakes

Regards,
--
  Pali Rohár