Re: Concerns about Security of packages in Debain OS and the Operating system itself.

2022-04-17 Thread Daniel Pocock
On 17/04/2022 19:26, Satvik Sinha wrote: > Hi,guys and Good Day! So in recent days ,it was observed that many open > source contributors vandalised their or someone else's  project's > reputation to show agendas of Russia-Ukraine war, Some even vandalised > their project to destroy system in Russ

Re: Open Letter to Debian election candidates about Debian vendettas

2022-03-19 Thread Daniel Pocock
erson events. And we will certainly > not apologise to you for the harassment that you have caused to our > project members and volunteers. > > For anyone else, our public statement remains at: > > https://www.debian.org/News/2021/2027 > > -Jonathan > > On 202

Open Letter to Debian election candidates about Debian vendettas

2022-03-19 Thread Daniel Pocock
Felix, Hideki, Jonathan You all nominated as candidates in the Debian election In August 2018 I publicly resigned from mentoring the Google Summer of Code internships. My resignation email[1] was written diplomatically and did not contain any hints about the intern relationships and other prob

Re: workarounds for Planet bugs?

2018-07-10 Thread Daniel Pocock
On 10/07/18 12:09, Jonathan Dowland wrote: > On Mon, Jul 09, 2018 at 08:36:35PM +0200, Daniel Pocock wrote: >> Yes, I don't think they are all the same problem. >> >> For Anisa, Jona and Kristi they are all using Wordpress and it is polled >> successfully by t

Re: workarounds for Planet bugs?

2018-07-09 Thread Daniel Pocock
On 03/07/18 20:24, Laura Arjona Reina wrote: > Hello Daniel > > > El 02/07/18 a las 20:04, Daniel Pocock escribió: >> >> >> Hi everybody, >> >> Planet struggles to poll certain blogs (see below), including some new >> contributors. >> &g

workarounds for Planet bugs?

2018-07-02 Thread Daniel Pocock
Hi everybody, Planet struggles to poll certain blogs (see below), including some new contributors. Does anybody know of workarounds these people can use until Planet is updated to a recent version of planet-venus? For example, at least three of them I communicated with are using Wordpress, is

Bug#900849: allowing alternative country lists on a Debian host/installer

2018-06-05 Thread Daniel Pocock
Package: iso-codes Severity: wishlist Version: 3.75-1 X-Debbugs-CC: debian-devel@lists.debian.org I've been thinking about technical solutions to help the country list bug[1] and the following possibility came to mind: - define a virtual package with a name like "country-codes" - src:iso-codes

Bug#898259: RFP: vscode -- Microsoft Visual Studio Code

2018-05-09 Thread Daniel Pocock
Package: wnpp Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org,debian-outre...@lists.debian.org Visual Studio Code regularly comes up in discussions.  Several GSoC students have asked about using it for Python projects. Upstream releases[1] the source code under an MIT license on G

Re: Kanboard and alternatives for mentoring

2018-02-22 Thread Daniel Pocock
On 21/02/18 20:39, Tollef Fog Heen wrote: > ]] Daniel Pocock > >> Another possibility: DSA already run RT and there is a Kanban >> extension[3] for it. > > I doubt we're interested in making the RT setup generally available for > people to create

Re: Kanboard and alternatives for mentoring

2018-02-21 Thread Daniel Pocock
(please reply on debian-devel unless your reply is very specific to one of the other teams) Hi all, I wanted to share this discussion with the wider community as Kanboard has appeared in two different teams (DebConf and Outreach) and it also relates to (or potentially duplicates) the functionalit

TTF or OTF, bad behavior on upgraded systems

2018-01-19 Thread Daniel Pocock
Hi all, I was looking at the fonts page[1] on the wiki and it mentions: "For most uses, you’ll want TrueType (TTF) and OpenType (OTF) fonts" In fact, is it necessary to install both, or just OTF if the same font is available as both? On a system that has been upgraded from etch through several

Re: Bug#630196: Shotwell publishing plugin status in stretch

2017-06-05 Thread Daniel Pocock
On 04/06/17 17:15, Jörg Frings-Fürst wrote: > Hello Daniel, > > first thanks for your comments. > > > Am Sonntag, den 04.06.2017, 12:44 +0200 schrieb Daniel Pocock: >> >> Looking at Shotwell in stretch, in the Plugins tab of the >> Preferences dialo

Shotwell publishing plugin status in stretch

2017-06-04 Thread Daniel Pocock
Looking at Shotwell in stretch, in the Plugins tab of the Preferences dialog, I see there are extra options now: * Gallery3[1] (although it is not maintained upstream any more), there is an RFP[2] for Debian packaging. * Piwigo[3], which was removed[4] from Debian in 2012 Sadly neither of those

Re: Bug#860368: installer: create network bridges by default?

