Bug#1071406: gnulib: dh_gnulib_patch: use git merge-base --is-ancestor

2024-05-18 Thread Simon Josefsson
Package: gnulib Severity: wishlist The current logic of dh_gnulib_patch to try each patch in a .d sub-directory and pick one patch that applies. It was suggested to use a more clever method to pick the "right" patch. One more clever approach would be "git merge --is-ancestor" to programtically

Bug#1020217: S3-backed snapshot implementation

2024-05-06 Thread Simon Josefsson
Lucas Nussbaum writes: > - I got the OK to host a S3-backed snapshot mirror using the Debian AWS > account (see thread in #1020217) Is this s3 bucket public, or will it be? I have been worried about the state of snapshot and I am mirroring its data into local Git LFS. Since

Bug#1069755: libntlm0: broken symlink: README -> README.md

2024-05-03 Thread Simon Josefsson
ver? Or did you use some tool to discover this that isn't linked from the PTS? A patch like the one below seems to fix this. But maybe we should raise a lintian wishlist bug report too. /Simon From 4144c80941d5d099b2ff6678750bae5419c74b6a Mon Sep 17 00:00:00 2001 From: Simon Josefsson Date: Fri, 3 May

Bug#1069268: gnulib: package version is long

2024-05-01 Thread Simon Josefsson
Hi Vincent, Vincent Lefevre writes: > Thanks for the explanations. However, I think that it is not the > goal of the Debian version string to entirely reflect all the > Debian-side and upstream-side versions involved. This may be a > good idea when the obtained version string is short enough

Bug#1069597: gnulib: describe a security patch mechanism

2024-04-21 Thread Simon Josefsson
Package: gnulib Severity: wishlist I don't know how to implement this, so I'll describe it pending for inspiration or someone else to come along who wants to work on this. Let's say we are in a situation were Debian packages Build-Depends on the gnulib package as the source for gnulib related

Bug#1069256: debian-policy: clarify requirement for use of Static-Built-Using

2024-04-19 Thread Simon Josefsson
Maytham Alsudany writes: > In early 2022, Guillem added support for a new Static-Built-Using field to > dpkg, encouraging packagers to use it over Built-Using to specify > statically-linked dependencies [2]. The commit message states the following: > > This field mimics the previous

Bug#1069268: gnulib: package version is long

2024-04-19 Thread Simon Josefsson
Vincent Lefevre writes: > Package: gnulib > Version: 20240412~dfb7117+stable202401.20240408~aa0aa87-2 > Severity: normal > > A long package version is annoying for the user (for the "dpkg -l" > output and other reasons). I doubt that such a long version is > necessary; Hi Vincent and thanks for

Bug#921954: gnulib

2024-04-15 Thread Simon Josefsson
Jonas Smedegaard writes: > I am happy that gnulib is in good hands. > > I've moved on to other challenges, and have no interest in working on > gnulib now. That said, you are welcome to try nudge me if some concrete > task emerges where you image I might be of help. Thank you for support!

Bug#921954: gnulib

2024-04-13 Thread Simon Josefsson
you think? I hope I'm not stepping on anyone's toes here. The package was orphaned and is a critical component to be able to build source-only tarballs for other packages in Debian. /Simon Simon Josefsson writes: > Hi. I noticed gnulib in Debian was orphaned. I work upstream on gnu

Bug#921954: Volunteer to adopt this

2024-04-02 Thread Simon Josefsson
Hi. I noticed gnulib in Debian was orphaned. I work upstream on gnulib and intend to adopt it in Debian, but I’m happy to co-maintain it. My plan is to keep it updated to latest upstream version, and see if we can offer some way for it to be used to bootstrap various projects that depend on

Bug#1067838: [Pkg-sssd-devel] Bug#1067838: Please provide a trivial working example

2024-03-27 Thread Simon Josefsson
Thanks -- alas I think this is the same as this one: https://bugs.launchpad.net/ubuntu/+source/resolv-wrapper/+bug/2015570 Rebuild the binary package and installing it should make things work again. Could you try that? I'm not sure how to express this dependency, it seems some behaviour of

Bug#1067734: coreutils: touch --date y2k38 on armhf

2024-03-26 Thread Simon Josefsson
Package: coreutils Version: 9.4-3.1 Hi. Shouldn't dates past 2038 work on armhf? I tried the following commands in a sid chroot on abel.debian.org -- it seems 'date' handles y2k38 properly, but not 'touch --date'. I couldn't find any earlier bug report about touch --date not handling y2k38.

