Bug#877337: single-page html of debian-policy to be revived?

[Holger Levsen]

On Sun, Apr 14, 2024 at 08:43:51PM +0800, Sean Whitton wrote:
> ... but if dev-ref is already shipping both, maybe singlepage is indeed
> usable these days ...

I think it is.
 
> > Could the Policy Editors team check, if everything is fine now, and if
> > this should be published again?
> > At least there is still an issue with the footnotes, there are 16 
> > occurrences
> > of #id1 for example... (search for "[1]" in policy-1.html).
> Hrm.  That seems like a pretty serious problem :\

I wouldnt call it serious. annoying yes, maybe.
 
> Holger L., did you know about this issue?
> Did you decide it was worth publishing anyway?

yes.

https://www.debian.org/doc/manuals/developers-reference/pkgs.en.html#how-could-installing-a-package-into-testing-possibly-break-other-packages
or (single page) 
https://www.debian.org/doc/manuals/developers-reference/developers-reference.en.html#how-could-installing-a-package-into-testing-possibly-break-other-packages
both show four footnotes, right where they belong, it's just that
each foot note is numbered and that [1] or [2] or whatever is
a link, pointing to a wrong place.

I agree it's a bug, but I do think it's a pretty harmless one.


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

"Any fool can know. The point is to understand." - A. Einstein 


signature.asc
Description: PGP signature

Bug#872944: #872944 www.debian.org: Remove JavaScript from Policy Manual published on web mirrors

[Holger Levsen]

On Thu, Apr 11, 2024 at 09:18:06AM +0200, Thomas Lange wrote:
> A single page html may be an additional option but there's already the
> single page txt version and the PDF. That's sufficient and I see no
> need in providing more formats of this manual.
> 
> Therefore we can close this and I will close 877337.

fwiw, I disagree with this conclusion. single page txt and pdf versions
are no replacements for single page html.


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

Another end of the world is possible.


signature.asc
Description: PGP signature

Re: upcoming changes of the web pages /security and /lts/security

[Holger Levsen]

On Mon, Dec 25, 2023 at 10:56:56PM +0100, Thomas Lange wrote:
> > what do we need to do instead? :)
> Nothing in the webwml repository.
> The list of recent advisories on the web pages is now automatically
> generated from the data from the security tracker.
> It's important that the announcement mail is sent and that those lists
> are updated:
> https://salsa.debian.org/security-tracker-team/security-tracker/-/raw/master/data/DSA/list
> https://salsa.debian.org/security-tracker-team/security-tracker/-/raw/master/data/DLA/list
> That's all.

ah, very nice! & thanks for clarifying too!


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The devel is in the details.


signature.asc
Description: PGP signature

Re: upcoming changes of the web pages /security and /lts/security

[Holger Levsen]

On Mon, Dec 25, 2023 at 09:14:51PM +0100, Thomas Lange wrote:
> Now the security team and the LTS team do not need to manually prepare
> a .wml and .data file for each advisory.
> Please stop creating those files for new advisories.

what do we need to do instead? :)


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

Klimakatastrophe bedeutet kompletter sozialer Kollaps.


signature.asc
Description: PGP signature

Bug#1032440: closed by Laura Arjona Reina (Bug#1032440 fixed in www.debian.org)

[Holger Levsen]

On Mon, Mar 27, 2023 at 12:09:07PM +, Debian Bug Tracking System wrote:
> Bug #1032440 in www.debian.org reported by you has been fixed in the Git 
> repository.
> You can see the commit message below and you can check the diff of the fix at:
> 
> https://salsa.debian.org/webmaster-team/webwml/-/commit/12361160cfce820d5cd0de4c1cfdb6feaa2bfb02
> 
> 
> Add logic to show developers reference manual in single page HTML (Closes: 
> #1032440)
> 

yay & thank you!


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

This is the year of gpg on the desktop! (Gunnar Wolf)


signature.asc
Description: PGP signature

Bug#1032440: www.d.o: please link to single html page version of developers-reference

[Holger Levsen]

package: www.debian.org
severity: wishlist
x-debbugs-cc: debian-de...@lists.debian.org

hi,

On Mon, Mar 06, 2023 at 07:46:43PM +, Holger Levsen wrote:
> [...], there's a single page HTML version available again, eg on
> https://www.debian.org/doc/manuals/developers-reference/developers-reference.html
> which could be linked from https://www.debian.org/doc/devel-manuals#devref
> again. 

& thank you for maintaining www.debian.org!


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The past is over.


signature.asc
Description: PGP signature

Re: sources.list 4 bullseye-security

[Holger Levsen]

On Sun, Jun 27, 2021 at 04:52:26PM -0400, Boyuan Yang wrote:
> Besides, I believe end users are not supposed to know deb-src line for
> security repos.

sure, they do! and of course we provide source for our security updates!

> Adding such info provides zero benefit except for confusing
> users.

surely not all users compile software, but some certainly do. I do.


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

„Faschisten hören niemals auf, Faschisten zu sein
Man diskutiert mit ihnen nicht, hat die Geschichte gezeigt“...


signature.asc
Description: PGP signature

Bug#948969: webwml | #948969: Creates a pdo link for each package instead of an ALL-IN-ONE link which is broken (!546)

[Holger Levsen]

hi Laura,

On Sat, Dec 12, 2020 at 07:17:21AM +, victory wrote:
> victory pushed new commits to merge request !546
> Merge Request URL: 
> https://salsa.debian.org/webmaster-team/webwml/-/merge_requests/546
 
I've cherry-picked this as 6ffd214be07576841d2409865733011635e61cb5 into
the master branch and am wondering if this issue, #948969, is fixed now
and should be closed? 


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁   holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀ PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
 ⠈⠳⣄

That morning, the young barista woman told me that a customer came in with a
mask, but not wearing it. When she asked the customer to put on her mask
please, the woman said: "Why? There's no-one in here."


signature.asc
Description: PGP signature

Bug#922246: www/lts: if DLA-1234-1 and DLA-1234-2 exist, only that last one shows up in indexes

[Holger Levsen]

Hi Brian,

On Thu, Dec 05, 2019 at 05:09:42PM +1100, Brian May wrote:
> Brian May  writes:
> > Is it OK if we simply delete this line?
> Done by https://salsa.debian.org/webmaster-team/webwml/merge_requests/298

awesome, merged, thank you! Do you think we can close this bug now?


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C



signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

control: retitle -1 1 DLA missing from the website (or not)
thanks

Hi Brian,

On Thu, Aug 22, 2019 at 05:38:18PM +1000, Brian May wrote:
> On Wed, Aug 14, 2019 at 11:16:50AM +0000, Holger Levsen wrote:
> > ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
> > 2>&1
> > ERROR: .data or .wml file missing for DLA 1885-1
> > ERROR: .data or .wml file missing for DLA 1884-1
> > ERROR: .data or .wml file missing for DLA 1879-1
> > ERROR: .data or .wml file missing for DLA 1877-1
> > ERROR: .data or .wml file missing for DLA 1871-1
> > ERROR: .data or .wml file missing for DLA 1846-2
> > ERROR: .data or .wml file missing for DLA 1833-2
> > ERROR: .data or .wml file missing for DLA 1784-1
> > ERROR: .data or .wml file missing for DLA 607-1
> > ERROR: .data or .wml file missing for DLA 567-1
> > ERROR: .data or .wml file missing for DLA 377-1
> > ERROR: .data or .wml file missing for DLA 267-1
> > ERROR: .data or .wml file missing for DLA 115-2
> > ERROR: .data or .wml file missing for DLA 145-2
> 
> I believe all of these have now been resolved.

the script disagrees on DLA 607-1 and 377-1 and indeed
https://www.debian.org/lts/security/2016/dla-607 does not exist.
while https://www.debian.org/lts/security/2016/dla-377 does (which
matches debian-www.git)

do you know what's up with DLA-607?


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

On Thu, Aug 22, 2019 at 05:38:18PM +1000, Brian May wrote:
> I believe all of these have now been resolved.

and YAY! (& sorry I forgot that in my previous mail!)


signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

Hi Brian,

thanks for caring about this old information!

On Thu, Aug 15, 2019 at 05:31:51PM +1000, Brian May wrote:
> Where to from here? Should I invent an appropriate DLA-145-2 based on
> the information above?

yes, that seems very reasonable.


-- 
tschau,
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

Hi Brian,

On Wed, Aug 14, 2019 at 05:16:46PM +1000, Brian May wrote:
> On Mon, Apr 15, 2019 at 12:06:35PM +0000, Holger Levsen wrote:
> > many thanks for all your fixes on this bug!
> Can you please rerun the command:
> ~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  2>&1
ERROR: .data or .wml file missing for DLA 1885-1
ERROR: .data or .wml file missing for DLA 1884-1
ERROR: .data or .wml file missing for DLA 1879-1
ERROR: .data or .wml file missing for DLA 1877-1
ERROR: .data or .wml file missing for DLA 1871-1
ERROR: .data or .wml file missing for DLA 1846-2
ERROR: .data or .wml file missing for DLA 1833-2
ERROR: .data or .wml file missing for DLA 1784-1
ERROR: .data or .wml file missing for DLA 607-1
ERROR: .data or .wml file missing for DLA 567-1
ERROR: .data or .wml file missing for DLA 377-1
ERROR: .data or .wml file missing for DLA 267-1
ERROR: .data or .wml file missing for DLA 115-2
ERROR: .data or .wml file missing for DLA 145-2

> I am loosing track of which DLAs are still missing, and it looks like
> I can't run that command myself.

it's not merged into master but it's only in MR#1 for the cron.git repo
of debian-www...

Thanks for looking into this again!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Bug#931548: Migration to Sphinx -- developers-reference

[Holger Levsen]

On Sun, Aug 11, 2019 at 11:51:32PM +0900, Osamu Aoki wrote:
> I saw you uploaded a new version.  Thanks.

most changes were from you, so thank you very much too!

> As I see this package, remaining tasks are:

this list looks good to me. highest prio for me is getting
https://www.debian.org/doc/devel-manuals#devref fixed though.

> I am playing with the pudb python debugger to learn how docutils/sphinx works 
> :-)

nice!

-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Bug#931548: Migration to Sphinx -- developers-reference

[Holger Levsen]

Hi,

On Tue, Aug 06, 2019 at 11:36:25PM +0900, Osamu Aoki wrote:
> With today's commit, pull-down language selection seems to work for
> package installed files.  Also now we have Gnome desktop icon ;-)

great!

> It is usable, I think.