2017-04-19 Thread Daniel Pocock
On 18/04/17 10:29, Ritesh Raj Sarraf wrote: > On Sun, 2017-04-16 at 08:51 +0200, Evgeni Golov wrote: >>> The solution is for people to configure a bridge or Open >>> vSwitch (OVS) in /etc/network/interfaces. (Notice OVS can be >>> configured[4] in the interfaces file). Maybe it would be >>> use

Bug#860368: installer: create network bridges by default?

2017-04-15 Thread Daniel Pocock
Package: debian-installer Severity: wishlist X-Debbugs-CC: debian-devel@lists.debian.org With VirtualBox dropping out of testing[1], more people will be using KVM and libvirt/virt-manager[2] for desktop virtualization. With VirtualBox, it was possible for people to bridge their physical network

Re: systemd, ntp, kernel and hwclock

2017-02-28 Thread Daniel Pocock
On 27/02/17 21:26, Ben Hutchings wrote: > On Mon, 2017-02-27 at 11:18 -0800, Russ Allbery wrote: >>> Daniel Pocock writes: >> >>> I've observed a system that had a wildly incorrect hardware >>> clock (when it was first unboxed), I ran ntpdate to sync

Re: systemd, ntp, kernel and hwclock

2017-02-27 Thread Daniel Pocock
On 27/02/17 20:18, Russ Allbery wrote: > Daniel Pocock writes: > >> I've observed a system that had a wildly incorrect hardware clock (when >> it was first unboxed), I ran ntpdate to sync the kernel clock but after >> a shutdown and startup again it had a wacky ti

systemd, ntp, kernel and hwclock

2017-02-27 Thread Daniel Pocock
Hi all, I've observed a system that had a wildly incorrect hardware clock (when it was first unboxed), I ran ntpdate to sync the kernel clock but after a shutdown and startup again it had a wacky time again. I came across the discussion about how the hardware clock is no longer set at shutdown[1

installing kernel debug symbols on stretch?

2017-01-14 Thread Daniel Pocock
I notice the dbg package for the kernel was moved, but it doesn't appear to be installable. I've added the necessary entry to /etc/apt/sources.list: deb http://debug.mirrors.debian.org/debian-debug/ stretch-debug main non-free contrib and then I try to get the package: # apt-get install -

Re: contacting all bug reporters for a package?

2016-12-19 Thread Daniel Pocock
On 19/12/16 22:47, Adrian Bunk wrote: > On Mon, Dec 19, 2016 at 10:15:33PM +0100, Daniel Pocock wrote: >> >> >> On 19/12/16 21:57, Adrian Bunk wrote: >>> On Thu, Dec 15, 2016 at 11:11:27AM +0100, Daniel Pocock wrote: >>>> >>>> Is there a

Re: contacting all bug reporters for a package?

2016-12-19 Thread Daniel Pocock
On 19/12/16 21:57, Adrian Bunk wrote: > On Thu, Dec 15, 2016 at 11:11:27AM +0100, Daniel Pocock wrote: >> >> Is there any easy way to contact everybody who made a bug report against >> a package and ask them to check if the latest upload fixes it? Or is >> there any s

Re: Bug#848695: ITP: telegram -- Official desktop client for the Telegram instant messaging protocol

2016-12-19 Thread Daniel Pocock
On 19/12/16 17:05, Boyuan Yang wrote: > Just one (and maybe the biggest) question: how would you handle the > patched Qt? > Note there is also telepathy-morse[1], the Telegram Connection Manager for the Telepathy framework (and Empathy client) Regards, Daniel 1. https://github.com/Telepa

which JavaScript dependencies really need a separate package?

2016-12-19 Thread Daniel Pocock
I had a look at packaging homer-ui (ITP[1]) for HOMER[2]. It is a powerful web application based on AngularJS for troubleshooting SIP applications. It is particularly useful for troubleshooting many of the SIP products we include in Debian and also for learning about SIP, SDP and RTP. There ar

Re: depending on libssl1.0-dev, buildd fails to find it

2016-12-19 Thread Daniel Pocock
On 17/12/16 17:40, Christian Seiler wrote: > On 12/17/2016 04:49 PM, Daniel Pocock wrote: >> In my reSIProcate control[1] file, I included the following: >> >> Build-Depends: ... , libssl-dev (<< 1.1) | libssl1.0-dev (>= 1.0.0), ... >> >> pdebuild corr

depending on libssl1.0-dev, buildd fails to find it

2016-12-17 Thread Daniel Pocock
In my reSIProcate control[1] file, I included the following: Build-Depends: ... , libssl-dev (<< 1.1) | libssl1.0-dev (>= 1.0.0), ... pdebuild correctly builds it for sid with libssl1.0-dev from openssl1.0[2] In the buildd[3] report, it says that libssl-dev is uninstallable on every platform

Re: contacting all bug reporters for a package?