Bug#1066848: freediameter: replace libidn11-dev with libidn-dev

2024-03-15 Thread Simon Josefsson
Hi again, I have uploaded a NMU with the patch below into DELAYED/10. Let me know if you want to cancel it. /Simon Simon Josefsson writes: > Hi Ruben, all, > > I have opened a merge request to resolve the bug below: > > https://salsa.debian.org/debian-mobcom-te

Bug#1062896: shishi: NMU diff for 64-bit time_t transition

2024-03-15 Thread Simon Josefsson
* Non-maintainer upload. > + * Rename libraries for 64-bit time_t transition. Closes: #1062896 > + > + -- Benjamin Drung Thu, 29 Feb 2024 15:52:14 + > + > shishi (1.0.3-2) unstable; urgency=medium > >[ Simon Josefsson ] > diff -Nru shishi-1.0.3/debian/contr

Bug#1066855: drop libidn11-dev

2024-03-14 Thread Simon Josefsson
Package: libidn Version: 1.42-1 All packages should build against libidn-dev now, not libidn11-dev. Current stable release of Debian ships libidn-dev. The transitional libidn11-dev package can be dropped when all reverse dependencies have stopped using it. root@68d340bc8331:/# apt-cache

Bug#1066848: freediameter: replace libidn11-dev with libidn-dev

2024-03-14 Thread Simon Josefsson
Simon Josefsson writes: > Package: freediameter > Version: 1.2.1-8 > Tags: patch > > Hi! I'd like to drop the transitional package 'libidn11-dev' as most > packages have already moved to use 'libidn-dev' which is in stable. > > How about this patch? > > /Simon >

Bug#1066848: freediameter: replace libidn11-dev with libidn-dev

2024-03-14 Thread Simon Josefsson
Package: freediameter Version: 1.2.1-8 Tags: patch Hi! I'd like to drop the transitional package 'libidn11-dev' as most packages have already moved to use 'libidn-dev' which is in stable. How about this patch? /Simon diff --git a/debian/control b/debian/control index 335362a..2856eae 100644

Bug#1066846: loudmouth: replace libidn11-dev with libidn-dev

2024-03-14 Thread Simon Josefsson
Package: loudmouth Version: 1.5.4-1 Tags: patch Hi! I'd like to drop the transitional package 'libidn11-dev' as most packages have already moved to use 'libidn-dev' which is in stable. How about this patch? /Simon diff --git a/debian/control b/debian/control index 853b197..963b1c3 100644 ---

Bug#1063220: oath-toolkit: NMU diff for 64-bit time_t transition

2024-02-29 Thread Simon Josefsson
Benjamin Drung writes: > Source: oath-toolkit > Dear maintainer, > > Please find attached a final version of this patch for the time_t > transition. This patch is being uploaded to unstable. > > Note that this adds a versioned build-dependency on dpkg-dev, to guard > against accidental

Bug#1064454: debian-policy: Restrict deb822 field names more

2024-02-22 Thread Simon Josefsson
Would it make sense to change this to use an inclusive list of permitted characters instead? How about checking the field names that is in use today, and construct a regexp of permitted symbols out of that? Starting point: [A-Za-z][A-Za-z0-9-_]* /Simon signature.asc Description: PGP signature

Bug#1064397: ITP: client-desktop-shell-integration-nautilus -- Nautilus, Nemo and Caja integration of the owncloud-client

2024-02-21 Thread Simon Josefsson
Pierre-Elliott Bécue writes: > Package: wnpp > Severity: wishlist > Owner: Pierre-Elliott Bécue > X-Debbugs-Cc: debian-de...@lists.debian.org > > * Package name: client-desktop-shell-integration-nautilus > Version : 5.0.0 > Upstream Contact: Frank Müller > * URL :

Bug#1063746: Upload request for golang-github-katalix-go-l2tp 0.1.7-1

2024-02-20 Thread Simon Josefsson
Tom Parkin writes: > Hi folks, > > Would someone mind please reviewing and uploading > golang-github-katalix-go-l2tp 0.1.7-1? > > https://salsa.debian.org/go-team/packages/golang-github-katalix-go-l2tp Looks good, although there were no tag for the previous Debian upload so diffing changes was