I think so too! :)

> > yeah, I also strongly prefer option 2.
> I think I figured out OK.  This is my first web page using javascript.
> It should be easy to add menu to select pdf/text/epub download now just by
> updating the existing template file and javascript.

coolio.

> If any of you have good sense of color, adjusting color via CSS may be
> an option for this pull-down menu.

I'm sure eventually someday someone will come around and improve this.

> Your feed back is most appreciated.

thank you for your work!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Bug#931548: Migration to Sphinx

[Holger Levsen]

hi,

On Thu, Jul 25, 2019 at 10:22:24PM +0900, Osamu Aoki wrote:
> > > -- I'm afraid I wasn't involved other than reporting problems with the
> > > published version of Policy, and I don't think we made changes to our
> > > package in response to any requests from the www-team.
> > Am I correct to assume we could go a similar way with 
> > src:developers-reference ?
> Yes.

coolio

> Only remaining problem is it builds multi-language outputs as packages
> but not for web.

well, the packaging also expects to have .txt files to work on to
replace the placeholders with common-entities?


> I mean that the English files are available on
> www.debian.org but translations don't show up as described in
> https://www.debian.org/intro/cn This is because  all html files are
> names as index.html etc. without language code, so automatic language
> selection can not be implemented.
> 
> We can do 2 ways.  
[...] 
> If I figure how to set up option2 type i18n web page, I may even do it
> for debian-handbook.

yeah, I also strongly prefer option 2.


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Bug#931548: Migration to Sphinx

[Holger Levsen]

hi,

dear debian-www people: src:developers-reference was just switched to
use sphinx, just like src:debian-policy. However, no upload to unstable
has been made yet...

On Tue, Jul 23, 2019 at 08:13:50AM -0700, Sean Whitton wrote:
> On Mon 22 Jul 2019 at 09:22pm +00, Holger Levsen wrote:
> > I wonder how this was done for debian-policy which is also hosted on
> > www.debian.org. Sean, do you have any insight on this?
> Paul, Laura and Osamu hacked on the www-team's scripts until it worked
> -- I'm afraid I wasn't involved other than reporting problems with the
> published version of Policy, and I don't think we made changes to our
> package in response to any requests from the www-team.

Am I correct to assume we could go a similar way with src:developers-reference ?

If you wanted, you could test by cloning the git repo, install the
build-depends and run 'make'. The package build is still broken...


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#932252: cleanup of intro/organisation: comment from myself

[Holger Levsen]

hi,

from #-www just now:

 | h01ger: See #932252, a major cleanup I propose, maybe to extreme. IMO 
we do not always need to list members.
-  zwiebelbot- | (#debian-www) Debian#932252: cleanup of /intro/organization - 
https://bugs.debian.org/932252
-   KGB-0- | (#debian-www) webwml master 5b104d3 Holger Levsen 
english/intro/organization.data * https://deb.li/3stRR
-   KGB-0- | (#debian-www) drop Ronny Aasen from -edu as sadly he is MIA 
since 2012. Thanks for all your work, Ronny
 | Mrfai: would be fine with me
 e.g. debian.lex has it's own page with the last entry from 2005

I agree that a major cleanup of this page is more useful than having lots and 
lots of outdated entries there...


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#922246: #821096 is very much related

[Holger Levsen]

hi,

Debian#821096: filenames of generated by parse-advisory.pl and
parse-dls.pl files should include the revision number -
https://bugs.debian.org/821096


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

control: retitle -1 7 DLAs missing from the website (or not)
thanks

Hi Brian,

many thanks for all your fixes on this bug!

On Fri, Apr 12, 2019 at 04:03:25PM +1000, Brian May wrote:
> > ERROR: .data or .wml file missing for DLA 1130-1
> > ERROR: .data or .wml file missing for DLA 719-1
> > ERROR: .data or .wml file missing for DLA 706-1
> > ERROR: .data or .wml file missing for DLA 659-1
> Looks like these are all mine, I have copies of the outgoing emails, but
> from my private mail archives, not in the public web archive. So I guess
> that means I am the only one who can fix these :-)

and you did. Many thanks for that!

> > ERROR: .data or .wml file missing for DLA 772-1

this one has been dealt with

> > ERROR: .data or .wml file missing for DLA 607-1
> > ERROR: .data or .wml file missing for DLA 567-1
> > ERROR: .data or .wml file missing for DLA 377-1
> > ERROR: .data or .wml file missing for DLA 267-1
> > ERROR: .data or .wml file missing for DLA 115-2
> > ERROR: .data or .wml file missing for DLA 145-2
> I can't actually find these - or anything like them - in the mailing
> list archives or on my computer.

I believe those DLAs were allocated but never used. We will need to double
check and then probably provide dummy/empty DLAs documenting this.

> * I can find DLA-567-2 but not a DLA-567-1; I suspect DLA-567-2 was sent
>   instead of DLA-567-1.

fun ;)

> > ERROR: .data or .wml file missing for DLA 580-1
> 
> I suspect that might be this email:
> 
> Date: Mon, 1 Aug 2016 12:05:55 +0200
> From: Balint Reczey 
> Subject: [SECURITY] [REGRESSION] [DLA -] graphite2 regression update
> To: debian-lts-annou...@lists.debian.org
> Mail-Followup-To: debian-...@lists.debian.org
> 
> Source: https://lists.debian.org/debian-lts-announce/2016/08/msg0.html
> 
> Impossible to mark a positive identication, however the email was sent
> after DLA-578-1, before DLA-582-1, and the package name matches, and the
> security tracker has similar title.

seems like DLA 580 indeed.


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: DLAs in the website: some updates and issues

[Holger Levsen]

Dear Laura,

thanks for your feedback and your help along the way!

On Tue, Mar 05, 2019 at 03:50:01PM +0100, Laura Arjona Reina wrote:
> I have created an usertag to group the bugs related to the "lts" section of
> the website:
> https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=www.debian.org%40packages.debian.org=lts

very nice, thanks.

> https://wiki.debian.org/LTS/Development#Publishing_updates_on_the_website
[...]
> make dla-123-1.en.html
 
TIL & added that info to the wiki! Thanks!


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: 31 DLAs missing from the website

[Holger Levsen]

control: tags -1 - patch
control: retitle -1 31 DLAs missing from the website
thanks

Hi,

due to the work of mostly Antoine and Laura, over 1600 DLAs are now
visible on www.debian.org/lts - this is pretty awesome IMO!

A few are still missing however:

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA  
ERROR: .data or .wml file missing for DLA 1685-1
ERROR: .data or .wml file missing for DLA 1684-1
ERROR: .data or .wml file missing for DLA 1683-1
ERROR: .data or .wml file missing for DLA 1682-1
ERROR: .data or .wml file missing for DLA 1130-1
ERROR: .data or .wml file missing for DLA 772-1
ERROR: .data or .wml file missing for DLA 719-1
ERROR: .data or .wml file missing for DLA 706-1
ERROR: .data or .wml file missing for DLA 659-1
ERROR: .data or .wml file missing for DLA 607-1
ERROR: .data or .wml file missing for DLA 580-1
ERROR: .data or .wml file missing for DLA 567-1
ERROR: .data or .wml file missing for DLA 377-1
ERROR: .data or .wml file missing for DLA 267-1
ERROR: .data or .wml file missing for DLA 115-2
ERROR: .data or .wml file missing for DLA 145-2
ERROR: .data or .wml file missing for DLA 0015-1
ERROR: .data or .wml file missing for DLA 0014-1
ERROR: .data or .wml file missing for DLA 0013-1
ERROR: .data or .wml file missing for DLA 0012-1
ERROR: .data or .wml file missing for DLA 0011-1
ERROR: .data or .wml file missing for DLA 0010-1
ERROR: .data or .wml file missing for DLA 0009-1
ERROR: .data or .wml file missing for DLA 0008-1
ERROR: .data or .wml file missing for DLA 0007-1
ERROR: .data or .wml file missing for DLA 0006-1
ERROR: .data or .wml file missing for DLA 0005-1
ERROR: .data or .wml file missing for DLA 0004-1
ERROR: .data or .wml file missing for DLA 0003-1
ERROR: .data or .wml file missing for DLA 0002-1
ERROR: .data or .wml file missing for DLA 0001-1

I suppose we should be able to fix those as well ;)


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

In Europe there are people prosecuted by courts because they saved other people
from drowning in the  Mediterranean Sea.  That is almost as absurd  as if there
were people being prosecuted because they save humans from drowning in the sea.


signature.asc
Description: PGP signature

Re: heads up: DLA should now be published on the website

[Holger Levsen]

On Thu, Feb 21, 2019 at 01:51:07PM -0500, Antoine Beaupré wrote:
> > -> this script is incorrect/broken for DLAs it seems, as 
> > https://www.debian.org/lts/security/ does list the DLAs 1677-1681,
> > just DLAs 1682-1685 are missing. And they are called DLA-1234 there,
> > not "DLA 1234-1"...
> Weird. Is your local checkout up to date?

yes

> What if you run in debug mode?

