Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-10-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/10/11 Peter FELECAN :
>> I agree with this kludge only if its presence in the recipe is mandatory.
>
> Hm. We could make it mandatory, but then the default value should be
> "nobody" or something of the same meaning. The reason is that only a
> subset of packages have people who care about them. If we copy the
> current state from the package catalog, we'll effectively freeze the
> current package-maintainer relationship mapping. We will also not know
> whether there is anyone that cares about certain package. Therefore,
> there will be no gain.

Really I do not understand. As shown in my previous messages, we know
where to take the information, where to give it a good
usage. Conceptually it's not difficult. Unfortunately I do not have the
resources to implement this.

>From my point of view, I consider this discussion closed as I don't like
to run in circle chasing my tail.
-- 
Peter


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-10-11 Thread Matchek
2013/10/11 Peter FELECAN :
> I agree with this kludge only if its presence in the recipe is mandatory.

Hm. We could make it mandatory, but then the default value should be
"nobody" or something of the same meaning. The reason is that only a
subset of packages have people who care about them. If we copy the
current state from the package catalog, we'll effectively freeze the
current package-maintainer relationship mapping. We will also not know
whether there is anyone that cares about certain package. Therefore,
there will be no gain.

Maciej


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-10-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/10/11 Maciej (Matchek) Bliziński :
>> Here's an idea: we
>> could create an optional field in the recipe, which would be an
>> explicit list of maintainers of that package. If it's not present,
>> things work as previously. If it is there, it pins down the current
>> maintainer, and the package does go to a new owner.
>
> Errata, a "not" is missing, I meant "the package does not go to a new owner."

I agree with this kludge only if its presence in the recipe is mandatory.
-- 
Peter


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-10-11 Thread Matchek
2013/10/11 Maciej (Matchek) Bliziński :
> Here's an idea: we
> could create an optional field in the recipe, which would be an
> explicit list of maintainers of that package. If it's not present,
> things work as previously. If it is there, it pins down the current
> maintainer, and the package does go to a new owner.

Errata, a "not" is missing, I meant "the package does not go to a new owner."


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-10-11 Thread Matchek
I didn't have the time to write a short email, so I wrote a long one instead. :)

2013/9/16 Maciej (Matchek) Bliziński :
> Going back to the original subject, we know of the following facts /
> relations of people to a given package:
>
> - people who made edits to the build recipe (can be taken from the
> repository, it's not available for all packages)
> - person who built the package / ran mgar (this information is
> embedded in the package)
> - person who inserted the package into a catalog (could be a different
> person in each catalog)
>
> The above are the things we know. None of these things is the list of
> the Maintainers Of The Package.

I'd like to compare it with what Peter wrote earlier:
http://lists.opencsw.org/pipermail/maintainers/2013-August/018444.html

> 1. the user who modified the recipe
> 2. the user who built the package
> 3. the user who uploaded the package
> 4. the user who owns the package, from Mantis stand point

Here are the considerations:

ad 1. we kind of have that information, but the users here are from a
different user name space, e.g. I'm "maciej" on the buildfarm, but
"wahwah" on SourceForge. We'd need a mapping to meaningfully match the
two user names.

ad 2. this information is stored in package's pkginfo file

ad 3. there is no single upload operation we can refer to. The
following operations exist: (1) a POST request which sends the .pkg.gz
file to the web zone, causing the file to be saved in the allpkgs
directory, (2) a PUT request to the releases_web.py app which creates
a row in one of the tables. The row binds together the specific
package file, and a specific catalog. This row later results in the
presence of that package in the specific catalog on the mirror.
Maintainers can insert packages into any catalogs: unstable as well as
kiel and/or dublin. In most cases the inserts into the testing
(currently: kiel) catalog are done by a different person than the
maintainer.

ad 4. this field is sourced directly from the user who built the
package, but it doesn't have to be that way in principle

Given how things currently work, I don't see an existing data that we
can use for a more meaningful True Maintainer. Here's an idea: we
could create an optional field in the recipe, which would be an
explicit list of maintainers of that package. If it's not present,
things work as previously. If it is there, it pins down the current
maintainer, and the package does go to a new owner. But we would
require a certain etiquette to use it. For example, I would put myself
down as the Python package maintainer. There would be other packages
that happened to rebuild, but I don't care as much as I do about the
main Python package. If somebody else was rebuilding one of packages I
also happened to rebuild earlier, I would not like them to put my name
down as the maintainer. In other words: you would be supposed to only
add your own name to that list.

Would it make things better? I'm not sure. If I understand correctly,
Peter's intention was to kind of hide the fact that you've rebuilt a
package; so you rebuild the package, but you don't change the
maintainer name associated with the package. But the problem is that
the currently associated name is already as bogus as your name. Let me
illustrate:

Joe rebuilds the CSWfoo package from version 1.1 to version 1.2, but
he doesn't want to take the ownership of that package. The current
state is this:

CSWfoo 1.1, maintainer: Jane

But is Jane the true maintainer? No! She only did a rebuild of CSWfoo
from 1.0 to 1.1, and the package was previously rebuilt by Bob. But
was Bob the true maintainer? No, he only did a rebuild from 0.9 to
1.0. It can be turtles all the way.

In other words, the package maintainer written on a package is not as
meaningful as people often take it to be. Let's start by admitting it,
then see if we can improve on that.

I believe that True Package Ownership can be beneficial, but it should
be an opt-in thing, and for all other packages we should continue the
"who last touched it" tracking.

Maciej


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-09-16 Thread Matchek
2013/8/11 Peter FELECAN :
> "Maciej (Matchek) Bliziński"  writes:
>
>> I tried and failed. I wanted to record who uploaded which package to
>> which catalog. Unfortunately, our web proxy destroys this information.
>> Maybe it can be fixed with some clever HTTP header rewriting, but I
>> didn't manage to make it work.
>
> What's the proxy that we use?
>
> Can you show me where in the code this is done?

It turned out that it wasn't the proxy at all. I've discovered the bug
accidentally during the camp, while explaining the code to another
person. This is the fix:

http://sourceforge.net/apps/trac/gar/changeset/21921

From yesterday on, the buildfarm database has accurate information
about who inserted which package to which catalog. There also is a new
URL you can call to retrieve this information for a given catalog.

For example:
url=http://buildfarm.opencsw.org/pkgdb/rest/catalogs/unstable/sparc/SunOS5.10/timing/
curl -s $url | python -m json.tool | less

The last 3 elements in each list are:

- mtime of the svr4 file
- time the package was inserted into the catalog
- user name who did it, taken from HTTP auth

Going back to the original subject, we know of the following facts /
relations of people to a given package:

- people who made edits to the build recipe (can be taken from the
repository, it's not available for all packages)
- person who built the package / ran mgar (this information is
embedded in the package)
- person who inserted the package into a catalog (could be a different
person in each catalog)

The above are the things we know. None of these things is the list of
the Maintainers Of The Package.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-30 Thread Matchek
Funny we talked about the bus factor just now. I had a road accident two
weeks ago and I'm now in a hospital due to some complications. I'm on a
good way to recovery but I'm strongly computer-limited for a few days.

I was expecting to be back by now and writing the docs but it'll take me a
few additional days to be back in business^Wvolunteering.