Bug#1064021: gss: FTBFS on armhf: FAIL: krb5context

2024-02-16 Thread Simon Josefsson
Sebastian Ramacher writes: > FAIL: krb5context > = > > ==31890== > ==31890== Process terminating with default action of signal 11 (SIGSEGV) > ==31890== Access not within mapped region at address 0xBDB33984 > ==31890==at 0x4856C00: shishi_key_parse (in >

Bug#1061555: apt: augment signature verification for key-usage transparency (Sigstore/Sigsum)

2024-01-26 Thread Simon Josefsson
Julian Andres Klode writes: > I'm strongly opposed to add support for these off-the-shelve solutions. > We need end-to-end control of all aspects of signing. > > What we learned with OpenPGP is that we don't want to be tied to third > party off-the-shelve solutions as we cannot control the

Bug#1061555: apt: augment signature verification for key-usage transparency (Sigstore/Sigsum)

2024-01-26 Thread Simon Josefsson
Package: apt Severity: wishlist I believe it would be nice if apt could verify signatures from Sigstore cosign and/or verify Sigsum proofs, to augment the current PGP-based signature verification. While this can be handled outside of apt's awareness, it would also be possible for apt to support

Bug#1061499: libgssglue: disable gsasl-dovecot-gssapi-heimdal autopkgtests on armhf, re-enable them on i386

2024-01-25 Thread Simon Josefsson
Thank you -- I am uploading a newly built package with your patch. /Simon signature.asc Description: PGP signature

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

2024-01-24 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Bug#1059573: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Simon Josefsson
Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: >> Hi. >> >> I was looking at golang-opentelemetry-contrib-dev because it is needed >> for etcd 3.5.x. It seems to build fine, but upstream is doing several >

Bug#1059573: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Simon Josefsson
Hi. I was looking at golang-opentelemetry-contrib-dev because it is needed for etcd 3.5.x. It seems to build fine, but upstream is doing several concurrent releases, and we don't have the latest version in experimental. I wanted to upgrade it to the latest upstream version before doing an

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

2024-01-21 Thread Simon Josefsson
> 21 jan. 2024 kl. 20:09 skrev Holger Levsen : > > Hi Simon, > >> On Fri, Jan 19, 2024 at 05:32:05PM +0100, Simon Josefsson wrote: >> * URL : https://git.glasklar.is/sigsum/core/sigsum-go >> Description : tools for public and transparent l

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

2024-01-19 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

2024-01-18 Thread Simon Josefsson
:58.0 +0100 @@ -1,3 +1,10 @@ +golang-webpki-org-jsoncanonicalizer (0.20210204-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Add link for name used by rekor. Closes: #1060820. + + -- Simon Josefsson Thu, 18 Jan 2024 19:52:58 +0100 + golang-webpki-org-jsoncanonicalizer

Bug#1061101: Rebuild bindata.go using go-bindata

2024-01-18 Thread Simon Josefsson
Package: golang-github-common-nighthawk-go-figure Severity: wishlist Hi. I noticed that the source code file bindata.go in this package was generated using go-bindata from the files in fonts/. This bug is to request that this file is re-generated from source code during the build of the Debian

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

2024-01-16 Thread Simon Josefsson
I managed to get this package to build, and I belive it actually is required. Rekor is using it for "rekor-cli version": root@vello:~# rekor-cli version _ _ __ ___ _ ___ | _ \ | | | |/ / / _ \ | _ \ / ___| | | |_ _| |

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

2024-01-16 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

2024-01-16 Thread Simon Josefsson
Shengjing Zhu writes: >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18 >> h1:rd389Q26LMy03gG4anandGFC2LW/xvjga5GezeeaxQk= >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18/go.mod >>

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

2024-01-15 Thread Simon Josefsson
Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 8:51 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-adamkorcz-go-fuzz-headers-1 >> Version : 0.0~git2

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

2024-01-15 Thread Simon Josefsson
Shengjing Zhu writes: >> https://salsa.debian.org/jas/golang-github-sigstore-rekor/-/jobs/5160982 >> >> src/github.com/sigstore/rekor/cmd/backfill-redis/main.go:44:2: >> cannot find package "sigs.k8s.io/release-utils/version" in any of: >>

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

2024-01-15 Thread Simon Josefsson
Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 9:27 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-k8s-sigs-release-utils >> Version : 0.7.7-1 &g