~/Projects/debian-www/cron$ ../cron/parts/10-check-advisories --mode DLA 
--debug 2>&1 | head -50
INFO: fetching URL 
https://salsa.debian.org/security-tracker-team/security-tracker/raw/master/data/DLA/list
DEBUG: Starting new HTTPS connection (1): salsa.debian.org
DEBUG: https://salsa.debian.org:443 "GET 
/security-tracker-team/security-tracker/raw/master/data/DLA/list HTTP/1.1" 200 
47253
INFO: checking DLA-1685-1 (2019)
ERROR: .data or .wml file missing for DLA 1685-1
DEBUG: skipping line: " {CVE-2019-6338}"
DEBUG: skipping line: " [jessie] - drupal7 7.32-1+deb8u15"
INFO: checking DLA-1684-1 (2019)
ERROR: .data or .wml file missing for DLA 1684-1
DEBUG: skipping line: " {CVE-2019-6454}"
DEBUG: skipping line: " [jessie] - systemd 215-17+deb8u10"
INFO: checking DLA-1683-1 (2019)
ERROR: .data or .wml file missing for DLA 1683-1
DEBUG: skipping line: " {CVE-2018-8791 CVE-2018-8792 CVE-2018-8793 
CVE-2018-8794 CVE-2018-8795 CVE-2018-8796 CVE-2018-8797 CVE-2018-8798 
CVE-2018-8799 CVE-2018-8800 CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 
CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 
CVE-2018-20182}"
DEBUG: skipping line: " [jessie] - rdesktop 1.8.4-0+deb8u1"
INFO: checking DLA-1660-2 (2019)
ERROR: .data or .wml file missing for DLA 1660-2
DEBUG: skipping line: " [jessie] - rssh 2.3.4-4+deb8u3"
INFO: checking DLA-1682-1 (2019)
ERROR: .data or .wml file missing for DLA 1682-1
DEBUG: skipping line: " {CVE-2018-20721}"
DEBUG: skipping line: " [jessie] - uriparser 0.8.0.1-2+deb8u2"
INFO: checking DLA-1681-1 (2019)
ERROR: .data or .wml file missing for DLA 1681-1
DEBUG: skipping line: " {CVE-2019-7659}"
DEBUG: skipping line: " [jessie] - gsoap 2.8.17-1+deb8u2"
INFO: checking DLA-1680-1 (2019)
ERROR: .data or .wml file missing for DLA 1680-1
DEBUG: skipping line: " {CVE-2018-17000 CVE-2018-19210 CVE-2019-7663}"
DEBUG: skipping line: " [jessie] - tiff 4.0.3-12.3+deb8u8"
INFO: checking DLA-1679-1 (2019)
ERROR: .data or .wml file missing for DLA 1679-1
DEBUG: skipping line: " [jessie] - php5 5.6.40+dfsg-0+deb8u1"
INFO: checking DLA-1678-1 (2019)
ERROR: .data or .wml file missing for DLA 1678-1
DEBUG: skipping line: " {CVE-2018-18356 CVE-2018-18500 CVE-2018-18501 
CVE-2018-18505 CVE-2018-18509 CVE-2019-5785}"
DEBUG: skipping line: " [jessie] - thunderbird 1:60.5.1-1~deb8u1"
INFO: checking DLA-1677-1 (2019)
ERROR: .data or .wml file missing for DLA 1677-1
DEBUG: skipping line: " {CVE-2018-18356 CVE-2019-5785}"
DEBUG: skipping line: " [jessie] - firefox-esr 60.5.1esr-1~deb8u1"
INFO: checking DLA-1676-1 (2019)
ERROR: .data or .wml file missing for DLA 1676-1
DEBUG: skipping line: " {CVE-2017-15105}"
DEBUG: skipping line: " [jessie] - unbound 1.4.22-3+deb8u4"
INFO: checking DLA-1675-1 (2019)
ERROR: .data or .wml file missing for DLA 1675-1
DEBUG: skipping line: " {CVE-2019-6690}"
DEBUG: skipping line: " [jessie] - python-gnupg 0.3.6-1+deb8u1"
INFO: checking DLA-1674-1 (2019)

> > Also, if this merge request would be merged, it would just run it in
> > normal, DSA, mode. Do you have a suggestion how to run it in DLA mode?
> We could simply change the default here:
> 
> parser.add_argument('--mode', default='DSA', choices=('DSA', 'DLA'),
> help='which sort of advisory to check (default: 
> %(default)s)')  # noqa: E501

hmm. (and then, what about missing DSAs?)


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: heads up: DLA should now be published on the website

[Holger Levsen]

Hi Antoine,

On Mon, Feb 18, 2019 at 04:10:47PM -0500, Antoine Beaupré wrote:
> But my little finger tells me there are many DLAs still missing from the
> website. So even if/when the above MR does get merged, more entries will
> be missing. So someone will need to make sure to run the check script to
> make sure no entries are missing regularly, see also:
> https://salsa.debian.org/webmaster-team/cron/merge_requests/1

I've looked at this script now, it works nicely, just our results are
not so good yet:

~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories 2>&1 |wc -l
314
~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA 2>&1 
|wc -l
1762
~/Projects/debian-www/webwml$ ../cron/parts/10-check-advisories --mode DLA 2>&1 
| head -10
ERROR: .data or .wml file missing for DLA 1685-1
ERROR: .data or .wml file missing for DLA 1684-1
ERROR: .data or .wml file missing for DLA 1683-1
ERROR: .data or .wml file missing for DLA 1660-2
ERROR: .data or .wml file missing for DLA 1682-1
ERROR: .data or .wml file missing for DLA 1681-1
ERROR: .data or .wml file missing for DLA 1680-1
ERROR: .data or .wml file missing for DLA 1679-1
ERROR: .data or .wml file missing for DLA 1678-1
ERROR: .data or .wml file missing for DLA 1677-1
debian-work:~/Projects/debian-www/webwml$ 

-> this script is incorrect/broken for DLAs it seems, as 
https://www.debian.org/lts/security/ does list the DLAs 1677-1681,
just DLAs 1682-1685 are missing. And they are called DLA-1234 there,
not "DLA 1234-1"...

Also, if this merge request would be merged, it would just run it in
normal, DSA, mode. Do you have a suggestion how to run it in DLA mode?


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: heads up: DLA should now be published on the website

[Holger Levsen]

On Mon, Feb 18, 2019 at 04:10:47PM -0500, Antoine Beaupré wrote:
> > can you please put that on wiki.d.o/LTS/Development?!
> This is now done. I added a new section to the wiki

awesome, thank you!

> I've done one more mass import, hopefully the last:
> https://salsa.debian.org/webmaster-team/webwml/merge_requests/58

merged and pushed, thanks.

> But my little finger tells me there are many DLAs still missing from the
> website. So even if/when the above MR does get merged, more entries will
> be missing. So someone will need to make sure to run the check script to
> make sure no entries are missing regularly, see also:
> https://salsa.debian.org/webmaster-team/cron/merge_requests/1

I guess I will run this check script weekly (or maybe even daily) on
jenkins.debian.net.

> Obviously, this workflow is not optimal and could be automated, see also
> #859123 (in CC).

we'll get there eventually.

> Thank you for your time.

very much likewise!


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

In Europe there are people prosecuted by courts because they saved other people
from drowning in the  Mediterranean Sea.  That is almost as absurd  as if there
were people being prosecuted because they save humans from drowning in the sea.


signature.asc
Description: PGP signature

Bug#859122: about 500 DLAs missing from the website

[Holger Levsen]

On Mon, Feb 11, 2019 at 03:56:41PM -0500, Antoine Beaupré wrote:
> It's true there's a lot of junk in there... I suspect most of the `.pl`
> scripts in there could actually be symlink to the main secteam scripts,
> because they are basically the same.
> 
> I also suspect most of the stuff is unused, even from the secteam's
> point of view. For example, `check-cve-refs.pl` assumes there's a
> `security/data` directory in the website, which is not the case
> (anymore?). 

I'll also leave that to the security/www teams considerations ;)

> I would suggest removing those from at least the LTS
> section and have done so in the following MR:
> https://salsa.debian.org/webmaster-team/webwml/merge_requests/55

I've reviewed, merged and pushed this now. Thank you!

 
> > * This new /lts section of the website is not referenced yet in other
> > places of the Debian website. I'm not sure if it should be referenced in
> > /security, in /releases/, or in both. There is also the temptation
> > of creating a link in the homepage but there is also the suggestion of
> > reducing the links in the homepage, so... For now, I'll try to add it to
> > the sitemap and see how many references to the LTS wiki page we have
> > currently, to see if any of them can be replaced with link to this
> > section in the website. But I'll wait some days to do it because it's
> > not clear for me if you want to populate the section to cover all the
> > aspects of LTS, or keep it only/mainly for security stuff.
> I would avoid putting the LTS work too proeminently on the website at
> this point, to be honest. The goal of publishing those advisories there,
> for me, is coherence: they were already partly present and I wanted to
> have them *all* available *somewhere* with a predictable URL and RSS
> feeds (as opposed to, say the mailing list).
 
agreed.

> We shouldn't get into the slippery debate of how much we want LTS
> content on the website, in my opinion.

at least for here and now! :)


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#922246: www/lts: if DLA-1234-1 and DLA-1234-2 exist, only that last one shows up in indexes

[Holger Levsen]

package: www.debian.org
x-debbugs-cc: debian-...@lists.debian.org


Hi,

this is a bug to track fixing this small glitch in the new /lts/security/ area:

On Mon, Feb 11, 2019 at 04:26:38PM -0500, Antoine Beaupré wrote:
> > On Sat, Feb 09, 2019 at 03:55:44AM +0100, Laura Arjona Reina wrote:
> >> * The /lts/security//index.*.html files show the last advisory for
> >> the cases where there are several files with the same beginning (e.g.
> >> for DSA- and DSA--2, both html files are generated, but the
> >> index only points to the -2 file). If this is not the intended
> >> behaviour, changes in index.wml and Makefiles are needed.
> > I think we want the other DLAs linked from the indexes as well.
> > shall we file a bug to not forget this?
> I looked into this, and couldn't figure it out.
> Please do file a bug for now, I have no idea how to fix this...

done :)


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: about 500 DLAs missing from the website

[Holger Levsen]

Hi,

On Mon, Feb 11, 2019 at 04:26:38PM -0500, Antoine Beaupré wrote:
> > I think we want the other DLAs linked from the indexes as well.
> > shall we file a bug to not forget this?
> I looked into this, and couldn't figure it out.
> Please do file a bug for now, I have no idea how to fix this...

ok, will do.

> >> that sets the redirect from
> >> https://www.debian.org/security/any_year/dla-whatever to
> >> https://www.debian.org/security/lts/any_year/dla-whatever
> > right. shall we file a bug to not forget this?
> Filed the patch here:
> https://salsa.debian.org/anarcat/dsa-puppet/merge_requests/1

cool, thank you.

> Reviews welcome. I'm particularly doubtful of the dla-map thing - it's
> not in the source repo, but can I assume it's present on the website
> deployment?

I cannot comment on that dla-map, the rest looks good to me. (And
simpler than I expected.)

> >> * Adaptation in the security tracker so the new URL paths are used from
> >> now on is also needed.
> > right. shall we file a bug to not forget this?

ok, will do.


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859122: about 500 DLAs missing from the website

[Holger Levsen]

Hi Laura,

many many thanks for your work on this, including and especially this
writeup!

some comments below, where I dont say anything I mean 'yay"! :)

On Sat, Feb 09, 2019 at 03:55:44AM +0100, Laura Arjona Reina wrote:
> * The /lts/security//index.*.html files show the last advisory for
> the cases where there are several files with the same beginning (e.g.
> for DSA- and DSA--2, both html files are generated, but the
> index only points to the -2 file). If this is not the intended
> behaviour, changes in index.wml and Makefiles are needed.

I think we want the other DLAs linked from the indexes as well.

shall we file a bug to not forget this?