Maciej

PS: top posting because phone
No dia 15/08/2013 10:51, "Peter FELECAN"  escreveu:

> "Maciej (Matchek) Bliziński"  writes:
>
> > 2013/8/15 Peter FELECAN :
>  2. As for the persons implementing this, from an efficiency point of
> view, who are the best suited candidates in your opinion?
> >>>
> >>> Anyone who cares and understands at least a little bit of Python.
> >>> Whoever does it, will have to walk through multiple stages and levels
> >>> of data processing. If someone new takes on this task, they will learn
> >>> a lot about the infrastructure and improve our bus factor (yay!).
> >>
> >> My question wasn't innocent as I read some parts of the code and I must
> >> confess that an architecture documentation, at least, is missing to
> >> understand the thing. For example I'll had a great difficulty to set up
> >> a test platform to explore the needed modifications.
> >
> > The problem with the buildfarm is that until other people tried, it
> > has ever been installed once. Then it was modified several times. We
> > didn't even know if it is still possible to install from scratch .
> >
> > In January this year, I've attempted to make an instructional video
> > how to set up a private buildfarm. I've realized that using the
> > resources I had at home, it was impossible. I've set out to adapt the
> > code so that you can set up a build host on a small virtual machine.
> > I'm working on the rewrite to this day; it is my priority.
> >
> > With regard to documentation, what level of detail do you think is
> > optimal? I'm willing to write the documentation, but I'd prefer that
> > someone reads it as I'm writing it so I have feedback if I'm on the
> > right track at all.
>
> This is an endeavor that I like and think necessary. I'm a volunteer for
> this: being a guinea pig for building a farm using your documentation
> and I'll give plenty of feedback in the process. We can use a different
> thread such as the process is public and well identified and others can
> chime in or even follow the construction themselves.
>
> >> I think that the
> >> effort needed to implement this by a novice is at least one order of
> >> magnitude greater than that for one who already knows the code and
> >> architecture.
> >
> > You're right, but there's no way around this; and me implementing it
> > isn't a solution. It only delays the symptoms. It's better for another
> > person to attempt now and have me to answer their questions. If a bus
> > hit me, it'd be worse.
>
> Yeah, the bus metaphor... OK, lets take an insurance against that
> undesirable event and proceed. The only thing which bothers me is that,
> for the purpose of the initial subject, i.e. NMU, is quite a yak shaving
> session. But I'm used to it, I do that more than what I really wish to
> focus on.
>
> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-15 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/15 Peter FELECAN :
 2. As for the persons implementing this, from an efficiency point of
view, who are the best suited candidates in your opinion?
>>>
>>> Anyone who cares and understands at least a little bit of Python.
>>> Whoever does it, will have to walk through multiple stages and levels
>>> of data processing. If someone new takes on this task, they will learn
>>> a lot about the infrastructure and improve our bus factor (yay!).
>>
>> My question wasn't innocent as I read some parts of the code and I must
>> confess that an architecture documentation, at least, is missing to
>> understand the thing. For example I'll had a great difficulty to set up
>> a test platform to explore the needed modifications.
>
> The problem with the buildfarm is that until other people tried, it
> has ever been installed once. Then it was modified several times. We
> didn't even know if it is still possible to install from scratch .
>
> In January this year, I've attempted to make an instructional video
> how to set up a private buildfarm. I've realized that using the
> resources I had at home, it was impossible. I've set out to adapt the
> code so that you can set up a build host on a small virtual machine.
> I'm working on the rewrite to this day; it is my priority.
>
> With regard to documentation, what level of detail do you think is
> optimal? I'm willing to write the documentation, but I'd prefer that
> someone reads it as I'm writing it so I have feedback if I'm on the
> right track at all.

This is an endeavor that I like and think necessary. I'm a volunteer for
this: being a guinea pig for building a farm using your documentation
and I'll give plenty of feedback in the process. We can use a different
thread such as the process is public and well identified and others can
chime in or even follow the construction themselves.

>> I think that the
>> effort needed to implement this by a novice is at least one order of
>> magnitude greater than that for one who already knows the code and
>> architecture.
>
> You're right, but there's no way around this; and me implementing it
> isn't a solution. It only delays the symptoms. It's better for another
> person to attempt now and have me to answer their questions. If a bus
> hit me, it'd be worse.

Yeah, the bus metaphor... OK, lets take an insurance against that
undesirable event and proceed. The only thing which bothers me is that,
for the purpose of the initial subject, i.e. NMU, is quite a yak shaving
session. But I'm used to it, I do that more than what I really wish to
focus on.

-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-15 Thread Matchek
2013/8/15 Peter FELECAN :
>>> 2. As for the persons implementing this, from an efficiency point of
>>>view, who are the best suited candidates in your opinion?
>>
>> Anyone who cares and understands at least a little bit of Python.
>> Whoever does it, will have to walk through multiple stages and levels
>> of data processing. If someone new takes on this task, they will learn
>> a lot about the infrastructure and improve our bus factor (yay!).
>
> My question wasn't innocent as I read some parts of the code and I must
> confess that an architecture documentation, at least, is missing to
> understand the thing. For example I'll had a great difficulty to set up
> a test platform to explore the needed modifications.

The problem with the buildfarm is that until other people tried, it
has ever been installed once. Then it was modified several times. We
didn't even know if it is still possible to install from scratch .

In January this year, I've attempted to make an instructional video
how to set up a private buildfarm. I've realized that using the
resources I had at home, it was impossible. I've set out to adapt the
code so that you can set up a build host on a small virtual machine.
I'm working on the rewrite to this day; it is my priority.

With regard to documentation, what level of detail do you think is
optimal? I'm willing to write the documentation, but I'd prefer that
someone reads it as I'm writing it so I have feedback if I'm on the
right track at all.

> I think that the
> effort needed to implement this by a novice is at least one order of
> magnitude greater than that for one who already knows the code and
> architecture.

You're right, but there's no way around this; and me implementing it
isn't a solution. It only delays the symptoms. It's better for another
person to attempt now and have me to answer their questions. If a bus
hit me, it'd be worse.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-15 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/14 Peter FELECAN :
>>As we can see, there is no need of a new package field, nor to
>>query the database during the build to obtain the set of
>>maintainers.
>
> OK, so your idea is that the package will know who built the package,
> but will not know the maintainer set. One problem with this design is
> that if you tear down and rebuild the package database, you will lose
> the information about the maintainer sets. The same would happen with
> private buildfarms, they would not have this information. So far, I was
> always trying to enclose all the relevant information inside the
> packages.

I understand that but don't think that is an obstacle. BTW, the mantis
database contains the set of maintainers as all the managers of a
project. Consequently, we have backup of the information which can help
the reconstruction of the database.

>> 2. As for the persons implementing this, from an efficiency point of
>>view, who are the best suited candidates in your opinion?
>
> Anyone who cares and understands at least a little bit of Python.
> Whoever does it, will have to walk through multiple stages and levels
> of data processing. If someone new takes on this task, they will learn
> a lot about the infrastructure and improve our bus factor (yay!).

My question wasn't innocent as I read some parts of the code and I must
confess that an architecture documentation, at least, is missing to
understand the thing. For example I'll had a great difficulty to set up
a test platform to explore the needed modifications. I think that the
effort needed to implement this by a novice is at least one order of
magnitude greater than that for one who already knows the code and
architecture.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Matchek
2013/8/14 Peter FELECAN :
>As we can see, there is no need of a new package field, nor to
>query the database during the build to obtain the set of
>maintainers.

OK, so your idea is that the package will know who built the package,
but will not know the maintainer set. One problem with this design is
that if you tear down and rebuild the package database, you will lose
the information about the maintainer sets. The same would happen with
private buildfarms, they would not have this information. So far, I was
always trying to enclose all the relevant information inside the
packages.

> 2. As for the persons implementing this, from an efficiency point of
>view, who are the best suited candidates in your opinion?

Anyone who cares and understands at least a little bit of Python.
Whoever does it, will have to walk through multiple stages and levels
of data processing. If someone new takes on this task, they will learn
a lot about the infrastructure and improve our bus factor (yay!).

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/14 Peter FELECAN :
>> Laurent Blume  writes:
>>
>>> On 14/08/13 16:12, Peter FELECAN wrote:
 Each package has its set/group of maintainers. Is the simplest way.
>>>
>>> Is that easy to maintain, eg for recipe which create a bunch of packages?
>>
>> If we can do this for one, and we do, we certainly can do it for
>> many. Every operation that we have today for one maintainer can be reused
>> to manage another maintainer. Maybe Maciej can elaborate on this, he is
>> the guy who knows the code best.
>
> We still don't know how to implement it in details. The EMAIL field
> probably has to remain a single email address. We have to gradually
> develop an additional path of propagating maintainer information. For
> example:
>
> - a new pkginfo field MAINTAINERS
> - MAINTAINERS is a comma/space separated list of buildfarm user names
> - when a package is built, GAR makes a request to fetch the previous
> list from the buildfarm database, appends the currently building user
> to the list if not already there; put the list into the MAINTAINERS
> field
>   - this list in the buildfarm database is mutable; you can
> send a request to the buildfarm to remove a maintainer (themselves or
> another maintainer). When a maintainer is removed, the name is no
> longer returned by the query and upon the next package rebuild, the
> name is no longer on the list.
> - the EMAIL field is the fallback for MAINTAINERS
> - GAR side handling of EMAIL remains as it was
> - we gradually change the code everywhere to look at MAINTAINERS and
> not at EMAIL
>
> By the way - I'm not volunteering for implementing this. I'm focusing
> on another part of the code.