2016-12-15 Thread Daniel Pocock
On 15/12/16 17:43, Jonathan Dowland wrote: > On Thu, Dec 15, 2016 at 11:26:52AM +0100, gregor herrmann wrote: >> On Thu, 15 Dec 2016 11:11:27 +0100, Daniel Pocock wrote: >> >>> Is there any easy way to contact everybody who made a bug >>> report against a pac

contacting all bug reporters for a package?

2016-12-15 Thread Daniel Pocock
Is there any easy way to contact everybody who made a bug report against a package and ask them to check if the latest upload fixes it? Or is there any script for maintainers to do this? If somebody has opened 2 ore more bugs maybe they may prefer to only receive a single email summarizing all t

testing Debian NFS servers

2016-12-13 Thread Daniel Pocock
Before jessie, I used to see Debian NFS servers of various sizes running for months without reboots. After upgrading to jessie, I started to encounter crashes which have eventually been traced[1] to NFS. Other users have seen[2] this too. For anybody trying Debian as an NFS server for the first

Re: auto-removal and alternative dependencies

2016-12-08 Thread Daniel Pocock
On 08/12/16 16:59, Adam D. Barratt wrote: > On 2016-12-08 13:08, Andreas Henriksson wrote: >> On Thu, Dec 08, 2016 at 01:41:38PM +0100, Daniel Pocock wrote: >>> >>> >>> On 08/12/16 13:35, Andrey Rahmatullin wrote: >>> > On Thu, Dec 0

Re: auto-removal and alternative dependencies

2016-12-08 Thread Daniel Pocock
On 08/12/16 13:35, Andrey Rahmatullin wrote: > On Thu, Dec 08, 2016 at 01:02:20PM +0100, Daniel Pocock wrote: >> I have two packages that depend on: nagios3 | icinga >> >> nagios3 is being removed[1], but icinga[2] is still available, so >> why can't my packag

Re: auto-removal and alternative dependencies

2016-12-08 Thread Daniel Pocock
On 08/12/16 13:22, Emilio Pozuelo Monfort wrote: > On 08/12/16 13:02, Daniel Pocock wrote: >> I have two packages that depend on: nagios3 | icinga >> >> nagios3 is being removed[1], but icinga[2] is still available, so why >> can't my packages continue to list

auto-removal and alternative dependencies

2016-12-08 Thread Daniel Pocock
I have two packages that depend on: nagios3 | icinga nagios3 is being removed[1], but icinga[2] is still available, so why can't my packages continue to list nagios3 as a possible dependency for the convenience of those people who continue to use it? Regards, Daniel 1. https://packages.qa.

Re: [Letsencrypt-devel] Certbot in Debian Stretch

2016-11-29 Thread Daniel Pocock
On 28/11/16 18:13, Peter Eckersley wrote: > On Fri, Nov 25, 2016 at 12:48:35PM +0100, Christian Seiler wrote: > >> Note that per backports rules, $RELEASE_N-backports must track >> $RELEASE_N_PLUS_1, so if you remove certbot from Stretch, you'll >> also have to remove it from jessie-backports.

Re: [Letsencrypt-devel] Certbot in Debian Stretch

2016-11-24 Thread Daniel Pocock
On 24/11/16 17:39, Adrian Bunk wrote: > On Thu, Nov 24, 2016 at 05:22:29PM +0100, Daniel Pocock wrote: >> ... >> For networked services, it is different. >> >> Debian has already been carrying updated versions of Firefox and >> Chromium in stable including bu

Re: [Letsencrypt-devel] Certbot in Debian Stretch

2016-11-24 Thread Daniel Pocock
On 24/11/16 16:37, Adrian Bunk wrote: > On Thu, Nov 24, 2016 at 02:45:26PM +0100, Ondřej Surý wrote: >> On Thu, Nov 24, 2016, at 13:39, Philipp Kern wrote: >>> So if you, as an upstream maintainer, have a change that is needed for >>> compatibility with changes in network APIs and the change is r