> * Please review the content (text, links) of these files:
> /lts/index.wml
> /lts/security/index.wml

the former seems a bit bare to me. Also, isnt the 2nd enough, so that we
can just drop/not have the former?

> * This new /lts section of the website is not referenced yet in other
> places of the Debian website. I'm not sure if it should be referenced in
> /security, in /releases/, or in both.

I think there is no hurry for this, rather I would suggest to not
reference for now and then look again in 2-4 weeks, so that we get a
better idea where we want it.
 
> * We still need the Apache redirects, so the people that try the old
> URLs (wether directly because they knew, or via the security tracker),
> find the files they need. What we need to do is send a patch to
> 
> https://salsa.debian.org/dsa-team/mirror/dsa-puppet/blob/master/modules/roles/templates/apache-www.debian.org.erb
> 
> that sets the redirect from
> https://www.debian.org/security/any_year/dla-whatever to
> https://www.debian.org/security/lts/any_year/dla-whatever

right. shall we file a bug to not forget this?

> * Adaptation in the security tracker so the new URL paths are used from
> now on is also needed.

right. shall we file a bug to not forget this?

> Thanks for reading so long!

Thank you for getting us here!


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: about 500 DLAs missing from the website

[Holger Levsen]

Hi Antoine,

On Sun, Feb 03, 2019 at 02:08:06PM +0100, Salvatore Bonaccorso wrote:
> Thanks for working on this.

indeed!

> On Fri, Feb 01, 2019 at 01:44:10PM -0500, Antoine Beaupré wrote:
> > On 2018-12-19 18:05:36, Antoine Beaupré wrote:
> > > The DLAs are visible here:
> > > https://www-staging.debian.org/security/2018/dla-1580

that one is also visible on
https://www.debian.org/security/2018/dla-1580 now \o/

> > > One thing that's unclear is how the entries get added to the main list
> > > in:
> > > https://www-staging.debian.org/security/2018/
> IMHO they should not be mixed into the same namespace as the DSAs.
> https://www.debian.org/security/ is very specific to the
> debian-security-announce list and contains items for e.g. contacting
> the Debian security team or referecing the respective FAQ.
 
I agree.

(Thus I think
https://salsa.debian.org/webmaster-team/webwml/merge_requests/50 should
be cloded and not merged.)

OTOH I plan to review
https://salsa.debian.org/webmaster-team/webwml/merge_requests/53 once
more and then merge it.)

> I think having a dedicated https://www.debian.org/lts/ where those can
> be collected and having further information on LTS would be somehow
> better.

Yup.

> This will need an adjustment to the tracker side as well so that
> sources filed for Debian LTS DLA's will not link to
> https://www.debian.org/security/$year/dla-$nr .

*nods*

> If a dedicated subpage is not needed and the only purpose is to link
> to a webversion, and the DLA's do not show up in the overall view then
> possibly the status quo is still okay.

I think it's ok for now / the current situation is an improvement over
what we had before, but we really want/need one a dedicated page like
https://www.debian.org/lts/ too.


On Sun, Feb 03, 2019 at 02:38:02PM +0100, Laura Arjona Reina wrote:
> Note that we already have some DLAs published in
> www.debian.org/security/, for the years 2014, 2015 and 2016. See
> for
> example:
> 
> https://www.debian.org/security/2014/index
> 
> I don't mind to move the already published DLAs to other place if
> people
> decides it's better, but I frankly don't know if/where these URLs are
> used/publicised (in Debian and maybe other places too), and we may
> need
> to setup redirectors from the current URLs to the new ones (no problem
> with that, I say it only to not forget, in case we decide to move all
> the DLAs to a different place).

right. we should do that and probably track this with a bug...


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: automating process for publishing DLAs on the website

[Holger Levsen]

On Fri, Feb 01, 2019 at 01:58:04PM -0500, Antoine Beaupré wrote:
> I'm looking at the update process for DLAs on the main website again. 

\o/

> In
> #859122, I've mentioned that I have, again, updated the MR to include
> all DLAs up to DLA-1657-1. The www team folks tell me they will review
> that this weekend.

cool. (I'm offline right now but if this MR only has DLAs I'm tempted to
merge when back online...)

> But that mass-import process is kind of clunky: every time I need to
> download the entire archive, extract it, parse every email, and add the
> diff. It's slow and error prone and not automated, of course.
> 
> So I'm bringing back the topic of how we should automate this.

great!

> If I remember correctly, the current proposal is to add this as part of
> the workflow for LTS developers: when you send the announcement on the
> list, you also send a merge request on the website. This would get
> reviewed and merged by another LTS developer with access to the webwml
> repository:
> https://salsa.debian.org/webmaster-team/webwml/project_members

yes, thats the current plan to get this going.

> At least me and Holger have those accesses for now, and I would suggest
> people who do regular frontdesk work could make sure those MR are
> reviewed and merged in a timely manner as well.
> 
> Would that work for everyone here?

definitly for me (and for a start).

> If so, we can *already* start with that process, which would actually
> look like this.
> 
> One time setup:
> 
> git clone https://salsa.debian.org/webmaster-team/webwml
> cd webwml
> salsa fork
> 
> Each time there's a new DLA:
> 
> ./bin/gen-DLA --save $CHANGES # correctly claim the DLA
> $EDITOR DLA--Y # make sure the text is okay, like you normally
># do before the email gets sent
> mutt -H DLA--Y # send the email
> cd ~/src/webwml/english/security
> git checkout -b DLA--Y
> ./parse-dla.pl ~-/DLA--Y
> git add 2019/DLA-XXX-Y*
> $EDITOR 2019/DLA--Y* # make sure everything looks good
> git add 2019/DLA-XXX-Y*
> git commit -m'DLA--Y advisory'
> git push -u origin
> salsa mr

can you please put that on wiki.d.o/LTS/Development?!

> (Note: that "salsa" command is a new one shipped with devscripts. I only
> read the manpage and didn't actually test that. :) Unfortunately, once
> the MR is created, there's no magic command to merge it for
> reviewers... Seems like this needs to be done through the web
> interface.)

hmm (I think there is a way to do this with a cli).

> I'd be happy if someone sat down and actually tested that procedure.
> 
> The alternative, of course, is to setup "something" that would
> automatically parse emails to debian-lts-announce@l.d.o but I suspect
> that could be much more brittle than a manual operation like the above,
> even if it means slightly more work.

yeah. "laters"!

> Thank you for your attention.

very much likewise!


-- 
tschüß,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859123: automating process for publishing DLAs on the website

[Holger Levsen]

On Wed, Dec 19, 2018 at 09:52:19AM -0500, Antoine Beaupré wrote:
> > I also note #859122 is not marked 'patch'.
> fixed.
 
:)

> >> I've requested access as an individual, for what that's worth.
> > you were given access a week ago, too. \o/
> yup. I guess I could just merge my own patches now... or do you want to
> review them and do that instead, so we can get at least a second pair of
> eyes on them?
 
I just briefly reviewed them (not being a debian-www expert) and they
a.) looked good and b.) only affect our areas, so I do think you should
merge them.

> then if all is good I could push a batch to complete the backlog and get
> us started on an ongoing workflow...

yes!

thanks for following up on this!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859123: automating process for publishing DLAs on the website

[Holger Levsen]

Hi Antoine,

On Tue, Dec 11, 2018 at 10:15:15AM -0500, Antoine Beaupré wrote:
> >> How does that sound?
> > sounds very good to me. thanks for your work on this so far!
> Right, agreed. :) I guess the script could both parse previous emails
> and future ones quite easily.
 
yup, that would be cool.

> The problem we have right now is we have no feedback from the www team
> on the patches proposed in #859122 so I don't know if the formatting is
> alright.

I've just asked on #debian-www to comment:

[15:37] <  h01ger> | it would be very nice if you could comment on
the patches proposed/linked in #859122 - those are
https://salsa.debian.org/webmaster-team/webwml/merge_requests/41 and 
https://salsa.debian.org/webmaster-team/webwml/merge_requests/42
and
https://salsa.debian.org/webmaster-team/webwml/merge_requests/43

I also note #859122 is not marked 'patch'.

> Nor is it promising for the promptness with which the team can
> respond to our constant flurry of such MRs in the future...

I'm not this pessimistic: first, (after a while) those patches should 
be pretty clear ones and they will know that. second, I do think that in
the long term we should just be able to directly push our DLAs on the
website, without a (human) proxy.

> > So I've just requested webwml access from the debian-www folks.
> ... where did you do that?

on salsa. I was also granted access 4 weeks ago it seems :)

> Considering that the patches I proposed now 3 weeks ago haven't been
> merged, it seems it would be imperative for all LTS people to have
> access to the www repository in our workflow. Or at least a significant
> numebr of people. Otherwise we'll just be clogging their review queue
> forever.

agreed. and as said (previously): for a start being i'm happy to act as a human
proxy...

> I've requested access as an individual, for what that's worth.

you were given access a week ago, too. \o/

> I've also got feedback from larjona on IRC, saying she didn't have time
> to work on this yet, but ping'd the team to see if someone else
> will. Otherwise she might be able to review our work in January.

that's almost like next week ;)

> I wonder if we could consider more automation here to remove the manual
> push/pull process, because it seems it will be a significant source of
> friction in our process in the future...

sure, more automation = better.

> Anyways, hopefully we'll figure out a workflow soon enough. :)

I'm confident we will, eventually. #859122 was filed >18 months ago, so
I don't think it's suddenly urgent, though I fully agree it would be
more than nice to have this fixed before the bug is two years old.


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#859123: automating process for publishing DLAs on the website

[Holger Levsen]

On Mon, Nov 19, 2018 at 07:07:26PM -0500, Antoine Beaupré wrote:
> The process broke down a while back, and reasons don't matter. We need
> to figure out how to fix this.
> 
> So I opened #859122 to import the missing DLAs and I've made good
> progress.
> 
> But I've opened this bug report (#859123) to fix the process. So far,
> the idea we had was to make LTS contributors submit a patch to the
> website as part of the DLA publication process. You'd run the little
> "parse-dla.pl" script which would create two files in the webwml git
> repository, separate from the security tracker! that's where the
> debian.org website lives.. Then you'd commit those and send a merge
> request to the project (or just push if you have the rights). The
> webmaster folks seemed to be open to grant us access to the repo to
> remove friction as well..
> 
> How does that sound?
 
sounds very good to me. thanks for your work on this so far!

