Re: 3.0 (git) "experimental"

2008-04-15 Thread Anthony Towns
On Mon, Apr 14, 2008 at 03:10:08PM +0200, Raphael Hertzog wrote: > > The custom format in particular is unlikely to ever be accepted, it > > seems to me; > The custom format is not a format. From the manpage: SOURCE PACKAGE FORMATS Format: 1.0 ... Format: 2.0 ... Format: 3

Re: 3.0 (git) "experimental"

2008-04-14 Thread Anthony Towns
On Sat, Apr 12, 2008 at 10:04:03AM +0200, Raphael Hertzog wrote: > On Fri, 11 Apr 2008, Joey Hess wrote: > > Could the maintainers clarify what criteria are used to mark a given source > > format such as 3.0 (git) as "experimental"? > > I hope it doesn't come down to one member of the dpkg team's p

Re: dpkg semi-hijack - an announcement (also, triggers)

2008-03-09 Thread Anthony Towns
On Sun, Mar 09, 2008 at 10:38:44PM -0500, Steve Greenland wrote: > On 09-Mar-08, 19:30 (CDT), Daniel Stone <[EMAIL PROTECTED]> wrote: > > I was going to ask on which grounds exactly you were judging the dpkg > > team's competence (and that of iwj's: have you reviewed the branch > > yourself? can y

Re: dpkg semi-hijack - an announcement (also, triggers)

2008-03-09 Thread Anthony Towns
that Guillem is no longer a maintainer. > > For the record, Ian has been removed from the "dpkg" group on Alioth and > > we asked for an UNACCEPT of his upload, but I'm not sure it will be done > > on time as none of the ftpmasters responded yet to my queries on IRC. >

Re: git bikeshedding (Re: triggers in dpkg, and dpkg maintenance)

2008-03-04 Thread Anthony Towns
On Tue, Mar 04, 2008 at 11:46:53AM -0800, Mike Bird wrote: > On Tue March 4 2008 10:44:22 Ian Jackson wrote: > > Of course this triggers feature has a proper specification. It was > > discussed and agreed on debian-dpkg and now resides in the doc/ > > subdirectory of my dpkg triggers tree, which i

Re: [sourcev3] Mapping between Format and Dpkg::Source::Package object

2008-03-01 Thread Anthony Towns
On Sat, Mar 01, 2008 at 06:19:47PM +0100, Raphael Hertzog wrote: > > Sounds like you shouldn't be naming them after the version number then. > > Having Dpkg::Source::Package include `native', `origdiff', `wignpen', > > `git', `bzr', would seem more sensible; then you'd just need to delegate > > to

Re: [sourcev3] Mapping between Format and Dpkg::Source::Package object

2008-03-01 Thread Anthony Towns
On Fri, Feb 29, 2008 at 06:23:03PM +0100, Raphael Hertzog wrote: > The logic of the mapping is quite simple, explanation by example: > Format: 1.0 => Dpkg::Source::Package::V1_0 > Format: 3.0 (git) => Dpkg::Source::Package::V3_0::git > Ideally I'd like each object to implement a single logic

Re: dpkg-source's future and relation with VCS

2008-02-24 Thread Anthony Towns
On Sun, Feb 24, 2008 at 11:48:44AM +0200, Guillem Jover wrote: > So I don't quite like Joey's idea in its > current form, for the reasons other people have stated on the thread: *sigh* So dpkg isn't going to support it then? Cheers, aj signature.asc Description: Digital signature

Re: dpkg-buildpackage now reorganizing debian/control Depends field??

2008-02-23 Thread Anthony Towns
On Fri, Feb 22, 2008 at 06:23:28PM -0800, Daniel Burrows wrote: > Would it be possible to only re-order elements that were introduced by > a variable substitution? That would make the list deterministic without > changing what the maintainer wrote. At best you could: (a) sort substvar

Re: dpkg-source's future and relation with VCS

2008-02-12 Thread Anthony Towns
On Tue, Feb 12, 2008 at 12:51:12AM -0800, Russ Allbery wrote: > Anthony Towns <[EMAIL PROTECTED]> writes: > > My point is precisely that it's *NOT* useful now. > No software is useful until it is implemented. wig&pen is far from unique > in that regard. Rig