Re: Crowd funding campaign to package browserify in debian

2016-11-24 Thread Daniel Pocock
On 24/11/16 09:31, Pirate Praveen wrote: > On Thursday 24 November 2016 01:31 PM, Daniel Pocock wrote: >> If you can expand the scope of your crowdfunding effort to cover >> those libraries needed for homer-ui, then I'm happy to promote >> the crowdfunding in the HOME

Re: [Letsencrypt-devel] Certbot in Debian Stretch

2016-11-24 Thread Daniel Pocock
On 24/11/16 00:06, Peter Eckersley wrote: > So Let's Encrypt definitely wants to get to a place where we have some very > stable APIs for other people to code against. We're trying to do that with the > Certbot command line itself, working hard to ensure that if people upgrade, it > doesn't brea

Re: Crowd funding campaign to package browserify in debian

2016-11-24 Thread Daniel Pocock
On 24/11/16 06:26, Pirate Praveen wrote: > On Thursday 24 November 2016 01:25 AM, Daniel Pocock wrote: >> Would you be interested in helping package JS dependencies for >> homer-ui[1] in Debian? > > Right now, my plates are full. I will have a look once I complete > gu

Re: Crowd funding campaign to package browserify in debian

2016-11-23 Thread Daniel Pocock
On 23/11/16 17:42, Pirate Praveen wrote: > On Friday 11 November 2016 05:04 PM, Pirate Praveen wrote: >> We have already completed 19 days of work (120 new packages and >> 8 updates). We raised only half the target and completed close to >> the same amount of work. > > We are onto our second rou

Re: Certbot in Debian Stretch

2016-11-23 Thread Daniel Pocock
On 23/11/16 09:57, Thijs Kinkhorst wrote: > Hi Peter, > > On Tue, November 22, 2016 02:40, Peter Eckersley wrote: >> I'm an upstream developer for Certbot, previously known as the Let's >> Encrypt client (https://certbot.eff.org). Certbot is a flexible and very > popular >> way to get certificat

Re: Certbot, Ring in Debian Stretch

2016-11-21 Thread Daniel Pocock
On 22/11/16 02:40, Peter Eckersley wrote: > Hi! > > I'm an upstream developer for Certbot, previously known as the Let's Encrypt > client (https://certbot.eff.org). Certbot is a flexible and very popular way > to get certificates from Let's Encrypt; it's issued about 300,000 currently > active T

openssl 1.1.x for travis-ci users

2016-11-20 Thread Daniel Pocock
Many upstreams use travis-ci or another CI solution to automatically build their code and run unit tests It will be hard for such upstreams to incorporate OpenSSL 1.1.x support if they can't easily get the package in there. What is the suggested way for such upstream projects to solve this? Her

Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock
On 18/11/16 21:09, Kurt Roeckx wrote: > On Fri, Nov 18, 2016 at 02:22:23PM -0500, Zack Weinberg wrote: >> Daniel Pocock wrote: >>> I wanted to try compiling some upstream projects against OpenSSL 1.1.0 >>> on jessie, without installing the package though. I tried the

Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock
On 18/11/16 22:12, Kurt Roeckx wrote: > On Fri, Nov 18, 2016 at 09:15:53PM +0100, Daniel Pocock wrote: >> >> >> On 18/11/16 21:10, Kurt Roeckx wrote: >>> On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote: >>>> >>>> >>>>

Re: testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock
On 18/11/16 21:10, Kurt Roeckx wrote: > On Fri, Nov 18, 2016 at 03:53:20PM +0100, Daniel Pocock wrote: >> >> >> I wanted to try compiling some upstream projects against OpenSSL 1.1.0 >> on jessie, without installing the package though. >> >> I tri

testing OpenSSL 1.1.0 on jessie

2016-11-18 Thread Daniel Pocock
I wanted to try compiling some upstream projects against OpenSSL 1.1.0 on jessie, without installing the package though. I tried the following: dget -x http://http.debian.net/debian/pool/main/o/openssl/openssl_1.1.0c-1.dsc cd openssl-1.1.0c/ dpkg-buildpackage -rfakeroot -j13 and it builds bu

Re: OpenSSL 1.1.0 / transition process

2016-11-15 Thread Daniel Pocock
On 16/11/16 00:01, Sebastian Andrzej Siewior wrote: > On 2016-11-15 17:42:59 [+0100], Daniel Pocock wrote: >> Would the OpenSSL maintainers and/or release managers consider making a >> wiki page about the transition with the most common questions about it, >> similar to