> Another thing I thought we could do would be to hook that script into a
> mailbox that would receive mail from the debian-lts-announce list and
> automatically publish the results into git. But so far my efforts at
> automating things on Debian infrastructure have mostly failed, so I'm
> not sure it's the way to go. Besides, the parse-dsa.pl script isn't
> exactly solid, and don't like the idea of parsing arbitrary input like
> this without a human oversight. But it would certainly reduce friction
> to a minimum, which I like.

I better like your above proposal than generating data from parsing mails which
we have sent previously.

So I've just requested webwml access from the debian-www folks.


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Documenting installer issues for jessie LTS

[Holger Levsen]

Hi,

thanks for your work on documenting how to install jessie these days!

On Sat, Nov 10, 2018 at 10:23:45PM +, Ben Hutchings wrote:
> I assume this is going to appear at
> .  That seems
> a fairly prominent place, though the errata are quite a way down the
> page so may be missed.
 
speaking of stuff which might be missed: 
https://www.debian.org/releases/jessie/debian-installer/ has a prominent
note (marked with a red icon) saying/starting with: "If any of the
hardware in your system requires non-free firmware to be loaded with the
device driver..."

I think it would be great if "Debian 8 has been superseded by Debian 9
("stretch")..." could have such a red warning icon as well!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Re: Documenting installer issues for jessie LTS

[Holger Levsen]

On Fri, Nov 09, 2018 at 01:50:48AM +, Ben Hutchings wrote:
> I have updated the wiki LTS/Installing page and added post-installation 
> steps to install the missed upgrades.  However, I wonder whether it
> would be helpful and possible to update the release notes or other
> official documentation at this stage?
 
I think your LTS/Installing page is fine (and nice work there, thanks!) - in
general we encourage to install stable, so IMHO we dont need to provide
updated images... that said: i dunno if anyone expressed demand.


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#887992: closed by Rhonda D'Vine (filelist working again)

[Holger Levsen]

On Thu, Oct 18, 2018 at 01:51:22PM +, Debian Bug Tracking System wrote:
>  sorry for the large delay in addressing this.  This seems to be an
> issue since the change of the Contents files to by-hash symlinks, which
> seems to have been done July 2017 because the filelists db files got
> last updated back then.
> 
>  Given that the safeguard in the parsing script was doesn't apply anmore
> since the removal of wheezy, removing the symlink check in there was the
> sane move: https://deb.li/S6tc
> 
>  Sorry for any inconvenience this caused, and that it took so long to
> get it fixed. :/

Thanks for fixing it after all! :)


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature

Bug#900421: improve "wiki account creation delayed" message

[Holger Levsen]

On Wed, May 30, 2018 at 04:08:00PM +0100, Steve McIntyre wrote:
> >"Account creation *delayed*: to prevent spam, this wiki requires additional
> >information from some people. Please contact w...@debian.org and describe
> >what you want to do in the wiki. To repeat: please mail us if you need
> >an account."
> >
> >(I replaced "failed" with "delayed" and add the last sentence.)
> 
> ACK. I think I prefer "denied" in this case - I'd worry that some
> people might mis-read "delayed" to suggest it'll work if they just
> wait.

I think that would have a similar effected as "failed". How about:

"Account creation *delayed*: to prevent spam, this wiki requires additional
information from some people. Please contact w...@debian.org and describe
what you want to do in the wiki. You *must* mail us if you need an account.
If you don't mail us, no account will be created."


-- 
cheers,
Holger


signature.asc
Description: PGP signature

Bug#900421: improve "wiki account creation delayed" message

[Holger Levsen]

package: wiki.debian.org
severity: wishlist
x-debbugs-cc: debian-backports.lists.debian.org

Dear wiki admins,

On Wed, May 30, 2018 at 04:24:20PM +0200, Geert Stappers wrote:
> On Wed, May 30, 2018 at 01:57:26PM +, Christian Heutger wrote:
> > I now uploaded to https://www.heutger.net/backports/
> > and tried to create a wiki account, but got " Account creation failed:
> > To prevent spam, this wiki requires additional information from some
> > people. Please contact w...@debian.org and describe what you want to
> > do in the wiki...", so I try to get that sorted out now.

I've experienced this several many times, that people are confused by
the message, despite it says what it says. Thus I suggest to make it
even clearer.

How about: 

"Account creation *delayed*: to prevent spam, this wiki requires additional
information from some people. Please contact w...@debian.org and describe
what you want to do in the wiki. To repeat: please mail us if you need
an account."

(I replaced "failed" with "delayed" and add the last sentence.)


-- 
cheers,
Holger


signature.asc
Description: PGP signature

Re: Bug#845297: Migration to Salsa - reorganization of webmaster-team and repos

[Holger Levsen]

On Sat, May 12, 2018 at 09:08:51AM +0800, Paul Wise wrote:
> Thanks for dealing with the migration, it is much appreciated.

$(figlet "+1")


-- 
cheers,
Holger


signature.asc
Description: PGP signature

Bug#898258: www: please document the exact red color for the debian logo

[Holger Levsen]

Package: www.debian.org
Severity: wishlist

Dear Maintainer,

https://www.debian.org/logos/ describes how the Debian logo looks like,
but unfortuantly it doesnt include a Pantone or HKS color value for
proper printing. 

However, as documented on https://wiki.debian.org/DebianLogo
the red used in the font is PANTONE Rubine Red 2X CVC, though it's a bit
more complicated as you can read there and on
https://web.archive.org/web/20110215210046/http://small.dropbear.id.au/debian.html
 

Please include this information on https://www.debian.org/logos/ &
thanks for maintaining www.debian.org!

-- 
cheers,
Holger


signature.asc
Description: PGP signature

Bug#887992: debian-www: filelist misses files: debian-edu-config contains bogus file /usr/share/man/man1/.1.gz

[Holger Levsen]

package: www.debian.org

Hi,

I've filed this as #887990 (against debian-edu-config) and now I'm filing this
bug against www.debian.org as
https://packages.debian.org/sid/all/debian-edu-config/filelist should
show all files... 

On Mon, Jan 22, 2018 at 12:53:59PM +0100, Holger Levsen wrote:
> Package: debian-edu-config
> Version: 1.947
> Severity: normal
> 
> hi,
> 
> $ dpkg --contents debian-edu-config_1.947_all.deb|grep 1.gz
> -rw-r--r-- root/root   392 2018-01-21 17:29 ./usr/share/man/man1/.1.gz
> -rw-r--r-- root/root   392 2018-01-21 17:29 
> ./usr/share/man/man1/update-ini-file.1.gz
> 
> this can also be seen with apt-file but strangely not on
> https://packages.debian.org/sid/all/debian-edu-config/filelist
> (the latter might be a seperate bug against debian-www)


-- 
cheers,
Holger


signature.asc
Description: PGP signature

Re: Let's stop using CVS for debian.org website

[Holger Levsen]

On Thu, Nov 24, 2016 at 12:20:35PM +0100, Jonas Smedegaard wrote:
> Interesting data points.

thanks.

> Can you get these related data points too?

I dont, sorry, etoobusy.

> - relevant for those with 
> limited internet bandwidth (as is the case for some translators):
> 
>   * amount of data transfered over the wire for initial full git clone
>   * amount of data transfered over the wire for shallow git clone
>   * amount of data transfered over the wire for CVS clone
>   * disk space used for CVS clone
> 
> Should be possible to get the git data by cloning from yourself via 
> localhost: URL (to ensure that git does not use hardlink optimixations).


-- 
cheers,
Holger


signature.asc
Description: Digital signature

Re: Let's stop using CVS for debian.org website

[Holger Levsen]

Hi Laura,

thanks *a lot* for leading this migration! Much much appreciated!

On Wed, Nov 23, 2016 at 11:21:08PM +0100, Laura Arjona Reina wrote:
> I have setup this git repo:
> https://anonscm.debian.org/cgit/webwml/webwml2git.git
> for me and the people interested to work on the migration.
 
wow, awesome!

As some people fear the size of the git repo, I've done a test:

cloning took 5-6min (granted over a fast network connection) and requires
628mb of diskspace in the end.

however, cloning using --depth 1 did not work :(

$ git clone --depth 1 https://anonscm.debian.org/cgit/webwml/webwml2git.git
Cloning into 'webwml2git'...
fatal: The remote end hung up unexpectedly
fatal: protocol error: bad pack header

however if I clone locally (well using file://…) with --depth 1 I can
see that it needs 454mb diskspace.

Not too bad IMO.

> My plan is update the master branch daily with the new cvs commits, and
> use branches to work on the approaches mentioned in the wiki page
> https://wiki.debian.org/WebsiteGitTransition
> 
> The branches include a "cvs-revisions" file with the results of the
> git-cvsimport (it will be updated daily, too), that may be useful.
> 
> You can find more details in the bug report (#845297):
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845297

very very cool!

> People interested in working on the migration to git, or tracking what's
> happening with it from now on, *please* subscribe to the bug and the
> wiki page, and use them to send/write your ideas, patches, etc.

done.

> Note that I have no Perl scripts, very few bash scripts, and I just
> learned about po4a yesterday, so don't think that I can do the migration
> alone! I'll try to ease the work of anybody wanting to work, though, and
> gather all the important info in the bug repo, and wiki page.

hehe, very very nice.

and just as a side anecdote… when I started the DebConf videoteam back in
2005, I had no clue about video nor audio whatsoever… motivation can take
one a long way! enjoy your journey! :-)


-- 
cheers,
Holger


signature.asc
Description: Digital signature

Bug#824834: outdated info on www: Debian GNU/hurd probably not planned for wheezy anymore…

[Holger Levsen]

On Fri, May 20, 2016 at 11:01:55AM +0200, Samuel Thibault wrote:
> Fixed, thanks :)

Thank you for fixing this so quickly too! :)


-- 
cheers,
Holger


signature.asc
Description: Digital signature

Bug#824834: outdated info on www: Debian GNU/hurd probably not planned for wheezy anymore…

[Holger Levsen]

package: www.debian.org
x-debbugs-cc: debian-h...@lists.debian.org

Hi,

https://www.debian.org/ports/hurd/ contains the following:

"We hope to be able to release Debian GNU/Hurd for wheezy."

As you might be aware, wheezy has been released and so has jessie, so
you might want to update the text on this page :-)


-- 
cheers,
Holger


signature.asc
Description: Digital signature

Bug#813341: Please update the debian logo of your service

[Holger Levsen]

Hi,

first of all: dear publicity team, thanks for handling this so very well. Even 
though these are very sad circumstances, I was proud and happy being part of 
Debian when I read Laura's mail here yesterday. Same goes for Ian's memorial 
event at FOSDEM. Thank you.