Re: dpkg-source's future and relation with VCS

2008-02-12 Thread Anthony Towns
On Mon, Feb 11, 2008 at 02:46:33PM +0100, Raphael Hertzog wrote: > However I'm also convinced that: > - a source package should be unpackable without a VCS. This means that > somehow it should contain a checkout that can be extracted with basic > tools. [1] I don't think it's feasible to requi

Re: dpkg-source's future and relation with VCS

2008-02-12 Thread Anthony Towns
On Mon, Feb 11, 2008 at 10:37:50PM -0800, Russ Allbery wrote: > > It does have history: > > upstream: (unpack all the tarballs) > > upstream+1: (apply the first patch from .debian.tgz /patches) > > upstream+2: (apply the second patch from .debian.tgz /patches) > > ... > > debi

Re: dpkg-source's future and relation with VCS

2008-02-11 Thread Anthony Towns
On Mon, Feb 11, 2008 at 08:26:23PM -0800, Russ Allbery wrote: > Anthony Towns <[EMAIL PROTECTED]> writes: > > I think it's a mistake to separate those -- our source package format is > > a VCS system; if wig&pen happens to be a more suitable VCS, that's fine, &

Re: dpkg-source's future and relation with VCS

2008-02-11 Thread Anthony Towns
On Mon, Feb 11, 2008 at 12:48:19PM +0100, Raphael Hertzog wrote: > I believe the wig&pen format [1] solves most of those concerns. I believe > that with some minor changes, it would satisfy the need of most packages > (even those using complicated build system). > But the complicated part comes wh

Re: [RFC] Enhance checksum support

2008-02-11 Thread Anthony Towns
On Mon, Feb 11, 2008 at 01:03:18PM +0100, Frank Lichtenheld wrote: > > > > > The whole thing honestly doesn't do much for security anyway until > > > > > the gpg > > > > > support of dpkg-source is largely improved. For that I have no real > > > > > concept > > > > > yet, though. > > > > Well, a

Re: [PATCH] proposed v3 source format using .git.tar.gz

2008-02-10 Thread Anthony Towns
On Sun, Feb 10, 2008 at 10:08:58PM +0100, Frank Lichtenheld wrote: > I've now added this branch to the "official" dpkg repository on alioth > with the intention to work on it. I've at least fixed it up so that > it works with the current code base. Wow! Exciting times! > 1) I don't really like th

Re: [RFC] Enhance checksum support

2008-02-10 Thread Anthony Towns
On Sun, Feb 10, 2008 at 06:46:55PM +0100, Frank Lichtenheld wrote: > On Tue, Jan 29, 2008 at 04:06:12PM +1100, Anthony Towns wrote: > > On Sat, Jan 26, 2008 at 10:14:56PM +0100, Frank Lichtenheld wrote: > > > The whole thing honestly doesn't do much for security anyway unti

Re: [RFC] Enhance checksum support

2008-01-29 Thread Anthony Towns
On Sat, Jan 26, 2008 at 10:14:56PM +0100, Frank Lichtenheld wrote: > The whole thing honestly doesn't do much for security anyway until the gpg > support of dpkg-source is largely improved. For that I have no real concept > yet, though. Well, apt verifies them when it downloads the source before

Re: [RFC] Enhance checksum support

2008-01-19 Thread Anthony Towns
On Sat, Jan 19, 2008 at 06:15:45PM +0100, Frank Lichtenheld wrote: > > Having it be: > > Contents: sha256 > >28ee6a10eb280ede4b19c1b975aff5533016a26de67ba9212d51ffaea020ce34 355 foo > > Files: > >4bf7ff17bd9ddf3846d9065b3c594fb4 355 foo > > or similar would be nice and non-redundant, an

Re: [RFC] Enhance checksum support

2008-01-18 Thread Anthony Towns
On Mon, Jan 14, 2008 at 08:53:13AM +0100, Raphael Hertzog wrote: > There's also a possibility of not breaking the compatibility by simply > adding a new field and leaving "Files" untouched: > Checksums: > > I think it would be best that way. The size of the file then stay in the > Files field a

Re: Triggers status?

2007-10-23 Thread Anthony Towns
On Tue, Oct 23, 2007 at 03:58:00PM +0100, Ian Jackson wrote: > Raphael Hertzog writes ("Re: Triggers status?"): > > You should have called git-update-server-info before the rsync! :-) > Oh! Well, I've done that now. Hopefully that's better. \o/ git clone http://www.chiark.greenend.org.uk/~ian/g

Re: Triggers status?

