[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Mathew Hodson]

** No longer affects: golang-go.net-dev (Ubuntu)

** No longer affects: gccgo-go (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

golang-go.net-dev was renamed to golang-golang-x-net-dev; please can we
promote the right source package and drop golang-go.net-dev from wily.

** Also affects: golang-golang-x-net-dev (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-pretty (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-text (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

golang-pretty and golang-text are showing in the dep chain for golang-
github-bmizerany-assert - adding bug tasks

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

>> golang-text <<

[Availability]
In universe

[Rationale]
Dependency for github-bmizerany-assert

[Security]
No security history

[Quality assurance]
Package builds OK and runs unit tests

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

>> golang-pretty <<

[Availability]
In universe

[Rationale]
Dependency for github-bmizerany-assert

[Security]
No security history

[Quality assurance]
Package builds OK and runs unit tests

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

Indeed the golang-go.net-dev transitional package is now built by the
golang-golang-x-net-dev source, so the old source can indeed be removed:

Removing packages from wily:
golang-go.net-dev 0.0+git20150226.3d87fd6-1 in wily
Comment: renamed to golang-golang-x-net-dev

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

(neither of text or pretty executed unit tests - they now do - bugs
submitted back to Debian).

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

>golang-go.net-dev was renamed to golang-golang-x-net-dev; please can we
promote the right source package and drop golang-go.net-dev from wily.

Ack, updating bug tasks. However, we can't remove golang-go.net-dev yet,
as we still need the transitional package until 16.04 LTS. It can be
removed during 16.10 development.

** Changed in: golang-go.net-dev (Ubuntu)
   Status: Fix Committed => Won't Fix

** Changed in: golang-golang-x-net-dev (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Remaining 15.10 issues fixed in juju-core 1.24.6-0ubuntu2.

** Changed in: juju-core (Ubuntu)
   Status: New => Fix Committed

** Changed in: juju-core (Ubuntu)
 Assignee: Matthias Klose (doko) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-x-text now builds fine. Marking Fix Committed.

** Changed in: golang-x-text (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

$ ./change-override -c main -t golang-juju-loggo golang-github-bmizerany-assert 
golang-github-bmizerany-pat golang-go-dbus golang-golang-x-net-dev 
golang-pretty golang-text golang-x-text 
Override component to main
golang-juju-loggo 0.0~git20150318-0ubuntu1 in wily: universe/devel -> main
golang-github-bmizerany-assert 0.0~git20120716-1 in wily: universe/misc -> main
golang-github-bmizerany-pat 0.0~git20140625-1 in wily: universe/misc -> main
golang-go-dbus 1~bzr20150203-0ubuntu1 in wily: universe/misc -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily: universe/misc -> main
golang-pretty 0.0~git20130613-1ubuntu1 in wily: universe/misc -> main
golang-text 0.0~git20130502-1ubuntu1 in wily: universe/misc -> main
golang-x-text 0+git20151019.0fe7e68-0ubuntu1 in wily: universe/misc -> main
Override [y|N]? y
8 publications overridden.

$ ./change-override -c main golang-github-bmizerany-assert-dev 
golang-github-bmizerany-pat-dev golang-go-dbus-dev golang-go.net-dev 
golang-golang-x-net-dev golang-juju-loggo-dev golang-pretty-dev golang-text-dev 
golang-x-text-dev 
Override component to main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily amd64: 
universe/devel/extra/100% -> main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily arm64: 
universe/devel/extra/100% -> main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily armhf: 
universe/devel/extra/100% -> main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily i386: 
universe/devel/extra/100% -> main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily powerpc: 
universe/devel/extra/100% -> main
golang-github-bmizerany-assert-dev 0.0~git20120716-1 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily amd64: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily arm64: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily armhf: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily i386: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily powerpc: 
universe/devel/extra/100% -> main
golang-github-bmizerany-pat-dev 0.0~git20140625-1 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily amd64: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily arm64: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily armhf: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily i386: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily powerpc: 
universe/devel/extra/100% -> main
golang-go-dbus-dev 1~bzr20150203-0ubuntu1 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily amd64: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily arm64: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily armhf: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily i386: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily powerpc: 
universe/devel/extra/100% -> main
golang-go.net-dev 0.0+git20150226.3d87fd6-3 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily amd64: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily arm64: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily armhf: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily i386: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily powerpc: 
universe/devel/extra/100% -> main
golang-golang-x-net-dev 0.0+git20150226.3d87fd6-3 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily amd64: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily arm64: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily armhf: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily i386: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily powerpc: 
universe/devel/extra/100% -> main
golang-juju-loggo-dev 0.0~git20150318-0ubuntu1 in wily ppc64el: 
universe/devel/extra/100% -> main
golang-pretty-dev 0.0~git20130613-1ubuntu1 in wily amd64: 
universe/devel/extra/100% -> main
golang-pretty-dev 0.0~git20130613-1ubuntu1 in wily arm64: 
universe/devel/extra/100% -> main
golang-pretty-dev 0.0~git20130613-1ubuntu1 in wily armhf: 
universe/devel/extra/100% -> main
golang-pretty-dev 0.0~git20130613-1ubuntu1 in wily i386: 

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

juju-local was already in main, but juju-core is seeded and was not.

$ ./change-override -c main juju-core
Override component to main
juju-core 1.24.6-0ubuntu2 in wily amd64: universe/devel/extra/100% -> main
juju-core 1.24.6-0ubuntu2 in wily arm64: universe/devel/extra/100% -> main
juju-core 1.24.6-0ubuntu2 in wily armhf: universe/devel/extra/100% -> main
juju-core 1.24.6-0ubuntu2 in wily i386: universe/devel/extra/100% -> main
juju-core 1.24.6-0ubuntu2 in wily powerpc: universe/devel/extra/100% -> main
juju-core 1.24.6-0ubuntu2 in wily ppc64el: universe/devel/extra/100% -> main
Override [y|N]? y
6 publications overridden.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

$ ./change-override -c main -S golang-race-detector-runtime
Override component to main
golang-race-detector-runtime 0.0+svn229396-0ubuntu1 in wily: universe/devel -> 
main
golang-race-detector-runtime 0.0+svn229396-0ubuntu1 in wily amd64: 
universe/devel/extra/100% -> main
Override [y|N]? y
2 publications overridden.

** Changed in: golang-race-detector-runtime (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-race-detector-runtime is a Recommends of golang. I looked at it--
packaging is fine, pulls in no new depends, builds fine and has a
testsuite.

** Also affects: golang-race-detector-runtime (Ubuntu)
   Importance: Undecided
   Status: New

** Changed in: golang-race-detector-runtime (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-text packaging looks fine, testsuite enabled in the build, builds
on wily. Marking Fix Committed.

** Changed in: golang-text (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

$ ./change-override -c main -t juju-core
Override component to main
juju-core 1.24.6-0ubuntu2 in wily: universe/devel -> main
Override [y|N]? y
1 publication overridden.

** Changed in: juju-core (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-pretty packaging looks fine. Testsuite enabled in the build.
Builds on wily. Marking Fix Committed.

** Changed in: golang-pretty (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

As per Jamie's request, I created bug 1507470 as a skeleton for adding
generic autopkgtesting of Go libs/packages. Can someone who is familiar
with Go packages please assign themselves and provide the details?
Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@pitti

Thanks for creating the bug. IMO the bare minimum and the first step is
simply to rebuild (many of these golang packages do have in-build
testsuites too). More stuff could then be added later.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

Fixed version of golang-x-text uploaded to wily (fresh snapshot).

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Packman]

"Are you saying you want to use the embedded code copy? Has anyone
looked at the testsuite issue to fix it? Embedded code copies should be
avoided at all costs per MIR guidelines -- we are making huge
concessions for the juju and lxd teams already, can someone take a look
at this ftbfs and report back?"

