Hi! Am 06.08.2018 um 12:47 schrieb Emmanuel Bourg: > Hi all, > > I'm starting to plan the packaging of Tomcat 9 which should be the > version of Tomcat shipped with Buster. Before doing that I'd like to > rethink how the Servlet/JSP API are packaged in Debian.
[...] That is a very good idea. I also think that it makes sense to decouple the Servlet API from src:tomcat{7,8,9} [...] > So I'd like to take the opportunity of the Tomcat 9 packaging to suggest > the following changes: > * The src:tomcat(n>=9) packages no longer build libservlet<m>-java. +1 > * The Servlet, JSP, EL and WebSocket APIs are packaged separately, > using the JavaEE (now Eclipse EE4J/JakartaEE) repositories on GitHub. > These API packages are kept in the archive as long as necessary. Being > pure API with no actual implementation, they aren't security sensitive > and don't create a maintenance burden. +1 > * When src:tomcat(n<9) is removed, introduce standalone API packages. > > In details, that would give: > > 1. Create a new src:servlet-4.0-api package building libservlet4.0-java > with the Servlet API *only*, no JSP/EL/WebSocket API, not even as a > dependency. > > 2. libservlet3.1-java gets split into 4 packages, one per API: > libservlet3.1-java, libjsp2.3-java, libel3.0-java and > libwebsocket1.1-java. libservlet3.1-java would depend on the three > other packages to preserve the compatibility and avoid updating > all the packages depending on the JSP/EL APIs. > > 3. libservlet3.0-java is similarly split into: libservlet3.0-java, > libjsp2.2-java, libel2.2-java > > 4. Create new source packages to take over the API packages from > src:tomcat7 and src:tomcat8: > * servlet-3.0-api and servlet-3.1-api > (built from https://github.com/javaee/servlet-spec) > * jsp-2.2-api and jsp-2.3-api > (built from https://github.com/javaee/javaee-jsp-api) > * el-2.2-api and el-3.0-api > (built from https://github.com/javaee/el-spec) > * websocket-1.1-api > (built from https://github.com/javaee/websocket-spec) > > 5. remove src:tomcat7, and later src:tomcat8 once src:tomcat9 > is available > > What do you think? As long as we don't have to change reverse-dependencies and everything is just a drop-in, I think it's good. I can start packaging libservlet4.0-java (I would name source and binary package the same). Is it this one? https://github.com/javaee/servlet-spec/releases/tag/4.0.1 Regards, Markus
signature.asc
Description: OpenPGP digital signature