2007-10-22 Thread Anthony Towns
On Mon, Oct 22, 2007 at 05:43:45PM +0100, Ian Jackson wrote: > * The dpkg triggers code should be merged from > http://www.chiark.greenend.org.uk/~ian/git/dpkg/dpkg.triggers/ ] $ git clone http://www.chiark.greenend.org.uk/~ian/git/dpkg/dpkg.triggers ] Initialized empty Git repository in /ho

Re: Triggers status?

2007-10-22 Thread Anthony Towns
On Sun, Oct 21, 2007 at 11:30:08PM -0500, Manoj Srivastava wrote: > On Mon, 22 Oct 2007 07:01:33 +1000, Anthony Towns wrote: > This is because the default is to deny by default -- and thus > security policy modules _add_ the permissions for special tasks that > package

Re: Triggers status?

2007-10-21 Thread Anthony Towns
On Sun, Oct 21, 2007 at 02:13:59PM +0100, Colin Watson wrote: > > Is there a quick intro to using the triggers implementation anywhere > > around (this list's archives, maybe)? Or would you care to give a > > quick intro? > Ian's final design is here and has a worked example: > http://lists.debia

Re: Triggers status?

2007-10-21 Thread Anthony Towns
On Wed, Oct 10, 2007 at 12:44:07AM -0500, Manoj Srivastava wrote: > > Manoj Srivastava writes ("Re: Triggers status?"): > >> I also would love to have a pre-install trigger [...] to ensure that > >> a SELinux policy for a package is loaded before the package is > >> unpacked; > Well, when on

Re: Triggers status?

2007-10-21 Thread Anthony Towns
On Fri, Oct 19, 2007 at 08:56:57AM +, Colin Watson wrote: > I would understand the delay if > there were some major problem that had been identified - but it all > seems to work and it's a substantial advance that would let me simplify > a bunch of stuff, so please forgive my impatience. :-) I

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-11 Thread Anthony Towns
On Tue, Oct 09, 2007 at 06:58:19PM +0100, Ian Jackson wrote: > [...] Goals I would suggest: > * Abolish dpatch (and similar excresences) and specifically to get > back to the point where a Debian source package can be unpacked to > the point of seeing the source code without having to execute

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-08 Thread Anthony Towns
On Mon, Oct 08, 2007 at 03:59:05PM -0500, Manoj Srivastava wrote: > > Where it starts becoming relevant (afaics) is when there's a > > Debian-specific patch history (either due to it being a native > > package, complicated packaging, or significant patches against > > upstream) and we want the arch

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-08 Thread Anthony Towns
On Mon, Oct 08, 2007 at 09:16:52AM -0500, Manoj Srivastava wrote: > In any case, I think the kinds of actions taken by joey's and > Colin's patches are probably not things that we'll have to do to > support shipping an arh working directory in the source packagel if we > have {arch} and

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-07 Thread Anthony Towns
On Sun, Oct 07, 2007 at 09:45:20AM -0400, Joey Hess wrote: > Anthony Towns wrote: > > So the logic there would be: > > if there's an upstream tag, then > > generate an .orig.tgz > > if there's a pristine-tar info, > >

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-07 Thread Anthony Towns
On Sun, Oct 07, 2007 at 08:45:08AM +, Colin Watson wrote: > I'm > quite attached to being able to peek inside source packages quickly by > sshing over to the local mirror I keep at home which grabs everything > overnight so that I don't have to wait for it to download; particularly > so for lar

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-06 Thread Anthony Towns
On Fri, Oct 05, 2007 at 07:16:13PM -0400, Joey Hess wrote: > I've been working on making dpkg-source support a new source package format > based upon git. Oh, one question that comes to mind: how does this affect checking for non-free stuff in past revisions? If 3.1-4 had some non-free files that

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-06 Thread Anthony Towns
On Sat, Oct 06, 2007 at 10:37:48PM +, Colin Watson wrote: > The second possibility seems to me to be more flexible, though, and > probably not all that hard to implement: build both a .tar.gz > (containing the working tree) and a .$VCS.tar.gz, and teach 'dpkg-source > -x' to unpack the tree giv

