Debian Buster will only be 54% reproducible (while we could be at >90%)

2019-03-05 Thread Holger Levsen
hi, disclaimer: this has not yet been verified by anyone other than myself, so I could very well be wrong. Reproducible builds are about enabling anyone to independently verify that... ;p == Reproducibility in theory == According to https://tests.reproducible-builds.org/debian/buster/index_sui

Re: Use of FATE (FFmpeg Automated Testing Envionment) data?

2019-02-19 Thread Holger Levsen
On Wed, Feb 20, 2019 at 12:06:30AM +0100, Chris Lamb wrote: > Noted, but it is not the size that is the concern, but rather the > licensing. once those (licencing concerns) are resolved, I wonder whether it makes sense to provide a fate-testdata package which then other packages can build-depend o

Re: Bug#922155: [Pkg-matrix-maintainers] ITP: matrix-archive-keyring -- OpenPGP archive key for the Matrix.org package repository

2019-02-13 Thread Holger Levsen
On Wed, Feb 13, 2019 at 05:17:27PM +0100, Ansgar wrote: > More important is the question if the system should /trust/ the keys. > > IMHO installing a non-Debian keyring should *not* make the keys trusted > by APT by default (i.e. with the default answer if debconf is used). agreed. > ubuntu-keyr

Re: Accepted emacs 1:26.1+1-3.2 (source amd64 all) into unstable, unstable

2019-02-09 Thread Holger Levsen
On Mon, Feb 04, 2019 at 02:51:45PM +0100, Andreas Beckmann wrote: > emacs has had a bad history (from piuparts point of view) of providing > clean upgrade paths to newer versions. All versioned emacs packages were > co-installable and there were no transitional packages provided ever to > ensure up

Re: Namespace for system users

2019-02-09 Thread Holger Levsen
On Sat, Feb 09, 2019 at 01:34:41PM +0100, Vincent Bernat wrote: > This is a recurring topic. See: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=248809 in addition to this -policy bug there is also #399028 "developers-reference: best practices to create and delete system accounts" which sugg

Re: Accepted emacs 1:26.1+1-3.2 (source amd64 all) into unstable, unstable

2019-02-04 Thread Holger Levsen
Hi Andreas, On Mon, Feb 04, 2019 at 01:00:13AM +, Andreas Beckmann wrote: > Source: emacs > Version: 1:26.1+1-3.2 > Closes: 916758 > Changes: > emacs (1:26.1+1-3.2) unstable; urgency=medium > . >* Non-maintainer upload. > . >* Add more transitional packages for ancient versioned pac

Re: Potentially insecure Perl scripts

2019-01-24 Thread Holger Levsen
On Thu, Jan 24, 2019 at 03:18:40PM +, Ian Jackson wrote: > To the Debian Perl maintainers: [...] > To the Debian security team: [...] I've read the whole thread and am surprised "talking to upstream" (and fixing the issue there as well) hasn't really been on the table. :/ Did I miss that? --

Re: [MBF] Moving mountnfs.sh script to runlevel 2

2019-01-13 Thread Holger Levsen
On Sun, Jan 13, 2019 at 01:31:42PM +, Dmitry Bogatov wrote: > During resolving issue #551555 of bin:initscripts, I discovered that > solution would be move `mountnfs.sh' initscript into runlevels (2 3 4 5). [...] > List of affected packages: I'm not sure so close to the freeze is the right ti

Re: Proposal: Repository for fast-paced package backports

2018-12-27 Thread Holger Levsen
On Wed, Dec 26, 2018 at 11:37:21PM +0100, Dominik George wrote: > As long as the package is in -volatile FYI: as long as this proposal is been presented with the name -volatile it's dead to me and saves me from reading mails in this thread. Please try to listen if you start a discussion. -- ch

Re: Proposal: Repository for fast-paced package backports

2018-12-26 Thread Holger Levsen
On Wed, Dec 26, 2018 at 02:35:19PM +0100, Dominik George wrote: > >volatile is a very bad name for this because we've used it already for > >something else. > Well, I consider it more or less the same basic idea. The old and new ideas > have more in common than not, with the only difference being

Re: Proposal: Repository for fast-paced package backports

2018-12-26 Thread Holger Levsen
On Wed, Dec 26, 2018 at 12:07:42AM +0100, Dominik George wrote: > I actually think volatile is a good name. After all, it's not so far from the > previous volatile. volatile is a very bad name for this because we've used it already for something else. -- cheers, Holger ---

Re: Bug#915050: (gitlab) Re: Bug#915050: Keep out of testing

2018-12-18 Thread Holger Levsen
On Tue, Dec 18, 2018 at 08:38:39PM +0530, Pirate Praveen wrote: > But if that is not possible, volatile as a separate archive is also fine. instead of volatile we need PPAs. -- cheers, Holger ---

Re: Tainted builds (was Re: usrmerge -- plan B?)

