Re: system upgrade by systemd

2015-08-27 Thread Geert Stappers
On Fri, Aug 28, 2015 at 06:14:05AM +0200, Michael Meskes wrote: > > Is this enough to go on to move this to a report against gnome-software? > > Bug reported btw. Where? ( "Where to follow the bugreport?" ) This is from https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=gnome-software * Ou

Re: system upgrade by systemd

2015-08-27 Thread Torsten Landschoff
On 08/27/2015 05:19 AM, Michael Meskes wrote: > >> Strange - then the install-updates mode should not have been entered in >> the first place. > Let me guess, the file was re-created by some software. As administrator of my own systems it would bother me that some random file /remove-my-packages wi

Re: Security concerns with minified javascript code

2015-08-27 Thread Vincent Bernat
❦ 28 août 2015 01:46 GMT, Bas Wijnen  : > Or alternatively, by packaging the minifier that is being used with the > package > that needs it. Yes, that's a horrible idea with lots of code duplication, but > if I understand the problem, every JS file must be minified with the exact > version of t

Re: Security concerns with minified javascript code

2015-08-27 Thread Vincent Bernat
❦ 27 août 2015 22:04 GMT, Bas Wijnen  : >> > The minifier is a compiler. If it's not in main, files that are compiled >> > with >> > it cannot be in main. For javascript, the easy solution is to not use the >> > compiler. Non-minified code works fine. >> >> Non-minified code is decomposed in

Re: system upgrade by systemd

2015-08-27 Thread Michael Meskes
> Is this enough to go on to move this to a report against gnome-software? Bug reported btw. Michael -- Michael Meskes Michael at Fam-Meskes dot De, Michael at Meskes dot (De|Com|Net|Org) Meskes at (Debian|Postgresql) dot Org Jabber: michael.meskes at gmail dot com VfL Borussia! Força Barça! Go

Re: system upgrade by systemd

2015-08-27 Thread Michael Meskes
> Having just read this entire thread, and been affected by this once, it > occurs to me that the likely answer has been offered, but I suspect you > may have thought Matthias' reference to “GNOME Software” to be a generic > answer (apologies if I'm wrong). But in fact the name of the relevant No,

Re: Security concerns with minified javascript code

2015-08-27 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Aug 27, 2015 at 04:14:53PM -0700, Russ Allbery wrote: > Bas Wijnen writes: > > > On the other hand, shipping packages that cannot be rebuilt with tools > > from Debian will also result in angry users. For me personally, one of > > the bigger

Work-needing packages report for Aug 28, 2015

2015-08-27 Thread wnpp
The following is a listing of packages for which help has been requested through the WNPP (Work-Needing and Prospective Packages) system in the last week. Total number of orphaned packages: 675 (new: 1) Total number of packages offered up for adoption: 183 (new: 3) Total number of packages request

Re: system upgrade by systemd

2015-08-27 Thread Mike Miller
On Thu, Aug 27, 2015 at 05:19:18 +0200, Michael Meskes wrote: > I never wanted to execute offline-updates. So seeing those updates > proves that something triggered it, right? Having just read this entire thread, and been affected by this once, it occurs to me that the likely answer has been offer

Re: Security concerns with minified javascript code

2015-08-27 Thread Russ Allbery
Bas Wijnen writes: > On the other hand, shipping packages that cannot be rebuilt with tools > from Debian will also result in angry users. For me personally, one of > the bigger reasons I use Debian is that we take good care that I can > modify everything on my system, and use the modified versi

Re: Security concerns with minified javascript code

2015-08-27 Thread Bas Wijnen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Aug 26, 2015 at 07:35:01AM +0200, Vincent Bernat wrote: > ❦ 25 août 2015 22:37 GMT, Bas Wijnen  : > > >> We need to leave the Javascript ecosystem mature a bit more but in the > >> meantime, a bit of tolerance would be appreciated > > > > The