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

2024-01-15 Thread Simon Josefsson
of it inside the official Debian as far as I can tell. My primary use-case is the trillian golang libraries, for sigstore's rekor. I'll see about starting with them only. The 'trillian' binary package can be added later, under that name or another. /Simon > Le lun. 15 janv. 2024 à 15:03, Simon Jos

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

2024-01-15 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

2024-01-15 Thread Simon Josefsson
Reinhard Tartler writes: > On Sun, Jan 14, 2024 at 8:36 PM Simon Josefsson wrote: > >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-cyberphone-json-canonicalization >> Version : 0.0~

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cyberphone-json-canonicalization Version : 0.0~git20220623.57a0ce2-1 Upstream Author : Anders Rundgren * URL : https://github.com/cyberphone/json-canonicalization * License

Bug#1060819: ITP: golang-github-zeebo-errs -- errs is a package for making errors friendly and easy

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-zeebo-errs Version : 1.3.0-1 Upstream Author : Jeff Wendling * URL : https://github.com/zeebo/errs * License : Expat Programming Lang: Go Description : errs is a Go

Bug#1060818: ITP: in-toto-golang -- framework for software supply chain integrity

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: in-toto-golang Version : 0.9.0-1 Upstream Author : Aditya Sirish, Christian Rebischke, Lukas Pühringer, et al * URL : https://github.com/in-toto/in-toto-golang * License : Apache-2.0

Bug#1060817: ITP: golang-github-spiffe-go-spiffe -- Golang library for SPIFFE support

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-spiffe-go-spiffe Version : 2.1.6-1 Upstream Author : Agustín Martínez Fayó, Andrew Harding, et al * URL : https://github.com/spiffe/go-spiffe * License : Apache-2.0

Bug#1060816: ITP: golang-github-shibumi-go-pathspec -- gitignore-style pathspec pattern matching in Go

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-shibumi-go-pathspec Version : 1.3.0-1 Upstream Author : Sander van Harmelen, Christian Rebischke * URL : https://github.com/shibumi/go-pathspec * License : Apache-2.0

Bug#1060815: ITP: relic -- digitally sign Linux/Java/Windows packages

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: relic Version : 7.6.1-1 Upstream Author : SAS Institute, Inc. * URL : https://github.com/sassoftware/relic * License : Apache-2.0 Programming Lang: Go Description : digitally sign

Bug#1060813: ITP: golang-github-qur-ar -- Golang ar archive file library

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-qur-ar Version : 0.0~git20130629.282534b-1 Upstream Author : Blake Smith, Julian Phillips * URL : https://github.com/qur/ar * License : Expat Programming Lang: Go

Bug#1060810: ITP: golang-github-sassoftware-go-rpmutils -- Golang implementation of parsing RPM packages

2024-01-14 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sassoftware-go-rpmutils Version : 0.2.0-1 Upstream Author : SAS Institute, Inc. * URL : https://github.com/sassoftware/go-rpmutils * License : Apache-2.0 Programming Lang

Bug#1050314: Sigstore rekor in Debian

2024-01-14 Thread Simon Josefsson
Hi Just a heads-up that I am working on packaging rekor for Debian, current effort is under way here: https://salsa.debian.org/jas/golang-github-sigstore-rekor I will merge it here eventually: https://salsa.debian.org/go-team/packages/golang-github-sigstore-rekor It seems like a great number

Bug#1060181: Please consider supporting configuration via both /usr/share/apt/verify.d and /etc/apt/verify.d

2024-01-08 Thread Simon Josefsson
forwarded 1060181 https://gitlab.com/debdistutils/apt-verify/-/issues/6 tags 1060181 upstream thanks Josh Triplett writes: > Many tools that use .d configuration directories support multiple such > directories, to make it easy to separate local sysadmin configuration > from distribution

Bug#1057693: valgrind: i386 vex x86->IR: unhandled instruction bytes: 0x2E 0x8D 0xB4 0x26

2024-01-01 Thread Simon Josefsson
Sam James writes: > Thanks, I've reported this on the Valgrind bugzilla at > https://bugs.kde.org/show_bug.cgi?id=478624. Thank you for reporting this! Upstream has fixed it: https://sourceware.org/git/?p=valgrind.git;a=commitdiff;h=d35005cef8ad8207542738812705ceabf137d7e0 It would be nice