2018-12-04 Thread Holger Levsen
On Tue, Dec 04, 2018 at 01:07:42AM +0100, Guillem Jover wrote: > These will detect problematic files under /usr/local which can taint > the current build. [...] > +.B usr\-local\-has\-programs I regularily have stuff in /usr/local/(s)bin/ which does not taint the system nor my builds, so I think y

Re: Re: usrmerge -- plan B?

2018-11-28 Thread Holger Levsen
On Wed, Nov 28, 2018 at 07:52:08AM +0500, Alexander E. Patrakov wrote: As long as there is one Debian Developer (or any other person who has the > right to upload binary packages) who has a merged /usr on his system used > for building packages, there is a risk of reintroducing the bug through his

Re: usrmerge -- plan B?

2018-11-26 Thread Holger Levsen
On Mon, Nov 26, 2018 at 05:12:34PM +0100, Marco d'Itri wrote: > So far the worst case of "usrmerge failure" can be fixed by > deleting/moving some files (that were installed by you) and then running > the program again. There has never been any case which required > reinstalling/restoring a syst

Bug#914527: dwarves: update package description

2018-11-24 Thread Holger Levsen
package: dwarves severity: minor x-debbugs-cc: Domenico Andreoli , debian-devel@lists.debian.org On Sat, Nov 24, 2018 at 03:28:37PM +0100, Domenico Andreoli wrote: > after some ~7 years of inactivty I've been able to put a new upstream > release of dwarves together. It's at https://salsa.d.o/de

Bug#914443: usrmerge: run dry-mode first and only if this succeeds, do actual changes

2018-11-23 Thread Holger Levsen
package: usrmerge severity: wishlist x-debbugs-cc: debian-devel@lists.debian.org On Fri, Nov 23, 2018 at 03:28:37PM +0100, Stephan Seitz wrote: > > at the moment, the only issues that are known when installing the > > usrmerge package is when there are different binaries with the same > > name in

Re: individual packages moving binaries from /bin to /usr/bin (was: Re: usrmerge -- plan B?)

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 10:11:24PM +0100, W. Martin Borgert wrote: > Reminds me of the long /usr/doc -> /usr/share/doc transition in potato > times. And we did not even have dh in those days. Sounds good to me! ITYM s#potato#slink, potato, woody, sarge, etch and lenny# (Started in 1999 and final

Re: NEW and RC bugs (Re: julia_1.0.0-1_amd64.changes REJECTED)

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 01:42:42PM +, Ian Jackson wrote: > > > Because: > > > ... > > thanks! nice summary. > I replied in my other mail to the things I disagreed with (as is > traditional) but it occurred to me I ought to send a positive note > about this: > > Thanks for being easy to convinc

Re: NEW and RC bugs (Re: julia_1.0.0-1_amd64.changes REJECTED)

2018-11-22 Thread Holger Levsen
On Thu, Nov 22, 2018 at 12:52:48PM +, Ian Jackson wrote: > Because: > > * Discussions about the RC bugs can be more effectively dealt with >using our existing discussion mechanisms, including primarily the >Debian BTS. Compared to REJECT mails: > - Discussions in the BTS are mor

Re: julia_1.0.0-1_amd64.changes REJECTED

2018-11-22 Thread Holger Levsen
On Wed, Nov 21, 2018 at 08:37:28PM -0700, Sean Whitton wrote: > What harm are the packages doing sitting in unstable? Distributing them > does not have much point, but neither does removing them. the rather few people working on (fully and partly) automated QA have to spend brain and cpu cycles o

Re: usrmerge -- plan B?

2018-11-21 Thread Holger Levsen
On Wed, Nov 21, 2018 at 12:38:53PM -0800, Russ Allbery wrote: > But it's not just my opinion that matters. I think we need to decide this > somehow as a project, whether via the TC or via GR or something, because > there's a real disagreement here over whether we can or should > force-upgrade all

Re: julia_1.0.0-1_amd64.changes REJECTED

2018-11-21 Thread Holger Levsen
On Wed, Nov 21, 2018 at 06:19:49PM +, Holger Levsen wrote: > On Wed, Nov 21, 2018 at 05:57:40PM +, Dimitri John Ledkov wrote: > > Before we get there, we should first start autoremoving packages from > > unstable[...] > I'm all for it. also with a 3 month delay (in

Re: julia_1.0.0-1_amd64.changes REJECTED

2018-11-21 Thread Holger Levsen
On Wed, Nov 21, 2018 at 05:57:40PM +, Dimitri John Ledkov wrote: > Before we get there, we should first start autoremoving packages from > unstable, if we consider rc-buggy in unstable to be unacceptable. We > do have quite a bit of things in unstable, that are neither getting > fixed, nor gett

Re: julia_1.0.0-1_amd64.changes REJECTED

2018-11-21 Thread Holger Levsen
On Wed, Nov 21, 2018 at 03:19:33PM +, Ian Jackson wrote: > Why is any of this a reason for an ftpmaster REJECT ? I still think > all of this should be handled as bugs (possibly RC bugs) in the BTS > in the conventional way, after ACCEPT. because why accept rc-buggy software in the archive (wh

Re: usrmerge -- plan B?