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-06 Thread Anthony Towns
On Sat, Oct 06, 2007 at 11:19:43AM -0400, Joey Hess wrote: > Anthony Towns wrote: > > Changes in repository formats will presumably result in versioned > > dependencies too. > I don't think that dpkg should add vcs formats that we don't have a good > expectation

Re: [PATCH] proposed v3 source format using .git.tar.gz

2007-10-06 Thread Anthony Towns
On Fri, Oct 05, 2007 at 07:16:13PM -0400, Joey Hess wrote: > I've been working on making dpkg-source support a new source package format > based upon git. The idea is that a source package has only a .dsc and a > .git.tar.gz, which is just a git repo. Is a .gitdiff.tar.gz possible, so the archive

Re: securely validating installed files

2006-02-04 Thread Anthony Towns
On Wed, Feb 01, 2006 at 02:43:43PM -0800, Matt Taggart wrote: > (courtesy CC requested, I'm not on the list, thanks) Mail-Followup-To: recommended :) > A) Is there a way to determine the validity of an installed deb? > B) Is there a way to determine if a file you have on your system came from a

Re: Create a project on Alioth and choose a RCS?

2006-01-16 Thread Anthony Towns
On Tue, Jan 17, 2006 at 07:12:26AM +0100, Christian Perrier wrote: > Quoting Anthony Towns (aj@azure.humbug.org.au): > > Why the change to subversion? Seems very gratuitous? > From what? From arch or from the CVS? From what Scott was using, which is arch, aiui. But apparently tailor

Re: Create a project on Alioth and choose a RCS?

2006-01-16 Thread Anthony Towns
On Sun, Jan 15, 2006 at 08:37:05AM +1100, Brendan O'Dea wrote: > On Sat, Jan 14, 2006 at 07:33:56AM +0100, Christian Perrier wrote: > >-import the current sources in the trunk of this SVN > I take it that this could be done in such a was as to retain the history > in Scott's arch repositories? Why

Bug#62529: On dpkg support for binary recompilations

2005-03-11 Thread Anthony Towns
Scott James Remnant wrote: Source: banana Package: banana Architecture: any Depends: libbanana0 (= ${Source-Version}) Package: libbanana0 Architecture: any Depends: libbanana-common (= ${Source-Version}) Package: libbanana-com

Re: binary NMUs and version numbers

2004-12-14 Thread Anthony Towns
Goswin von Brederlow wrote: Anthony Towns writes: Goswin von Brederlow wrote:>> 1.rc << 1.rc2 << 1.rc+b1 1.2-1~beta << 1.2-1~beta2 << 1.2-1~beta+b1 1.2~beta-1 << 1.2~beta-1+b1 << 1.2~beta2-1 Adding the implicit '0' that dpkg assumes on version

Re: binary NMUs and version numbers

2004-12-08 Thread Anthony Towns
Goswin von Brederlow wrote: 1.rc << 1.rc2 << 1.rc+b1 1.2-1~beta << 1.2-1~beta2 << 1.2-1~beta+b1 1.2~beta-1 << 1.2~beta-1+b1 << 1.2~beta2-1 Keeping the Debian revision simple is a Good Thing. Adding the implicit '0' that dpkg assumes on versions ending in alpha chars would solve both cases: That'd m

Re: binary NMUs and version numbers

2004-11-26 Thread Anthony Towns
Scott James Remnant wrote: On Fri, 2004-11-26 at 08:58 +1000, Anthony Towns wrote: Andreas Barth wrote: One idea was to use for binary-only NMU as 1.2-3b1. Actually, it was 1.2-3+b1, iirc. Maybe I missed some later discussion. Yes, it was +b1 ... for the following reason: This has the advantage

Re: binary NMUs and version numbers

2004-11-25 Thread Anthony Towns
Andreas Barth wrote: - Britney gets confused if a package with a version like 1.2-3.sarge.0 and 1.2-3.sarge.1 is uploaded. - In that binary package, the source version is used as 1.2-3.0.1 which is not really true (at least, no source with that version exists in the archive). So, katie needs

Bug#232025: dpkg unpack failure

2004-03-02 Thread Anthony Towns
to doing so); but better to have dpkg fixed in sarge than later: that's the only way a changed tar can be uploaded before sarge+1 is released. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mai