Re: OpenSSL 1.1.0 / transition process

2016-11-15 Thread Daniel Pocock
On 15/11/16 16:54, Ian Jackson wrote: > Lots of people have posted in this thread that they see problems with > our current approach to the openssl transition. > > Do the openssl maintainers have an response ? I just started looking at this thread 2 minutes ago. I really don't know where to start

Re: dedicated live CD for PGP master key management

2016-10-10 Thread Daniel Pocock
This can now be used, command line only for the moment, as described in my blog[1] about it If anybody wants to help take this further please join the list[2] I set up for it Regards, Daniel 1. https://danielpocock.com/dvd-based-clean-room-for-pgp-and-pki 2. https://lists.alioth.debian.org/ma

Re: spammers closing bugs in BTS

2016-08-20 Thread Daniel Pocock
On 18/08/16 10:48, Holger Levsen wrote: > On Wed, Aug 17, 2016 at 06:14:38PM +0200, Daniel Pocock wrote: >> I received a notification that a bug was closed. >> >> The email that closed the bug was a spam email sent to the >> address (bug-number)-d...@bugs.debian.o

Re: spammers closing bugs in BTS

2016-08-17 Thread Daniel Pocock
On 17/08/16 18:34, Stéphane Blondon wrote: > Hello, > > Le 17/08/2016 à 18:14, Daniel Pocock a écrit : >> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737921 >> >> Maybe time to start requiring PGP signatures on control emails to >> the BTS? > >

Re: spammers closing bugs in BTS

2016-08-17 Thread Daniel Pocock
On 17/08/16 18:29, gustavo panizzo wrote: > On Wed, Aug 17, 2016 at 06:14:38PM +0200, Daniel Pocock wrote: >> >> >> I received a notification that a bug was closed. >> >> The email that closed the bug was a spam email sent to the >> address (bug-number

spammers closing bugs in BTS

2016-08-17 Thread Daniel Pocock
I received a notification that a bug was closed. The email that closed the bug was a spam email sent to the address (bug-number)-d...@bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737921 Maybe time to start requiring PGP signatures on control emails to the BTS?

wiki about block alignment issues

2016-07-15 Thread Daniel Pocock
I've started a wiki about block alignment issues: https://wiki.debian.org/DiskBlockAlignment Can anybody comment on specific packages / tools that may help people investigate or update their systems, maybe adding links to the wiki? Regards, Daniel

third-party servers for Debian purposes with minimal DSA effort

2016-07-01 Thread Daniel Pocock
Is there any pattern for making servers hosted by third-parties available for all DDs to log in, similar to a DSA-managed machine, but without giving DSA the burden of managing such a machine? One reason I ask about this is for the GSoC/RTC lab servers I am hosting. They usually run stable with

wheezy->jessie upgrades, invoke-rc.d glitches

2016-05-10 Thread Daniel Pocock
I've noticed that during wheezy->jessie upgrades, the gmond restarts are not working correctly I looked at a machine with this problem today and observed that: - during the dist-upgrade process and up to the point when I rebooted, the invoke-rc.d command could not start the gmond process # inv

Re: using whiptail and translated strings from arbitrary scripts

2016-04-27 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 27/04/16 16:29, Bas Wijnen wrote: > On Wed, Apr 27, 2016 at 02:28:22PM +0200, Daniel Pocock wrote: >> If I use this method, can the strings be translated easily by >> the Debian translators just like the strings for >>

Re: using whiptail and translated strings from arbitrary scripts

2016-04-27 Thread Daniel Pocock
On 27/04/16 14:00, Antonio Terceiro wrote: > On Tue, Apr 26, 2016 at 09:32:02PM +0200, Daniel Pocock wrote: >> >> >> It is well documented how developers should create po files for >> i18n support in their debconf configuration questions during >> pack

Re: using whiptail and translated strings from arbitrary scripts

2016-04-27 Thread Daniel Pocock
On 27/04/16 07:55, Paul Wise wrote: > On Wed, Apr 27, 2016 at 3:32 AM, Daniel Pocock wrote: > >> One use case I'm thinking of is the live CD for PGP key management >> discussed already[2]. After booting, instead of showing a login >> prompt on tty1 it will go int

using whiptail and translated strings from arbitrary scripts

2016-04-26 Thread Daniel Pocock
It is well documented how developers should create po files for i18n support in their debconf configuration questions during package install[1]. What about arbitrary scripts that are run from the command line and don't use debconf to store the user responses? How should they interact with whipt

Re: making a Debian Live CD for managing GnuPG master key and smartcards

2016-04-26 Thread Daniel Pocock
On 26/04/16 14:16, Dashamir Hoxha wrote: > On Tue, Apr 26, 2016 at 1:16 PM, Daniel Pocock <mailto:dan...@pocock.pro>> wrote: > > Could you add a section to the wiki about this, with an itemized list of > the tasks that need to be done, e.g. > > * pack