2018-11-21 Thread Holger Levsen
Hi Simon, On Wed, Nov 21, 2018 at 02:05:42PM +, Simon McVittie wrote: [...] > > Another question is, why? [...] thank you very much for explaining in detail why usrmerge is sensible and the right thing to do for Debian, the universal OS. I'll link your mail on wiki.debian.org/UsrMerge now a

Re: Our build system may be broken: /bin vs /usr/bin

2018-11-20 Thread Holger Levsen
On Tue, Nov 20, 2018 at 04:12:01PM +, Simon McVittie wrote: > Please use debootstrap --no-merged-usr explicitly if you want to be able > to exercise the "not merged /usr" code path. I attach an untested patch. thanks, merged and deployed/. (Plus recreation of 200 pbuilder base.tgz's triggered

Re: Our build system may be broken: /bin vs /usr/bin

2018-11-20 Thread Holger Levsen
On Tue, Nov 20, 2018 at 02:35:56AM -0500, Chris Lamb wrote: > > | > … Simon McVittie has actually patched our testing framework to vary > > | > this and this is now live. > > | > https://bugs.debian.org/901473#33 > > Are we sure this is fixed? I think it's broken... from irc: < mapreri> I hav

Re: salsa.debian.org: merge requests and such

2018-11-09 Thread Holger Levsen
On Fri, Nov 09, 2018 at 05:41:53PM +, Matthew Vernon wrote: > The particular commit was fine (and had it come as a MR or bug report or > whatever I'd have had no problem with it at all). I'm not sure why you are so bothered by it. Granted, when I first experienced a git push not working afte

Re: Q: secure boot

2018-11-06 Thread Holger Levsen
On Tue, Nov 06, 2018 at 09:21:32AM -0800, Russ Allbery wrote: > >> What is non-free? Signing stuff does not change the freeness of the > >> software. > > it does introduce https://en.wikipedia.org/wiki/Tivoisation however. > I'm not sure how us signing our stuff does that. you are right and I wa

Re: Uncoordinated upload of the rustified librsvg

2018-11-06 Thread Holger Levsen
On Tue, Nov 06, 2018 at 11:58:57AM +0100, John Paul Adrian Glaubitz wrote: > I also bootstrapped the Rust compiler and helped fixing issues on armel, > mips, mipsel, mips64el. Those are "strange" ports for you? Ok. no (except armel..) but as said, you just wrote a mail to d-d-a that rust has been

Re: Uncoordinated upload of the rustified librsvg

2018-11-06 Thread Holger Levsen
On Tue, Nov 06, 2018 at 02:43:44AM +0100, John Paul Adrian Glaubitz wrote: > >> Why would I need to communicate that? > > Because coordination needs involvement from all > If the maintainer of a package doesn't understand which reverse > dependencies his package has, he shouldn't be the maintain

Re: Q: secure boot

2018-11-06 Thread Holger Levsen
On Tue, Nov 06, 2018 at 10:08:10AM +0100, Bastian Blank wrote: > On Tue, Nov 06, 2018 at 01:09:50AM +0100, Adam Borowski wrote: > > But only the stock kernel, which turns it non-free software. > What is non-free? Signing stuff does not change the freeness of the > software. it does introduce http

Re: Confusing our users - who is supporting LTS?

2018-10-31 Thread Holger Levsen
On Wed, Oct 31, 2018 at 12:04:47PM +0100, Wouter Verhelst wrote: > When I say "the circumstances were different", I mean that at the time, > it was about paying people to do release management of testing, and that > it was originally suggested by the DPL. In this case, it is about > paying people t

Re: Confusing our users - who is supporting LTS?

2018-10-29 Thread Holger Levsen
On Sun, Oct 28, 2018 at 04:31:38PM +0100, Wouter Verhelst wrote: > On Sun, Oct 28, 2018 at 01:14:13AM +, Ben Hutchings wrote: > > Debian can't afford to pay developers in general, and previous > > proposals to pay specific developers were not well received. > That was over a decade ago. The cir

Bug#912041: grub-cloud-amd64: don't work around being tested by piuparts

2018-10-27 Thread Holger Levsen
Package: grub-cloud-amd64 Version: 0.0.2 Severity: important Dear Maintainer, in your postinst you are trying to detect whether it's being run in a piuparts test, to workaround #912038 ("grub-cloud-amd64: fails to install"), which is detected by piuparts but can also be triggered by anyone instal

Re: no{thing} build profiles

2018-10-26 Thread Holger Levsen
On Fri, Oct 26, 2018 at 09:24:17AM -0400, Marvin Renich wrote: > Using Depends instead of Recommends actually _prevents_ the admin from > being able to choose. you know about the equivs package, do you? -- cheers, Holger

Re: Mass bugfiling potential: bundled implementation of md5

2018-10-25 Thread Holger Levsen
On Thu, Oct 25, 2018 at 10:45:46AM +0200, Bas Couwenberg wrote: > Or: > > - Leave the bugreport unresolved until libmd-dev (>= 1.0.1) is available in > stable > > My initial suggestion to wait with the MBF until libmd-dev (>= 1.0.1) is > available in stable is still the best solution in my opinio