Bug#222047: --configure should process essential packages first

2003-11-26 Thread Anthony Towns
e that Essential: yes packages work even without being configured. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. Australian DMCA (the Digital Agenda Amendments) Under Review! -- http://azure.humbug.org.au/~aj/blog/copyright/digitalagenda

Re: Bug#217945: dpkg-dev: should depend on build-essential

2003-11-08 Thread Anthony Towns
Err, looks like Adam sent his message to -dpkg and -bugs-dist, instead of to the bug number. Yick. :-/ On Thu, Nov 06, 2003 at 11:54:32AM -0600, Adam Heath wrote: > On Thu, 6 Nov 2003, Anthony Towns wrote: > > Mmm. That doesn't really help *our* users very much though, does it? >

Bug#217945: dpkg-dev: should depend on build-essential

2003-11-06 Thread Anthony Towns
e cope with packages that Build-Conflicts: libc6-dev? But if there /is/ something that can be done, we should work out a way of doing it. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail prefe

Bug#184635: dpkg and Replaces:

2003-11-02 Thread Anthony Towns
@ if (existingdirectory) return 0; + if (alreadyreplaced) { +{ char fnamebuf[256]; +fd_null_copy(tc->backendpipe,ti->Size,_("zap already replaced file `%.255s'"),quote_filename(fnamebuf,256,ti->Name)); +} +r= ti->Size % TARBLKSZ; +if (r > 0) r= sa

Re: Bug#213524: automake: serious breakage with new install-info behaviour

2003-10-02 Thread Anthony Towns
reassign 213524 dpkg thanks Hi dpkg guys as a rule it's a bad idea to change behaviours that other packages rely on when we're trying to release. Please revert this change ASAP. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don&#

Re: Use of pseudo-tags to mark translation issues

2003-09-19 Thread Anthony Towns
e haven't quite worked out the best way for people to use it yet, but it's much more generalisable than either of the others. Cheers, aj [0] http://bugs.debian.org/cgi-bin/lsb.cgi http://bugs.debian.org/cgi-bin/claims.cgi -- Anthony Towns <[EMAIL PROTECTED]> <http://azure

Re: New package dependency field format

2003-09-11 Thread Anthony Towns
On Wed, Sep 10, 2003 at 09:32:46AM -0400, Joe Moore wrote: > On Fri, Sep 05, 2003 at 03:21:16AM +1000, Anthony Towns wrote: > > > That still sounds redundant, and can be currently expressed with > > > Depends: foo, foo | bar > > What is equivalent is: > >

Re: New package dependency field format

2003-09-04 Thread Anthony Towns
major rewrite of the logic of the testing scripts to cope with syntax like "foo | !bar". And given the total lack of gain, it's not something that I'm willing to do or to support. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don&#x

Bug#173205: dpkg-dev: dpkg-architecture revert to i386

2003-08-23 Thread Anthony Towns
severity 173205 normal thanks There is nothing in this report to warrant a serious severity. -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``Is this some k

Bug#206416: dpkg package hash table insufficient

2003-08-21 Thread Anthony Towns
ng strhash(const char *x, unsigned char pow) { unsigned long i = 0; while (*x) { i = (i * 39 + *x) % (1UL << pow); x++; } return i; } to generate an index into an array of 2^pow elements from package names. It works pretty well. pow is generally 1

Bug#183195: dpkg: "Replaces" is not properly handled for "Replaced" packages

2003-03-03 Thread Anthony Towns
packages seems a bit odd; not having a fixed debianutils yet seems quite wrong. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``Dear Anthony Towns: [...] Congratulations

Re: [devel-ref] author/homepage in description

2002-12-17 Thread Anthony Towns
s mainly meant to be all the information you should need to work out whether you want to install a package or not: description, what other packages you need, a file name to download, etc. A "More-Info-URL:" field might make sense here in that it'd let you find out more about the package, se

Bug#112386: patch

2002-12-17 Thread Anthony Towns
by the admin or possibly another package between --remove and --purge). I've done some limited testing, and it seems to work as desired. Attached. HTH. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG

Re: Bug#160424: dpkg lock file should be in /var/lock

2002-11-16 Thread Anthony Towns
you might as well have /usr mounted over NFS too -- so dpkg will still keep most of your files in sync. I'm ignoring /etc and /{lib,bin,...} presuming that they're magically handled specially somehow. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org

Bug#160424: dpkg lock file should be in /var/lock

2002-11-15 Thread Anthony Towns
ed too, so you don't accidently start two dpkg's on different machines just as you wouldn't on a single machine. FWIW, etc. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred.