1. Your example is interesting but, from my point of view it's a little
   bit too complex and has the inconvenient of a query to the database
   during the package construction wich hinders an isolated usage.

   Let me simplify it by using a kind of poor man chronogram:

   1. In the beginning, a new package is built by an initial
  maintainer, lets name him m0.
  
  The package has the usual EMAIL field which is used to create
  the set of maintainers.
  
  The set of maintainers is { m0 }.

   2. Another maintainer, m1 does a NMU.
  
  Again, the EMAIL filed in the package contains the new
  maintainer's information. This is used to insert the new
  maintainer in the maintainers set.
  
  The set of maintainers is now { m0, m1 }.

   3. The first maintainers doesn't wish anymore to be aware of bug
  reports, retires or other whim.
  
  He or another responsible maintainer removes him from
  maintainers set using the safe_remove_package_maintainer tool.

  The set of maintainers is now { m1 }.

   4. Eventually the package is removed from the catalog.
  
  Either safe_remove_package is used as today or
  safe_remove_package_maintainer on a set having a sole
  maintainer.

   As we can see, there is no need of a new package field, nor to
   query the database during the build to obtain the set of
   maintainers.

2. As for the persons implementing this, from an efficiency point of
   view, who are the best suited candidates in your opinion?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Matchek
2013/8/14 Peter FELECAN :
> Laurent Blume  writes:
>
>> On 14/08/13 16:12, Peter FELECAN wrote:
>>> Each package has its set/group of maintainers. Is the simplest way.
>>
>> Is that easy to maintain, eg for recipe which create a bunch of packages?
>
> If we can do this for one, and we do, we certainly can do it for
> many. Every operation that we have today for one maintainer can be reused
> to manage another maintainer. Maybe Maciej can elaborate on this, he is
> the guy who knows the code best.

We still don't know how to implement it in details. The EMAIL field
probably has to remain a single email address. We have to gradually
develop an additional path of propagating maintainer information. For
example:

- a new pkginfo field MAINTAINERS
- MAINTAINERS is a comma/space separated list of buildfarm user names
- when a package is built, GAR makes a request to fetch the previous
list from the buildfarm database, appends the currently building user
to the list if not already there; put the list into the MAINTAINERS
field
  - this list in the buildfarm database is mutable; you can
send a request to the buildfarm to remove a maintainer (themselves or
another maintainer). When a maintainer is removed, the name is no
longer returned by the query and upon the next package rebuild, the
name is no longer on the list.
- the EMAIL field is the fallback for MAINTAINERS
- GAR side handling of EMAIL remains as it was
- we gradually change the code everywhere to look at MAINTAINERS and
not at EMAIL

By the way - I'm not volunteering for implementing this. I'm focusing
on another part of the code.

Thoughts?

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Peter FELECAN
Laurent Blume  writes:

> On 14/08/13 16:12, Peter FELECAN wrote:
>> Each package has its set/group of maintainers. Is the simplest way.
>
> Is that easy to maintain, eg for recipe which create a bunch of packages?

If we can do this for one, and we do, we certainly can do it for
many. Every operation that we have today for one maintainer can be reused
to manage another maintainer. Maybe Maciej can elaborate on this, he is
the guy who knows the code best.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Laurent Blume

On 14/08/13 16:12, Peter FELECAN wrote:

Each package has its set/group of maintainers. Is the simplest way.


Is that easy to maintain, eg for recipe which create a bunch of packages?

Laurent

___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/14 Peter FELECAN :
>>> 1. How do we remove a maintainer from a given group?
>>
>> This needs a specific command.
>
> Yes, it will be human initiated, the question is what command that is,
> will it be a new too, or a new option to an existing tool?

A new one as safe_remove_package has too explicitely other
subject. safe_remove_package_maintainer ?

>>> 2. What happens when the last maintainer is removed from a group?
>>> (Should it be allowed? And why?)
>>
>> e.g. when a package is to be removed from the catalog; probably should
>> imply the removal from the catalog, maybe transiting through a "orphaned"
>> state.
>
> One more question about groups: Is it just that each package has
> own group of maintainers, so it means there are (potentially) as many
> groups as there are packages? Or do groups exist independently of
> packages, and there are associations between groups and packages?

Each package has its set/group of maintainers. Is the simplest way.

Of course you can define sort of virtual users which correspond to a
group to which real users are attached and this virtual user can be a
manager, in mantis acception, of a package. How do you attach the real
users to the virtual one is another discussion.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Matchek
2013/8/14 Peter FELECAN :
>> 1. How do we remove a maintainer from a given group?
>
> This needs a specific command.

Yes, it will be human initiated, the question is what command that is,
will it be a new too, or a new option to an existing tool?

>> 2. What happens when the last maintainer is removed from a group?
>> (Should it be allowed? And why?)
>
> e.g. when a package is to be removed from the catalog; probably should
> imply the removal from the catalog, maybe transiting through a "orphaned"
> state.

One more question about groups: Is it just that each package has
own group of maintainers, so it means there are (potentially) as many
groups as there are packages? Or do groups exist independently of
packages, and there are associations between groups and packages?
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/14 Peter FELECAN 
>> When a maintainer builds and uploads a package for which his status in
>> Mantis is not "manager" he becomes part of the maintainers set for this
>> package.
>
> Sounds good.
>
> Additional things to consider:
>
> 1. How do we remove a maintainer from a given group?

This needs a specific command.

> 2. What happens when the last maintainer is removed from a group?
> (Should it be allowed? And why?)

e.g. when a package is to be removed from the catalog; probably should
imply the removal from the catalog, maybe transiting through a "orphaned"
state.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Matchek
2013/8/14 Peter FELECAN 
> When a maintainer builds and uploads a package for which his status in
> Mantis is not "manager" he becomes part of the maintainers set for this
> package.

Sounds good.

Additional things to consider:

1. How do we remove a maintainer from a given group?

2. What happens when the last maintainer is removed from a group?
(Should it be allowed? And why?)
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-14 Thread Peter FELECAN
I have a new proposition which I hope will satisfy everybody involved in
the discussion and probably beyond.

When a maintainer builds and uploads a package for which his status in
Mantis is not "manager" he becomes part of the maintainers set for this
package.

This satisfies at least the following requirements:

1. we have groups of maintainers
2. a previous maintainer is still informed on the issues related to the
   package
3. simple to implement on our infrastructure.

Please air your opinions!

TIA
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-13 Thread Matchek
2013/8/12 Peter FELECAN :
>> What I think we have, is this:
>> HTTP client → squid → Apache → script
>
> That we can imagine. When I'm asking "where is the emitting end" I refer
> to a place in the code. Sorry.

I missed this, sorry. Here it is:

http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/python/rest.py#L142
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-13 Thread Peter FELECAN
Yann Rouillard  writes:

> Well, I think I already expressed my opinion here:
> http://lists.opencsw.org/pipermail/maintainers/2013-August/018413.html
> But to recap: I am for promoting team for package maintenance, rather than
> replacing the notion of maintainers with uploaders, and I am for allowing
> uploads by non maintainers (or non member of a maintenance team) who don't
> want to take over maintenance.

You're right.

> In our case, unfortunately I am not sure we can create a lot of teams but
> we may create at least one core team to maintain some important base
> packages and one for dealing with orphaned packages in best effort mode.
>
> But I would like to hear the opinion of other people as it is an important
> change, maybe a subject for the summer camp.

I would like too.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Yann Rouillard
Well, I think I already expressed my opinion here:
http://lists.opencsw.org/pipermail/maintainers/2013-August/018413.html
But to recap: I am for promoting team for package maintenance, rather than
replacing the notion of maintainers with uploaders, and I am for allowing
uploads by non maintainers (or non member of a maintenance team) who don't
want to take over maintenance.

In our case, unfortunately I am not sure we can create a lot of teams but
we may create at least one core team to maintain some important base
packages and one for dealing with orphaned packages in best effort mode.