Re: making a Debian Live CD for managing GnuPG master key and smartcards

2016-04-26 Thread Daniel Pocock
On 26/04/16 12:52, Dashamir Hoxha wrote: > On Tue, Apr 26, 2016 at 9:53 AM, Daniel Pocock <mailto:dan...@pocock.pro>> wrote: > > > There has been some discussion on debian-devel[1] about making a > bootable Debian Live CD specifically for GnuPG > >

Re: dedicated live CD for PGP master key management

2016-04-26 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 25/04/16 23:06, Christian Seiler wrote: > On 04/25/2016 08:54 PM, Daniel Pocock wrote: >> On 25/04/16 19:03, Christian Seiler wrote: >>>> Does the workflow make sense? >>> >>> In principle yes, h

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 21:51, Adam Borowski wrote: > On Mon, Apr 25, 2016 at 10:15:02AM +0200, Daniel Pocock wrote: >> There are various blogs guiding people to use a Debian Live CD for >> managing PGP master keys >> >> Has anybody thought of making a dedicated live CD image for

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 19:03, Christian Seiler wrote: > On 04/25/2016 06:38 PM, Daniel Pocock wrote: >> On 25/04/16 17:34, Christian Seiler wrote: >>> Am 2016-04-25 17:24, schrieb Daniel Pocock: >>>> On 25/04/16 16:23, Holger Levsen wrote: >>>>> On Mon, Ap

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 17:34, Christian Seiler wrote: > Am 2016-04-25 17:24, schrieb Daniel Pocock: >> On 25/04/16 16:23, Holger Levsen wrote: >>> On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: >>>> I had already made up some live CDs for ready-to-run VoIP and &g

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25/04/16 16:23, Holger Levsen wrote: > On Mon, Apr 25, 2016 at 04:03:26PM +0200, Daniel Pocock wrote: >> I had already made up some live CDs for ready-to-run VoIP and remote hands >> purposes, so I can probably do some of what is required, but it seems like a >> good idea

Re: dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
On 25 April 2016 14:55:07 CEST, Ian Jackson wrote: >Daniel Pocock writes ("dedicated live CD for PGP master key >management"): >> Some specific things that the live image could do: >> - verifying there is no network connection, no DHCP daemon, >> automa

dedicated live CD for PGP master key management

2016-04-25 Thread Daniel Pocock
There are various blogs guiding people to use a Debian Live CD for managing PGP master keys Has anybody thought of making a dedicated live CD image for this purpose, with some kind of PGP quick setup wizard and attempting to enforce a sane and secure workflow? One page I came across suggested us

Bug#815308: streamlining license version "or later" version syntax

2016-02-20 Thread Daniel Pocock
Package: lintian Version: 2.5.30+deb8u4 X-Debbugs-cc: debian-devel@lists.debian.org Let's say that debian/copyright contains the following: Files: foo Copyright: 2016, Mr Foo License: GPL-2 Files: bar Copyright: 2016, Mr Bar License: GPL-2+ License: GPL-2 On Debian systems, the complete tex

chromium disabling use of shared libs, BoringSSL

2016-02-09 Thread Daniel Pocock
Chromium upstream are keen to discourage use of shared libraries on the system and encourage packagers to bundle their own versions. This has been discussed in the context of libsrtp[1] but I can imagine them using the same approach for other things in Chromium. Has anybody else come across thes

Re: default softphone in Debian stretch

2016-01-16 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 15/01/16 14:20, Bas Wijnen wrote: > On Fri, Jan 15, 2016 at 11:08:35AM +0100, Daniel Pocock wrote: > > >> On 15/01/16 04:00, Paul Wise wrote: >>> On Tue, Jan 12, 2016 at 5:42 PM, Daniel Pocock wrote: >>> &

Re: default softphone in Debian stretch

2016-01-15 Thread Daniel Pocock
On 15/01/16 04:00, Paul Wise wrote: > On Tue, Jan 12, 2016 at 5:42 PM, Daniel Pocock wrote: > >> default softphone in Debian[1] > > It should be up to the user what communications tools they want to use > and or have installed (if any), that is none of our business,

Re: default softphone in Debian stretch

2016-01-14 Thread Daniel Pocock
On 14/01/16 20:00, Michael Banck wrote: > On Thu, Jan 14, 2016 at 07:29:48PM +0100, Daniel Pocock wrote: >> On 14/01/16 17:10, Iain R. Learmonth wrote: >>> It would make sense that if upstreams for desktop environments do not >>> recommend a softphone, that Debian in