Bug#168904: non-files in dpkg -L output [Was: Bug#39830: [AMENDMENT]: get rid of undocumented(7) symlinks]

2002-11-13 Thread Anthony Towns
ith mode and owner). Preferably including support > for --color. This should probably be a new option (dpkg --ls?). dpkg -L libc6 | xargs ls -ld --color seems to do what you want, no dpkg changes necessary. Yay Unix! Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.

Bug#164889: Disputes between developers - draft guidelines

2002-10-23 Thread Anthony Towns
ul output than messing with cut, and having a "-" is absolutely useless; I know it came from stdin when I invoke md5sum, and a "-" tells me absolutely _nothing_ useful at any later date (when I might want to validate an md5sum, say). It would've been much better to

Re: dpkg enhancements for better debconf support

2002-09-14 Thread Anthony Towns
asy to make work, doesn't break backwards compatability, possibly others. Drawbacks? Cheers, aj, who still thinks Bug#50595 is the real problem -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferr

Re: dpkg should recommend dselect

2002-08-10 Thread Anthony Towns
e? It gets even more fun and enlightening after a year's worth of moaning, too! Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``If you don't do it now, you'll be one year older when you do.''

Re: thoughts on signature verification

2002-08-08 Thread Anthony Towns
ou probably should start wondering what someone's trying to do. Dpkg has no possibility of automatically checking this (since you might've downloaded it using wget, eg), Apt does (since it does the downloading itself). This isn't a flaw that needs a spirited defense, it's just a fact.

Bug#155676: patch] dynamic sha1sums generation

2002-08-08 Thread Anthony Towns
On Wed, Aug 07, 2002 at 01:56:36PM -0400, Colin Walters wrote: > On Wed, 2002-08-07 at 02:42, Anthony Towns wrote: > True. And actually any weaknesses in MD5 are rather irrelevant for this > particular case, because a hostile attacker will be able to simply > replace any of the ch

Re: thoughts on signature verification

2002-08-08 Thread Anthony Towns
tell it which keyring to use, and check that the key's in that keyring (dpkg-source --from=debian -x *.dsc) c) Check that the signature is from the "Maintainer:" Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don

Bug#155676: patch] dynamic sha1sums generation

2002-08-07 Thread Anthony Towns
sums avoids a naming conflict with the > foo.md5sums file. Wouldn't it be more sensible to put it in /var/lib/dpkg/checksums/foo.sha1 or similar? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself

Bug#152009: dpkg fails to upgrade to 1.10

2002-07-06 Thread Anthony Towns
On Fri, Jul 05, 2002 at 03:41:10PM -0500, Adam Heath wrote: > severity 152009 normal > Hardly grave. It mightn't be grave, but it's pretty surely serious. You should have added a Replaces: manpage-de (<< 0.4-4) now anyway. Cheers, aj -- Anthony Towns <

Re: Bug#149974: debootstrap should download aptitude

2002-06-15 Thread Anthony Towns
ckages need to a new debootstrap. Please file a bug against debootstrap either before or at least concurrent with the upload. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred

Re: Bug#149974: debootstrap should download aptitude

2002-06-14 Thread Anthony Towns
oming dselect package. -boot guys, cc'ed in the probably vain hope that anyone else likely to do this in future will notice too. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail pre

Bug#148221: dpkg: Small off by one error in parseversion()

2002-05-27 Thread Anthony Towns
stead of obstack_copy, and not add 1 > to l. In which case you still end up with "1.2.3 " instead of "1.2.3", which still seems like a bug, although it won't cause a segfault anymore. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.o

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-09 Thread Anthony Towns
d Wichert (as dpkg maintainers) think it's appropriate to upload that along with the dpkg.cfg fix, I'm happy to go with it. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed

Bug#146167: apt: No way to purge record of package without purging config files

2002-05-09 Thread Anthony Towns
ot-purged. Perhaps if you have a conffile mentioned by removed-but-not-purged package , and also by newly-installed-package ownership of the conffile should be automatically transferred to (and possibly should "disappear" if appropriate)? Cheers, aj -- Anthony Towns <[EMAI