Short version, these extended-standard library packages are in practice
pretty closely tied to the golang minor version.

Debian currently has go 1.4 and the go-x-text package is from May,
before the go 1.5 release:



In go 1.5 the unicode package, which includes generation of various data
tables, was updated to use Unicode 8.0.0 - which amongst other changes
introduces the Ahom script:



This means the test in golang.org/x/text which uses the data from the
standard library unicode package now finds its own data out of sync with
the system golang on wily. Specifically, the new character U+11730 AHOM
DIGIT ZERO should be numerically equal to 0, but is not. Obviously there
are other failures as well.

There's an easy fix for wily, which is just update the package to use a
current revision of golang.org/x/text for go 1.5 compatibility. I've
proposed a debian/experimental branch that does that:



(Minor wrinkle, still a test failure even with the latest code, I
patched it in the packaging but presumably needs resolving upstream.)

Anyway, where this gets really fun is when we start considering
backports of latest juju. None of these packages existed when trusty was
released, and their current versions will generally be incompatible with
go 1.2.1. We could pick out the revisions that worked for specific
backport packaging, but won't have support upstream for security fixes
to random older checkouts so won't really gain anything.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@Martin Packman: can you get the fixed version of golang-x-text uploaded
to wily?

As for backport packaging for current stables, like trusty, you are free
to do whatever you want with those (following whatever archive processes
you would normally follow). Ie, juju on trusty is not officially
supported by the security team. Going forward, we agreed that the juju
team would be allowed to update the non-juju golang-*-dev that it
requires (provided other packages in the archive still work). I realize
that doesn't solve everything, but those discussions can happen outside
of this bug.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

Revised packaging for juju-core using -dev packages also uploaded (see
linked branch for full details).

** Changed in: golang-x-text (Ubuntu)
   Status: Incomplete => New

** Changed in: juju-core (Ubuntu)
   Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

@steve

"Per comment #67, the Foundations team is assuming responsibility for
the maintenance of the golang toolchain, and will work with the juju
team to ensure this is properly resourced."

no, comment #67 doesn't say this. It only talks about adoption of shared
library support and golang 1.6. The phrase "I believe ..." is not a
statement for commitment.  if comment #118 adds new information, fine,
however just adding this information without any chance to check for
validity and then just promoting the package isn't exactly following any
MIR guidelines.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Re: [Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

Martin Packman [2015-10-16 22:45 -]:
> > * dep8 question (comments 86, 93, 99, 100, 101, 117)
> >  - pitti's comment in #99 needs to be done. It could be done as an SRU. If 
> > that is the approach, please file a bug on this and comment here
> 
> I would appreciate if someone who has a clear understanding for the work
> pitti is requesting (such as pitti himself) could file the bug and
> subscribe me. We'll happily update our packaging to use any such new
> mechanism if it's provided.

It won't actually go into any particular Go package, but into
autodep8. The main thing that this needs is to come up with an
idea/strategy how a group of go libraries/packages can be tested in a
generic fashion. Based on my loose comprehension of this bug the
MIR/security's primary concern is to ensure that all reverse build
dependencies of a new Go package still build. A mere package rebuild
test is a trivial thing to synthesize, but maybe there's some other
useful things that can be done, such as running tests (unless the
package build already does that). If that's sufficient for now, we
merely need an algorithm to detect a go library as such.

You can look at /usr/share/autodep8/support/ (detect and generate)
scripts for examples like it's done for Perl.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Per comment#128, marking golang-go.crypto Fix Committed.

** Changed in: golang-go.crypto (Ubuntu)
   Status: Incomplete => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"We have manually tested the packaging change, but it is not yet
included in our automated testing and release process. We have work in
progress to break out our series-independent packaging branch. That
said, the merge should not be considered blocked on our verification."

IIUC, this means that this can be uploaded to archive. Please do so ASAP
and then juju-core can be marked Fix Committed.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"This package is not a dependency of juju. It's used by
golang.org/x/net/html/charset only, so is just pulled in as a side
effect of taking the debian package. My preference would be to drop the
juju packaging dependency on golang-go.net-dev for 1.24 instead."

Are you saying you want to use the embedded code copy? Has anyone looked
at the testsuite issue to fix it? Embedded code copies should be avoided
at all costs per MIR guidelines -- we are making huge concessions for
the juju and lxd teams already, can someone take a look at this ftbfs
and report back?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Per comment #128, marking golang-gocheck and golang-goyaml as 'Won't
Fix'. Go ahead and use the embedded copy for 15.10 but please ensure the
transition for these is completed for 16.04.

** Changed in: golang-gocheck (Ubuntu)
   Status: Incomplete => Won't Fix

** Changed in: golang-goyaml (Ubuntu)
   Status: Incomplete => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"I would appreciate if someone who has a clear understanding for the
work pitti is requesting (such as pitti himself) could file the bug and
subscribe me. We'll happily update our packaging to use any such new
mechanism if it's provided."

I'll see if I can find someone to help you.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Actually, golang-go.crypto needs a bug subscriber. Marking incomplete.
Once that is done, this can be moved back to Fix Committed.

** Changed in: golang-go.crypto (Ubuntu)
   Status: Fix Committed => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@doko
"I'm still sceptical about how to track third party libaries, i.e. if
they are included as a dependency, or built form the vendorized
copies. dh-golang tries to do that, and sets the "Built-Using"
attribute for the binary packages. If juju-core doesn't want, or cannot use 
dh-golang, that should be done directly in the packaging. Is this a solved 
problem how to select which copy to use, or does this still need investigation?"

The security team has a mechanism for tracking embedded copies and while
I would've preferred to see many of the embedded copies moved out to
golang-*-dev packages, for 15.10 the security team agreed to the juju
team updating juju to use the golang-*-dev packages that currently exist
in the archive. I'll be filing a separate bug for 16.04 to pull out the
others. Furthermore, We have developed in response to this MIR a process
and tooling for tracking Built-Using. The upcoming
https://code.launchpad.net/~james-page/ubuntu/wily/juju-core/mir-
fixes/+merge/274052 uses Built-Using and dh-golang, so juju-core is 'ok'
on this front.

"jujud is still linked statically. Is this needed for the juju-core
copy in the archive?"

As mentioned in comment 119, this is ok for 15.10.

This should remain 'Incomplete' and can be marked 'Fix Committed' once
https://code.launchpad.net/~james-page/ubuntu/wily/juju-core/mir-
fixes/+merge/274052 is uploaded.

** Changed in: juju-core (Ubuntu)
   Status: Triaged => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Based on Steve's comment in 118, I'm marking golang as Fix Committed.

** Changed in: golang (Ubuntu)
   Status: Incomplete => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@slangasek: I agree on your point regarding juju-mongodb. It is fine for
support and I filed bug 1506989 for perftools and bug 1506990 for
architectures.

Between that, the security team ACK and doko's review, marking as Fix
Committed.

** Changed in: juju-mongodb (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

> Having seen these past issues, and issues with another not well
> maintained language stack in main for the last two years (ruby), I'm
> asking for explicit confirmation that the teams who are supposed to
> maintain golang do have the required resources to do so. This will
> not only include the maintenance of the golang package, but also the
 >maintenance of go libraries in main, and an eye to other go library
> packages in the archive.

Per comment #67, the Foundations team is assuming responsibility for the
maintenance of the golang toolchain, and will work with the juju team to
ensure this is properly resourced.

The go libraries that are being brought into main as dependencies of
juju and lxd will be the responsibility of those respective teams (which
is the status quo).