On Sonntag, 31. Januar 2016, Stefano Zacchiroli wrote:
> Uhm, I'm not entirely sure. My point is that, I suspect, we want the
> official logos on that page to look "normal" also during exceptional
> circumstances (e.g., for people who might want to download and store
> them). Whereas the logos that appear as part of the website theme should
> look exceptional during exceptional circumstances. And you can't have
> both.
> 
> So I think we need a dedicated URL for logos meant to be hotlinked. And
> to give someone (like the publicity team) the ability to make the files
> behind those URLs point to either the normal logos, or the exceptional
> ones, as needed.

While I think this is a technically sound proposal how to do hotlinking, I'm 
not sure I want to do that for the services I maintain, as a matter of 
principle. Hotlinking to a different site is bad, as this leaks visitor 
information to a different entitity. Granted, it's a different entity in the 
same organisation, but still.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#804659: points to long gone patch-tracker.debian.org

[Holger Levsen]

package: www.debian.org

Hi,

Thanks for maintaining the Debian webpages!

https://packages.debian.org/sid/irssi has a link labeled "Debian Patch 
Tracker" in the navigation on the right, pointing to http://patch-
tracker.debian.org/package/irssi/0.8.17-1 but patch-tracker.debian.org is gone 
since years.

Please remove this link or replace it with a link titled "Sources" pointing to 
http://sources.debian.net/src/irssi/0.8.17-1


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#773660: dsa-3108 returns 404, I think that explains...

[Holger Levsen]

Hi Andrei,

On Montag, 22. Dezember 2014, Andrei POPESCU wrote:
 On Du, 21 dec 14, 19:05:37, Holger Levsen wrote:
  http://www.debian.org/security/2014/dsa-3108 returns a page not found
  error, I guess that explains... now why is this DSA missing?
 Could it be...
 http://www.debian.org/security/faq#missing

no, it was released. this is a case of the DSA not being commited to the 
website...

See
https://wiki.debian.org/DebianSecurity/AdvisoryCreation/SecFull#Creating_website_pages


cheers,
Holger




signature.asc
Description: This is a digitally signed message part.

Bug#773660: dsa-3108 returns 404, I think that explains...

[Holger Levsen]

many thanks, Andreas!


signature.asc
Description: This is a digitally signed message part.

Bug#773660: www.debian.org(/security) misses critical information

[Holger Levsen]

package: www.debian.org
severity: important
x-debbugs-cc: t...@security.debian.org

Hi,

verbatin from #debian-security:

h01ger | the german version of http://www.debian.org/ only show dsa-3091 
from december 7 as latest
h01ger | oh, same for http://www.debian.org/index.en.html
h01ger | http://www.debian.org/security/ has it though - even in germam
h01ger | now www.d.o has them. yay caching?
h01ger | but it still misses dsa-3107-1, dsa-3108-1 and 3107-2
h01ger | also on the security page


Thanks for maintaining www.debian.org!


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#773660: dsa-3108 returns 404, I think that explains...

[Holger Levsen]

http://www.debian.org/security/2014/dsa-3108 returns a page not found error, I 
guess that explains... now why is this DSA missing?


signature.asc
Description: This is a digitally signed message part.

Bug#762255: please also mention SUAs on www.debian.org

[Holger Levsen]

clone 762255 -1
retitle -1 please also mention SUAs and d-s-a@l.d.o on .debian.org
thanks

Hi,

since 2009 clamav (security) updates have been pushed via (what is now) 
stable-updates and thus SUAs have been sent to 
https://lists.debian.org/debian-stable-announce and (AFAIK) this is not 
visible on www.debian.org at all.

It would be great to have DSAs, SUAs and DLAs all visible on www.debian.org, 
like DSAs are visible today.

Thanks for your work on www.debian.org!


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#710704: fixed is not a severity.

[Holger Levsen]

package: bugs.debian.org
x-debbugs-cc: debian-www@lists.debian.org

Hi,

http://www.debian.org/Bugs/server-refcard.en.html claims Severities are 
critical, grave, serious, important, normal, minor, wishlist, fixed. which is 
wrong, fixed is not a severity.


cheers,
Holger



signature.asc
Description: This is a digitally signed message part.

Bug#703237: why wontfix

[Holger Levsen]

Hi Martin,

why did you tag this bug wontfix? I think it's rather bad style to do so 
without explaination.


cheers,
Holger


-- 
To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201303171236.46441.hol...@layer-acht.org

armhf missing on http://www.debian.org/devel/debian-installer/

[Holger Levsen]

Hi,

armhf is completly missing on http://www.debian.org/devel/debian-installer/ 
while eg
http://ftp.nl.debian.org/debian/dists/testing/main/installer-armhf/current/images/
 
does exist, just like the rest. 

Makes testing the efika support kind of hard :)


cheers,
Holger


-- 
To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201205281153.30212.hol...@layer-acht.org

Re: [Debconf-team] debconf11: please add sponsorship logo in debian.org site

[Holger Levsen]

Hi Simon,

On Donnerstag, 9. Juni 2011, Simon Paillard wrote:
 Just FTR for those whose homepage is not www.debian.org, debconf 11 logo
 has been added, before we have a I'm going to debconf logo that fit.

nice! thank you (all involved)!


cheers,
Holger


-- 
To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201106121539.07647.hol...@layer-acht.org

Re: [Debconf-team] debconf11: please add sponsorship logo in debian.org site

[Holger Levsen]

On Dienstag, 7. Juni 2011, Stefano Zacchiroli wrote:
 On the other hand, considering the short time frame from now to the
 conference, I'd have no problem in having a DebConf link (not mentioning
 sponsoring) pointing to the DebConf website. 

full ack on everything you wrote here. a prominent debconf11 link on 
www.debian.org would be a  very nice thing to have!


cheers!


-- 
To UNSUBSCRIBE, email to debian-www-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201106071125.35796.hol...@layer-acht.org

Re: debianuserforums.org - new debian support forum

[Holger Levsen]

Hi Markus,

this is probably becoming off-topic for debian-www@ but... (feel free to reply 
privatly.)

On Samstag, 12. März 2011, markus tornow wrote:
 The main idea of that board, debianuserforums.org, is that it is run by its
 users.
 To make it short: it is supposed to be run fully democratic.
[...]
 No user of the board is more important than any other user of the board.

Ok.

 Markus Tornow,
 aka nadir and some other nicks.

are you (/do you count as) one user or many? How do other users know you are 
going by many nicks? Which nicks are those?


confused,
Holger



signature.asc
Description: This is a digitally signed message part.

Bug#515257: mention debian-live: bugs can be closed

[Holger Levsen]

On Mittwoch, 9. März 2011, David Prévot wrote:
 http://www.debian.org/CD/live/ and
 http://www.debian.org/devel/debian-live/ have also recently been added
 (and are in actively maintained by Ben Armstrong), thus closing, thanks
 for the follow up.

Yay! Thanks!


signature.asc
Description: This is a digitally signed message part.

Re: Fwd: [Debconf-video] Announcing debian/watch, the Debian Miro Community

[Holger Levsen]

Hi,

On Sonntag, 13. Februar 2011, Fernando C. Estrada wrote:
  Can anyone help on this item:
  * use something like watch.debian.net to point to our miro website

I'm not sure we should have video.d.n and watch.d.n point to the same content 
but different presentation of it. 

 UPDATE: Miro Community is transitioning to a new pricing structure.

There are some issues I have with miro (which I havent brought up as I was at 
an Debian Edu gathering this weekend and busy with Edu stuff..), this is one 
of them.

That said, http://debian.mirocommunity.org/ *looks* great! (And I applaud that 
very much.)


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#612444: peoples names on planet hard to read

[Holger Levsen]

package: www.debian.org
severity: minor

Hi,

did i say thank you to you for the new planet.d.o. layout already? Thank 
you!

* broonie finds the rendering of people's names on planet very hard to read.
(above the individual posts)
* h01ger agrees with broonie - those used to be more readable
Mithrandir uppercasing people's names doesn't help.
broonie Yeah, uppercase plus fixed width font is probably the most of it.
broonie I hadn't been sure if it was just me or not.

/me actually really likes the new planet layout - its looks nice, is cleaner 
and consistent!


cheers,
Holger

h01ger Mithrandir, broonie: i'm filing a bug about this, quoting you. shout 
if you mind.
Mithrandir h01ger: please feel free to.
broonie h01ger: Go ahead, thanks!


signature.asc
Description: This is a digitally signed message part.

Bug#612469: wiki: leftsidemenu layout

[Holger Levsen]

package: www.debian.org
severity: wishlist

Hi,

do you plan to provide other designs for the wiki? I used to use rightsidebar 
style but the new default is so much nicer (thanks again!!! :), but i miss my 
menu on the side (I use widescreens only...) - and I would actually prefer it 
on the left side...

I guess I would be willing to work on this one, I assume I can develop it 
using a personal css file?!


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

woot! finally a fresh website layout in production! Re: proposed banner for homepage, release squeeze.

[Holger Levsen]

Hi,

On Montag, 31. Januar 2011, Gerfried Fuchs wrote:
  This is the look of www.debian.org starting from squeeze release:
 http://www.deb.at/

wow! finally a new look!

Now I'm even more looking forward to the squeeze release in 5 days!


cheers,
Holger, who hopes the new look will continue to evolve too!
and who wasnt aware at all that this switch will indeed finally 
happen now.


signature.asc
Description: This is a digitally signed message part.

Re: Comment HP entry on http://www.debian.org/partners/

[Holger Levsen]

Hi,

On Sonntag, 16. Januar 2011, Steffen Möller wrote:
 the links to HP's web pages are completely avoid of the notion of Debian. I
 suggest to add a pointer to
 http://h71028.www7.hp.com/services/us/en/consolidated/os-debian.html

http://hp.com/go/debian seems even better to me.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#605893: please state that mails will be publically archived

[Holger Levsen]

package: www.debian.org
severity: wishlist

Hi,

please state on http://www.debian.org/intro/organization that mails to several 
addresses will be archived publically.


Thanks,
Holger


signature.asc
Description: This is a digitally signed message part.

wiki change

[Holger Levsen]

Hi,

something broke wiki.debian.org for stable konqueror users. i only get a blank 
page. works fine with w3m though... I'm fairly sure yesterday it was still 
working with konqueror, might have been sunday when I checked last...