Re: default softphone in Debian stretch

2016-01-14 Thread Daniel Pocock
On 14/01/16 17:10, Iain R. Learmonth wrote: > Hi, > > On Tue, Jan 12, 2016 at 10:42:06AM +0100, Daniel Pocock wrote: >> Nothing really changed, the thread appeared to fizzle out with comments >> from more than one person that Debian would ship whatever was >>

default softphone in Debian stretch

2016-01-12 Thread Daniel Pocock
Before the jessie release, I started a thread about the default softphone in Debian[1] Nothing really changed, the thread appeared to fizzle out with comments from more than one person that Debian would ship whatever was recommended by the desktop maintainers / GNOME upstream[2] GNOME upstream h

Re: Renaming the Debian Project

2015-12-30 Thread Daniel Pocock
On 31/12/15 04:22, Steve Langasek wrote: > On Wed, Dec 30, 2015 at 02:03:40PM -0800, benjamin barber wrote: >> It's unfortunate that Debian is named after Debra and Ian, >> because having the project named after a white supremacist, who >> used his ex-wifes name as an trophy. > > I agree in whol

Re: Renaming the Debian Project

2015-12-30 Thread Daniel Pocock
On 30/12/15 23:03, benjamin barber wrote: > It's unfortunate that Debian is named after Debra and Ian, because > having the project named after a white supremacist, who used his > ex-wifes name as an trophy. Being that the current year is almost 2016 > and is 20 years after Debian started, we sho

Re: postfix seems unmaintained

2015-12-09 Thread Daniel Pocock
On 09/12/15 18:26, Albino B Neto wrote: > 2015-12-09 12:30 GMT-02:00 Stefan Pietsch : >> is the postfix package still maintained? >> >> There seems to be no activity since November 2014. > > really? > > https://packages.debian.org/jessie/postfix There is an RC bug since 14 November 2015, no ac

Re: debian.org mail forwarding, SPF and Postfix

2015-12-08 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/12/15 20:43, Marco d'Itri wrote: > On Dec 08, Daniel Pocock wrote: > >> Can anybody comment on the recommended way to allow mail >> forwarded from debian.org mail servers? > You whitelist them from your SPF check

debian.org mail forwarding, SPF and Postfix

2015-12-08 Thread Daniel Pocock
I have the Postfix package on jessie with SPF checks on incoming mail. I'm have trouble receiving mail forwarded from the poc...@debian.org email address. >From main.cf, these lines mention spf: smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destinat

Re: certificate creation in postinst, potentially using letsencrypt script

2015-11-18 Thread Daniel Pocock
On 05/08/15 13:11, Thorsten Glaser wrote: > Bas Wijnen debian.org> writes: > >> Certificates are placed in /etc/ssl/certs/. > > No, in /etc/ssl. /etc/ssl/certs/ is for Root CA certificates *only*. > Now that Let's Encrypt is progressing (they are almost in beta[1] now), I thought it would be

debian.org XMPP - testing welcome

2015-11-05 Thread Daniel Pocock
People are now welcome to test the debian.org XMPP service. This is not confirmation that the service is live and supported, but it is running and people can try to log in and add friends to their roster/buddy list. There may be a couple of restarts over the next couple of days. When we think e

Re: Debian with HiDPI / 4K displays

2015-08-11 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/08/15 23:29, Simon Kainz wrote: > > > Am 2015-08-09 um 09:22 schrieb Vincent Bernat: >> ❦ 8 août 2015 18:11 -0700, Josh Triplett >> : > >>> This handles the majority of programs I use. A few notable >>> exceptions: gitk scales up some

Re: Debian with HiDPI / 4K displays

2015-08-10 Thread Daniel Pocock
On 10/08/15 00:17, Simon McVittie wrote: > On 09/08/15 17:02, Vincent Bernat wrote: >> While it is possible to derive the true DPI setting from the resolution >> and the dimension > > ... except for when the stated dimensions in the display's EDID are full > of lies and claim that it is 4cm x 3c

Re: Debian with HiDPI / 4K displays

2015-08-09 Thread Daniel Pocock
On 09/08/15 09:22, Vincent Bernat wrote: > ❦ 8 août 2015 18:11 -0700, Josh Triplett : > >> This handles the majority of programs I use. A few notable exceptions: >> gitk scales up some but not all of its fonts (reported as a bug), >> Celestia's and stellarium's in-rendering text (reported as bu

