first pass at KDE/JACK hint, openssl disaster, etc.

2005-10-12 Thread Nathanael Nerode
This is a first pass at working out what needs to go in at once
for KDE to get in.  I think if these are tried together we can
get a more meaningful result from update_output.txt.

These are all roots of fairly substantial dependency trees,
with some additional subtrees which probably need to go in all at once noted.
* jack-audio-connection-kit
* flac
  * libtunepimp
* id3lib3.8.3 (build-dep of flac)
* taglib (for kdemultimedia)
* openexr (for kdelibs, kdebase)
* arts
  * openal
* qt-x11-free
  * qscintilla, python-qt3, sip4-qt3
  * cppunit, gnuradio-core
  * qca
* kdelibs
-- waiting for lm-sensors, which waits for rrdtool, which waits for perl
  * kdesdk, kdevelop3
-- kdesdk waits for subversion, which has RC bugs and waits for way too
   much stuff (perl, andswig1.3 which waits for pike 7.6, which has RC bugs)
-- remove kdesdk, kdevelop3?
  * libkexif
  * kdepim
  * libkipi
  * licq
  * ksimus
  * dbus
-- waiting for monodoc, which waits for nunit, but both should go in
* wireless-tools (for kdenetwork)
-- netapplet needs to be removed or updated
* kdebase
* unixodbc
  * php4 -- built against bad libssl !!
  * gdal, openscenegraph, libgdal-grass
  * freetds
* wv2, imagemagick (for koffice)
-- imagemagick is waiting for perl

Yrgh.  There are of course unbuilt packages, timeouts, and RC bugs
on various of these.

I think we can do some work on the edges:
# ties flac to libmodplug
remove cynthiune.app/0.9.4-2
# ties flac to libmodplug, RC bugs #324978, 332282, 332773
remove vlc/0.8.1.svn20050314-1
# bug #332919
remove xine-lib/1.0.1-1
hint libmodplug/1:0.7-5

This removes one more little tree from the Giant Tangle.

Forcing fltk1.1 in would be a good thing as well.

After those and libsigc++-1.2 and libpng go in, and once perl works,
I'm beginning to think a soft freeze will be desirable (no uploads except
to fix RC bugs or undergo the C++ transition); the vast majority
of other delayed packages are all tied up in this one giant tangle.

---
Finally, one more point.  The openssl 0.9.8 upload was a disaster.

It's vital to get people to rebuild their packages against openssl0.9.7
-- and to kick out of testing packages which are built against new openssl --
because it would be so very wrong to delay KDE for that.

In particular php4 needs to be rebuilt to break the linkage.
(Or kicked out, but that would require kicking out a bunch of other packages.)
Also tellico needs to be kicked or rebuilt for the same reason.
And openssh-krb5 needs to be rebuilt for the same reason (kdeutils depends
on it).

If we don't stop this now, everything depending on openssl will have to
go in at the same time as all of KDE and JACK and flac and unixodbc.

That requires a d-d-a message.  I propose that it say this:
---
DO NOT upload packages built against libssl-dev or libssl0.9.8.
All packages should be built against libssl0.9.7-dev (libssl0.9.7) at this time.
Packages in this list:
http://bjorn.haxx.se/debian/testing.pl?waiting=openssl
have been built against the new openssl and must be rebuilt against the
old one.

The new openssl is not ready for etch and will keep your packages out of it,
possibly for months.  It will probably also cause packages to malfunction at
runtime if they end up linked to both new and old openssl (and there are
no Conflicts: to prevent this at this time).  This was an unauthorized
transition and we are doing our best to stop the bad effects of it.

-- 
Nathanael Nerode  [EMAIL PROTECTED]

Make sure your vote will count.
http://www.verifiedvoting.org/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: first pass at KDE/JACK hint, openssl disaster, etc.

2005-10-12 Thread Russ Allbery
Nathanael Nerode [EMAIL PROTECTED] writes:

 And openssh-krb5 needs to be rebuilt for the same reason (kdeutils
 depends on it).

Huh?  Where are you seeing that?  That makes no sense and absolutely
should not be the case.  Are you sure you're not just seeing output
picking up one of multiple possible sources for the ssh pseudopackage?

-- 
Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: first pass at KDE/JACK hint, openssl disaster, etc.

2005-10-12 Thread Adeodato Simó
* Russ Allbery [Wed, 12 Oct 2005 02:10:06 -0700]:

 Nathanael Nerode [EMAIL PROTECTED] writes:

  And openssh-krb5 needs to be rebuilt for the same reason (kdeutils
  depends on it).

 Huh?  Where are you seeing that?  That makes no sense and absolutely
 should not be the case.  Are you sure you're not just seeing output
 picking up one of multiple possible sources for the ssh pseudopackage?

  He is. kdessh Depends: openssh-client | ssh-client

-- 
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
 
The most exciting phrase to hear in science, the one that heralds new
discoveries, is not Eureka! (I found it!) but That's funny...
-- Isaac Asimov


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: first pass at KDE/JACK hint, openssl disaster, etc.

2005-10-12 Thread Kurt Roeckx
On Wed, Oct 12, 2005 at 04:38:29AM -0400, Nathanael Nerode wrote:
 DO NOT upload packages built against libssl-dev or libssl0.9.8.
 All packages should be built against libssl0.9.7-dev (libssl0.9.7) at this 
 time.

I intend to drop the libssl0.9.7-dev package in the next upload,
which I hope to do soon.  I don't think it's a good idea to keep
that -dev package around.  Unless the release team ask me to keep
it around, I'll remove it.


Kurt


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: first pass at KDE/JACK hint, openssl disaster, etc.

2005-10-12 Thread Luk Claes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi Kurt

Kurt Roeckx wrote:
 On Wed, Oct 12, 2005 at 04:38:29AM -0400, Nathanael Nerode wrote:
 
DO NOT upload packages built against libssl-dev or libssl0.9.8.
All packages should be built against libssl0.9.7-dev (libssl0.9.7) at this 
time.
 
 
 I intend to drop the libssl0.9.7-dev package in the next upload,
 which I hope to do soon.  I don't think it's a good idea to keep
 that -dev package around.  Unless the release team ask me to keep
 it around, I'll remove it.

I would be very surprised if the release team would ask you to keep it
around (due to conversations on IRC).

Cheers

Luk
- --
Luk Claes - http://people.debian.org/~luk - GPG key 1024D/9B7C328D
Fingerprint:   D5AF 25FB 316B 53BB 08E7   F999 E544 DE07 9B7C 328D
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDTUti5UTeB5t8Mo0RAgdTAKC5kCcXoLz2ua/n7svUYRsKxLrJwwCgmIBN
Pohej6Qj3nr6pm+BLiJnjUg=
=6cWY
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]