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Ok, this is a very complicated MIR with so many comments it is difficult
to track. I went through the bug and came up with the following list of
remaining items. If I missed something, please comment. Hopefully, no
one has to look before this comment on if everything is done. :)

* security team commitments: develop a process for the list of packages to 
notify the juju team on when there is a security update. This is not a 
precondition of this MIR, but a request of the juju team
* golang-go.crypto
 - needs a bug subscriber
* golang-gocheck
 - can be dropped when bug #1504821 is fixed (comment #82)
* golang-goyaml
 -  can be dropped when bug #1504821 is fixed (comment #82)
* golang-x-text
 - ftbfs (comment 115)
 - needs a bug subscriber
* juju-core
 - what is the status of
   
https://code.launchpad.net/~james-page/ubuntu/wily/juju-core/mir-fixes/+merge/274052
 ? jamespage said it is 'pending testing by the juju qa team'.
* dep8 question (comments 86, 93, 99, 100, 101, 117)
 - pitti's comment in #99 needs to be done. It could be done as an SRU. If that 
is the approach, please file a bug on this and comment here

Basically, need to merges to land in juju-core, fix the test in
golang-x-text, bug suscribers and someone to do the dep8 work.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

I see this is assigned to the security team. I already gave our ACK.
Based on doko's comments, marking Incomplete.

** Changed in: juju-mongodb (Ubuntu)
   Status: New => Incomplete

** Changed in: juju-mongodb (Ubuntu)
 Assignee: Ubuntu Security Team (ubuntu-security) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-go-dbus only ships a dev package with source code so does not
need Built-Using (I updated the MIRteam wiki page to calrify this).
Based on mterry's comments, golang-go-dbus is ok.

** Changed in: golang-go-dbus (Ubuntu)
   Status: Incomplete => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"- debian/control should have Built-Using: ${misc:Built-Using} on the
golang-github-bmizerany-assert-dev package"

This isn't needed for -dev packages. Marking Fix Committed.

** Changed in: golang-github-bmizerany-assert (Ubuntu)
   Status: Incomplete => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-go.crypto:
- builds fine on wily and pulls in no new MIR dependencies not listed in this 
bug
- has a testsuite that is run as part of the build
- Ubuntu does not carry a delta
- no watch file
- update history in Debian is sporadic
- lintian clean (one override that is ok)
- git snapshot from 20150618, which is not great that there isn't a stable 
release, but that is go for you
- debian/rules is ok
- uses dh-golang
- no open CVEs

ACK from security and MIR team.

** Changed in: golang-go.crypto (Ubuntu)
   Status: New => Fix Committed

** Changed in: golang-go.crypto (Ubuntu)
 Assignee: Jamie Strandboge (jdstrand) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@mterry,

I agree with doko and slangasek that we should block migration if APIs
fail and I particularly like pitti's comment in 99.

Also, you said: "I get that you're saying it's good because we don't
have to waste security-update-time fixing reverse-depends." The upstream
Go community as a whole is less concerned about breaking consumers at
this point in time and they haven't proven themselves wrt API stability.
It is for that reason that we really need this. While it is the
convention to change the package name, I very much prefer we not rely on
this while the Go community (including Debian) is still figuring all
this out. I really don't want to see decreasing Ubuntu developer or
security update velocity when there is lurking bug for someone's next
upload to ftbfs.

"Am I being too carefree? Do Go library minor updates tend to break
builds more often than C or Python libraries?" I believe so, yes. A very
popular Go model is to take a git snapshot from somewhere and use it,
with no 'minor update' releases. Case in point, 10 out of the 11
dependencies of juju-core from this MIR use this model.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

@doko:
"While not required, it is good to see that shared library support is
being worked on, and targeted for the upcoming 1.6. release." It is only not 
required for 15.10, it is a condition of this MIR (that the juju and 
foundations teams already agreed to) that we gain shared library support by 
default in the archive for 16.04 if possible.

The juju team still reserves the right to statically link for juju-core
in 16.04 if shared library decreases stability for the project for the
LTS (in which case, they'll pursue shared library support for juju-core
in 16.10). This has all been discussed with the security team.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"* security team commitments: develop a process for the list of packages
to notify the juju team on when there is a security update. This is not
a precondition of this MIR, but a request of the juju team"

FYI, we have this list and have the tooling update in our backlog.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

$ change-override -c main -S golang-check.v1
Override component to main
golang-check.v1 0.0+git20150729.11d3bc7-1 in wily: universe/devel -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily amd64: 
universe/devel/extra/100% -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily arm64: 
universe/devel/extra/100% -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily armhf: 
universe/devel/extra/100% -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily i386: 
universe/devel/extra/100% -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily powerpc: 
universe/devel/extra/100% -> main
golang-check.v1-dev 0.0+git20150729.11d3bc7-1 in wily ppc64el: 
universe/devel/extra/100% -> main
Override [y|N]? y
7 publications overridden.


** Changed in: golang-check.v1 (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

golang promoted.

$ change-override -c main -S golang
Override component to main
golang 2:1.5.1-0ubuntu2 in wily: universe/devel -> main
golang 2:1.5.1-0ubuntu2 in wily amd64: universe/devel/optional/100% -> main
golang 2:1.5.1-0ubuntu2 in wily arm64: universe/devel/optional/100% -> main
golang 2:1.5.1-0ubuntu2 in wily armhf: universe/devel/optional/100% -> main
golang 2:1.5.1-0ubuntu2 in wily i386: universe/devel/optional/100% -> main
golang 2:1.5.1-0ubuntu2 in wily powerpc: universe/devel/optional/100% -> main
golang 2:1.5.1-0ubuntu2 in wily ppc64el: universe/devel/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily amd64: universe/doc/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily arm64: universe/doc/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily armhf: universe/doc/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily i386: universe/doc/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily powerpc: universe/doc/optional/100% -> main
golang-doc 2:1.5.1-0ubuntu2 in wily ppc64el: universe/doc/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily amd64: universe/devel/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily arm64: universe/devel/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily armhf: universe/devel/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily i386: universe/devel/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily powerpc: universe/devel/optional/100% -> main
golang-go 2:1.5.1-0ubuntu2 in wily ppc64el: universe/devel/optional/100% -> main
golang-src 2:1.5.1-0ubuntu2 in wily amd64: universe/devel/optional/100% -> main
golang-src 2:1.5.1-0ubuntu2 in wily arm64: universe/devel/optional/100% -> main
golang-src 2:1.5.1-0ubuntu2 in wily armhf: universe/devel/optional/100% -> main
golang-src 2:1.5.1-0ubuntu2 in wily i386: universe/devel/optional/100% -> main
golang-src 2:1.5.1-0ubuntu2 in wily powerpc: universe/devel/optional/100% -> 
main
golang-src 2:1.5.1-0ubuntu2 in wily ppc64el: universe/devel/optional/100% -> 
main
Override [y|N]? y
25 publications overridden.


** Changed in: golang (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

golang:

The packaging of the golang package looks reasonable well, it is based
on the the Debian packaging.  In Ubuntu the package suffered regular
maintenance up to and beyond the 15.04 release (vivid).  It's good to
see another attempt to maintain this package.

While not required, it is good to see that shared library support is
being worked on, and targeted for the upcoming 1.6. release.

golang is not just a build dependency for juju, but for various
packages within the phone stack, so it will require coordination with
other teams to introduce new versions and keep the packages buildable.
>From my point of view this just didn't happen in the past.  I suppose
that golang 1.6 is targeted for the anticipated 16.04 LTS release, so
please make sure that maintenance and update plans are made and
communicated (see UOS in about two weeks).

Having seen these past issues, and issues with another not well
maintained language stack in main for the last two years (ruby), I'm
asking for explicit confirmation that the teams who are supposed to
maintain golang do have the required resources to do so.  This will
not only include the maintenance of the golang package, but also the
maintenance of go libraries in main, and an eye to other go library
packages in the archive.

Setting the status for golang to incomplete, and waiting for this
confirmation. After that I think the package can be promoted to main.