Re: Minutes from the "32bit architectures in Debian"-bof

2015-08-27 Thread Ben Hutchings
On Thu, 2015-08-27 at 10:45 -0700, Josh Triplett wrote: > Ben Hutchings wrote: > > On Wed, 2015-08-26 at 12:08 -0700, Josh Triplett wrote: > > > Andreas Barth wrote: > > > > Specific issues: > > > > - for i386, there is still sold new hardware with 32bit-only. Are > > > > there open issues for i3

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-27 Thread Niels Thykier
On 2015-08-27 14:57, Bastian Blank wrote: > On Mon, Aug 24, 2015 at 11:12:41PM +0200, Niels Thykier wrote: >> * ddebs are Debian packages with the extension .deb that >> contain debugging symbols and are built implicitly. >> - A package foo_1.23.deb will receive a corresponding >> foo_1.23-

Re: Minutes from the "32bit architectures in Debian"-bof

2015-08-27 Thread Josh Triplett
Ben Hutchings wrote: > On Wed, 2015-08-26 at 12:08 -0700, Josh Triplett wrote: > > Andreas Barth wrote: > > > Specific issues: > > > - for i386, there is still sold new hardware with 32bit-only. Are > > > there open issues for i386 (apart from the 32bit-generic ones)? > > > Discussion that we n

Re: Security concerns with minified javascript code

2015-08-27 Thread Paul Wise
On Wed, Aug 26, 2015 at 1:42 PM, Vincent Bernat wrote: > Yes and both of them are here. Only the build method is either > unavailable, unspecified or needing network connectivity. Sounds like something that should be in contrib? -- bye, pabs https://wiki.debian.org/PaulWise

Re: Bug#796973: ITP: pseudo -- advanced tool for simulating superuser privileges

2015-08-27 Thread Andrew Shadura
On 26/08/15 20:30, Henrique de Moraes Holschuh wrote: >> Pseudo has a lot of similarities to fakeroot but is a new implementation >> that improves on the problems seen using fakeroot. Pseudo is now >> extensively used by Poky as a replacement to fakeroot but can also be >> used standalone in many o

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-27 Thread Bastian Blank
On Mon, Aug 24, 2015 at 11:12:41PM +0200, Niels Thykier wrote: > * ddebs are Debian packages with the extension .deb that > contain debugging symbols and are built implicitly. > - A package foo_1.23.deb will receive a corresponding > foo_1.23-dbgsym.ddeb package. Are they named .deb or .dd

Bug#797056: ITP: ironic-discoverd -- discovering hardware properties for OpenStack Ironic

2015-08-27 Thread Thomas Goirand
Package: wnpp Severity: wishlist Owner: Thomas Goirand * Package name: ironic-discoverd Version : 1.1.0 Upstream Author : The OpenStack Foundation * URL : https://github.com/openstack/ironic-discoverd * License : Apache-2.0 Programming Lang: Python Descri

Re: Need help in downgrading evolution

2015-08-27 Thread Danny Edel
On 27/08/15 09:22, Svante Signell wrote: > Any ideas how to proceed until bug #795287 is closed? Hi Svante, Since you can't install the pre-regression binary (since it links against the pre-gcc5-transition libs), maybe you'll have more luck grabbing the old source code and building (older) evolut

Re: libstdc++ follow-up transitions

2015-08-27 Thread Julien Cristau
On Tue, Aug 25, 2015 at 08:48:54 +0100, Simon McVittie wrote: > Release team, here are some suggestions for binNMUs and other > wanna-build interactions: > > Fixes for some earlier failures, and version skews caused by > maintainer-built binaries not being discarded: > > # retry failed build wit

Re: Need help in downgrading evolution

2015-08-27 Thread Svante Signell
On Sat, 2015-08-15 at 12:59 +0200, Adam Borowski wrote: > On Fri, Aug 14, 2015 at 02:52:14PM +0200, Svante Signell wrote: > > With the latest debian packages, 3.16.3-1.1 evo cannot any longer > > connect to Contacts and the gmail account. [...] > > Following sid has normally been OK, having to acce