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: wiki change

[Holger Levsen]

Hi,

On Dienstag, 14. September 2010, Martin Zobel-Helas wrote:
 there was a routing issue at the hoster last night, which has been fixed
 ~11:00 UTC.

now it works again here. Guess konqueror did more caching than w3m :)


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: [Debconf-team] debconf10 is _11th_ debian conference

[Holger Levsen]

Hi,

(as my last post on this subject accidently only went to -www@)

On Samstag, 21. August 2010, Alexander Reichle-Schmehl wrote:
   Anyway, Tenth Annual Debian Developer Conference in news page is
  wrong, please remove tenth or change it to Eleventh.

Yup. We have discussed this almost every year, or at least several times in 
the last 5 years. DebConf10 was the eleventh DebConf. 

To avoid confusion, it's probably best to change it to Anual.

And to be more inclusive to non-developer type contributors, it's probably 
best to call it The Anual Debian Conference.

 Sorry, no.  Feel free to do decide whatever for future conference, but
 the current webpage is an announcement that has been sent out the way it
 is.

Bugs should still be fixed.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: [Debconf-team] debconf10 is _11th_ debian conference

[Holger Levsen]

Hi,

On Sonntag, 22. August 2010, Alexander Reichle-Schmehl wrote:
 To clarify a bit about that (and some comments on irc:):  It was neither
 a typo, nor written in a hurry.  I got that text from the debconf team,
 when I read the text, I asked on the #debconf-team channel (see
 http://paste.debian.net/84936/ for some logs), and even after that there
 was plenty of time to review it.

I think this very irc log proves my point that the text was written^wreviewed 
and decided in hurry.

(Which is not a problem at all per se, I know very well how conferences work.)

 So according to me, it was neither a typo, nor a decission in hurry, not
 a bug. There was plenty of time to reconsider.

DebConf10 was not a time to reconsider anything, in my POV.

 So again:  If the deconf team decides to reconsider their numbering
 scheme (which I would really appreciate; but whatever you decide, please
 stick to it), we will of course follow it for any further announcements.

DebConf$PREVIOUS already decided DebConf$Number was the $number+1 DebConf, as 
we logically started counting as zero. 

So while I see your noble intend to now stick to an arbitrary choosen 
decission, your noble intend fails in recognizing previous team decisions.

(I dont remember exactly for which DebConf(s) we had this discussion already, 
but I'm 100% certain we had them, I and also think we had them more then 
once.)

 But this one has been sent with the content the dc team drafted and
 approved.  So let's just leave it the way it is.

I *strongly* object against this notion (that it was team drafted approved). 
This was a text thrown into an irc channel during a running conference (eg, 
while I did comment on the text, I only looked at it very briefly and only at 
some points, cause I was busy with dc10 video stuff), a conference which (IMO 
(*)) precisely lacked a properly working debconf team. Having to read now 
that this wording was team approved strikes me in horror, really. IMO, this 
text was chaos approved, not team approved.

And not wanting to fix a counting error, because a (working or not) 
team decided (with or without the quotes) that 2+2=5, is just wrong.

DebConf10 was the eleventh DebConf. No decission can change that.


cheers,
Holger

(*) details on that later, some people from the videoteam plan to write down 
what exactly (we think) went wrong this year. 

(And obviously, DebConf10 also went well in the end. I think that is due do an 
enourmous amount of outstanding contributions from individuals (who as a 
group make up parts of debconf-team) - but despite (or because) of this I do 
think that debconf10-team as a team failed greatly. (**) 

Also I dont want to discuss this under this angle, I dont think that would be 
productive. So this shall be my last contribution to this thread. Let's start 
a hopefully more productive one soon.)

(**) please note that I used debconf10-team and no local and no global there.


signature.asc
Description: This is a digitally signed message part.

Re: debconf10 is _11th_ debian conference

[Holger Levsen]

Hi,

On Sonntag, 15. August 2010, David Prévot wrote:
 Agreed. What about using a non-problematic phrase instead like (please
 correct in proper English):

   The 2010 Annual Debian Developer Conference

 and drop any mention of `tenth' or `eleventh' in order not to introduce
 a false affirmation, or what might sound confusing. Any one who cares to
 count how many DebConf occured has her response easily (cf. the left
 column of the main page of DebConf10 which list the ten Past DebConfs
 [0]), no need give the answer or argue about it.

Full ack on not mentioning the count.

But I'd also drop the Developer, making it The 2010 Annual Debian 
Conference.

DebConf (just as Debian) is open to non developers as well, and the title 
should reflect that. 


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#592170: please add debconf delegates to intro/organisation

[Holger Levsen]

package: www.debian.org
severity: wishlist
x-debbugs-cc: debconf-t...@lists.debconf.org, d...@debian.org, 
a...@azure.humbug.org.au

Hi,

please add DebConf and its Debian delegates somehow to 
http://www.debian.org/intro/organization

It's currently a bit unclear who the delegates are (and 
the delegation from 2006 should IMO be reviewed and renewed 
anyway), so for the moment this bug report should serve as 
a reminder to resolv this. 

Marga remembered that she, Ganneff and me (and probably others (*))
were delegates, but I couldnt find such a mail from aj to 
d-d-a now, which is no surprise to me, given that DebConf
has just ended. I could only find aj's statement in my AM 
report saying Formal acceptance as a developer will allow 
Holger to [...] be more officially involved in DebConf 
organisation as a formal delegate should that be useful.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: Using Flattr to donate to Debian?

[Holger Levsen]

Hi,

On Samstag, 24. Juli 2010, Holger Levsen wrote:
 as I understood it, a flattr button will also cause traffic to flattr from
 each visitor, which - even though very common today - has privacy issues we
 might want to avoid.

well, forget that. It's of course possible to serve that image from debian.org 
and only transmit data to flatr if a user wants to donate.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: Using Flattr to donate to Debian?

[Holger Levsen]

Hi,

On Donnerstag, 22. Juli 2010, Raphael Hertzog wrote:
 In general it looks reasonable but it has implications:

as I understood it, a flattr button will also cause traffic to flattr from 
each visitor, which - even though very common today - has privacy issues we 
might want to avoid.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: First Debian Installation: totally brain-dead. Where do I go from here?

[Holger Levsen]

Hi Keith,

please note that debian-www@ is about the debian website. You want to use 
debian-u...@lists.debian.org...

That said...

On Freitag, 2. Juli 2010, Keith Mitchell wrote:
 3. There is no gcc compiler. There is no Firefox web browser.

run as root:

apt-get install gcc
apt-get install build-essential
apt-get install iceweasel # debian doesnt have firefox, its nonfree

or 

apt-cache search gcc
apt-cache search firefox
apt-cache search iceweasel


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: XSS vulnerability in debian.org

[Holger Levsen]

Hi David,

ow...@bugs.debian.org is the right address for such reports.

On Mittwoch, 6. Januar 2010, David Shaw wrote:
 Hello,

 My name is David Shaw, and I am a security engineer with Redspin, Inc.

 While browsing debian.org today, I noticed that some of the fields were not
 correctly sanitized, leading to a cross-site scripting vulnerability.

 The URL to verify this vulnerability (with an XSS popup) is:

 http://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=%27%27;exclude=subject%3A%
22%3E%3Cscript%3Ealert%28%27xss%27%29%3B%3C%2Fscript%3E

 If this was not the correct email address to send this, I apologize and
 would like to request the correct address.

 Thank you,

 David Shaw


Thank you too :-)
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#558752: www.debian.org: Too many Alpha porters on intro/organization

[Holger Levsen]

On Dienstag, 1. Dezember 2009, Charles Plessy wrote:
 the Alpha port has actually already been dropped:
 http://lists.debian.org/debian-devel-announce/2009/10/msg0.html

thats exactly why I wrote what I wrote


signature.asc
Description: This is a digitally signed message part.

Re: About consultants page management: email and other compulsory fields

[Holger Levsen]

Hi,

On Donnerstag, 30. April 2009, Giuseppe Sacco wrote:
 What about NMMN? It is already listed without email address. Should we
 delete this entry as well?

NMMN  afaik hosts at least one .debian.org machine plus two m68k debian.net 
machines, so I assume they'd like to stay listed.

BCC:ing someone there, so they can get back in touch and clarify the issue.


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#272335: [rt.debian.org #1298] Bug#272335: www.debian.org do not support mod_gzip

[Holger Levsen]

Hi,

On Montag, 20. April 2009, Stephen Gran via RT wrote:
 A quick look at the munin stats suggests we don't use all that much
 bandwidth at present (or cpu, for that matter) so maybe it doesn't
 matter either way?

ain't there are third factor to consider: the bandwidth(+cpu) used on the user 
side? if the user has little bandwidth, mod_gzip enhances the browsing 
experience (if cpu is available to unzip).


regards,
Holger



signature.asc
Description: This is a digitally signed message part.

Bug#272335: [rt.debian.org #1298] Bug#272335: www.debian.org do not support mod_gzip

[Holger Levsen via RT]

Hi,

On Montag, 20. April 2009, Stephen Gran via RT wrote:
 A quick look at the munin stats suggests we don't use all that much
 bandwidth at present (or cpu, for that matter) so maybe it doesn't
 matter either way?

ain't there are third factor to consider: the bandwidth(+cpu) used on the user 
side? if the user has little bandwidth, mod_gzip enhances the browsing 
experience (if cpu is available to unzip).


regards,
Holger




signature.asc
Description: PGP signature

why dont new wiki pages default to gpl2 (was Re: User and groups justification (was Re: group nvram)

[Holger Levsen]

Hi,

(taking a thread from -devel)

On Freitag, 20. März 2009, Jon Dowland wrote:
 If you do so please bear in mind that doc/* in the base-passwd package is
 licensed GPL-2 and Debian wiki pages have no automatic explicit copyright
 exceptions (i.e. default to all rights reserved). See
 http://wiki.debian.org/Maintainers for an example of how to specify an
 explicit license for a new page (and the linked
 http://wiki.debian.org/DebianWiki/LicencingTerms for context and history)

/me is surprised. I do understand why it takes ages to solve the licence for 
already existing pages, but why dont new pages default to a sane licence, 
like gpl2?


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#512368: DebianWiki migrated

[Holger Levsen]

Hi,

On Montag, 16. März 2009, Frank Lin PIAT wrote:
  If I remember right, the GUI editor messed up several pages, so it was
  recommended not to use it (and I always hated it with a passion)
 Quite a few users choose moinmoin because it have a gui editor.

Fair enough..

  so the question is if it is really needed to have it enabled again.
 Finding bugs and fixing bugs... that's the game.