Re: no{thing} build profiles

2018-10-23 Thread Holger Levsen
On Mon, Oct 22, 2018 at 01:22:12PM -0700, Russ Allbery wrote: > Personally, I think people in this thread are too worried about trying to > remove as many packages from their system as possible and not worried > enough about a straightforward user experience. yep. -- cheers, Holger ---

Re: Debian Buster release to partially drop non-systemd support

2018-10-19 Thread Holger Levsen
On Fri, Oct 19, 2018 at 11:35:54AM +0200, Martin Steigerwald wrote: > A minority? Yes. But a sizable one. It doesn't matter how many people use it, if noone is willing to maintain it. *If* people are maintaining it, it also doesnt matter how many people are using it :) *Someone* needs to do the

Re: PHP Support in Debian

2018-10-17 Thread Holger Levsen
On Wed, Oct 17, 2018 at 11:04:00AM +0200, OndÅ?ej Surý wrote: > > I know that there is > > https://deb.sury.org - but prefer to trust stuff that was > > built on Debian machines and is distributed/signed with a > > key we trust. > Shrug, all the packages that I upload to Debian and to the DPA are

Debian Buster release to partially drop non-systemd support

2018-10-13 Thread Holger Levsen
On Sat, Oct 13, 2018 at 06:01:43AM +0100, Ben Hutchings wrote: > > Has policy changed regarding support for multiple inits, or is it just that > > no one is maintaining the shim and sysvinit-core? > > The latter. systemd-shim has been orphaned for over 2 years, and has > RC bugs. sysvinit curre

Re: Q: Best practice for maintainer address with "alioth"

2018-10-01 Thread Holger Levsen
On Mon, Oct 01, 2018 at 09:59:59AM +0200, Alex Muntada wrote: > > As I understand it, alioth-lists.d.n is an interim location > This is correct, when asked what to do we're encouraging people > to keep the former lists.alioth.d.o addresses. I find this quite confusing, because this way its not cl

Re: epoch bump request for gnome-calculator

2018-09-28 Thread Holger Levsen
On Thu, Sep 27, 2018 at 10:50:51PM +0200, gregor herrmann wrote: > > Yes. Precisely because there is collaboration between both sides on those > > packages. > [..] > > I agree. > > While epochs are nasty and , > having this one more doesn't really hurt anyone and makes a > maintainer's life easi

Re: Bumping epoch and reusing package name "elisa"

2018-09-24 Thread Holger Levsen
On Mon, Sep 24, 2018 at 07:19:57PM +0200, Christoph Biedl wrote: > For me this concern is about asking upstream for a change that is caused > by something more or less Debian-internal - although other distributions > might have that issue as well. So it should rather be handled inside > Debian. Ar

Re: Bumping epoch and reusing package name "elisa"

2018-09-24 Thread Holger Levsen
On Mon, Sep 24, 2018 at 09:24:05PM +0500, Andrey Rahmatullin wrote: > On Mon, Sep 24, 2018 at 09:21:14AM -0700, Russ Allbery wrote: > > This causes a ton of headaches for the archive software. IIRC, I believe > > dak is rather unhappy about version numbers going backwards > This is unfortunate. a

Re: Limiting the size of installed changelogs

2018-09-13 Thread Holger Levsen
On Thu, Sep 13, 2018 at 08:56:22AM -0700, Russ Allbery wrote: > > - A large part of the changelog is listing the changes in upstream > > stable updates. [...] > For the record, I've found these curated summaries of the upstream changes > *incredibly* helpful more times than I can count. So I'd lov

Re: Limiting the size of installed changelogs

2018-09-13 Thread Holger Levsen
On Thu, Sep 13, 2018 at 01:46:34PM +0300, Lars Wirzenius wrote: > I was curious, so I ran the following on my laptop: [finding 22M of changelogs] I was curious too, so I ran "du -sch /usr/share/doc" and found that in this VM thats 150M of a 3.5G system. But then I have ~15 such installations on my

Re: Collaborative decision making with Loomio

2018-07-27 Thread Holger Levsen
On Fri, Jul 27, 2018 at 03:23:08PM +0200, Philipp Kern wrote: > Yup, but to note: Consensus-driven arguments can only go so far and scale > poorly with more people. Ultimately contentious issues need to be voted on, > otherwise you can be held hostage by a single person or small vocal group. peopl

Re: Bug#903815: ITP: pw -- A simple command-line password manager

2018-07-16 Thread Holger Levsen
On Sun, Jul 15, 2018 at 12:41:36PM +0200, Carsten Schoenert wrote: > Hmm, do you have tried to validate your shell code? > https://www.shellcheck.net/ > I just pasted > https://raw.githubusercontent.com/dashohoxha/pw/master/src/pw.sh into > and got quite a lot of problematic remarks. I've also don

Re: Bug#903815: ITP: pw -- A simple command-line password manager

2018-07-16 Thread Holger Levsen
On Mon, Jul 16, 2018 at 05:56:39AM +0200, Dashamir Hoxha wrote: > I just uploaded it: https://mentors.debian.net/package/pw > Please review and sponsor it. please *dont* sponsor this until Dashamir has addressed the concerns pointed out in https://lists.debian.org/msgid-search/aa2d4d3d-41d2-5399-2

Re: Concerns to software freedom when packaging deep-learning based appications.