But I would like to hear the opinion of other people as it is an important
change, maybe a subject for the summer camp.

Yann









2013/8/12 Peter FELECAN 

> Yann Rouillard  writes:
>
> > BTW, I also think we should debate on point #2 raised by Maciej before
> > continuing:
> > "2. A package owner/maintainer is responsible for everything that's
> associated
> > with the package, e.g. any current and future bugs."
> > Because depending on the outcome, we may not need at all to implement
> what
> > you are trying to do.
>
> Of course. What's your opinion on it?
> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
Yann Rouillard  writes:

> BTW, I also think we should debate on point #2 raised by Maciej before
> continuing:
> "2. A package owner/maintainer is responsible for everything that's associated
> with the package, e.g. any current and future bugs."
> Because depending on the outcome, we may not need at all to implement what
> you are trying to do.

Of course. What's your opinion on it?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Yann Rouillard
Yes I agree, but if (2 != 3), I think 2 is more important than 3.
So I am just saying that it's better to work on storing 2 rather than 3 and
it's better to embed the information in the package itself.

Currently, I think pretty much everything in the database can be retrieved
from the content of a package (Maciej, do you confirm ?) and I think it's
more reliable that way.

Also if we set some rules one day related to NMU (like updating a
changelog), it would be easier to check them if the information is stored
in the package.


BTW, I also think we should debate on point #2 raised by Maciej before
continuing:
"2. A package owner/maintainer is responsible for everything that's associated
with the package, e.g. any current and future bugs."
Because depending on the outcome, we may not need at all to implement what
you are trying to do.

Yann



2013/8/12 Peter FELECAN 

> Yann Rouillard  writes:
>
> > I am not sure using the http protocol is the best way here.
>
> Yann,
>
> We are trying to solve the blocking issue which can make the proposed
> modification easy. So, it's a way. Probably not unique or best.
>
> > I think we don't really care about the uploader, we rather care about who
> > rebuilt the package.
> > Because he's the one who knows what modification was made.
> >
> > So I think it makes more sense to put that information in the package (in
> > pkginfo) at package build time, rather that trying to find it at upload
> > time from the authorization layer (even if usually uploader = last
> package
> > builder).
>
> This is another solution if it doesn't change the ownership of the
> package.
>
> From my point of view, there are 4 user related information:
>
> 1. the user who modified the recipe
> 2. the user who built the package
> 3. the user who uploaded the package
> 4. the user who owns the package, from Mantis stand point
>
> Most of the time 1 == 2 == 3 == 4 (nice isn't it?)
>
> Sometimes 1 != 2 == 3 != 4
>
> And other combinations...
>
> Now, I'm not saying the we must collect all this. What I'm saying is
> that the values can be different and not always inferred from each other.
>
> With the exception of 3, all the values can be contained by the
> package. And exactly 3 is the NMU finalization.
> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/12 Peter FELECAN 
>>
>> > The place to retrieve the user is here:
>> > http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207
>>
>> Alright. This is the receiving end. Where is the emitting end?
>
> There's a few stages: the HTTP client uses HTTP basic auth. That is
> handled by Apache; but squid is doing something to the headers. I'm
> not sure if we only have a forward proxy or a reverse proxy?
>
> What I think we have, is this:
> HTTP client → squid → Apache → script

That we can imagine. When I'm asking "where is the emitting end" I refer
to a place in the code. Sorry.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
Yann Rouillard  writes:

> I am not sure using the http protocol is the best way here.

Yann,

We are trying to solve the blocking issue which can make the proposed
modification easy. So, it's a way. Probably not unique or best.

> I think we don't really care about the uploader, we rather care about who
> rebuilt the package.
> Because he's the one who knows what modification was made.
>
> So I think it makes more sense to put that information in the package (in
> pkginfo) at package build time, rather that trying to find it at upload
> time from the authorization layer (even if usually uploader = last package
> builder).

This is another solution if it doesn't change the ownership of the
package.

>From my point of view, there are 4 user related information:

1. the user who modified the recipe
2. the user who built the package
3. the user who uploaded the package
4. the user who owns the package, from Mantis stand point

Most of the time 1 == 2 == 3 == 4 (nice isn't it?)

Sometimes 1 != 2 == 3 != 4

And other combinations...

Now, I'm not saying the we must collect all this. What I'm saying is
that the values can be different and not always inferred from each other.

With the exception of 3, all the values can be contained by the
package. And exactly 3 is the NMU finalization.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Yann Rouillard
I am not sure using the http protocol is the best way here.
I think we don't really care about the uploader, we rather care about who
rebuilt the package.
Because he's the one who knows what modification was made.

So I think it makes more sense to put that information in the package (in
pkginfo) at package build time, rather that trying to find it at upload
time from the authorization layer (even if usually uploader = last package
builder).

Yann




2013/8/12 Peter FELECAN 

> "Maciej (Matchek) Bliziński"  writes:
>
> > 2013/8/12 Peter FELECAN :
> >> Returning to the REMOTE_USER not being defined, after a cursory look at
> >> other people having issues with that it seems that even if the
> >> environment variable is not provided, there is a possibility to obtain
> >> the remote user from the "authorization" header, see
> >>
> http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
> >> but maybe this is also modified by the proxy.
> >
> > Normally the authorization header is stripped, unless you configure
> > Apache to specifically include it. The security concern is that you
> > expose the auth password to the script while you don't need to.
>
> Indeed. How about a rewrite? What are the other environment variables
> accessible to the script?
> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/12 Peter FELECAN :
>> Returning to the REMOTE_USER not being defined, after a cursory look at
>> other people having issues with that it seems that even if the
>> environment variable is not provided, there is a possibility to obtain
>> the remote user from the "authorization" header, see
>> http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
>> but maybe this is also modified by the proxy.
>
> Normally the authorization header is stripped, unless you configure
> Apache to specifically include it. The security concern is that you
> expose the auth password to the script while you don't need to.

Indeed. How about a rewrite? What are the other environment variables
accessible to the script?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
Dagobert Michelsen  writes:

> Hi Peter,
>
> Am 12.08.2013 um 14:43 schrieb Peter FELECAN :
>> "Maciej (Matchek) Bliziński"  writes:
>>> 2013/8/12 Peter FELECAN 
 
> The place to retrieve the user is here:
> http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207
 
 Alright. This is the receiving end. Where is the emitting end?
>>> 
>>> There's a few stages: the HTTP client uses HTTP basic auth. That is
>>> handled by Apache; but squid is doing something to the headers. I'm
>>> not sure if we only have a forward proxy or a reverse proxy?
>>> 
>>> What I think we have, is this:
>>> HTTP client → squid → Apache → script
>> 
>> Maybe Dago could provide a description of the architecture.
>> 
>> Returning to the REMOTE_USER not being defined, after a cursory look at
>> other people having issues with that it seems that even if the
>> environment variable is not provided, there is a possibility to obtain
>> the remote user from the "authorization" header, see
>> http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
>> but maybe this is also modified by the proxy.
>> 
>> We need more information about the proxy's configuration.
>
> You should be able to
>   ssh web
> with your pfelecan account which can also open /etc/opt/csw/squid/squid.conf

Thank you.

Can you confirm or correct the architecture hypothesis:

HTTP client → squid → Apache → script

More I read about this and more it seems that we must implement a
rewrite on the proxy to pass the REMOTE_USER.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Matchek
2013/8/12 Peter FELECAN :
> Returning to the REMOTE_USER not being defined, after a cursory look at
> other people having issues with that it seems that even if the
> environment variable is not provided, there is a possibility to obtain
> the remote user from the "authorization" header, see
> http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
> but maybe this is also modified by the proxy.