Bug#1059618: ITP: ssh3 -- faster and rich secure shell using HTTP/3

2023-12-30 Thread Simon Josefsson
Colin Watson writes: > On Sat, Dec 30, 2023 at 12:13:28AM +0100, Philipp Kern wrote: >> On 29.12.23 11:30, Simon Josefsson wrote: >> > SSH3 is a complete revisit of the SSH protocol, mapping its semantics on >> > top of the HTTP mechanisms. In a nutshell, SSH3 uses

Bug#1059618: ITP: ssh3 -- faster and rich secure shell using HTTP/3

2023-12-30 Thread Simon Josefsson
Packaging of SSH3 is available here: https://salsa.debian.org/go-team/packages/ssh3 https://salsa.debian.org/jas/ssh3/ Thanks to the Salsa CI/CD pipeline there is an aptly repository available for easy testing, if anyone would like to experiment or help. Below you can find a snippet how you can

Bug#1059644: inetutils: provide rsh-client & rsh-server?

2023-12-29 Thread Simon Josefsson
fre 2023-12-29 klockan 23:09 +0100 skrev Guillem Jover: > Control: tag -1 moreinfo > > Hi! > > On Fri, 2023-12-29 at 20:03:33 +0100, Simon Josefsson wrote: > > Package: inetutils > > Severity: wishlist > > > I noticed that netkit-rsh is orphaned and there

Bug#1059680: migrating to golang-github-golang-jwt-jwt-v5?

2023-12-29 Thread Simon Josefsson
Package: golang-github-golang-jwt-jwt Severity: wishlist Hi. For your information, I have uploaded golang-github-golang-jwt-jwt-v5 since v5 is required by (at least) ssh3 that I'm packaging. I'm opening this bug to discuss: 1) Can you confirm that golang-github-golang-jwt-jwt cannot be

Bug#1059644: inetutils: provide rsh-client & rsh-server?

2023-12-29 Thread Simon Josefsson
Package: inetutils Severity: wishlist Hi! I noticed that netkit-rsh is orphaned and there are even requests to remove it: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041864 That is stalled because there are two reverse dependencies that allegedly uses: pdsh and pvm. I was thinking that

Bug#1059626: version 1.2.0 of golang-github-kevinburke-ssh-config available

2023-12-29 Thread Simon Josefsson
Package: golang-github-kevinburke-ssh-config Severity: wishlist Hi. I noticed a new upstream release of this package exists, and my packaging of 'ssh3' requires it. Updating was straight-forward, just import new version and rebuild, I had to use version '1.2.0' rather than '1.2' so would

Bug#1059620: ITP: golang-github-golang-jwt-jwt-v5 -- golang implementation of JSON Web Tokens (library)

2023-12-29 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson X-Debbugs-CC: debian-de...@lists.debian.org, debian...@lists.debian.org * Package name: golang-github-golang-jwt-jwt-v5 Version : 5.2.0-1 Upstream Author : golang-jwt maintainers, Dave Grijalva * URL : https

Bug#1059618: ITP: ssh3 -- faster and rich secure shell using HTTP/3

2023-12-29 Thread Simon Josefsson
Package: wnpp Severity: wishlist X-Debbugs-Cc: debian-de...@lists.debian.org, debian...@lists.debian.org * Package name: ssh3 Version : 0.1.4 Upstream Contact: François Michel * URL : https://github.com/francoismichel/ssh3 * License : Apache-2.0 Programming

Bug#1059267: ITP: apt-verify - extend apt's gpgv-based verification mechanism

2023-12-22 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: si...@josefsson.org X-Debbugs-CC: debian-de...@lists.debian.org * Package name: apt-verify Version : 2.0 Upstream Contact: Simon Josefsson * URL : https://gitlab.com/debdistutils/apt-verify * License : AGPLv3

Bug#1058770: globalplatform: establish_context failed with error 0x8010006A (Access denied.)