** Changed in: golang (Ubuntu)
   Status: New => Incomplete

** Changed in: golang (Ubuntu)
 Assignee: Matthias Klose (doko) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

juju-core:

Others already commented on the code, and finally approved with some
comments.

I'm still sceptical about how to track third party libaries, i.e. if
they are included as a dependency, or built form the vendorized
copies.  dh-golang tries to do that, and sets the "Built-Using"
attribute for the binary packages.  If juju-core doesn't want, or
cannot use dh-golang, that should be done directly in the packaging.
Is this a solved problem how to select which copy to use, or does this
still need investigation?

jujud is still linked statically.  Is this needed for the juju-core
copy in the archive?


** Changed in: juju-core (Ubuntu)
   Status: Confirmed => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

golang 1.5 is now built on arm64 and ppc64el, however juju-core is built
using gccgo. Is there a reason for it?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

juju-mongodb:

packaging bits only, the security team will follow-up with a code
review.

 - the packaging is a copy of the mongodb package, however it looks
   like the packaging itself isn't merged / updated where needed.
   This problem is shared with the mongodb package in Ubuntu.

 - google-perftools is available on all archs. Is there a need to
   disable that for some architectures?

 - the package should be built for the upcoming s390x architecture as
   well.

** Changed in: juju-mongodb (Ubuntu)
 Assignee: Matthias Klose (doko) => Ubuntu Security Team (ubuntu-security)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

juju-mongodb has security team ACK so long as the builds use --disable-
scripting in perpetuity.

I verified the wily version is correctly using --disable-scripting in
debian/rules (if I build without '--disable-scripting', I see
src/third_party/v8 being built and build with --disable-scripting, I
don't).

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

Override component to main
dh-golang 1.12 in wily: universe/misc -> main
dh-golang 1.12 in wily amd64: universe/devel/extra/100% -> main
dh-golang 1.12 in wily arm64: universe/devel/extra/100% -> main
dh-golang 1.12 in wily armhf: universe/devel/extra/100% -> main
dh-golang 1.12 in wily i386: universe/devel/extra/100% -> main
dh-golang 1.12 in wily powerpc: universe/devel/extra/100% -> main
dh-golang 1.12 in wily ppc64el: universe/devel/extra/100% -> main
7 publications overridden.


** Changed in: dh-golang (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

$ change-override -c main -S juju-mongodb -y
Override component to main
juju-mongodb 2.4.10-0ubuntu4 in wily: universe/database -> main
juju-mongodb 2.4.10-0ubuntu4 in wily amd64: universe/database/optional/100% -> 
main
juju-mongodb 2.4.10-0ubuntu4 in wily arm64: universe/database/optional/100% -> 
main
juju-mongodb 2.4.10-0ubuntu4 in wily armhf: universe/database/optional/100% -> 
main
juju-mongodb 2.4.10-0ubuntu4 in wily i386: universe/database/optional/100% -> 
main
juju-mongodb 2.4.10-0ubuntu4 in wily ppc64el: universe/database/optional/100% 
-> main
6 publications overridden.


** Changed in: juju-mongodb (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Packman]

> * golang-go.crypto
>  - needs a bug subscriber

Looks like it's ~ubuntu-server now.

> * golang-gocheck
>  - can be dropped when bug #1504821 is fixed (comment #82)
> * golang-goyaml
>  - can be dropped when bug #1504821 is fixed (comment #82)

To clarify, I am making these changes on master. Backporting the code
changes required to change the dependency for 1.24 carries considerable
risk to application-level api compatibility, as yaml.v2 changes some
serialisation behaviour. I would prefer if for 1.24 we relied on the
bundled yaml.v1 package that been consistently used in testing through
this cycle.

> * golang-x-text
>  - ftbfs (comment 115)
>  - needs a bug subscriber

This package is not a dependency of juju. It's used by
golang.org/x/net/html/charset only, so is just pulled in as a side
effect of taking the debian package. My preference would be to drop the
juju packaging dependency on golang-go.net-dev for 1.24 instead.

> * juju-core
>  - what is the status of
>
> https://code.launchpad.net/~james-page/ubuntu/wily/juju-core/mir-fixes/+merge/274052
>  ? jamespage said it is 'pending testing by the juju qa team'.

We have manually tested the packaging change, but it is not yet included
in our automated testing and release process. We have work in progress
to break out our series-independent packaging branch. That said, the
merge should not be considered blocked on our verification.

> * dep8 question (comments 86, 93, 99, 100, 101, 117)
>  - pitti's comment in #99 needs to be done. It could be done as an SRU. If 
> that is the approach, please file a bug on this and comment here

I would appreciate if someone who has a clear understanding for the work
pitti is requesting (such as pitti himself) could file the bug and
subscribe me. We'll happily update our packaging to use any such new
mechanism if it's provided.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

golang-x-text FTBFS due to testsuite failure:
=== RUN   TestNumericCompare
--- FAIL: TestNumericCompare (0.02s)
collate_test.go:119: Compare("\U00011730", "0") = 1; want 0
FAIL
FAILgolang.org/x/text/collate/colltab   1.473s

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

"golang-juju-loggo needs some fixes:
- It's missing Built-Using: ${misc:Built-Using}"

You can ignore this, but please do fix the package name.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

> golang 1.5 is now built on arm64 and ppc64el, however juju-core
> is built using gccgo. Is there a reason for it?

The reason for this is that the package is being backported directly to
trusty, under the juju Stable Release Exception for SRUs.  Since there
is not a compatible version of golang in trusty, the package is
currently built for all releases using gccgo.

I believe we will want to revisit this in the future, but I think this
should be separable from the MIR question, do you agree?

>  - the packaging is a copy of the mongodb package, however it looks
>like the packaging itself isn't merged / updated where needed.
>This problem is shared with the mongodb package in Ubuntu.

The mongodb package is in universe and unsupported.  The juju-mongodb
package exists to support juju-core and provides a subset of
functionality specifically validated for use with juju.  I don't think
this should be a blocker for the MIR?

>  - google-perftools is available on all archs. Is there a need to
>disable that for some architectures?

It's not available on arm64 in trusty, so probably should not be enabled
on that architecture.  It probably should be enabled on ppc64el and
powerpc.

>  - the package should be built for the upcoming s390x architecture as
>well.

Yes, it should; the architecture list in debian/control should just be
dropped so that the package builds automatically for all architectures.

These last two points are good packaging feedback, but they don't seem
to be critical for the package's current supportability in main
(especially considering s390x is not in wily)
(https://wiki.ubuntu.com/UbuntuMainInclusionRequirements).  Can this be
spun out into a bug report against the juju-mongodb package, unblocking
the MIR for this component?

** Changed in: juju-mongodb (Ubuntu)
   Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

gccgo-go is removed from vivid and wily, no need for a MIR anymore.
Unsubscribing myself.

** Changed in: gccgo-go (Ubuntu)
 Assignee: Matthias Klose (doko) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

> - reverse-dependencies don't have to be rebuilt for a security update to a
>   C library; even if an API does break, C revdeps can be left unbuildable
>   for a while with much less impact

I get that you're saying it's good because we don't have to waste
security-update-time fixing reverse-depends.  Which is a good point.
But it also sorta sounds like "in this scenario, the advantage of C
libraries is that we have unbuildable packages that we don't know
about".  So a bit of a mixed blessing.

> - since we're not using shared libraries (at this point), there's nothing
>   in the packaging of go packages (like sonames for C libraries) that
>   signals to proposed-migration that there's been an incompatible change
>   requiring a transition.

For incompatible changes requiring transitions, I thought the Go
convention was a new package name.  Like check.v1 or check.v2.  Which
would be a whole new package in Debian/Ubuntu.  Much like shared
libraries bumping sonames.