Normally the authorization header is stripped, unless you configure
Apache to specifically include it. The security concern is that you
expose the auth password to the script while you don't need to.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Dagobert Michelsen
Hi Peter,

Am 12.08.2013 um 14:43 schrieb Peter FELECAN :
> "Maciej (Matchek) Bliziński"  writes:
>> 2013/8/12 Peter FELECAN 
>>> 
 The place to retrieve the user is here:
 http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207
>>> 
>>> Alright. This is the receiving end. Where is the emitting end?
>> 
>> There's a few stages: the HTTP client uses HTTP basic auth. That is
>> handled by Apache; but squid is doing something to the headers. I'm
>> not sure if we only have a forward proxy or a reverse proxy?
>> 
>> What I think we have, is this:
>> HTTP client → squid → Apache → script
> 
> Maybe Dago could provide a description of the architecture.
> 
> Returning to the REMOTE_USER not being defined, after a cursory look at
> other people having issues with that it seems that even if the
> environment variable is not provided, there is a possibility to obtain
> the remote user from the "authorization" header, see
> http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
> but maybe this is also modified by the proxy.
> 
> We need more information about the proxy's configuration.

You should be able to
  ssh web
with your pfelecan account which can also open /etc/opt/csw/squid/squid.conf


Best regards

  -- Dago

-- 
"You don't become great by trying to be great, you become great by wanting to 
do something,
and then doing it so hard that you become great in the process." - xkcd #896

___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/12 Peter FELECAN 
>>
>> > The place to retrieve the user is here:
>> > http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207
>>
>> Alright. This is the receiving end. Where is the emitting end?
>
> There's a few stages: the HTTP client uses HTTP basic auth. That is
> handled by Apache; but squid is doing something to the headers. I'm
> not sure if we only have a forward proxy or a reverse proxy?
>
> What I think we have, is this:
> HTTP client → squid → Apache → script

Maybe Dago could provide a description of the architecture.

Returning to the REMOTE_USER not being defined, after a cursory look at
other people having issues with that it seems that even if the
environment variable is not provided, there is a possibility to obtain
the remote user from the "authorization" header, see
http://stackoverflow.com/questions/8495229/remote-user-not-being-set-by-apache2
but maybe this is also modified by the proxy.

We need more information about the proxy's configuration.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Matchek
2013/8/12 Peter FELECAN 
>
> > The place to retrieve the user is here:
> > http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207
>
> Alright. This is the receiving end. Where is the emitting end?

There's a few stages: the HTTP client uses HTTP basic auth. That is
handled by Apache; but squid is doing something to the headers. I'm
not sure if we only have a forward proxy or a reverse proxy?

What I think we have, is this:
HTTP client → squid → Apache → script

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
Dagobert Michelsen  writes:

> Am 12.08.2013 um 14:14 schrieb Peter FELECAN :
>> "Maciej (Matchek) Bliziński"  writes:
>>> 2013/8/11 Peter FELECAN :
 "Maciej (Matchek) Bliziński"  writes:
 
> I tried and failed. I wanted to record who uploaded which package to
> which catalog. Unfortunately, our web proxy destroys this information.
> Maybe it can be fixed with some clever HTTP header rewriting, but I
> didn't manage to make it work.
 
 What's the proxy that we use?
 
 Can you show me where in the code this is done?
>>> 
>>> The proxy is just our proxy: echo $http_proxy
>>> http://proxy:3128
>> 
>> Dago can maybe give us more information about which proxy is used.
>
> Sure, it runs in the "web" zone and is our CSWsquid 3.1,REV=2012.06.15_20
>
> Do you have/want access to the webzone?

The only reason for which I would wish access is to examine the logs and
other similar stuff, maybe experiment a thing or another.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Dagobert Michelsen
Hi Peter,

Am 12.08.2013 um 14:14 schrieb Peter FELECAN :
> "Maciej (Matchek) Bliziński"  writes:
>> 2013/8/11 Peter FELECAN :
>>> "Maciej (Matchek) Bliziński"  writes:
>>> 
 I tried and failed. I wanted to record who uploaded which package to
 which catalog. Unfortunately, our web proxy destroys this information.
 Maybe it can be fixed with some clever HTTP header rewriting, but I
 didn't manage to make it work.
>>> 
>>> What's the proxy that we use?
>>> 
>>> Can you show me where in the code this is done?
>> 
>> The proxy is just our proxy: echo $http_proxy
>> http://proxy:3128
> 
> Dago can maybe give us more information about which proxy is used.

Sure, it runs in the "web" zone and is our CSWsquid 3.1,REV=2012.06.15_20

Do you have/want access to the webzone?


Best regards

  -- Dago

-- 
"You don't become great by trying to be great, you become great by wanting to 
do something,
and then doing it so hard that you become great in the process." - xkcd #896

___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/11 Peter FELECAN :
>> "Maciej (Matchek) Bliziński"  writes:
>>
>>> I tried and failed. I wanted to record who uploaded which package to
>>> which catalog. Unfortunately, our web proxy destroys this information.
>>> Maybe it can be fixed with some clever HTTP header rewriting, but I
>>> didn't manage to make it work.
>>
>> What's the proxy that we use?
>>
>> Can you show me where in the code this is done?
>
> The proxy is just our proxy: echo $http_proxy
> http://proxy:3128

Dago can maybe give us more information about which proxy is used.

> It's probably squid.
>
> The place to retrieve the user is here:
> http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207

Alright. This is the receiving end. Where is the emitting end?

> Works in my testing env, and does not work on the buildfarm.
>
> Maciej
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.

-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Matchek
2013/8/11 Peter FELECAN :
> "Maciej (Matchek) Bliziński"  writes:
>
>> I tried and failed. I wanted to record who uploaded which package to
>> which catalog. Unfortunately, our web proxy destroys this information.
>> Maybe it can be fixed with some clever HTTP header rewriting, but I
>> didn't manage to make it work.
>
> What's the proxy that we use?
>
> Can you show me where in the code this is done?

The proxy is just our proxy: echo $http_proxy
http://proxy:3128

It's probably squid.

The place to retrieve the user is here:
http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/lib/web/releases_web.py#L207

Works in my testing env, and does not work on the buildfarm.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-12 Thread Peter FELECAN
Laurent Blume  writes:

> Okay, I'm jumping on this thread as I'm a good example of this, I think:
> I've taken over a good amount of packages recently, a lot of them I
> don't care particularly for.
>
> At this point, I've seen rather good arguments exchanged, there's only
> one thing I believe was not explained: why is the package owner a
> *single* owner? Would it be possible to simply add a name to a list?

Indeed. However, the same implementation difficulties occur for one or
more users, i.e. adding the uploading user to the database takes the
same route and as Maciej said, the proxy is tempering with the
data... I'm waiting for an answer from Maciej about the proxy and the
part of the code responsible for building the request.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Laurent Blume
Okay, I'm jumping on this thread as I'm a good example of this, I think:
I've taken over a good amount of packages recently, a lot of them I
don't care particularly for.

At this point, I've seen rather good arguments exchanged, there's only
one thing I believe was not explained: why is the package owner a
*single* owner? Would it be possible to simply add a name to a list?

Laurent


___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> I tried and failed. I wanted to record who uploaded which package to
> which catalog. Unfortunately, our web proxy destroys this information.
> Maybe it can be fixed with some clever HTTP header rewriting, but I
> didn't manage to make it work.

What's the proxy that we use?

Can you show me where in the code this is done?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Matchek
2013/8/11 Peter FELECAN :
 1. When you upload a package, you become the package owner/maintainer.
>>>
>>> The systematic of this association is what's annoying me.
>>
>> I think it should be named for what it is: who last uploaded the
>> package. This is a useful piece of information and we should not
>> inhibit it.
>
> So, we must have another information which is the uploader, displayed on
> our web infrastructure. Cannot be taken from the user name of who's
> running csw-upload-pkg?

I tried and failed. I wanted to record who uploaded which package to
which catalog. Unfortunately, our web proxy destroys this information.
Maybe it can be fixed with some clever HTTP header rewriting, but I
didn't manage to make it work.

 2. A package owner/maintainer is responsible for everything that's
 associated with the package, e.g. any current and future bugs.
>>>
>>> This is not axiomatic and is what I wish to reasonably relax.
>>
>> Cool. We'll probably find a middle ground. A lot of that expectation
>> revolves around wording used on our website.
>
> As said above, we should add the information of the user having done the
> NMU but keep the mantis ownership of the project.

The NMU setting could be a parameter for mgar invocation. Based on
this, the appropriate details would be built into pkginfo, and then
read by the infrastructure. I don't see any other sane way of
implementing this.

Instead of one EMAIL setting, we need two: package maintainer and
package builder. (You cannot enclose the uploader information, because
it's unknown until the upload.)