2023-12-16 Thread Simon Josefsson
Ludovic Rousseau writes: >> I am trying to find a long term solution in pcsc-lite. > > The idea is to start pcscd with polkit disabled. Thanks -- I was just experimenting with solutions based on /usr/share/polkit-1/rules.d/ after reading https://blog.apdu.fr/posts/2023/11/pcsc-lite-and-polkit/

Bug#1058021: pandoc 3.0.1+ds uninstallable in sid

2023-12-11 Thread Simon Josefsson
Package: pandoc Version: 3.0.1+ds Hi. It seems pandoc is uninstallable in sid, this is causing build failures for one of my package that Build-Depend on pandoc: https://salsa.debian.org/auth-team/globalplatform/-/jobs/5025578 /Simon jas@kaka:~$ podman run -it --rm debian:unstable-slim

Bug#1057693: valgrind: i386 vex x86->IR: unhandled instruction bytes: 0x2E 0x8D 0xB4 0x26

2023-12-06 Thread Simon Josefsson
Package: valgrind Version: 1:3.20.0-2 Hi. During debci autopkgtest of a new version of libgssglue on i386 I got a failure like this, which is fatal and execution halts. 117s vex x86->IR: unhandled instruction bytes: 0x2E 0x8D 0xB4 0x26 117s ==5711== valgrind: Unrecognised instruction at address

Bug#1057285: gsasl: autopkgtest fails sometimes on armhf

2023-12-02 Thread Simon Josefsson
Hi I think this is https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1017638 If it happens in practice we could ignore this self check or add some loop around this error message. /Simon > 2 dec. 2023 kl. 18:45 skrev Andreas Metzler : > > Source: gsasl > Version: 2.2.0-2 > > Hello, > >

Bug#1055615: RFP: system76-ectool -- System76 Open Source Embedded Controller tool

2023-11-08 Thread Simon Josefsson
Package: wnpp Severity: wishlist * Package name: system76-ectool Upstream Author : System76 / Jeremy Soller * URL : https://github.com/system76/ec * License : MIT Programming Lang: Rust Description : firmware tool for System76 Open Source Embedded Controller The

Bug#1053568: ITP: python-lib25519 -- Python wrapper around lib25519 library

2023-10-13 Thread Simon Josefsson
Hi. I'm happy to review, co-maintain and sponsor this package. Initial review: - Could you add debian/tests/ infrastructure? - It installs a "top_level.txt" file, is this intentional? Lintian complaint: I: python3-lib25519: package-contains-documentation-outside-usr-share-doc

Bug#1053569: ITP: python-mceliece -- Python wrapper around libmceliece library

2023-10-13 Thread Simon Josefsson
Hi. I'm happy to review, co-maintain and sponsor this package. Initial review: - Could you add debian/tests/ infrastructure? - It installs a "top_level.txt" file, is this intentional? Lintian complaint: I: python3-mceliece: package-contains-documentation-outside-usr-share-doc

Bug#1050531: ITP: libmceliece -- Classic McEliece microlibrary

2023-10-13 Thread Simon Josefsson
Hi. I'm happy to rewview, sponsor and co-maintain this package. I created https://salsa.debian.org/debian/libmceliece as a hopefully better place to maintian the package in? I did a review of the package and it looks fine, and I'm ready to upload it. Do you have any other changes pending?

Bug#656665: ITP: libglobalplatform -- library to handle communication with GlobalPlatform cards

2023-10-03 Thread Simon Josefsson
retitle 656665 ITP: globalplatform -- library to handle communication with GlobalPlatform cards owner 656665 Simon Josefsson tag 656665 + pending thanks Hi. I have discovered that upstream is active again, and have made releases in recent years: https://github.com/kaoh/globalplatform

Bug#1051553: ITP: lib25519 -- X25519/Ed25519 microlibrary

2023-09-18 Thread Simon Josefsson
tor 2023-09-14 klockan 11:10 +0200 skrev Jan Mojzis: > > I would be happy to help review, co-maintain and upload this > > package. > > Great, thank You. > > > First prototype for review: > 'https://salsa.debian.org/janmojzis/lib25519' > > if it's ok > can you please create

Bug#1051553: ITP: lib25519 -- X25519/Ed25519 microlibrary

2023-09-09 Thread Simon Josefsson
Jan Mojzis writes: > * Package name: lix25519 ^ lib25519 I guess? Otherwise looks good to me. > I'm using this library and I'm going to maintain using > https://salsa.debian.org/ > I need sponsor for the first upload (I'm DM). I would be happy to help review,

Bug#1042520: jabberd2: diff for NMU version 2.7.0-4.1

2023-09-06 Thread Simon Josefsson
Thank you for fixing this! I was just about to fix it. I've merged your patch into git: https://salsa.debian.org/xmpp-team/jabberd2/-/commit/aafafbc13ed3d8f06768d6228de6f58cd3d23ff5 For some reason the pkg-xmpp-de...@lists.alioth.debian.org mailing list doesn't work, or I would have received