2018-07-12 Thread Holger Levsen
On Thu, Jul 12, 2018 at 02:16:01PM +0100, Ian Campbell wrote: > > so what? Debian runs on non-free CPUs too, how is this any different? > AIUI there is a pile of non-free libraries/tools on the host side too, thanks for this clarification! -- cheers, Holger signature.asc Description:

Re: Concerns to software freedom when packaging deep-learning based appications.

2018-07-12 Thread Holger Levsen
On Thu, Jul 12, 2018 at 12:35:24PM +, Lumin wrote: > (3) CUDA Deep Neural Network library (cuDNN)[4] is NVIDIA's **PROPRIETARY**, > stacked on CUDA, and requires NVIDIA GPU exclusively. so what? Debian runs on non-free CPUs too, how is this any different? (and yes, I'd be happy to learn

Re: Reproducible builds error: libQt5Core.so.5: cannot open shared object file: No such file or directory

2018-07-09 Thread Holger Levsen
On Mon, Jul 09, 2018 at 08:34:54PM +0200, Mattia Rizzolo wrote: > I agree. I haven't been mad about it only because it affects i386 only, > and we have 3 other architectures, I agree too. > but we'll need to figure a workaround > soon. and/or exclude these results from showing up on tracker.d.

Re: Reproducible builds error: libQt5Core.so.5: cannot open shared object file: No such file or directory

2018-07-09 Thread Holger Levsen
On Mon, Jul 09, 2018 at 07:02:00PM +0200, Innocent De Marchi wrote: > Recently, ALL the packages that I maintain based on Qt, have problems > of reproducibility on build on i386. > > The message is always the same: > /usr/lib/qt5/bin/uic: error while loading shared libraries: > libQt5Core.so.5: c

Re: Standards-Version and compat level

2018-06-07 Thread Holger Levsen
On Thu, Jun 07, 2018 at 06:26:56PM +0300, Tommi Höynälänmaa wrote: > Which Standards-Version and compat level should I use in the Debian packages > I publish? try running lintian from sid on your .changes file :) spoiler: 4.1.4 and 11. -- cheers, Holger signature.asc Description: PGP

Re: packages which have not been rebuild since December 2016

2018-06-02 Thread Holger Levsen
On Sat, Jun 02, 2018 at 10:36:58AM +0200, Emilio Pozuelo Monfort wrote: > On 01-06-18 16:32, Chris Lamb wrote: > > … wouldn't we just binNMU these? > There are many packages in your list that are arch:all only, and those can't > be > binNMU'ed. Still I'm not sure we can do some several thousand bi

Re: packages which have not been rebuild since December 2016

2018-06-01 Thread Holger Levsen
Hi Paul, On Fri, Jun 01, 2018 at 08:17:48PM +0200, Paul Gevers wrote: > It helps to spot things. I notice: >siridb-connector (U) > which wasn't even in Debian until February this year. Your original list February 2018 even, ouch > says: > siridb-connector needs rebuild (no .buildinfo) > > S

Re: packages which have not been rebuild since December 2016

2018-06-01 Thread Holger Levsen
Hi Chris, On Fri, Jun 01, 2018 at 10:40:18AM +0100, Chris Lamb wrote: > > I think this should be relatively easy to compute: > Indeed — 9182/33705 packages need a rebuild in sid. > (Full output of following script attached.) hehe, very nice. Just the numbers strike me as odd: we currently have

Re: packages which have not been rebuild since December 2016

2018-05-31 Thread Holger Levsen
Hi, On Thu, May 31, 2018 at 05:33:10PM +0200, Guillem Jover wrote: > > We have the "upload_history" relation but that will only give us an > > upper limit (roughly 50% of the archive). > > I think this should be relatively easy to compute: yes, that's the easy part, once you have the data :) >

packages which have not been rebuild since December 2016

2018-05-30 Thread Holger Levsen
hi, at the MiniDebConf 2018 in Hamburg we listed a few issues in Debian with regards to making Debian Buster reproducible in practice. (*) One issue we forgot to mention there is that all binary packages built with dpkg < 1.18.17 need to be rebuild. Is that something easy to find out with UDD? (T

Re: Bug#864354: Bug #864354 in marked as pending

2018-05-25 Thread Holger Levsen
On Fri, May 25, 2018 at 03:13:43AM -0700, Sean Whitton wrote: > Thank you for advocating on behalf of users who are not in a position to > use the web form, Ian. indeed, thanks, Ian. -- cheers, Holger signature.asc Description: PGP signature

Re: [1/2] MBF: Defunct alioth addresses in the Maintainer: field (serious)

2018-05-08 Thread Holger Levsen
On Tue, May 08, 2018 at 02:31:05PM +0100, Dominic Hargreaves wrote: > > > Since the number of bugs is pretty large, I think it would be best to > > > file these in batches. > > why? I cannot see the benefit of this, but I can see the downsides. IME > > it's never^wonly very rarely useful to delay r

Re: [1/2] MBF: Defunct alioth addresses in the Maintainer: field (serious)

2018-05-07 Thread Holger Levsen
Hi, On Sun, May 06, 2018 at 04:08:06PM +0100, Dominic Hargreaves wrote: > Thanks for doing this detailed work - which is very timely and important > to ensure that communication paths within Debian remain open. indeed! Christoph, many thanks for your work on this! > > Affected packages below, as

Re: Firefox 60esr on Stretch ?