--

So adding synthesized dep8 tests or proposed-migration logic to confirm
no ftbfs by rebuilding Go reverse-dependencies are good ideas.  But I
maintain it's just as good an idea as doing the same thing for any other
package upload (checking reverse-depends for ftbfs).  The only
difference I see is Steve's point about the security team being faced
with ftbfs packages that they must now fix.  Normal package updates
wouldn't require a rebuild of all reverse-depends, so those would be
status quo.

1) So, since the security team is facing this, I'll leave this specific
question to them.  They didn't mention monitoring for ftbfs in their
list of requirements before, but maybe they'd like to?  I guess the
easiest route would be a golang-autopkgtest package like pitti
mentioned.

2) Am I being too carefree?  Do Go library minor updates tend to break
builds more often than C or Python libraries?  (Honest question, I'm not
a Go native.)  I had assumed Go folks have typical engineering
practices, but maybe the statically-linked nature of Go causes people to
play fast and loose with updates.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Re: [Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

Michael Terry [2015-10-13 17:33 -]:
> That seems more packaging-friendly than requiring a bunch of one-line
> dep8 tests to trigger a rebuild test.  Especially if we have to add a
> delta to get it.

autodep8 can "synthesize" a debian/tests/control for a group of
related packages. It already does that with perl, ruby, nodejs, and
dkms packages. I. e. the idea is you write a generic test, put it into
some golang-autopkgtest package (or another common one, maybe
dh-golang), and add some detection logic ("what kind of package is
this and can I create a test for it?") and creation of a
"Test-Commands:" to autodep8.

Besides, autopkgtests are totally suitable (and appreciated) for
forwarding to Debian too.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Re: [Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

On Tue, Oct 13, 2015 at 05:33:37PM -, Michael Terry wrote:
> Though in this respect, golang isn't so different than C libraries, where
> an unexpected API update or library bug can cause ftbfs in
> reverse-depends.

It is different, because:

 - reverse-dependencies don't have to be rebuilt for a security update to a
   C library; even if an API does break, C revdeps can be left unbuildable
   for a while with much less impact
 - since we're not using shared libraries (at this point), there's nothing
   in the packaging of go packages (like sonames for C libraries) that
   signals to proposed-migration that there's been an incompatible change
   requiring a transition.

> But actually, I expected we could use Built-Using fields in our
> proposed-migration tooling to automatically test that reverse-depends
> could still build.  Is that not in the works yet?

I'm not aware that anyone has discussed integrating such functionality into
proposed-migration.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

Erk, sorry -- wrong bug.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Martin Pitt]

@Steve: I just tried this on current wily-proposed with
http://people.canonical.com/~ubuntu-archive/proposed-
migration/update_excuses.html#obconf :

 /etc/apt/preferences.d/01autopkgtest 
Package: obconf
Pin: release a=wily-proposed
Pin-Priority: 900

Package: *
Pin: release a=wily
Pin-Priority: 900

Package: *
Pin: release a=wily-proposed
Pin-Priority: 100


# apt-get install -s obconf  
Reading package lists... Done
Building dependency tree   
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 obconf : Depends: libobrender32 (>= 3.6.0) but it is not going to be installed
  Depends: libobt2 (>= 3.6.0) but 3.5.2-8 is to be installed
  Recommends: openbox but it is not going to be installed
E: Unable to correct problems, you have held broken packages.


It seems it's not considering its dependencies from -proposed, but tries to 
install everything else from wily? Only if I bump the priority in the third 
clause from 100 to 900 it works again (but then of course installs all deps 
from -proposed).

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

I think implementing autodep8 for go packages is a must.
http://anonscm.debian.org/cgit/collab-maint/autodep8.git/tree/README.md

At least to build the reverse dependencies so that new uploads are
blocked in -proposed until all build failures are resolved.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

** Changed in: golang-go.crypto (Ubuntu)
 Assignee: (unassigned) => Jamie Strandboge (jdstrand)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-github-bmizerany-assert is mostly good, but needs a tiny fix:

- debian/control should have Built-Using: ${misc:Built-Using} on the
golang-github-bmizerany-assert-dev package

** Changed in: golang-github-bmizerany-assert (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

Doko, I just noticed your comment about dep8 tests.  I agree that some
sort of mechanism to avoid ftbfs would be good.  Though in this respect,
golang isn't so different than C libraries, where an unexpected API
update or library bug can cause ftbfs in reverse-depends.  We use dep8
tests as best practices to avoid that, but don't *require* it as part of
a MIR.

But actually, I expected we could use Built-Using fields in our
proposed-migration tooling to automatically test that reverse-depends
could still build.  Is that not in the works yet?

That seems more packaging-friendly than requiring a bunch of one-line
dep8 tests to trigger a rebuild test.  Especially if we have to add a
delta to get it.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-github-bmizerany-pat is good; approved.

** Changed in: golang-github-bmizerany-pat (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-check.v1 looks good; approved.

** Changed in: golang-check.v1 (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-go.net-dev build-depends on golang-x-text-dev (which didn't have
a MIR section here -- I've added a bug task for it now anyway).

But golang-x-text isn't ready yet:
- It is ftbfs due to test failures.  That should be looked at.
- It needs a team bug subscriber.

** Changed in: golang-x-text (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

dh-golang is fine; approved.

** Changed in: dh-golang (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-go.net-dev though looks good, approved.  There is an oddity in
Debian around it being removed from testing [1], but that appears to be
a mistake?  I don't see any bugs filed against it, there was no removal
hint, and the package tracker is giving inconsistent statuses/versions.
In any case, we have the version that Debian seems to be OK with.

[1] https://packages.qa.debian.org/g/golang-go.net-dev.html

** Changed in: golang-go.net-dev (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-juju-loggo needs some fixes:
- It's missing Built-Using: ${misc:Built-Using}
- Its name is wrong [1].  It should be golang-github-juju-loggo and 
golang-github-juju-loggo-dev.  We should fix in Ubuntu so that if it's ever 
packaged in Debian, we'll be aligned.

[1] http://pkg-go.alioth.debian.org/packaging.html

** Changed in: golang-juju-loggo (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

golang-go-dbus has one blocking problem and I've got a few minor concerns:
- Needs to use Built-Using
- It's about to be removed from Debian testing due to its dependency on 
golang-gocheck.  Not an immediate problem for us, but since we want to port 
away from gocheck anyway, maybe we can help Debian here and keep a little 
better in sync.
- This is a native Go implementation of libdbus.  I'm not super thrilled about 
another DBus implementation in main, but I get the desire to be native and 
allow cross compilation.

** Changed in: golang-go-dbus (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

Doko, I did some of the leafier modules here.  I figure you'd be the
best person for some of the core ones.  If you're too loaded, bounce
back to me.

** Changed in: golang (Ubuntu)
   Status: Incomplete => New

** Changed in: golang (Ubuntu)
 Assignee: (unassigned) => Matthias Klose (doko)

** Changed in: juju-core (Ubuntu)
 Assignee: (unassigned) => Matthias Klose (doko)

** Changed in: juju-mongodb (Ubuntu)
 Assignee: (unassigned) => Matthias Klose (doko)

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Michael Terry]

** Also affects: golang-x-text (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-go.net-dev in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

Looking at the dependency chain to support the MIR, we're currently
pulling two versions of check into main (golang-gocheck and golang-
check.v1).  This is caused by the use of golang-goyaml which depends on
the older golang-gocheck package.

golang-yaml.v2 aligns with the newer check version - I've asked the Juju
team to see if we can patch that in for this release and switch the
dependency in development for 1.25.