Bug#1029842: ITP: randombytes -- Library generating fresh randomness

2023-08-29 Thread Simon Josefsson
Sam Hartman writes: >> "Jan" == Jan Mojzis writes: > > * Package name: randombytes > Version : 20230126 > Upstream Author : Daniel J. Bernstein > * URL : https://randombytes.cr.yp.to/ > * License : Public domain > > Public domain is problematic as a

Bug#1043147: [Pkg-sssd-devel] Bug#1043147: Bug#1043147: ding-libs: please consider upgrading to 3.0 source format

2023-08-19 Thread Simon Josefsson
:21.0 +0200 @@ -1,3 +1,30 @@ +ding-libs (0.6.2-2) unstable; urgency=medium + + [ Simon Josefsson ] + * control: Add myself as Uploaders. + * control: Use new pkg-sssd email address. + * copyright: Add myself for debian/*, silencing lintian warning update- +debian-copyright. + * Add

Bug#1043147: [Pkg-sssd-devel] Bug#1043147: ding-libs: please consider upgrading to 3.0 source format

2023-08-08 Thread Simon Josefsson
sön 2023-08-06 klockan 19:53 +0200 skrev Bastian Germann: > Source: ding-libs > Version: 0.6.2-1 > Severity: wishlist > > This package is among the few that still use source format 1.0. > Please upgrade it to source format 3.0: > https://wiki.debian.org/Projects/DebSrc3.0 Nice catch. Fixed in

Bug#1043183: wrap-and-sort: sort header fields too?

2023-08-07 Thread Simon Josefsson
ed on real packages some other "obvious" corrections will be discovered. /Simon Source: socket-wrapper Homepage: http://cwrap.org/socket_wrapper.html Section: devel Priority: optional Maintainer: Debian SSSD Team Uploaders: Laszlo Boszormenyi (GCS) , Timo Aaltonen , Si

Bug#1043111: resolv-wrapper and socket-wrapper?

2023-08-06 Thread Simon Josefsson
"László Böszörményi (GCS)" writes: > Your efforts are appreciated. The reasons I've adopted the mentioned > packages are long gone. In short, feel free to take it under the SSSD > umbrella and keep me as an Uploader. Thanks for quick and positive response! I'm uploading resolv-wrapper now and

Bug#1043111: [PATCH] tests: Fix debci failure. Add libsocket-wrapper dependency.

2023-08-06 Thread Simon Josefsson
From 6409d3a211917613746adc5708cd8daefa96c093 Mon Sep 17 00:00:00 2001 From: Simon Josefsson Date: Sun, 6 Aug 2023 11:13:58 +0200 Subject: [PATCH] tests: Fix debci failure. Add libsocket-wrapper dependency. --- debian/changelog | 1 + debian/tests/control | 1 + debian/tests/tests | 7

Bug#1043111: [PATCH] resolv-wrapper: several package improvements

2023-08-06 Thread Simon Josefsson
cessary since buster). + * Rebuild manpage with asciidoctor since upstream uses that. + + -- Simon Josefsson Sun, 06 Aug 2023 10:19:30 +0200 + resolv-wrapper (1.1.8-1) unstable; urgency=medium * New upstream release. diff -Nru resolv-wrapper-1.1.8/debian/control resolv-wrapper-1.1.8/debian/contro

Bug#1042827: [Pkg-sssd-devel] priv-wrapper?

2023-08-03 Thread Simon Josefsson
Timo Aaltonen writes: > Simon Josefsson kirjoitti 1.8.2023 klo 18.46: >> Hi >> I have finished packaging cwrap's priv-wrapper: >> https://salsa.debian.org/jas/priv-wrapper/ >> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042827 >> Would you be interest

Bug#1042827: priv-wrapper?