2018-05-04 Thread Holger Levsen
On Fri, May 04, 2018 at 10:52:26PM +0200, W. Martin Borgert wrote: > On 2018-05-04 21:12, Moritz Mühlenhoff wrote: > > Same as all previous extension breakages incurred by ESR transitions; > Why? because this is what the modern web has become in 2018. go gopher go! -- cheers, Holger, SC

Re: autopkgtest results influencing migration from unstable to testing

2018-05-04 Thread Holger Levsen
On Wed, May 02, 2018 at 11:09:46PM +0200, Paul Gevers wrote: > tl;dr: migration from unstable to testing is influenced by the results > of autopkgtest tests of your own package as well as those of your > reverse dependencies. AWESOME Thank you to everone who worked and works on this! -- chee

Re: [Alioth-staff-replacement] improved alioth-salsa test script (calls for testing/improvements)s

2018-05-02 Thread Holger Levsen
On Wed, May 02, 2018 at 08:12:21PM +0200, Antoine Beaupré wrote: > try removing the first slash there :) ah, ouch, thanks. sorry for trying to do a drive-by migration with little attention spam. (some now contributor wanted to contribute but asked for salsa move first but couldnt do that themselve

Re: [Alioth-staff-replacement] improved alioth-salsa test script (calls for testing/improvements)s

2018-05-02 Thread Holger Levsen
On Wed, May 02, 2018 at 07:02:29PM +0200, Paolo Greppi wrote: > Hi Holger, try this: > /alioth-migration/migrate-repo -v -d /git/collab-maint/anarchism.git > /debian/anarchism holger@moszumanska:~$ ls /alioth-migration/migrate-repo ls: cannot access /alioth-migration/migrate-repo: No such file o

Re: improved alioth-salsa test script (calls for testing/improvements)s

2018-05-02 Thread Holger Levsen
hi, maybe i'm stupid but i'm also failing now with my 3rd "quick" attempt of migration to salsa using the script... holger@moszumanska:~/alioth-migration$ ./migrate-repo -v -d /srv/git.debian.org/git/collab-maint/anarchism.git /debian/anarchism (GITLAB_TOKEN was set as an environment variable.)

Re: Announce: docker-buildpackage

2018-05-02 Thread Holger Levsen
On Wed, May 02, 2018 at 11:23:56AM +0200, Thomas Goirand wrote: > Frankly, I don't see the point in writing this kind of software. Sbuild > works super well with the overlay backend, and already has throw-able > chroots in tmpfs. Adding docker into this doesn't add any new feature, > and in some wa

Re: source packing source code

2018-05-01 Thread Holger Levsen
hi Aaron, On Tue, May 01, 2018 at 11:10:15AM +0100, Aaron Gray wrote: > Where do I find the .deb source packaging source code for packlages ? I > does not seem to be in your sources. I need to update some packages to > latest releease. Is this done by bhand on packages by bespoke or is there a > b

Re: Please do not drop Python 2 modules

2018-04-30 Thread Holger Levsen
On Mon, Apr 30, 2018 at 04:11:48PM +0300, Adrian Bunk wrote: > > Wow, hopefully not ! LTS is an effort by the Debian project. What the > > external company does is an effort to *FUND* individual to work on it. > > Currently, only Freexian does this sponsor gathering and redistribution > > work, bu

Re: [alioth deprecation] Please remove your unused and/or migrated repositories

2018-04-28 Thread Holger Levsen
On Sat, Apr 28, 2018 at 04:25:35PM +0200, Alexander Wirt wrote: > > does that mean git.debian.org starts becoming unusable (as a git server) on > > 2018-05-16? > No, as announced in my timeline [1] that will happen later. > > But I will do a first rsync run during Hamburg, it helps when as much >

Re: [alioth deprecation] Please remove your unused and/or migrated repositories

2018-04-28 Thread Holger Levsen
On Fri, Apr 27, 2018 at 08:55:43AM +0200, Alexander Wirt wrote: > please remove your old, unused repos on alioth, so that we don't have to > archive them. > > For darcs, bzr and mecurial do this until 2018-05-09 for all other VCS until > 2018-05-16. does that mean git.debian.org starts becoming

Bug#896717: buster release notes: python2 will be EOL upstream by 2020

2018-04-23 Thread Holger Levsen
package: release-notes severity: wishlist x-debbugs-cc: debian-devel@lists.debian.org On Tue, Apr 24, 2018 at 05:37:00AM +, Niels Thykier wrote: > Reminder: The release-notes does have a section for "deprecations" (Note > as I recall, it was empty for stretch, so it is probably not visible the