As long as doing arbitrary whitespace changes without being asked for is 
considered a bug grave enough not to re-enable it, I like this game :-)


regards,
Holger, who relies on being able to read the diff - the new link to the 
diff 
in the mail is a nice feature, btw :-) So thanks for the upgrade from me too!


signature.asc
Description: This is a digitally signed message part.

Re: Debian Wiki and wikihomepages

[Holger Levsen]

Hi,

On Samstag, 7. März 2009, Frank Lin PIAT wrote:
 There are lots of ISP/associations/companies that offer
 website/homepage/blog hosting for free. I suppose we can expect
 contributors to be able to get one.

wiki.debian-community.org is one.


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#516977: please mention debian-live

[Holger Levsen]

Hi,

On Dienstag, 24. Februar 2009, Holger Levsen wrote:
 debian-live (images) is (are) part of the official lenny release, yet they
 are not mentioned on http://www.debian.org/CD/torrent-cd/ - please fix
 this! :)

same on http://www.de.debian.org/CD/


 Thanks,
   Holger




signature.asc
Description: This is a digitally signed message part.

Bug#516977: please mention debian-live

[Holger Levsen]

package: www.debian.org

Hi,

debian-live (images) is (are) part of the official lenny release, yet they are 
not mentioned on http://www.debian.org/CD/torrent-cd/ - please fix this! :)


Thanks,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#516607: etch is not obsolete yet

[Holger Levsen]

package: www.debian.org

Hi,

h01ger http://www.debian.org/releases/ says etch is obsolete. shouldnt that 
say its current oldstable release and changed to obsolete stable once 
security support is ceased?

luk__ very probably, please be so kind to update it :-)

~/Projects/debian-www/webwml$ cvs up
cvs [update aborted]: connect to cvs.debian.org(192.25.206.10):2401 failed: 
Connection timed out

I'd appreciate if someone else could do it ;-)


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: Is anyone there

[Holger Levsen]

Hi,

On Freitag, 20. Februar 2009, Ionel Mugurel Ciobica wrote:
  Is anyone there?
 Did you actually read one word from debian web site to see in fact
 what are you asking?

No, he didnt. And you didnt notice this was just some clever new kind of spam 
to promote his domain. By replying you amplified his spam.


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Bug#512368: please disable the gui editor

[Holger Levsen]

package: wiki.debian.org
severity: wishlist

Hi,

reading the diff of edits done by the gui editor is terribly, as it 
adds random linebreaks and other changes, making spotting the real diff 
really hard.

Please disable the GUI editor completly or provide a way to disable it for 
certain pages, like wiki.debian.org/DebianEdu/*


Thanks,
Holger

P.S.: great that the wiki now has its own pseudo package in the BTS!


signature.asc
Description: This is a digitally signed message part.

move skolelinux.es to skolelinux foundation? Re: skolelinux.es don't exist.

[Holger Levsen]

Hi,

On Dienstag, 20. Januar 2009, Frank Lin PIAT wrote:
[www.skolelinux.es seems to be taken by a squatter]
 I am forwarding this mail to debian-edu and to the owner of the
 skolelinux.es website.

Strangely according to www.nic.es skolelinux.es belongs to Pablo:

Nombre del dominio  skolelinux.es
Titular Pablo Pita Leira
Fecha de Alta   27/03/2006
Fecha Caducidad 27/03/2009

Pablo, can you fix the strange content there?

Also, the domain will expire soon. Can we move the domain to the norwegian 
skolelinux foundation?


regards,
Holger


signature.asc
Description: This is a digitally signed message part.

Re: Generating pdfs out of moinmoin/debian wiki

[Holger Levsen]

Hi Lukas,

On Thursday 04 December 2008 01:04, Lukasz Szybalski wrote:
 And how is this one generated? What tool, how you get the images in?

I answered that question a little way down:

  apt-get source debian-edu-doc for the source code, the wiki pages are at
  http://wiki.debian.org/DebianEdu/Documentation/Etch
 
 
  regards,
 Holger


pgpRvnuXMKp28.pgp
Description: PGP signature

Re: Generating pdfs out of moinmoin/debian wiki

[Holger Levsen]

Hi,

On Wednesday 03 December 2008 18:28, Lukasz Szybalski wrote:
 http://wiki.debian.org/MoinMoin/GeneratePdf
 I was surprised by the quality of that pdf.
 Here is a sample:

here is another, with translated images even: :)

http://maintainer.skolelinux.org/debian-edu-doc/de/release-manual.pdf

see http://maintainer.skolelinux.org/debian-edu-doc/ for the available 
translations :)

apt-get source debian-edu-doc for the source code, the wiki pages are at 
http://wiki.debian.org/DebianEdu/Documentation/Etch


regards,
Holger


pgpt960eaqXlN.pgp
Description: PGP signature

Re: DebianWiki: Draft of a new frontpage [RFC]

[Holger Levsen]

Hi,

On Friday 28 November 2008 14:23, Franklin PIAT wrote:
 I would like to get more feed-back (even from people that
 aren't involved in the wiki.)

I liked the sidebar on the left, though I think some of the links should point 
to www.d.o instead of wiki.d.o


regards,
Holger


pgpuCyxyKD0BP.pgp
Description: PGP signature

Re: DebianWiki: Draft of a new frontpage [RFC]

[Holger Levsen]

Hi,

dropping -publicity@

On Saturday 29 November 2008 01:52, Frank Lin PIAT wrote:
 I have dropped the News entry. (Since I rewrote the News page, I
 have noticed that the wiki contains no single news feed).

 Documentations and InstallDebian are merely placeholders that points
 to official location. The aim is to prevent contributors from
 duplicating official documentation.

Sounds good.

 The Events page could link to not-so-large events (quite similar to
 local groups, actually).

like www.debian.org/events ? 

 Did you have some other links in mind?

maybe http://wiki.debian-community.org/planets/ ?


regards,
Holger


pgpBc6ZsaJVqq.pgp
Description: PGP signature

Re: css compliance

[Holger Levsen]

Hi,

On Friday 21 November 2008 17:43, Frank Lin PIAT wrote:
 We have this kind of reports from time to time, but that is a false
 negative.
 http://lists.debian.org/debian-www/2007/10/msg00283.html

Maybe this can be put as a comment into the css file, next to the 
property -moz-border-radius definition?!


regards,
Holger


pgpDbTKAJVXYH.pgp
Description: PGP signature

Bug#504613: please create a buildd.d.o pseudo-package for bug-tracking

[Holger Levsen]

package: bugs.debian.org
severity: wishlist
x-debbugs-cc: debian-www@lists.debian.org

On Wednesday 05 November 2008 17:25, Gerfried Fuchs wrote:
  Hmm, I'm not too sure if there is a (pseudo) package that this bug
 could get cloned to for that

As several people have stated that such a pseudo-package would be useful and 
since bugs.debian.org/general also has two buildd.d.o related bugs, I'm 
hereby requesting a buildd.d.o pseudo-package for bug-tracking.


regards,
Holger


pgplMR3U1Jkcz.pgp
Description: PGP signature

Bug#501954: use ikiwiki instead of MediaWiki or MoinMoin

[Holger Levsen]

Hi,

I'm tempted to open a bug report with this subject (use ikiwiki instead...) 
and the same wording as 501954.

IOW: I think this bug is quite useless.


regards,
Holger

P.S.: I also do think that switching to ikiwiki is more worthwhile than 
switching to mediawiki... mediawiki  moinmoin use the same concepts, ikiwiki 
is different and would also allow to bring www.d.o and wiki.d.o closer 
together.


pgpSEd7vb4vFp.pgp
Description: PGP signature

Re: Clarify squeak status on http://www.debian.org/devel/wnpp/unable-to-package ?

[Holger Levsen]

Hi Ben,

thanks for bringing this up.

On Thursday 03 July 2008 16:28, Ben Armstrong wrote:
 I see squeak on:
 http://www.debian.org/devel/wnpp/unable-to-package

 * squeak -- license issues.

 Maybe this should be clarified, now that squeak-vm is in Debian? (There
 are still license issues with the squeak images, but the avg. user
 might not make the distinction between squeak-vm and squeak-image)

Right.

The etoys image (thats the one used by OLPC) doesnt have licenced issues 
anymore, OTOH. Despite of this it's in non-free, (not for licence reasons 
though, but) for reasons described in /usr/share/doc/etoys/README.non-free.
(I plan to file a bug report against ftp.debian.org about this once I have a 
bit more air to breath, currently I'm happy it's at least apt-get 
installable.)


regards,
Holger


pgpKXenA0VA5s.pgp
Description: PGP signature

Re: wiki : experimenting moinmoin 1.7

[Holger Levsen]

Hi Franklin,

On Monday 23 June 2008 01:16, Franklin PIAT wrote:
 Jonas Smedegaard has released the version 1.7 of moinmoin. I've setup
 an experimental copy[1] of wiki.debian.org, so we can detect bugs.

 Let me know if you need to enable some extra features.

Could you please enable docbook export?

http://www.klabs.be/wiki/DebianEdu/Documentation/Etch?action=showmimetype=text/docbook
 
says ImportError - No module named ext.reader

There are several docbook fixes mentioned in the changelog and I would like to 
test, if the export has gotten better, so that I can close #458879 
eventually...


regards,
Holger


pgp601QwG4l60.pgp
Description: PGP signature

Re: Timeline of the Debian project

[Holger Levsen]

Hi Chris,

On Saturday 12 April 2008 14:51, Chris Lamb wrote:
 Oh, that's a shame. I've tried Epiphany 2.20.3 and Iceweasel 2.0.0.3 (from
 unstable). I know there are some problems with Konqueror too, but I don't
 have enough error messages to go on.

Try it yourself with konqueror? :)

  Could you create a png or pdf, too?
 I'm not sure I can - the timeline consists of a number of horizontal bands
 with differing scales, it wouldn't be particulary pleasant to read. It was
 also be a enourmous file, a few thousand pixels wide. :)

So what? It would be still useful to have, for example for printing banners. 
Also, my browser displays very wide images just fine, and allows me to scroll 
in them easily. I think having a real image would be beneficial.


regards,
Holger


pgpuyYh6QqgD9.pgp
Description: PGP signature

Bug#388141: Discussions elsewhere

[Holger Levsen]

Hi,

On Wednesday 12 March 2008 16:51, MJ Ray wrote:
 Can we reach broad consensus on 2-clause-BSD-style as default with
 other DFSG licences like GPLv2 being allowed?  

I'd prefer it vice versa. After all its Debian GNU/Linux, not BSD ;)


regards,
Holger


pgpzMuhwji1vR.pgp
Description: PGP signature