** Description changed:

  [Availability]
  The package sysprof is already in Ubuntu universe.
  The package sysprof build for the architectures it is designed to work on.
  It currently builds and works for all Ubuntu architectures.
  Link to package https://launchpad.net/ubuntu/+source/sysprof
  
  [Rationale]
  - The package sysprof is required in Ubuntu main
  - The package sysprof will not generally be useful for a large part of our 
user base, but is important/helpful still because it is part of an Ubuntu 
initiative to focus on performance engineering, both for Ubuntu itself and for 
developers who build their projects on top of Ubuntu. The size of the sysprof 
app is fairly small and we envision sysprof as the latest of the small 
utilities that are included in a default Ubuntu desktop. (Disk Usage Analyzer 
[baobab] is another one of these utilities.)
  + Related to 
https://ubuntu.com/blog/ubuntu-performance-engineering-with-frame-pointers-by-default
  - There is no other/better way to solve this that is already in main or 
should go universe->main instead of this.
  - The package sysprof is required in Ubuntu main no later than August 15 due 
to a Ubuntu Desktop goal of including sysprof in the default 24.10 install.
  - The binary package sysprof needs to be in main to achieve the goal of 
providing a GUI performance profiling tool (command-line tools were included by 
default in Ubuntu 24.04 LTS, but the Desktop Team and others did not have the 
capacity to also handle getting sysprof into the default install then.)
  
  [Security]
  - No CVEs/security issues in this software in the past
  + https://security-tracker.debian.org/tracker/source-package/sysprof
  + https://ubuntu.com/security/cves?package=sysprof
  
  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does install services, timers or recurring jobs
  + /usr/lib/systemd/system/sysprof3.service
  + /usr/libexec/sysprofd
  + /usr/share/dbus-1/system-services/org.gnome.Sysprof3.service
  
  - Security has been kept in mind and common isolation/risk-mitigation 
patterns are in place utilizing the following features:
  + App uses /usr/share/polkit-1/actions/org.gnome.sysprof3.policy to gain the 
elevated permissions it needs to use ptracing in the Linux kernel.
  - Package does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Package makes use of ptracing in the Linux kernel because it is required 
for the system-wide profiling feature that is essential to this app. I 
recommend Security Team review.
  
  [Quality assurance - function/usage]
  - The package works well right after install
  
  [Quality assurance - maintenance]
  - The package is maintained well in Debian/Ubuntu/Upstream and does not have 
too many, long-term & critical, open bugs
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/sysprof/
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=sysprof
  - Upstream https://gitlab.gnome.org/GNOME/sysprof/-/issues
  - The package does not deal with exotic hardware we cannot support
  
  [Quality assurance - testing]
  - The package runs a test suite on build time, if it fails it makes the build 
fail, link to build log
  https://launchpad.net/ubuntu/+source/sysprof/46.0-1build1
  
  - The package runs an autopkgtest, and is currently passing on all 
architectures except for i386
  https://autopkgtest.ubuntu.com/packages/sysprof
  
  - We also will do manual testing of the GUI app
  
  https://wiki.ubuntu.com/DesktopTeam/TestPlans/Sysprof
  
  [Quality assurance - packaging]
  - debian/watch is present and works
  - debian/control defines a correct Maintainer field
  - This package does not yield massive lintian Warnings, Errors
  - Please link to a recent build log of the package
  https://launchpad.net/ubuntu/+source/sysprof/46.0-1build1
  - Please attach the full output you have got from `lintian --pedantic` as an 
extra post to this bug.
  - Lintian overrides are present, but ok because the overrides document why 
those Lintian warnings should be ignored.
  
  - This package does not rely on obsolete or about to be demoted packages.
  - This package has no python2 or GTK2 dependencies
  
  - The package will be installed by default, but does not ask debconf questions
  - Packaging and build is easy, link to debian/rules
  https://salsa.debian.org/gnome-team/sysprof/-/blob/debian/latest/debian/rules
  
  [UI standards]
  - Application is end-user facing, Translation is present, via standard 
gettext system
  - End-user applications that ships a standard conformant desktop file
  + /usr/share/applications/org.gnome.Sysprof.desktop
  
  [Dependencies]
  - There are further runtime dependencies that are not yet in main
  + MIR for libdex is at LP: #2066262
  + MIR for libpanel is at LP: #2066272
  
  [Standards compliance]
  - This package correctly follows FHS and Debian Policy
  
  [Maintenance/Owner]
  - The owning team will be Ubuntu Desktop (~desktop-packages) and I have their 
acknowledgement for that commitment
  - The future owning team is not yet subscribed, but will subscribe to the 
package before promotion
  
  - This does not use static builds
  - This does not use vendored code
  - This package is not rust based
  
  - The package has been built in the archive more recently than the last
  test rebuild
  
  [Background information]
  - The Package description explains the package well
  - Upstream Name is sysprof
  - Link to upstream project https://gitlab.gnome.org/GNOME/sysprof
+ 
+ - There is a very large number of overrides in Ubuntu's supported seed
+ to demote library -dev packages to universe to keep libsysprof-
+ capture-4-dev out of main. Those overrides can be dropped once sysprof
+ is allowed into main.
+ 
+ https://git.launchpad.net/~ubuntu-core-dev/ubuntu-
+ seeds/+git/ubuntu/tree/supported

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2066269

Title:
  [MIR] sysprof

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sysprof/+bug/2066269/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to