2023-08-01 Thread Simon Josefsson
Hi I have finished packaging cwrap's priv-wrapper: https://salsa.debian.org/jas/priv-wrapper/ https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1042827 Would you be interested in co-maintaining priv-wrapper in the SSSD group? I noticed that SSSD maintains some of the other cwrap projects:

Bug#1042827: ITP: priv-wrapper -- library to disable resource limits and other privilege dropping

2023-08-01 Thread Simon Josefsson
Package: wnpp Severity: wishlist Hi! I am planning to package priv-wrapper: https://cwrap.org/priv_wrapper.html priv_wrapper aims to help running processes which are dropping privileges or are restricting resources in test environments. A disabled call always succeeds (i.e. returns

Bug#1041359: missing daemonize causes failed to connect to `/var/guix/daemon-socket/socket'

2023-07-17 Thread Simon Josefsson
Package: guix Version: 1.4.0-3 Hi. I was trying to build guile-gnutls via guix in a debian12 container, and the sequence below happened. Is there a missing dependency on daemonize? /Simon $ sudo podman run -it --rm --privileged debian:12-slim # apt-get update # apt-get install guix git # git

Bug#1022702: [pkg-gnupg-maint] Bug#1022702: Bug#1022702: gnupg: Migrating packaging from 2.2.x to "stable" 2.3.x

2023-07-17 Thread Simon Josefsson
Jonathan McDowell writes: > On Wed, Jul 12, 2023 at 09:18:27AM +0200, Simon Josefsson wrote: >> Christian Kastner writes: >> > On 2023-06-12 17:01, Sune Stolborg Vuorela wrote: >> >> Any chance you can give Andreas a go ahead to push a newer Gnupg2 >&g

Bug#1040580: oz: diff for NMU version 0.17.0-5.2

2023-07-17 Thread Simon Josefsson
Thank you for fixing this! I'm hoping someone will take over this package (or that upstream will roll a new releases that passes self- tests which would allow me to more easily update the package) so I'll leave this for future package maintainers. Feel free to push fixes to git on salsa. /Simon

Bug#1022702: [pkg-gnupg-maint] Bug#1022702: gnupg: Migrating packaging from 2.2.x to "stable" 2.3.x

2023-07-12 Thread Simon Josefsson
Christian Kastner writes: > Hi Daniel, > > On 2023-06-12 17:01, Sune Stolborg Vuorela wrote: >> Any chance you can give Andreas a go ahead to push a newer Gnupg2 to at >> least >> experimental, or preferably unstable ? > > I, too, would appreciate a newer version. It turns out that in versions

Bug#1022702: gnupg: Migrating packaging from 2.2.x to "stable" 2.3.x

2023-04-27 Thread Simon Josefsson
> I have spent a little bit of effort on packaging 2.4.0. I have pushed > this to salsa (sans tags) into 3 temporary branches that could be > fast-forwarded: > tmp-ametzler-pristine-tar --ff-> pristine-tar > tmp-ametzler-upstream --ff-> upstream > tmp-ametzler-v2.4 --ff->

Bug#1024278: libgssglue: autopkgtest failure with pkgconf

2022-12-12 Thread Simon Josefsson
tags 1024278 help thanks Philipp Kern writes: > Hey Simon, > > On Thu, Nov 17, 2022 at 12:46:19PM +0100, Sebastian Ramacher wrote: >> > I see. If so, it would be good if pkgconf was made consistent with >> > pkg-config here, if the intention is to replace it. >> >> This discussion needs to

Bug#1024278: libgssglue: autopkgtest failure with pkgconf

2022-11-26 Thread Simon Josefsson
Thanks, I have reported this to pkgconf upstream: https://github.com/pkgconf/pkgconf/issues/278 /Simon signature.asc Description: PGP signature

Bug#1024278: libgssglue: autopkgtest failure with pkgconf

2022-11-17 Thread Simon Josefsson
tor 2022-11-17 klockan 10:38 +0100 skrev Sebastian Ramacher: > On 2022-11-17 08:57:12 +0100, Simon Josefsson wrote: > > ons 2022-11-16 klockan 23:55 +0100 skrev Sebastian Ramacher: > > > Source: libgssglue > > > Version: 0.7-1 > > > Severity: serious >

Bug#1024278: libgssglue: autopkgtest failure with pkgconf

2022-11-17 Thread Simon Josefsson
ons 2022-11-16 klockan 23:55 +0100 skrev Sebastian Ramacher: > Source: libgssglue > Version: 0.7-1 > Severity: serious > X-Debbugs-Cc: sramac...@debian.org > > https://ci.debian.net/data/autopkgtest/testing/amd64/libg/libgssglue/28379714/log.gz > > Removing autopkgtest-satdep (0) ... >

  1   2   3   4   5   6   7   8   9   10   >