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-7189

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

MIR review information for new -dev dependencies

>> golang-github-bmizerany-assert <<

[Availability]
In universe

[Rationale]
Dependency for golang-github-bmizerany-pat

[Security]
No security history

[Quality assurance]
Package builds OK and unit tests are executed

[Dependencies]
All in main apart from dh-golang

[Standards compliance]
OK

[Maintenance]
ubuntu-server

>> golang-github-bmizerany-pat <<

[Availability]
In universe

[Rationale]
Dependency for juju-core

[Security]
No security history

[Quality assurance]
Package builds OK and unit tests are executed

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

>> golang-go-dbus <<

[Availability]
In universe

[Rationale]
Dependency for juju-core

[Security]
No security history

[Quality assurance]
Package builds OK and unit tests are executed

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server


>> golang-juju-loggo <<

[Availability]
In universe

[Rationale]
Dependency for juju-core

[Security]
No security history

[Quality assurance]
Package builds OK and unit tests are executed

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

>> golang-check.v1 <<

[Availability]
In universe

[Rationale]
Dependency for golang-juju-loggo

[Security]
No security history

[Quality assurance]
Package builds OK and unit tests are executed

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

>> golang-go.crypto <<

[Availability]
In universe.

[Rationale]
Dependency of juju-core.

[Security]
No history of issues.

This (CVE-2014-7189) crypto bug is on the standard library crypto, not the 
extension package:


[Quality assurance]
Tests run as part of build process. Some are skipped due to lack of openssh as 
a build dependency.

[Dependencies]
All in main or covered on this MIR

[Standards compliance]
Ok.

[Maintenance]
ubuntu-server

>> golang-go.net-dev <<

[Availability]
In universe.

[Rationale]
Dependency of juju-core.

[Security]
No history of issues.

[Quality assurance]
Tests run as part of build process. A small number skipped due to lack of root 
perms or network requirements.

[Dependencies]
None.

[Standards compliance]
Ok.

[Maintenance]
ubuntu-server

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

Tracking bug 1504821 in juju-core for yaml.v1 -> yaml.v2 switch:


** Changed in: golang-gocheck (Ubuntu)
   Status: New => Incomplete

** Changed in: golang-goyaml (Ubuntu)
   Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

juju-mongodb no longer ftbfs in wily

** Changed in: juju-mongodb (Ubuntu)
   Status: Incomplete => New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

>> dh-golang <<

[Availability]
In universe

[Rationale]
Dependency for all other golang-* packages

[Security]
No security history

[Quality assurance]
Package builds OK but has no unit tests.

[Dependencies]
All in main or covered by this MIR

[Standards compliance]
OK

[Maintenance]
ubuntu-server

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

** Also affects: golang-check.v1 (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to gccgo-go in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

** Also affects: golang-gocheck (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to gccgo-go in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

Martin and I reviewed and tested with golang-*-dev packages that are
already in the archive; proposed packaging update is here:

  https://code.launchpad.net/~james-page/ubuntu/wily/juju-core/mir-
fixes/+merge/274052

The only existing golang-dev package which we where not able to use was
golang-go-systemd-dev - the version in archive is API incompatible with
juju-core, which needs further investigation.

This will be a typical problem - not all golang projects maintain stable
API's and projects are used to fixing on a specific version to maintain
stability, but thats something we're going to need to workout as a
distro.

** Branch linked: lp:~james-page/ubuntu/wily/juju-core/mir-fixes

** Also affects: golang-github-bmizerany-pat (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-go-dbus (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-go.crypto (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-go.net-dev (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-goyaml (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-juju-loggo (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: golang-github-bmizerany-assert (Ubuntu)
   Importance: Undecided
   Status: New

** Also affects: dh-golang (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[James Page]

If the move to golang-yaml.v2 is low risk and can be done, then I'll
include that package for MIR and drop golang-goyaml and golang-gocheck;
however if that's not the case, then I think we should *not* use golang-
goyaml-dev and fallback to the embedded code copy in juju-core for this
cycle; juju should be able to switch in a newer release at a future
date.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang-github-bmizerany-pat in
Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dh-golang/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Thanks! What about the embedded code copes question in comments #68 and
#69.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

I of course meant 'copies' in that last comment.

To clarify what I'm thinking about wrt to juju embedded copies> the
source package can ship various embedded code copies but the archive
build should use archive golang-*-dev packages whenever possible and
where it makes sense (see comment #68 for the list). For example, the
archive build of juju should use golang-go.crypto-dev, but juju source
package may contain code.google.com/p/go.crypto if
code.google.com/p/go.crypto is needed for some other non-archive build.

If both are legitimately needed (and there should be justification for
that) to support different clients, then the archive build should use
golang-go.crypto-dev from the archive and embed
code.google.com/p/go.crypto (justification being, all archive builds
should use golang-go.crypto-dev and only juju needs
code.google.com/p/go.crypto).

I need someone can go through that list in comment 68 and comment on it.
Then anything that should be broken out of the juju source (ie, it is
not juju-specific) should be into golang-*-dev packages and the archive
build should use them and any other existing golang-*-dev packages from
the archive.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Alexis Bruemmer]

Response to James' inquiries in comment #67:

* juju team: can you comment on the package breakdown? For items
requiring further discussion, it might be worthwhile understanding how
often you are updating the embedded package (useful for the SRU
question, below)

On average 50% of the package dependencies change between minor release
(for example there were 14 package dependency changes from 1.24 to 1.25)

* SRU team: juju-core already has a release exception. For packages that
are being broken out that were formerly part of the juju-core package
and that the juju team will now maintain, can those just be given a
release exception?

Yes, those should also be given a release exception.  Many of these are
central to keeping ubuntu current with existing clouds.  For Juju to
actually work, if the dependent packages are being split out, every
single one of them will need to be included in the release exception.

* Ubuntu Archive team: juju-core will likely need a PPU for members of
the juju team when it goes to main. Can we extend the acl to include the
packages that are being broken out that they are going to maintain?

Yes, to deliver a fix to juju core, we need to fix the dependencies at
the same time.  This will be done by the same person, so yes to
extending the acls to those packages.

* MIR team: for the packages that are being broken out, I propose that
they don't get extended MIR review, but rather simply the packaging
review to make sure they are following the Go standards as outlined in
the MIRteam document

Yes, agreed.

* juju team (/security team): the juju team has said that they would
like coordination of security updates for juju-core and golang-*-dev
packages for which they maintain. I propose the security team maintains
a list of packages and when we triage a CVE against a package in that
list, we file a bug for the juju team to fix, and sponsor their uploads
(like for other Canonical upstreams). juju team-- does that address your
concerns?

Yes, we will own fixing security bugs for juju, and dependent libraries
that we control or can patch.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Alexis Bruemmer]

> Will the juju team be asking for an MRE? Is it anticipated that new series
> (e.g., the 1.18 to 1.22 change) would be included as an MRE? What
> processes are in place to test updates before including updates into the
> archive? What processes are available to the security team to test
> updates that we would prepare?

To more directly answer this comment, Juju does have a Stable Release
Update policy in place.  As part of that policy the QA team outline
testing Juju CI and testing procedures, details are here:

https://docs.google.com/document/d/1TVW0QzpLo622pzBUsEK9SqZAod4oJn9ROF1IWMqa9tg/edit#heading=h.f3goroun9jd1

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Curtis Hovey]

@seth
I reported https://bugs.launchpad.net/ubuntu/+source/juju-core/+bug/1500916 to 
address bug 1497087. While the Juju team has always provided backports for its 
community, we don't have the privileges to provide backports quickly. The Juju 
QA team has dedicated staff for release and backport, and in Time the team will 
have staff that can upload packages as needed.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Seth Arnold]

I reviewed juju version ff791983cd1a186e2e09878a37cf243f7f9eb734. The
review covered significantly less portion of the codebase than usual, and
should not be considered a security audit.

Juju 1.18.1 is in trusty-release
Juju 1.22.6 is in trusty-updates
Juju 1.22.1 is in vivid-release, meaning upgrades from updated trusty to vivid 
fail
Juju 1.22.6 is in wily

When were 1339770 1389326 1391276 fixed? Are they fixed in all supported
releases?  There's no mention of any of these bug numbers in the published
changelogs:
https://launchpad.net/ubuntu/+source/juju-core/+changelog

These bugs were known to be dangerous in 2014 yet still caused extensive
damage in May, 2015. What allowed them to persist so long? What steps have
been taken to ensure future bugs of similar severity don't last unpatched
in production for so long?