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-09 Thread Anthony Towns
e clueful --force-overwrite added to dpkg.cfg seems the simplest fix. Am I missing anything? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``BAM! Sc

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-06 Thread Anthony Towns
hen dpkg should be > shipping this conffile in THAT state, That's nice. It's a shame we didn't think of it earlier. But we didn't. It's far easier to make base-config handle it for woody. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.a

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-06 Thread Anthony Towns
e-config. Joey, would you object to an NMU to do so? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``BAM! Science triumphs again!'' -- http://www.angryflower.com/vegeta.gif pgpi9pxOBdu2B.pgp Description: PGP signature

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-04 Thread Anthony Towns
On Fri, May 03, 2002 at 12:39:26PM -0400, Joey Hess wrote: > Anthony Towns wrote: > > It'd be relatively straightforward to have the installer enable > > force-overwrite on "stable" installs and disable it on "testing" installs. > > But for woody, sur

Bug#145595: dpkg: --force-overwrite is supposed to be on for releases

2002-05-03 Thread Anthony Towns
quot;stable" installs and disable it on "testing" installs. But for woody, surely the best thing is to just have base-config munge it (editing /var/lib/dpkg/status if you like) and be done with it? Worrying about changing it from a conffile to something maintained in the maint

Re: Bug#142324: ER] Should add homepage URL in package description

2002-04-25 Thread Anthony Towns
o. What do you mean? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``BAM! Science triumphs again!'' -- http://www.angryflower.com/vegeta.gif

Re: dpkg triggers

2002-03-31 Thread Anthony Towns
On Sun, Mar 31, 2002 at 12:40:10PM +0100, Russell Coker wrote: > On Sun, 31 Mar 2002 12:36, Colin Watson wrote: > > On Fri, Mar 29, 2002 at 04:04:10PM +1000, Anthony Towns wrote: > > > Other applications are for "update-menus" and for things like "texhash",

Re: dpkg triggers

2002-03-29 Thread Anthony Towns
eem pretty hideous for an upgrade between stable releases. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. Vote [1] Bdale! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#139320: marked as done (dpkg: dpkg-deb does not dynamically link libz)

2002-03-22 Thread Anthony Towns
On Fri, Mar 22, 2002 at 02:50:47PM +1000, Wichert Akkerman wrote: Err? WTF happened there? I wrote that, as the Sender: and signature indicate, not Wichert. How fucked up. > Wichert wrote: > > Previously Daniel Quinlan wrote: > > > Also, given the dependencies on c++ and ncurses already, adding l

Bug#139320: dpkg: dpkg-deb does not dynamically link libz

2002-03-21 Thread Anthony Towns
here's no evidence that libz breaks more frequently than anything else. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``Debian: giving you the power to shoot yourself in each

Re: pending dpkg 1.10 release

2001-07-28 Thread Anthony Towns
On Sat, Jul 28, 2001 at 12:59:28PM +1000, Anthony Towns wrote: > dselect Pre-Depends: dpkg > dpkg Replaces: dselect > ? That could be made to work... What could also probably be made to work is something like: Package: dselect Priority: important Sect

Re: pending dpkg 1.10 release

2001-07-27 Thread Anthony Towns
On Fri, Jul 27, 2001 at 01:01:32PM +0200, Wichert Akkerman wrote: > Previously Anthony Towns wrote: > > I've heard rumours this breaks things. How's it implemented, > > dependency-wise? > Pre-Depends and Replaces, tested with manual, apt-get ugprade and dselect >

Re: pending dpkg 1.10 release

2001-07-26 Thread Anthony Towns
On Fri, Jul 27, 2001 at 04:34:24AM +0200, Wichert Akkerman wrote: > * dselect moved to its own package. You can't remove it though. I've heard rumours this breaks things. How's it implemented, dependency-wise? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://

Re: ia32 user space on ia64, et al

2001-06-08 Thread Anthony Towns
e an error. Yes? Translate the libs, install the bins, rename the copyrights, cross your fingers." Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``_Any_ increase in inte