You could invoke mgar with a flag indicating you don't want to be the
owner. mgar can look into the buildfarm database to figure out who's
the current maintainer of that package. Of course, we need to think
what to do if there are discrepancies, e.g. different maintainers for
5.9, 5.10, 5.11, intel and sparc.

Or maybe we could make that (no ownership change) the default and make
the ownership change a special flag.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/11 Peter FELECAN :
>>> When you're running csw-upload-pkg, it's too late. All such
>>> information must be inside the package, and that means it has to be
>>> done in GAR. Probably as a field in pkginfo.
>>
>> How's that? The association is not done yet. That this association is
>> based on what's in the package I understand. What I don't understand is
>> how it's too late: the association is made after the invocation of
>> csw-upload-pkg and this can be inhibited in any system that I can
>> imagine, directly or by side effect.
>
> Yes, but inhibited based on what data? The only data the system has,
> is the contents of the package.
>
>> Consequently, if you tell me where
>> is the code responsible for the association I can review it and propose
>> a concrete modification.
>
> Is this the line you have in mind? This is where the mantis database
> update is done:
> http://sourceforge.net/p/opencsw-ruby/code/ci/master/tree/lib/csw/db/mantis.rb#l112

Yes. So, when csw-upload-pkg was invoked with --nmo, it must not modify
p.maintainer.username. But that is only the effect. We need to find a
place where the cause became reality.

>>> 1. When you upload a package, you become the package owner/maintainer.
>>
>> The systematic of this association is what's annoying me.
>
> I think it should be named for what it is: who last uploaded the
> package. This is a useful piece of information and we should not
> inhibit it.

So, we must have another information which is the uploader, displayed on
our web infrastructure. Cannot be taken from the user name of who's
running csw-upload-pkg?

>>> 2. A package owner/maintainer is responsible for everything that's
>>> associated with the package, e.g. any current and future bugs.
>>
>> This is not axiomatic and is what I wish to reasonably relax.
>
> Cool. We'll probably find a middle ground. A lot of that expectation
> revolves around wording used on our website.

As said above, we should add the information of the user having done the
NMU but keep the mantis ownership of the project.

>>> 3. You have a small contribution to make.
>>
>> Quite often. If it's a maintained package I discuss it first with the
>> relevant person.
>>
>>> 4. The benefit of the contribution does not outweigh the burden.
>>
>> Again, it's not a question of burden but responsible
>> management. Dilution of responsibility is a very bad thing and is,
>> unfortunately, encountered more and more often in enterprise
>> environment. Lets not replicate that.
>
> We're very different from an enterprise environment. In enterprise,
> the employer pays for the employee's time, and the employee's
> obligation is to use the time in the way the employer wishes. In an
> open source project, people offer contributions based on their innate
> motivation. If someone doesn't want to perform a certain task, there
> is no way you can make them do it. If you try, they will simply walk
> away.

Agree with you. However, this doesn't diminish the need for
responsibility even though it's a voluntary responsibility: nobody force
somebody to be responsible of something. In the case in discussion the
current procedure induced by csw-upload-pkg &co force me to became the
maintainer which I don't wish because, in some cases, I'm just an
opportunistic actor.

>>> 5. Therefore, you do not make the contribution.
>>
>> Even with the incurred burden I make it. The proof is in the logs.
>
> haha, I don't mean you personally. :) it's an expression as in
> "brushing your teeth is healthy". I can rephrase it as "people are
> less likely to contribute".

If we solve the issue in discussion we will have more contribution at
least from my part.

>>> You think that #2 is fine and you want to fix #1.
>>
>> Not exactly.
>>
>>> I think that #1 is fine and I want to fix #2.
>>
>> We disagree on the "fineness" of #1 and this affirmation is in
>> contradiction with the answer that you give to my question about the
>> worthiness of my proposition.
>
> I understand that you didn't mean that the solution absolutely has to
> be a flag for csw-upload-pkg. You probably mean some method of
> indicating that you don't want your name to appear on the package's
> page. There are many possible ways to achieve that. (Also, I do
> believe that if you're building and pushing the package, it should be
> somehow reflected on the website.)

Is not that I don't want my name associated. On the contrary. If I've
done a NMU it must appear in our web infrastructure, e.g. on the QA
page, along the true owner of the package. By owner I mean the person
which is most willing to work on the package, to correct possible bugs,
bump version, &c.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
Ben Walton  writes:

> On Sat, Aug 10, 2013 at 4:58 PM, Peter FELECAN  wrote:
>> Ben Walton  writes:
>>
>>> There would still be a discrepancy between pkginfo and pkgdb.
>>
>> Can you explain this in more depth please?
>
> Currently, csw-upload-pkg and pkgdb code backing that are using the
> metadata stored directly in the package to determine the value of the
> maintainer.

pkdb can be made aware of the --nmu usage with csw-upload-pkg, isn't it?

> We could override this with a flag as you're suggesting but if someone then
> installs the package they'd have the pkginfo file containing information
> that is a mismatch with the website view.
>
> This isn't a deal breaker by any means but I think we can do better. I'm
> proposing that the override happens earlier (in GAR) so that pkgdb can be
> ignorant of it entirely.

But this modifies the recipe. BTW, what incantation would you use for
this?

> The down side of doing it with GAR is implementing a nice mechanism for the
> user to specify the maintainer (different than the current packager).

Can you give an example of the mechanism?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Matchek
2013/8/11 Peter FELECAN :
>> When you're running csw-upload-pkg, it's too late. All such
>> information must be inside the package, and that means it has to be
>> done in GAR. Probably as a field in pkginfo.
>
> How's that? The association is not done yet. That this association is
> based on what's in the package I understand. What I don't understand is
> how it's too late: the association is made after the invocation of
> csw-upload-pkg and this can be inhibited in any system that I can
> imagine, directly or by side effect.

Yes, but inhibited based on what data? The only data the system has,
is the contents of the package.

> Consequently, if you tell me where
> is the code responsible for the association I can review it and propose
> a concrete modification.

Is this the line you have in mind? This is where the mantis database
update is done:
http://sourceforge.net/p/opencsw-ruby/code/ci/master/tree/lib/csw/db/mantis.rb#l112

>> 1. When you upload a package, you become the package owner/maintainer.
>
> The systematic of this association is what's annoying me.

I think it should be named for what it is: who last uploaded the
package. This is a useful piece of information and we should not
inhibit it.

>> 2. A package owner/maintainer is responsible for everything that's
>> associated with the package, e.g. any current and future bugs.
>
> This is not axiomatic and is what I wish to reasonably relax.

Cool. We'll probably find a middle ground. A lot of that expectation
revolves around wording used on our website.

>> 3. You have a small contribution to make.
>
> Quite often. If it's a maintained package I discuss it first with the
> relevant person.
>
>> 4. The benefit of the contribution does not outweigh the burden.
>
> Again, it's not a question of burden but responsible
> management. Dilution of responsibility is a very bad thing and is,
> unfortunately, encountered more and more often in enterprise
> environment. Lets not replicate that.

We're very different from an enterprise environment. In enterprise,
the employer pays for the employee's time, and the employee's
obligation is to use the time in the way the employer wishes. In an
open source project, people offer contributions based on their innate
motivation. If someone doesn't want to perform a certain task, there
is no way you can make them do it. If you try, they will simply walk
away.

>> 5. Therefore, you do not make the contribution.
>
> Even with the incurred burden I make it. The proof is in the logs.

haha, I don't mean you personally. :) it's an expression as in
"brushing your teeth is healthy". I can rephrase it as "people are
less likely to contribute".

>> You think that #2 is fine and you want to fix #1.
>
> Not exactly.
>
>> I think that #1 is fine and I want to fix #2.
>
> We disagree on the "fineness" of #1 and this affirmation is in
> contradiction with the answer that you give to my question about the
> worthiness of my proposition.

I understand that you didn't mean that the solution absolutely has to
be a flag for csw-upload-pkg. You probably mean some method of
indicating that you don't want your name to appear on the package's
page. There are many possible ways to achieve that. (Also, I do
believe that if you're building and pushing the package, it should be
somehow reflected on the website.)