Re: Bug#896696: lintian: please improve tag description to explain that python 2 modules are only questioned on 1st upload

2018-04-23 Thread Holger Levsen
On Mon, Apr 23, 2018 at 07:05:41PM +0100, Chris Lamb wrote: > It does, no? The current text is: ah, thanks for clarifying. I indeed filed the bug only by judging what was said and quoted on -devel@. Sorry for the noise! -- cheers, Holger signature.asc Description: PGP signature

Bug#896696: lintian: please improve tag description to explain that python 2 modules are only questioned on 1st upload

2018-04-23 Thread Holger Levsen
package: lintian severity: wishlist x-debbugs-cc: debian-devel@lists.debian.org On Mon, Apr 23, 2018 at 06:33:20PM +0100, Chris Lamb wrote: > For example, I think Holger is interpreting this particular tag as > "this source package is shipping a Python 2.x" module. This is not > the case. > > Ra

Re: Please do not drop Python 2 modules

2018-04-23 Thread Holger Levsen
On Mon, Apr 23, 2018 at 12:41:36PM +0100, Ian Jackson wrote: > > N:If upstream have not moved or have no intention to move to Python 3, > > N:please be certain that Debian would benefit from the inclusion, > > N:continued maintenance burden and (eventual) removal of this package > > N:

Re: Please do not drop Python 2 modules

2018-04-23 Thread Holger Levsen
On Mon, Apr 23, 2018 at 03:46:36AM +, Luke W Faraone wrote: > > you make it sound like the lintian maintainers are a bunch of lunatics, > > but according to src:piuparts/debian/copyright, that's us, the piuparts > > maintainers. the lintian maintainers (and uploaders) are a bunch of > > (ex- an

Re: Please do not drop Python 2 modules

2018-04-22 Thread Holger Levsen
On Mon, Apr 23, 2018 at 01:52:19AM +, Scott Kitterman wrote: > Fundamentally not a lintian warnings are created equal. Some have solid > foundation in Debian project consensus and policy. Others are nothing > more than the opinions of the lintian maintainers. This is one of the latter. you

Re: distributing .buildinfo files (Re: Bad interaction between pbuilder/debhelper/dpkg-buildinfo/dpkg-genchanges and dak on security-master)

2018-04-21 Thread Holger Levsen
On Thu, Apr 05, 2018 at 10:43:04AM +0200, Philipp Kern wrote: > So what would be needed to make at least a simple export of the data > happen? I think the requirements I'd have are these: that's a good question! :) maybe we can sit together with some ftp-team and reproducible builds folks in Hamb

Re: Comma in Maintainer field

2018-04-19 Thread Holger Levsen
On Thu, Apr 19, 2018 at 09:06:36AM +0100, Simon McVittie wrote: > youtube-dl seems to have this bug in jessie-backports only. It could be > fixed by a re-upload with only one maintainer. Bugs in backports are not > tracked in the Debian BTS[1] but I've contacted the backports mailing list > and the

Re: Bits from the release team: full steam ahead towards buster

2018-04-19 Thread Holger Levsen
On Thu, Apr 19, 2018 at 09:35:25AM +1200, Ben Caradoc-Davies wrote: > In the C locale, all uppercase letters are sorted before all lowercase > letters: > > $ echo -e "buster\nStretch" | LC_COLLATE=C sort > Stretch > buster > > In en_GB, by comparison: > > $ echo -e "buster\nStretch" | LC_COLLATE

Re: About the MBF on now-failing alioth list addresses (was: Completed: lists.alioth.debian.org migration)

2018-04-19 Thread Holger Levsen
On Thu, Apr 19, 2018 at 09:06:09AM +0200, Andreas Tille wrote: > > OTOH, there are some packages that have users.alioth.debian.org > > e-mail addresses in Maintainer and Uploaders, that may be worth > > dealing with. Andreas, thanks for digging out the facts and informing those affected! -- ch

Re: Bits from the release team: full steam ahead towards buster

2018-04-18 Thread Holger Levsen
On Wed, Apr 18, 2018 at 10:23:29AM -0400, Michael Stone wrote: > On Wed, Apr 18, 2018 at 04:15:59PM +0200, Aurelien Jarno wrote: > > Please define "sorted order", not everybody order letters the same way. > really? there's more than one alphabetical order for english words? yes, sorting depends on

Re: Lucas Kanashiro and Athos Ribeiro fixed my package and i didnt like it

2018-04-17 Thread Holger Levsen
Dear Lucas, (it was really nice to meet you in Curitiba and I'm looking forward to meet you again in the next weeks in Sao Paulo!) Please relay my condolences to Athos, I wish this wouldnt have demotivated him, though I'd totally understand if he spents his time on more fun things to do in future

