[Bug 1812456] Re: [MIR] libflatpak
** Description changed: Scope = This MIR is only for libflatpk0 and its related binaries (libflatpak-dev, libflatpak-doc and gir1.2-flatpak-1.0). The flatpak binary itself and flatpak-tests will remain in universe. Availability - Built for all supported architectures. - In sync with Debian. + In Universe, builds for all architectures and in sync with Debian. Rationale = xdg-desktop-portal 1.1 now uses libflatpak to validate command line options. The inadequacy of its previous validation was identified during the MIRs for xdg-desktop-portal and xdg-desktop-portal-gtk. https://github.com/flatpak/xdg-desktop-portal/pull/278 gnome-control-center 3.31.4 introduced a new Applications panel. The original (and preferred) implementation uses libflatpak to provide additional info about installed Flatpak applications. The implementation was modified on my request to instead attempt to call "flatpak info" on the command line instead in an attempt to avoid us needing to MIR flatpak. The GNOME Control Center developers would prefer if they could use libflatpak instead. Security This will need a Security review. https://security-tracker.debian.org/tracker/source-package/flatpak There have been two CVEs, both have been fixed in all supported Ubuntu releases. More recently, there is LP: #1815528 Quality assurance = Bug subscriber: should be Ubuntu Desktop Bugs https://bugs.launchpad.net/ubuntu/+source/flatpak https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=flatpak https://github.com/flatpak/flatpak/issues tests are run as build tests (with dh_auto_test) and installed autopkgtests on Debian and Ubuntu. https://ci.debian.net/packages/f/flatpak http://autopkgtest.ubuntu.com/packages/f/flatpak Dependencies - All binary dependencies are in main except ostree + + All in main except for libostree-1-1 (LP: #1892454) Standards compliance 4.3.0 Maintenance === - Actively developed upstream https://github.com/flatpak/flatpak - Maintained in Debian by the pkg-utopia team but more specifically, it is maintained by Simon McVittie (smcv) who maintains Flatpak, ostree, xdg-dbus-proxy, xdg-desktop-portal and xdg-desktop-portal-gtk. short dh7 style rules, dh compat 10 ** Summary changed: - [MIR] libflatpak + [MIR] libflatpak0 ** Description changed: Scope = This MIR is only for libflatpk0 and its related binaries (libflatpak-dev, libflatpak-doc and gir1.2-flatpak-1.0). The flatpak binary itself and flatpak-tests will remain in universe. Availability - In Universe, builds for all architectures and in sync with Debian. Rationale = xdg-desktop-portal 1.1 now uses libflatpak to validate command line options. The inadequacy of its previous validation was identified during the MIRs for xdg-desktop-portal and xdg-desktop-portal-gtk. https://github.com/flatpak/xdg-desktop-portal/pull/278 gnome-control-center 3.31.4 introduced a new Applications panel. The original (and preferred) implementation uses libflatpak to provide additional info about installed Flatpak applications. The implementation was modified on my request to instead attempt to call "flatpak info" on the command line instead in an attempt to avoid us needing to MIR flatpak. The GNOME Control Center developers would prefer if they could use libflatpak instead. Security This will need a Security review. https://security-tracker.debian.org/tracker/source-package/flatpak There have been two CVEs, both have been fixed in all supported Ubuntu releases. More recently, there is LP: #1815528 Quality assurance = Bug subscriber: should be Ubuntu Desktop Bugs https://bugs.launchpad.net/ubuntu/+source/flatpak https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=flatpak https://github.com/flatpak/flatpak/issues tests are run as build tests (with dh_auto_test) and installed autopkgtests on Debian and Ubuntu. https://ci.debian.net/packages/f/flatpak http://autopkgtest.ubuntu.com/packages/f/flatpak Dependencies - All in main except for libostree-1-1 (LP: #1892454) Standards compliance 4.3.0 Maintenance === - Actively developed upstream https://github.com/flatpak/flatpak - Maintained in Debian by the pkg-utopia team but more specifically, it is maintained by Simon McVittie (smcv) who maintains Flatpak, ostree, xdg-dbus-proxy, xdg-desktop-portal and xdg-desktop-portal-gtk. short dh7 style rules, dh compat 10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak0 To manage notifications about this bug go to
[Bug 1812456] Re: [MIR] libflatpak
Re-opening this. We want to get malcontent into main, which depends on libflatpak. ** Changed in: flatpak (Ubuntu) Status: Won't Fix => Triaged ** Changed in: flatpak (Ubuntu) Status: Triaged => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