Debian with HiDPI / 4K displays

2015-08-08 Thread Daniel Pocock
I recently started using a 4K display with Debian jessie and GNOME shell The hardware setup was quite straightforward as I chose to buy a new graphics card with 4K support and a relatively new monitor. The graphics card and monitor both support DisplayPort 1.2 so I just hook them up with the st

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
On 02/08/15 17:44, Christoph Anton Mitterer wrote: > On Sun, 2015-08-02 at 16:37 +0200, Daniel Pocock wrote: >> I apologize for not being more explicit, this is the sort of thing I >> was thinking too, it wouldn't be up to dpkg or postinst to guess or >> insist on a

Re: certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
On 2 August 2015 16:20:51 CEST, Jonas Smedegaard wrote: >Quoting Marco d'Itri (2015-08-02 12:36:19) >> On Aug 02, Daniel Pocock wrote: >> >>> Does anybody prefer to see packages create certificates during >>> postinst or is there any preference not

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 2 August 2015 11:25:35 CEST, Paul Wise wrote: >On Sun, Aug 2, 2015 at 4:50 PM, Daniel Pocock wrote: > >> Does anybody know which packages create or use the /etc/ssl/ssl.* > >That looks like a sysadmin created path, only one package even mentions >it: > >https://cod

certificate creation in postinst, potentially using letsencrypt script

2015-08-02 Thread Daniel Pocock
Does anybody prefer to see packages create certificates during postinst or is there any preference not to try that and let people do so manually? The Let's Encrypt CA also has a client utility, letsencrypt[1], that could be very useful from the postinst script. With any CA, there can sometimes

Re: server certificates/key pairs and CA directories

2015-08-02 Thread Daniel Pocock
On 21/07/15 18:50, Thorsten Glaser wrote: > Daniel Pocock pocock.pro> writes: > >> I looked at the package ssl-cert to try and understand and there I found >> that it is using /etc/ssl/certs for server certs while other packages > > Do NOT do that. > I wasn&#

server certificates/key pairs and CA directories

2015-07-03 Thread Daniel Pocock
Hi all, There has been some discussion in the past about CA certificates and server certificate/key locations in /etc I'd like to ensure that the RTC Quick Start Guide[1] is giving people accurate instructions about where to create their private key and server certificate files on a Debian host

building packages of upstream commits with Jenkins

2015-02-26 Thread Daniel Pocock
For some of my projects I'd like to test the ability to generate a package from every upstream commit. In the past I've encountered two types of problem: a) upstream makes some change (e.g. leaving some new header out of their distribution tarball) or something else that is only discovered after

deadline tommorrow! Re: Call for Debian projects and mentors in the Google Summer of Code 2015

2015-02-19 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 There are just three ideas there so far, including the one I just added myself - for anybody who hasn't participated in GSoC before, I personally feel there are some really good things about this program both for free software and for Debian and it

jessie not mounting all filesystems

2015-01-29 Thread Daniel Pocock
I just upgraded a system with many filesystems to jessie On many occasions when I boot this system it is failing to mount one of the filesystems and systemd gives the emergency login prompt It is not always the same filesystem though, it seems to be random. Most are ext4 on LVM, there are a cou

Re: policy regarding redistributable binary files in upstream tarballs

2014-11-19 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 19/11/14 20:33, Marco d'Itri wrote: > On Nov 19, Salvo Tomaselli wrote: > >> Should the upstream tarball be repackaged to remove them, or >> not? > They do not need to be removed at least if they can be rebuilt from > the source in the package

Re: making dput a wrapper around git

2014-11-18 Thread Daniel Pocock
On 18/11/14 16:43, Ian Jackson wrote: > Daniel Pocock writes ("Re: making dput a wrapper around git"): >> One of the problems with a VCS right now though is the order of events >> required to make a tag. If I tag and then upload and my upload is >> rejected for

Re: making dput a wrapper around git

2014-11-18 Thread Daniel Pocock
On 18/11/14 15:23, Thorsten Glaser wrote: > On Tue, 18 Nov 2014, Daniel Pocock wrote: > >> That is not a Git-specific issue, it is a general issue with source-only >> uploads. If source-only uploads become the norm then signed tags should >> be the same as source

Re: concurrent installation of different pkg versions

2014-11-18 Thread Daniel Pocock
On 30/04/14 03:45, Thomas Goirand wrote: > On 04/26/2014 01:39 AM, Daniel Pocock wrote: >> >> With all the talk about removing jquery from source packages, one thing >> that does arise is the question of how to support different jquery versions. >> >> This is n

  1   2   3   >