Re: my package was fixed by someone else and i dont like that

2018-04-17 Thread Holger Levsen
On Tue, Apr 17, 2018 at 08:38:52PM +0300, Adrian Bunk wrote: > You could make the point that he should have posted to debian-private > instead of debian-devel. Rolf is a DM, so he cannot read debian-private and he might not even know it exists. > In any case naming the people who did this is requ

Re: Completed: lists.alioth.debian.org migration

2018-04-17 Thread Holger Levsen
On Tue, Apr 17, 2018 at 10:39:22PM +0200, Christoph Biedl wrote: > Also, @lists.alioth.debian.org addresses that were *not* migrated now > result in bounces as expected. Are there already plans for a MBF > severity RC against all packages with a now-failing maintainer address? > This might become r

Re: alioth deprecation - next steps

2018-04-17 Thread Holger Levsen
Alexander, thanks for the update on the alioth migration! On Tue, Apr 17, 2018 at 01:00:56PM +0200, Alexander Wirt wrote: > 17.-20.05.18: During the Mini-DebConf Hamburg any existing cron jobs will be > turned off, websites still on alioth will be disabled. we currently use https://reproducible.

Re: missing recommends are not RC severity

2018-04-17 Thread Holger Levsen
On Tue, Apr 17, 2018 at 01:04:47PM +, Scott Kitterman wrote: > >if your package recommends a package which is not available, this is a > >normal bug, not one with RC severity (and neither an important one). > > Policy 2.2.1 pretty clearly says otherwise. wow, I stand corrected, thanks. (not

missing recommends are not RC severity

2018-04-17 Thread Holger Levsen
folks, if your package recommends a package which is not available, this is a normal bug, not one with RC severity (and neither an important one). -- cheers, Holger signature.asc Description: PGP signature

Re: my package was fixed by someone else and i dont like that

2018-04-16 Thread Holger Levsen
Rolf, first of all, you immediatly lost your argument by putting peoples name in the subject of a mail to debian-devel. This is really bad style (called fingerpointing) and I wish you hadn't done this. Based on this behaviour alone, I wouldnt recommend *you* becoming a DD or DM, at least not now.

Re: Urging for solution to the slow NEW queue process

2018-04-11 Thread Holger Levsen
Dear Lumin, you didnt mention which package of yours is stuck in NEW, could you please elaborate? Else this seems like a rant out of the blue, without much checking of facts, like Phil (Hands) thankfully provided. I also share wookey's observation that NEW is being processed more quickly than eve

Re: Bug#895253: ITP: elisa -- Simple music player with a focus on Plasma desktop integration and privacy

2018-04-09 Thread Holger Levsen
On Mon, Apr 09, 2018 at 03:34:42PM +0200, W. Martin Borgert wrote: > We have apparmor (maybe even by default!) to prevent network accesss > of a music application, which is perfect for Adam, you and me, but it > must also be easy to allow e.g. fetching of lyrics for those who want > this. But only

Re: Bug#895253: ITP: elisa -- Simple music player with a focus on Plasma desktop integration and privacy

2018-04-09 Thread Holger Levsen
On Sun, Apr 08, 2018 at 11:47:54PM +0200, Adam Borowski wrote: > While I need online music services about as much as I need an additional > hole in the head, this raises a good point: why do music players shipped in > Debian default to grabbing lyrics, "LastFM stats", tags, and what not, even > whe

Re: interpretation of wontfix

2018-03-28 Thread Holger Levsen
On Wed, Mar 28, 2018 at 02:40:58PM +0200, Marco d'Itri wrote: > This is how I see it: keeping the bug around as documentation to prevent > other people opening it again. IME there are two (more) aspects when dealing with wontfix bugs: keeping those bugs open, so they are more visible or closing t

Re: Usage of real m68k hardware

2018-03-28 Thread Holger Levsen
Hi Andreas, I'd suggest you let go and stop caring about m68k. m68k has been dropped from Debian many releases ago, thus IMO bugs affecting only m68k are probably at most normal severity, though minor or wishlist IMO make equally sense. Or just closing them as out of scope. Or you could tag them "

Re: New lintian warning: vcs-deprecated-in-debian-infrastructure

2018-03-22 Thread Holger Levsen
On Thu, Mar 22, 2018 at 03:40:21PM +0100, Guillem Jover wrote: > [...] I'd very strongly object to completely moving > those fields out of the source packages, because it means when you get > or have a source package lying around then it's missing important > metadata and it stops being standalone,

Re: Bug#880014: Technical committee appointment

2018-03-16 Thread Holger Levsen
On Fri, Mar 16, 2018 at 10:46:44PM +0100, Adam Borowski wrote: > Bottom line: this mailing list is not a place to shame people about > following or not a particular approach to genders. bottom line: you don't listen to your own advice. -- cheers, Holger signature.asc Description: PGP

Re: What can Debian do to provide complex applications to its users?

2018-03-09 Thread Holger Levsen
On Fri, Mar 09, 2018 at 02:07:19AM +0100, gregor herrmann wrote: > We might need an archive area which is independent of our release > suites. .oO( PPAs ) -- cheers, Holger signature.asc Description: PGP signature

<    1   2   3   4   5   6   7   8   9   10   >