Re: Backporting question

2024-01-24 Thread Mathias Gibbens
On Mon, 2024-01-15 at 02:44 +, Mathias Gibbens wrote: >   However, there are a few that are in bookworm, but will require a > newer version to be backported. Three in particular have a number of > rbuild deps in bookworm (attached). As packaging of golang code is > solely to support building ot

Re: RFS: Go-sendxmpp and dependency golang-github-mattn-go-xmpp rebuild for bookworm-backports

2024-01-24 Thread Martin Dosch
Dear all, after building the backport I accidentally signed and uploaded it as I am so used to it and it got accepted. So, it seems that my second request to rt.debian.org was already processed and either I missed the email or didn't receive it. :) Anyway, the package was uploaded and accepte

Re: Undoing staged work in salsa repos

2024-01-24 Thread Mathias Gibbens
On Sun, 2024-01-14 at 20:08 +, Mathias Gibbens wrote: > Hi all, > >   One of the packages required for building Incus was golang-github- > hashicorp-golang-lru/v2. The current version in Debian is quite old > (0.5.4), so I started working on updating it and the various reverse > build dependen

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread thomas
Quickly from my phone: I can provide runner VMs if needed... Thomas Sent from Workspace ONE Boxer On Jan 24, 2024 4:19 PM, Shengjing Zhu wrote: On Wed, Jan 24, 2024 at 11:05 PM Simon Josefsson wrote: > > Nilesh Patra writes: > > > On 24 January 2024 2:25:53 pm IST, Simon Josefsson

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

2024-01-24 Thread Simon Josefsson
Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing and

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Shengjing Zhu
On Wed, Jan 24, 2024 at 11:05 PM Simon Josefsson wrote: > > Nilesh Patra writes: > > > On 24 January 2024 2:25:53 pm IST, Simon Josefsson > > wrote: > >>Definitely -- however I don't see how we can ever have confidence in > >>uploads of core Go packages without building all reverse dependencies

Re: Request removal of cadvisor?

2024-01-24 Thread Simon Josefsson
Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 10:56 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson >> > wrote: >> >> Shengjing Zhu, what do you think, can we request removal of this package >> >> from unstable? >> >> >> > >> > W

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Simon Josefsson
Nilesh Patra writes: > On 24 January 2024 2:25:53 pm IST, Simon Josefsson > wrote: >>Definitely -- however I don't see how we can ever have confidence in >>uploads of core Go packages without building all reverse dependencies. >> >>If that building is on developer local laptops or via Salsa is

Re: Request removal of cadvisor?

2024-01-24 Thread Shengjing Zhu
On Wed, Jan 24, 2024 at 10:56 PM Simon Josefsson wrote: > > Shengjing Zhu writes: > > > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson wrote: > >> Shengjing Zhu, what do you think, can we request removal of this package > >> from unstable? > >> > > > > Why would you bother with packages that ar

Re: Request removal of cadvisor?

2024-01-24 Thread Simon Josefsson
Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson wrote: >> Shengjing Zhu, what do you think, can we request removal of this package >> from unstable? >> > > Why would you bother with packages that are only in unstable? > I'm not sure how best to handle removal for team mai

Re: Request removal of cadvisor? (was: Re: golang-opentelemetry-contrib-dev: Upload to unstable)

2024-01-24 Thread Shengjing Zhu
On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson wrote: > Shengjing Zhu, what do you think, can we request removal of this package > from unstable? > Why would you bother with packages that are only in unstable? I'm not sure how best to handle removal for team maintained packages. I'm not the one

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Nilesh Patra
On 24 January 2024 2:25:53 pm IST, Simon Josefsson wrote: >Definitely -- however I don't see how we can ever have confidence in >uploads of core Go packages without building all reverse dependencies. > >If that building is on developer local laptops or via Salsa is not that >different from a re

Request removal of cadvisor? (was: Re: golang-opentelemetry-contrib-dev: Upload to unstable)

2024-01-24 Thread Simon Josefsson
(Dropping cc to #1059573...) Maytham Alsudany writes: >> https://salsa.debian.org/jas/golang-opentelemetry-otel/-/pipelines/629791 >> >> I think this really indicate FTBFS bugs in cadvisor, crowdsec, and >> gitlab-ci-multi-runner? Rebuilding packages in sid should work. > > I'll open bugs and

Re: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Maytham Alsudany
Hi Simon, On Wed, 2024-01-24 at 11:41 +0100, Simon Josefsson wrote: > Yeah, alas, golang-opentelemetry-contrib needs newer > golang-opentelemetry-otel, otherwise you get build errors like this: > > src/go.opentelemetry.io/contrib/config/trace.go:13:2: cannot find package > "go.opentelemetry.io/o

Re: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Simon Josefsson
Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: >> Hi. >> >> I was looking at golang-opentelemetry-contrib-dev because it is needed >> for etcd 3.5.x. It seems to build fine, but upstream is doing several >> concurrent releases, and we don't ha

Re: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Maytham Alsudany
Hi Simon, On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: > Hi. > > I was looking at golang-opentelemetry-contrib-dev because it is needed > for etcd 3.5.x. It seems to build fine, but upstream is doing several > concurrent releases, and we don't have the latest version in > experiment

Re: golang-opentelemetry-contrib-dev: Upload to unstable

2024-01-24 Thread Simon Josefsson
Hi. I was looking at golang-opentelemetry-contrib-dev because it is needed for etcd 3.5.x. It seems to build fine, but upstream is doing several concurrent releases, and we don't have the latest version in experimental. I wanted to upgrade it to the latest upstream version before doing an upload

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

2024-01-24 Thread Maytham Alsudany
Hi Simon, On Tue, 2024-01-23 at 18:01 +0100, Simon Josefsson wrote: > Thank you -- I have uploaded s2a to experimental. Thanks for the upload. > Trying to build > golang-google-api 0.157.0 fails with error below - are these > dependencies important? FYI, M Hickford is working on updating golan

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Simon Josefsson
Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 4:07 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> >> >> How do you all QA test Go packages before uploading them without a >> >> >> Salsa >> >> >> pipeline? Manually on local developer machine? >> >> >> >> >> > >> >> > Yes, I need

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Shengjing Zhu
On Wed, Jan 24, 2024 at 4:07 PM Simon Josefsson wrote: > > Shengjing Zhu writes: > > >> >> How do you all QA test Go packages before uploading them without a Salsa > >> >> pipeline? Manually on local developer machine? > >> >> > >> > > >> > Yes, I need to sign the changes locally, so I build pac

Re: Add Salsa pipeline to default Go pipeline?

2024-01-24 Thread Simon Josefsson
Shengjing Zhu writes: >> >> How do you all QA test Go packages before uploading them without a Salsa >> >> pipeline? Manually on local developer machine? >> >> >> > >> > Yes, I need to sign the changes locally, so I build packages locally. >> >> Right, I build locally too before signing uploads.