Re: Bug#95921: superformat isn't on root.bin or installed by debootstrap

2001-05-01 Thread Anthony Towns
On Tue, May 01, 2001 at 03:14:17AM -0500, Adam Heath wrote: > On Wed, 2 May 2001, Anthony Towns wrote: > > Anyway, debootstrap 0.1.7 is in incoming now, fixing this and a handful > > of other bugs. It kind-of works with sid (assuming you have a mirror > > that's not hal

Re: Bug#95921: superformat isn't on root.bin or installed by debootstrap

2001-05-01 Thread Anthony Towns
7;t get anywhere at all anymore. debootstrap sid sid-chroot http://ftp.kernel.org/debian /usr/lib/debootstrap/scripts/woody with dpkg 0.9.2 segfaults at the first attempt to invoke dpkg. :( Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don&

Re: PATCH: package verification in dpkg

2001-03-12 Thread Anthony Towns
nstall them, or similar. > > > > This applies whether you have a `progeny' signature on each .deb or not, > > too, note. > Can we stop the battle of the sigs now please? Sure, I just mean it's probably something Progeny and co want to be aware of. Here seemed

Re: Installing from scratch with debs

2001-03-11 Thread Anthony Towns
on't consider this a fatal error. boot-floppies and debootstrap link start-stop-daemon to /bin/true to stop this from happening. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferr

Re: PATCH: package verification in dpkg

2001-03-11 Thread Anthony Towns
on some buggy package, or changing the md5sums on some packages so apt'll refuse to install them, or similar. This applies whether you have a `progeny' signature on each .deb or not, too, note. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~a

Re: E: read, still have 1 to read but none left

2001-01-23 Thread Anthony Towns
le, fwiw. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``Thanks to all avid pokers out there'' -- linux.conf.au, 17-20 January 2001

Re: seemingly reproducable dpkg segfault

2000-12-23 Thread Anthony Towns
write --recursive /var/cache/apt/archives >>$L 2>&1 ] failed, will retry. ] unpacking required packages: done ie, running the exact same command three times in a row makes the bug go away. Using --chroot instead of chrooting in advance works somewhat more reliably, but still flakes out

Re: New field proposed, UUID

2000-11-29 Thread Anthony Towns
installed if they want to upgrade from foo-unstable to foo-stable. It'd also mean package signatures would not be checkable without special tools. Note also that a UUID is fakeable, so just because one .deb with that UUID is correctly signed, it doesn't mean some other .deb with the same UUID is ac

Re: Dynamic registration of files to packages

2000-11-21 Thread Anthony Towns
On Mon, Nov 20, 2000 at 11:15:54AM -0600, Steve Greenland wrote: > On 20-Nov-00, 09:06 (CST), Anthony Towns wrote: > > Mirror as in duplicate, separately. Something like: > > /var/lib/dpkg/info/ > > base-passwd.extrafiles: > > /etc/pas

Re: Dynamic registration of files to packages

2000-11-20 Thread Anthony Towns
On Mon, Nov 20, 2000 at 01:36:38PM +, Martin Michlmayr wrote: > * Anthony Towns [20001120 15:12]: > > Another thing to consider is whether its desirable for this to be > > dynamic, or whether it would be better to just mirror the > > debian/conffiles in some way. > Th

Re: Dynamic registration of files to packages

2000-11-19 Thread Anthony Towns
he debian/conffiles in some way. This feature would make the cruft package much more effective, fwiw. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> I don't speak for anyone save myself. GPG signed mail preferred. ``We reject: kin

close dpkg-iwj bugs

2000-09-30 Thread Anthony Towns
reassign 1526 dpkg close 1526 reassign 1642 dpkg close 1642 reassign 1797 dpkg close 1797 reassign 1818 dpkg close 1818 reassign 1921 dpkg close 1921 reassign 2701 dpkg close 2701 reassign 2828 dpkg close 2828 reassign 2863 dpkg close 2863 reassign 2911 dpkg close 2911 reassign 2973 dpkg close 2973

[hypothetical] close dpkg-iwj bugs

2000-09-30 Thread Anthony Towns
reassign 1526 dpkg close 1526 reassign 1642 dpkg close 1642 reassign 1797 dpkg close 1797 reassign 1818 dpkg close 1818 reassign 1921 dpkg close 1921 reassign 2701 dpkg close 2701 reassign 2828 dpkg close 2828 reassign 2863 dpkg close 2863 reassign 2911 dpkg close 2911 reassign 2973 dpkg close 2973

  1   2   >