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/11 Peter FELECAN :
>> "Maciej (Matchek) Bliziński"  writes:
>>
>>> 2013/8/11 Peter FELECAN :
 To come back to my proposition, in which part of the code is the
 association made, i.e. uploader becomes maintainer? Answering this
 question can simplify my life instead of wandering all the surface of
 the system.
>>>
>>> The starting point is here:
>>> http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/gar.pkg.mk#L716
>>>
>>> Every other bits of infrastructure read this pkginfo field.
>>
>> This I know. What I wish is to inhibit this, when supplying --nmu to
>> csw-upload-pkg for an existing package. Where is this code situated?
>
> When you're running csw-upload-pkg, it's too late. All such
> information must be inside the package, and that means it has to be
> done in GAR. Probably as a field in pkginfo.

How's that? The association is not done yet. That this association is
based on what's in the package I understand. What I don't understand is
how it's too late: the association is made after the invocation of
csw-upload-pkg and this can be inhibited in any system that I can
imagine, directly or by side effect. Consequently, if you tell me where
is the code responsible for the association I can review it and propose
a concrete modification.

>>> I want to ask this question. It might sound like a rhetorical one, but
>>> it's not: it's one of the central questions to the discussion:
>>>
>>> Do you become the owner of the package because you are willing to take
>>> on the owner's duties, or do you take on the owner's duties because
>>> you've become the package owner?
>>
>> Neither when I'm doing a NMU.
>>
>> Now, let me ask a pragmatical question: what is the reason for which my
>> proposition is not worthy of implementation?
>
> But it is! We only need to talk about some details.

Good. We agree on this.

> I think I understand the idea: you want to be able to contribute
> without taking on other associated burden, right? This is definitely
> worth implementing.

Noted.

> IIUC, the problem you're addressing is this:
>
> 1. When you upload a package, you become the package owner/maintainer.

The systematic of this association is what's annoying me.

> 2. A package owner/maintainer is responsible for everything that's
> associated with the package, e.g. any current and future bugs.

This is not axiomatic and is what I wish to reasonably relax.

> 3. You have a small contribution to make.

Quite often. If it's a maintained package I discuss it first with the
relevant person.

> 4. The benefit of the contribution does not outweigh the burden.

Again, it's not a question of burden but responsible
management. Dilution of responsibility is a very bad thing and is,
unfortunately, encountered more and more often in enterprise
environment. Lets not replicate that.

> 5. Therefore, you do not make the contribution.

Even with the incurred burden I make it. The proof is in the logs.

> You think that #2 is fine and you want to fix #1.

Not exactly.

> I think that #1 is fine and I want to fix #2.

We disagree on the "fineness" of #1 and this affirmation is in
contradiction with the answer that you give to my question about the
worthiness of my proposition.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Matchek
2013/8/11 Peter FELECAN :
> "Maciej (Matchek) Bliziński"  writes:
>
>> 2013/8/11 Peter FELECAN :
>>> To come back to my proposition, in which part of the code is the
>>> association made, i.e. uploader becomes maintainer? Answering this
>>> question can simplify my life instead of wandering all the surface of
>>> the system.
>>
>> The starting point is here:
>> http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/gar.pkg.mk#L716
>>
>> Every other bits of infrastructure read this pkginfo field.
>
> This I know. What I wish is to inhibit this, when supplying --nmu to
> csw-upload-pkg for an existing package. Where is this code situated?

When you're running csw-upload-pkg, it's too late. All such
information must be inside the package, and that means it has to be
done in GAR. Probably as a field in pkginfo.

>> I want to ask this question. It might sound like a rhetorical one, but
>> it's not: it's one of the central questions to the discussion:
>>
>> Do you become the owner of the package because you are willing to take
>> on the owner's duties, or do you take on the owner's duties because
>> you've become the package owner?
>
> Neither when I'm doing a NMU.
>
> Now, let me ask a pragmatical question: what is the reason for which my
> proposition is not worthy of implementation?

But it is! We only need to talk about some details.

I think I understand the idea: you want to be able to contribute
without taking on other associated burden, right? This is definitely
worth implementing.

IIUC, the problem you're addressing is this:

1. When you upload a package, you become the package owner/maintainer.
2. A package owner/maintainer is responsible for everything that's
associated with the package, e.g. any current and future bugs.
3. You have a small contribution to make.
4. The benefit of the contribution does not outweigh the burden.
5. Therefore, you do not make the contribution.

You think that #2 is fine and you want to fix #1.

I think that #1 is fine and I want to fix #2.

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
"Maciej (Matchek) Bliziński"  writes:

> 2013/8/11 Peter FELECAN :
>> To come back to my proposition, in which part of the code is the
>> association made, i.e. uploader becomes maintainer? Answering this
>> question can simplify my life instead of wandering all the surface of
>> the system.
>
> The starting point is here:
> http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/gar.pkg.mk#L716
>
> Every other bits of infrastructure read this pkginfo field.

This I know. What I wish is to inhibit this, when supplying --nmu to
csw-upload-pkg for an existing package. Where is this code situated?

> I want to ask this question. It might sound like a rhetorical one, but
> it's not: it's one of the central questions to the discussion:
>
> Do you become the owner of the package because you are willing to take
> on the owner's duties, or do you take on the owner's duties because
> you've become the package owner?

Neither when I'm doing a NMU.

Now, let me ask a pragmatical question: what is the reason for which my
proposition is not worthy of implementation?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Matchek
2013/8/11 Peter FELECAN :
> To come back to my proposition, in which part of the code is the
> association made, i.e. uploader becomes maintainer? Answering this
> question can simplify my life instead of wandering all the surface of
> the system.

The starting point is here:
http://sourceforge.net/apps/trac/gar/browser/csw/mgar/gar/v2/gar.pkg.mk#L716

Every other bits of infrastructure read this pkginfo field.

I want to ask this question. It might sound like a rhetorical one, but
it's not: it's one of the central questions to the discussion:

Do you become the owner of the package because you are willing to take
on the owner's duties, or do you take on the owner's duties because
you've become the package owner?

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Peter FELECAN
Yann Rouillard  writes:

> I do not think the package ownership concept is obsolete.
> We can't ask everybody to feel concerned and competent about every package
> and some people might join the project just to maintain a few packages that
> they really care about.
>
> Whatever we do, the question in the end is: who feels responsible for
> dealing with bugs and updates for a package ?
> I don't really believe in the mode "there are no package maintainer,
> everybody can update every package", I think this lead to
> http://en.wikipedia.org/wiki/Diffusion_of_responsibility
>
> Even if we don't have any contract, I think there is an implicit commitment
> when you take ownership of a package. Debian even listed for instance what
> are the responsabilites of a maintainer:
> http://www.debian.org/doc/manuals/developers-reference/developer-duties.
>
> As a user of a package, it's also important to know wether the package you
> want to use has some maintainers behind or if it's in best effort mode by
> people who may even not use the package.
>
>
> What is obsolete I think is the to have one maintainer package that is the
> only one entitled to change the package (we already moved from that), we
> should instead:
>
> - promote team maintenance rather than one maintainer per package,
> - promote non-maintainer uploads with some rules,
> - have a special team for orphaned packages.
>
>
> Whatever the outcome, we will need anyway to change a bit the
> infrastructure because it is not adapted to either team maintenance or
> globally shared maintenance mode:
>
>- the bugtracker will always send the bugs to the last person that
> uploaded the package and the the bug summary page does the same
> http://www.opencsw.org/buglist/maintainer.cgi?maintainer=laurent
>
>- the qa page and maintainer page still list the packages last uploaded
> by someone like it was maintained by the person (it's still written
> "maintained by" by the way): http://www.opencsw.org/maintainers/maciej/
>
> 2013/8/11 Maciej (Matchek) Bliziński 
>
>> The current notion throughout our code base is that the user who runs
>> mgar, and the user who owns the package is the same user. To separate
>> these two concepts, the code needs modifications in many places.
>>
>> But I would also like to challenge Peter's not willing to inherit the
>> packages. I was hoping that the notion of package ownership has
>> already eroded. It was different in the times when package sources
>> were private. Other people did not have access to the build recipes,
>> so the only way to get the package modified, was to ask the sole
>> person who had the sources. Fortunately, we're in a different world
>> now, we share the code. Anybody can get the code and build it.
>>
>> We're a volunteer organization, we do not hold any binding contracts
>> with regards to package maintenance. My name on a package means that I
>> was the last person to modify the package, which means I might know
>> something about the package and you have an idea of whom to talk to.
>> It does not entitle you to any demands with relation to the package. I
>> might have been the last person to upload the package, but I be no
>> longer willing to work on the package. Therefore, I would suggest we
>> do not embed in our infrastructure the outdated concept of package
>> ownership.
>>
>> Let's take a step back: what's wrong with having your name show up
>> next to a package to which you made a small change?
>>

I was on the point to answer when Yann's message come in. He answers very
well my worries, especially the one about responsibility dilution.