In 1339770, in May 2015, it was mentioned that 1.18 was end-of-life and no
further updates could be prepared for it. 1.18.0 was released just 13
months earlier and 1.18.1 had been included in 14.04 LTS. Why was the 1.18
infrastructure torn down so shortly after including 1.18 in a release with
five-year support? Have there been any similar changes in process that
would prevent or delay issuing an update to the currently supported
versions of juju already in the archive?

It is currently impossible to upgrade from 14.04 LTS to 15.04 due to
incorrect version numbers. Has anyone else noticed this yet? When will
this be fixed? Are there any changes in process needed to ensure this
doesn't happen in the future?

Will the juju team be asking for an MRE? Is it anticipated that new series
(e.g., the 1.18 to 1.22 change) would be included as an MRE? What
processes are in place to test updates before including updates into the
archive? What processes are available to the security team to test
updates that we would prepare?

I had more trouble reading the Juju code this review cycle than last
review cycle -- the Facade indirection mechanism makes code navigating
harder. I'm worried about it for a few reasons:
- Strings to reference method names are brittle and can't be checked at
  compile time. What methods are in place to ensure that these aren't
  typoed?
- Generic args and return types defeat type checking. What ensures types
  being returned or accepted have the desired properties?
- Java has had significant problems with their Reflection mechanism,
  probably dozens of issues per year. At what points of a process
  lifetimes is the Facade mechanism dynamic?

Here's a few issues I found:

- ./apiserver/apiserver.go logs passwords when tracing is enabled -- this
  is fine IFF this is loudly documented somewhere obvious. Is it? It'd be
  best to filter out passwords regardless.

- Chown() doesn't quote the user or group

- ./api/client.go WatchDebugLog() claims to read a line but looks like it
  may read up to 4096 bytes -- is this correct?

- significant number of TODO comments; is there a method in place to find
  unowned comments and assign them somewhere? is there a process in place
  to ensure they get revisited?

- Which versions of the client work with which versions of the servers?
  Where's that described?

- ./api/keyupdater/authorisedkeys.go AuthorisedKeys(),
  WatchAuthorisedKeys() expects exactly one authorized key, this seems
  fragile

- Is -static-libgo still being used?

- Perhaps redundant to say it, the embedded code copies mostly need to be
  packaged separately. I don't know to what extent they deserve review,
  but they do represent a significant amount of code not written here that
  will run as root in many environments.


There's a lot to like about the Juju codebase; error checking is rigorous,
the coding style is consistent, the shellscript quoting infrastructure is
awesome, it's inspired clever new Go packages that cleanly solve problems.
I didn't review as much as I would have liked, but what I did see looked
like rigorous work.

Juju has been growing new features at an incredible pace. Will development
of new features impede supporting deployed environments? The security
team cannot support Juju alone -- there is far too much domain-specific
knowledge required to properly maintain Juju. We will need the Juju
team's help to address practically every issue for all stages of future
security-relevant bugs: proper diagnosis, proper fix preperation,
proper backporting to all supported releases, proper test development,
and proper testing.

I'm concerned with how previous issues have been handled -- the three
referenced bug reports have combined to represent the single most
expensive consequence I've personally seen and all were known issues five
months earlier. So I need reassurance that the Juju team will help the
security team maintain Juju in our supported releases:

- Ask for an MRE, if that's the most appropriate mechanism to update Juju.
- Ask for special treatment that allow more frequent full-version updates,
  if that's the most appropriate mechanism to update 

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

One more comment on broken out libs (whether static or shared), juju-
core might want to consider expanding autopkgtests to uncover
regressions caused by dependencies.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Yesterday slangasek and I met with the juju team regarding the path
forward for transitioning to shared libraries and Alexis will be
commenting on that later.

Unrelated to that, juju is using many embedded code copies and juju-core will 
need to be adjusted to build with many of these broken out into golang-*-dev 
packages (see https://wiki.ubuntu.com/MIRTeam for details, and use 
dh-make-golang to make this easy). Before I give the list, a couple of things:
 * it is acknowledged that the Go community has traditionally embedded sources 
in their trees and then managed imports themselves. This works fine for the app 
model where bundling is the norm (eg, for Ubuntu Touch clicks and Ubuntu Core 
snaps). However, for the reasons outlined in the MIRteam wiki, this does not 
work well with the Linux distribution model and applying for main inclusion in 
Ubuntu by definition means working within the distribution model. Also, the Go 
community has acknowledged the benefits of shared libraries with regard to code 
reuse, project management, the distribution model, etc, which is why Go 1.5 has 
shared library capability (that doesn't mean the app bundling model doesn't 
still have its place)
 * it is also acknowledged that juju is different in some ways to other 
software delivered via the archive in that its current packaging of client, 
server, agents, etc is for multiple platforms, not just Ubuntu. However, juju 
is being delivered to Ubuntu juju clients via apt and therefore for those 
clients there isn't a technical reason why those embedded libraries can't be 
delivered as separate packages (in other words, it's fine if juju-core has 
embedded sources in the orig.tar.gz if that helps the juju team, it is just 
that (many of) those embedded sources should not be used during archive builds 
(where instead juju-core should use Build-Depends on golang-*-dev packages)). 
This is all standard Debian and Ubuntu archive practice and that is why the 
Debian Go team has been working so hard on dh-golang, Built-Using, etc
 *  it should be acknowledged by go developers seeking main inclusion that the 
MIR, foundations and security teams have already made many concessions for 
golang and these changes to the process alone will result in increased 
maintenance effort for officially supported packages (but at a level we believe 
can be supported, unlike if we ignored embedded sources/shared libraries)
 * creating golang-*-dev packages for embedded sources doesn't mean the juju 
team can't still control the code, it is just that the lib will live in a 
different place. Eg, suppose that github.com/joyent/* is pulled out into 
golang-joyent-dev. A MIR would be required for golang-joyent-dev and the juju 
team would be the team committed to maintaining the package and fixing those 
bugs. The PPU acls would be adjusted to allow the juju team to upload this 
package, just like with juju-core. The SRU process would apply to it, etc. (Ie, 
nothing fundamentally changes wrt control if the juju team wants to maintain 
that control (ie, perhaps they wouldn't mind relinquishing control of some of 
them))
 * all the embedded packages do not necessarily need to be pulled out. Eg, 
github.com/juju and gopkg.in/juju seem to be internal to juju and if nothing in 
the archive would ever need to use them, there is no reason to break them out
 * juju is currently suffering from the problems that can happen with the 
bundling model in that it is using different embedded sources for the same 
functionality. Eg, code.google.com/p/go.crypto and golang.org/x/crypto. Picking 
one and breaking it out into a single -dev package will ease the maintenance 
burden

With that said, here is a list to start the conversation for *Ubuntu
archive builds* and using embedded sources (again, if it helps to leave
the sources in the orig.tar.gz for other reasons, fine):

* embedded that seem obviously ok to leave alone and use during the build:
 * github.com/juju/* (do pull out anything that's reused in other go sources 
though)
 * gopkg.in/juju/* (same here)

* embedded that seems clear should be cleaned up/pulled out/use existing 
archive -dev package:
 * code.google.com/p/go.crypto (use golang-go.crypto-dev, why this and 
golang.org/x/crypto? pick one)
 * golang.org/x/crypto (why this and code.google.com/p/go.crypto? pick one)
 * golang.org/x/net (use golang-golang-x-net-dev)
 * gopkg.in/check.v1 (use golang-check.v1-dev)
 * gopkg.in/mgo.v2 (use golang-gopkg-mgo.v2-dev)
 * gopkg.in/yaml.v1 (use golang-goyaml-dev, but consider golang-yaml.v2-dev 
cause that is what snappy uses and the MIR process advocates for one package 
per functionality as much as possible)

* embedded that may need other Canonical upstream involvement to create 
golang-*-dev packages (note, LXD is applying for MIR in 15.10 so this golxc 
might fall under that work):
 * launchpad.net/golxc (seems our lxc packages should be adjusted to provide 
golang-golxc-dev?)
 * launchpad.net/gomaasapi 

Re: [Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Steve Langasek]

On Fri, Sep 04, 2015 at 08:54:06PM -, Jamie Strandboge wrote:
> As such, golang-go has security team signoff provided the following
> conditions are met:

>  * the Ubuntu Foundations team/et al state their commitment to golang 1.6
>with shared library support on by default in 16.04

Yes, the Foundations team understands this requirement and is committed to
delivery of golang 1.6 in Ubuntu for 16.04 and to assist the owners of
packages implemented in go with adoption of shared library support.