We discussed this at a sprint and decided that due to the difficultly in bringing flatpak/ostree/selinux into main we'll use dlopen for packages in main that use libflatpak. This will require us to carry patches for this. We can re-open this if those turn out not to be a suitable long term solution. ** Changed in: flatpak (Ubuntu) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
Asked on the Flatpak project for ideas on this: https://github.com/flatpak/flatpak/issues/3091 ** Bug watch added: github.com/flatpak/flatpak/issues #3091 https://github.com/flatpak/flatpak/issues/3091 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
Discussion about libflatpak dependency in gnome-control-center: https://gitlab.gnome.org/GNOME/gnome-control-center/merge_requests/429 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
Re-opening this as this is something that we think will be necessary for Ubuntu desktop. It's better for everyone that gnome-control-center uses libflatpak and not some binary wrapper. Binary wrappers are just API that's really easy to break :) The main difficulty is how to handle OSTree, as putting libostree in main is effectively fully supporting OSTree, which is not something we want to do as it's not a technology used in default Ubuntu. libflatpak is fine, as it's mostly just glue code that does nothing without the flatpak daemon installed. So we need some ideas on what to do with ostree. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
** Changed in: flatpak (Ubuntu) Importance: Undecided => Medium ** Changed in: flatpak (Ubuntu) Status: Expired => Triaged ** Changed in: flatpak (Ubuntu) Status: Triaged => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
[Expired for flatpak (Ubuntu) because there has been no activity for 60 days.] ** Changed in: flatpak (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
** Description changed: Scope = This MIR is only for libflatpk0 and its related binaries (libflatpak-dev, libflatpak-doc and gir1.2-flatpak-1.0). The flatpak binary itself and flatpak-tests will remain in universe. Availability Built for all supported architectures. In sync with Debian. Rationale = xdg-desktop-portal 1.1 now uses libflatpak to validate command line options. The inadequacy of its previous validation was identified during the MIRs for xdg-desktop-portal and xdg-desktop-portal-gtk. https://github.com/flatpak/xdg-desktop-portal/pull/278 gnome-control-center 3.31.4 introduced a new Applications panel. The original (and preferred) implementation uses libflatpak to provide additional info about installed Flatpak applications. The implementation was modified on my request to instead attempt to call "flatpak info" on the command line instead in an attempt to avoid us needing to MIR flatpak. The GNOME Control Center developers would prefer if they could use libflatpak instead. Security This will need a Security review. https://security-tracker.debian.org/tracker/source-package/flatpak There have been two CVEs, both have been fixed in all supported Ubuntu releases. + More recently, there is LP: #1815528 + Quality assurance = Bug subscriber: should be Ubuntu Desktop Bugs https://bugs.launchpad.net/ubuntu/+source/flatpak https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=flatpak https://github.com/flatpak/flatpak/issues tests are run as build tests (with dh_auto_test) and installed autopkgtests on Debian and Ubuntu. https://ci.debian.net/packages/f/flatpak http://autopkgtest.ubuntu.com/packages/f/flatpak Dependencies All binary dependencies are in main except ostree Standards compliance 4.3.0 Maintenance === - Actively developed upstream https://github.com/flatpak/flatpak - Maintained in Debian by the pkg-utopia team but more specifically, it is maintained by Simon McVittie (smcv) who maintains Flatpak, ostree, xdg-dbus-proxy, xdg-desktop-portal and xdg-desktop-portal-gtk. short dh7 style rules, dh compat 10 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
This is incomplete because it's missing an ostree MIR. Also, we're looking into adjusting xdg-desktop-portal to not require libflatpak. If it's not a problem for the MIR Team, we'd like to keep it as Incomplete because the Desktop Team may reconsider whether we want libflatpak in main later and it's nicer if we don't have to redo this paperwork. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1812456] Re: [MIR] libflatpak
** Summary changed: - [MIR} libflatpak + [MIR] libflatpak -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1812456 Title: [MIR] libflatpak To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/flatpak/+bug/1812456/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