I have no issues with working on as many packages as it gets --- have
done that a lot lately thus my set of "maintained" packages get bigger
and bigger without intentionallity of my part of a real care.

Until we have a way of collective maintainceship I think that my
proposition is worthy of implementation.

Even if we have a collective/group maintainceship the process of
entering that collective/group must be more than a NMU action which can
be motivated by other reasons than the intent of care for that package.

To come back to my proposition, in which part of the code is the
association made, i.e. uploader becomes maintainer? Answering this
question can simplify my life instead of wandering all the surface of
the system.
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-11 Thread Yann Rouillard
I do not think the package ownership concept is obsolete.
We can't ask everybody to feel concerned and competent about every package
and some people might join the project just to maintain a few packages that
they really care about.

Whatever we do, the question in the end is: who feels responsible for
dealing with bugs and updates for a package ?
I don't really believe in the mode "there are no package maintainer,
everybody can update every package", I think this lead to
http://en.wikipedia.org/wiki/Diffusion_of_responsibility

Even if we don't have any contract, I think there is an implicit commitment
when you take ownership of a package. Debian even listed for instance what
are the responsabilites of a maintainer:
http://www.debian.org/doc/manuals/developers-reference/developer-duties.

As a user of a package, it's also important to know wether the package you
want to use has some maintainers behind or if it's in best effort mode by
people who may even not use the package.


What is obsolete I think is the to have one maintainer package that is the
only one entitled to change the package (we already moved from that), we
should instead:

- promote team maintenance rather than one maintainer per package,
- promote non-maintainer uploads with some rules,
- have a special team for orphaned packages.


Whatever the outcome, we will need anyway to change a bit the
infrastructure because it is not adapted to either team maintenance or
globally shared maintenance mode:

   - the bugtracker will always send the bugs to the last person that
uploaded the package and the the bug summary page does the same
http://www.opencsw.org/buglist/maintainer.cgi?maintainer=laurent

   - the qa page and maintainer page still list the packages last uploaded
by someone like it was maintained by the person (it's still written
"maintained by" by the way): http://www.opencsw.org/maintainers/maciej/


Yann




2013/8/11 Maciej (Matchek) Bliziński 

> The current notion throughout our code base is that the user who runs
> mgar, and the user who owns the package is the same user. To separate
> these two concepts, the code needs modifications in many places.
>
> But I would also like to challenge Peter's not willing to inherit the
> packages. I was hoping that the notion of package ownership has
> already eroded. It was different in the times when package sources
> were private. Other people did not have access to the build recipes,
> so the only way to get the package modified, was to ask the sole
> person who had the sources. Fortunately, we're in a different world
> now, we share the code. Anybody can get the code and build it.
>
> We're a volunteer organization, we do not hold any binding contracts
> with regards to package maintenance. My name on a package means that I
> was the last person to modify the package, which means I might know
> something about the package and you have an idea of whom to talk to.
> It does not entitle you to any demands with relation to the package. I
> might have been the last person to upload the package, but I be no
> longer willing to work on the package. Therefore, I would suggest we
> do not embed in our infrastructure the outdated concept of package
> ownership.
>
> Let's take a step back: what's wrong with having your name show up
> next to a package to which you made a small change?
>
> Maciej
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-10 Thread Matchek
The current notion throughout our code base is that the user who runs
mgar, and the user who owns the package is the same user. To separate
these two concepts, the code needs modifications in many places.

But I would also like to challenge Peter's not willing to inherit the
packages. I was hoping that the notion of package ownership has
already eroded. It was different in the times when package sources
were private. Other people did not have access to the build recipes,
so the only way to get the package modified, was to ask the sole
person who had the sources. Fortunately, we're in a different world
now, we share the code. Anybody can get the code and build it.

We're a volunteer organization, we do not hold any binding contracts
with regards to package maintenance. My name on a package means that I
was the last person to modify the package, which means I might know
something about the package and you have an idea of whom to talk to.
It does not entitle you to any demands with relation to the package. I
might have been the last person to upload the package, but I be no
longer willing to work on the package. Therefore, I would suggest we
do not embed in our infrastructure the outdated concept of package
ownership.

Let's take a step back: what's wrong with having your name show up
next to a package to which you made a small change?

Maciej
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-10 Thread Ben Walton
On Sat, Aug 10, 2013 at 4:58 PM, Peter FELECAN  wrote:
> Ben Walton  writes:
>
>> There would still be a discrepancy between pkginfo and pkgdb.
>
> Can you explain this in more depth please?

Currently, csw-upload-pkg and pkgdb code backing that are using the
metadata stored directly in the package to determine the value of the
maintainer.

We could override this with a flag as you're suggesting but if someone then
installs the package they'd have the pkginfo file containing information
that is a mismatch with the website view.

This isn't a deal breaker by any means but I think we can do better. I'm
proposing that the override happens earlier (in GAR) so that pkgdb can be
ignorant of it entirely.

The down side of doing it with GAR is implementing a nice mechanism for the
user to specify the maintainer (different than the current packager).

Thanks
-Ben

> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.

-- 
---
Take the risk of thinking for yourself. Much more happiness,
truth, beauty and wisdom will come to you that way.

-Christopher Hitchens
---
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-10 Thread Peter FELECAN
Ben Walton  writes:

> There would still be a discrepancy between pkginfo and pkgdb.

Can you explain this in more depth please?
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.


Re: [csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-10 Thread Ben Walton
There would still be a discrepancy between pkginfo and pkgdb. It would be
better to handle this in GAR. An override of the maintainer field and the
addition of a builder field or some such. This wouldn't require upload
changes but should facilitate the required policy change.

Hth.
-Ben
On Aug 10, 2013 4:42 PM, "Peter FELECAN"  wrote:

> We already had this discussion but we still didn't get a result.
>
> Now, that I need to re-spin a lot of python modules to get their
> multi-versioned packages I really feel the need of this.
>
> In the work related to the availability of Python 2.7.x I inherited
> without really willing the 2.x interpreters packages. I know that
> the original maintainer can get them back by uploading a new
> release, however it seems to me a little bit tedious and unduly
> augment the already big cardinal of my maintained packages set.
>
> What I propose is to define a new option to csw-upload-pkg, let
> name it '--nmu' which doesn't change the maintainer of an already
> cataloged package when an upload is given. The default action, when
> this option is not given, is to change the maintainer.
>
> I started to look at the code but I'm not really advancing as real
> life activities are requesting my attention...
>
> Is somebody familiar with the code and can implement this?
>
> TIA
> --
> Peter
> ___
> maintainers mailing list
> maintainers@lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.

[csw-maintainers] Non-Maintainer Uploads (NMUs)

2013-08-10 Thread Peter FELECAN
We already had this discussion but we still didn't get a result.

Now, that I need to re-spin a lot of python modules to get their
multi-versioned packages I really feel the need of this.

In the work related to the availability of Python 2.7.x I inherited
without really willing the 2.x interpreters packages. I know that
the original maintainer can get them back by uploading a new
release, however it seems to me a little bit tedious and unduly
augment the already big cardinal of my maintained packages set.

What I propose is to define a new option to csw-upload-pkg, let
name it '--nmu' which doesn't change the maintainer of an already
cataloged package when an upload is given. The default action, when
this option is not given, is to change the maintainer.

I started to look at the code but I'm not really advancing as real
life activities are requesting my attention...

Is somebody familiar with the code and can implement this?

TIA
-- 
Peter
___
maintainers mailing list
maintainers@lists.opencsw.org
https://lists.opencsw.org/mailman/listinfo/maintainers
.:: This mailing list's archive is public. ::.