>  * In addition to a bug subscriber, a team must state their commitment to
>supporting golang in Ubuntu (officially supporting a language is
>resource-intensive and we must ensure the resources are in place to do
>properly support those that depend on the language)

While discussions are still ongoing regarding how this will be handled over
the long term, the Foundations team is committed to be the point of contact
for the golang package and to ensure that this toolchain is properly
supported in Ubuntu.

>  * ideally, a commitment (possibly Foundations and juju?) is stated in
>this bug that Ubuntu will work with Debian on dh_golang so that it
>properly supports shared libraries.  This is not a strict requirement
>from the security team, but it will almost certainly provide the
>easiest path forward

I believe Michael Hudson-Doyle is actively working on this.  While Michael
isn't on the Foundations team, I think you can consider this a de facto
committment.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Per https://wiki.ubuntu.com/MainInclusionProcess, marking Incomplete
since we need commitments from various folks before granting security
team signoff.

** Changed in: golang (Ubuntu)
   Status: Confirmed => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

In addition to Seth's review, I can say that juju needs to make some packaging 
changes to meet the MIR requirements I set forth in the last comment. 
Specifically:
 * should use golang now for all supported archs (!powerpc)
 * should move embedded libraries out to proper packages
 * should use Built-Using in debian/control
 * should use dh-golang and follow Debian Go packaging guidlines (see 
https://wiki.ubuntu.com/MIRTeam)

The above should not be considered a comprehensive list-- there might be
more that Seth find in the security review or others find in the
packaging review.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

Based on the above, I think the gccgo tasks can be close?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Jamie Strandboge]

I did not perform a code or packaging review for golang. I did
reevaluate the current situation wrt static linking and under what
conditions, if any, golang and packages depending on it would be
supportable in main. In general, statically compiled binaries are not
suitable for the Ubuntu archive because they increase the maintenance
burden significantly.

golang 1.4 packages and earlier could only statically compile their
binaries. golang 1.5 introduces -buildmode=shared to build shared
libraries and -linkshared to dynamically link against shared libraries.
wily now has golang 1.5 and Canonical is working on shared libraries for
the remaining supported architectures. The golang project has stated
that 1.6 will include shared library support for all the architectures
that we officially support, and golang 1.6 will be available before
16.04 is released.

The understanding has always been that if golang had proper shared
library support enabled for archive builds by default, then there are no
additional maintenance concerns beyond the packages themselves. A lot of
effort has gone into shared library support in golang, this has all been
upstreamed and is in wily now. While the work is not done yet (eg, arm64
is not finished), I think we can reach across the aisle and define how
to support a limited set of (strategic) golang packages while the shared
library support is being finished.

In support of this, I've defined the MIR requirements for packages
depending on golang[1][2] and have defined the security team processes
for properly supporting them[3]. So long as the number of packages
remains low and only as in interim solution, strategic (to Canonical)
golang projects that statically build their binaries may be considered
for MIR provided they follow the guidelines outlined in the wiki. It is
vitally important to understand that even with these procedures, the
process does not scale and we all must push forward to have golang 1.6
for 16.04 with shared library support on by default.

As such, golang-go has security team signoff provided the following conditions 
are met:
 * the Ubuntu Foundations team/et al state their commitment to golang 1.6 with 
shared library support on by default in 16.04
 * all packages that depend on golang that are in main must transition to 
golang 1.6 and use shared libraries. In terms of this MIR, the juju team must 
state their commitment in this bug
 * In addition to a bug subscriber, a team must state their commitment to 
supporting golang in Ubuntu (officially supporting a language is 
resource-intensive and we must ensure the resources are in place to do properly 
support those that depend on the language)
 * as per the MIRteam requirements, the juju team must state their commitment 
to testing no-change-rebuilds triggered by a dependent library/compiler and to 
fix any issues found for the lifetime of the release
 * ideally, a commitment (possibly Foundations and juju?) is stated in this bug 
that Ubuntu will work with Debian on dh_golang so that it properly supports 
shared libraries. This is not a strict requirement from the security team, but 
it will almost certainly provide the easiest path forward

Once the above commitments are stated in this bug, I'll provide security
team ACK for golang.

[1]https://wiki.ubuntu.com/MIRTeam#golang
[2]https://wiki.ubuntu.com/MIRTeam#Packaging_red_flags
[3]http://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/view/head:/README.built_using

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Matthias Klose]

well, it's already in main. needed to build the cross compilers and to
cross-build gcc-5

** Changed in: gccgo-5 (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Curtis Hovey]

Regarding - release-public-tools.sh doesn't validate downloaded packages. That 
script has not been used since October 2013.
The current script 

http://bazaar.launchpad.net/~juju-qa/juju-release-tools/trunk/view/head:/assemble-streams.bash
does not use apt-get download because that that command does not work for all 
series. The script is run a Jerff (streams.canonical.com), a machine the QA 
team does not control. We are not permitted to install software on it, nor can 
we change its apt settings. As the machine is precise, we could only get 3 of 
the 18 ubuntu agents built  by Launchpad.

The modern script downloads the deb from a private ppa with only one
subscriber (the QA team). The packages are downloaded within 30 minutes
of being built. As juju doesn't distinguish between  patch-level or
origin in is checking of versions, and the fact that Juju itself creates
fake versions, The assembly and publication script scripts validate the
collection of agents. Agents cannot be changed. Only the agents added
are permitted to be different in the collection. All the agents in the
collect are hashed and verified to to match the local collection each
time the script is run. The publication script rsyncs (or uses the
clouds equivalent feature) the local stream of agents to the cloud. The
final check verify the metadata is identical and public for users to
access.

assemble-streams.bash is scheduled to be replaced this cycle. We are
considering removing  the phase to download debs and make agents. The
process is not idempotent. We are considering a separate process
controlled solely by the QA team to create and assess agents for the
collection (test them before they are placed in streams). We could use
apt-get download on machines/containers we control to make agents.
Streams.canonical.com, like the clouds would get agents only from the QA
team.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Ian Booth]

@Seth, with the user mode containers - lxc didn't support that when the
local provider feature was first developed. And now we have lxd on the
horizon so we will be re-tooling local provider to use lxd and this will
be delivered for Juju 1.26 around end of January 2016. We don't plan on
making any further changes to local provider / lxc in the meantime as
any work there will be imminently obsolete by the lxd stuff.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

[Bug 1267393] Re: [MIR] juju-core, juju-mongodb, gccgo, golang

[Alexis Bruemmer]

LP #1481502 has been opened to track the development work to fix
ShQuote()

https://bugs.launchpad.net/juju-core/+bug/1481502

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to golang in Ubuntu.
https://bugs.launchpad.net/bugs/1267393

Title:
  [MIR] juju-core, juju-mongodb, gccgo, golang

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gccgo-5/+bug/1267393/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs