Using jetring / updating email address in debian-maintainers

2009-05-27 Thread Mathieu Malaterre
Hi there,

  I am suffering from the following bug:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530384

  which is basically the same as:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=511709
and
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=488770

  All I am trying to do is replace the currently listed email address at:
http://ftp-master.debian.org/dm-uploaders.html
from ma...@users.sourceforge.net into mathieu.malate...@gmail.com

  As mentionned in the bug report jetring-gen does not work for this
kind of action or at least I could not get it generate the
modification.

  I would *really* appreciate if someone could show me an example on
how to apply the proper changeset to debian-maintainers.gpg so that
the primary gpg UID is being updated.

  I tried:

$ sudo apt-get install -t unstable debian-maintainers
$ cp /usr/share/keyrings/debian-maintainers.gpg .
$ jetring-explode debian-maintainers.gpg out
$ cp change-mathieu out
$ jetring-review debian-maintainers.gpg out

but again jetring-review does not see any difference.

with:

$ cat out/add-mathieu
Action: edit-key
Data:
uid 1
primary


All of the above while the ma...@users.sourceforge.net gpg uid has
been completely removed from my keyring.

Thanks,
-- 
Mathieu


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Debian GNU/Hurd porter box strauss.debian.net available

2009-05-27 Thread Michael Banck
Dear Debian community,

There is now a porter box (strauss.debian.net) for the Debian GNU/Hurd
(hurd-i386 architecture) port available.  It is a DomU on a Xen-server
donated and hosted at the ETH Zurich.  All Debian Developers can login
with their @debian.org SSL public key, thanks to LDAP integration with
db.debian.org done by DSA.  Other interested users can mail
ad...@strauss.debian.net to get an account.  Please let us know of your
preferred username (your alioth account name is preferred, if
applicable, then we can just copy your alioth public SSH key over) and a
quick note on why you plan to use it.

The SSH public key is attached, the key fingerprint is
0f:95:27:cf:9a:b2:88:bf:d7:10:24:b4:51:f9:7a:ef.

The box has an unstable chroot which is preferred for package building
and debugging, accessible as usual via the dchroot command.  Please
contact ad...@strauss.debian.net or #debian-hurd (on irc.debian.org) if
you need Build-Depends or other packages installed or have further
questions.

The box has currently 200 MB memory assigned and for storage a 5 GB root
as well as a 10 GB unstable chroot file system.

Again, thanks to Gürkan Sengün for donating/hosting the machine and
DSA (and Peter Palfrader in particular) for the integration with
db.debian.org's LDAP.


For the Debian GNU/Hurd porters,

Michael Banck
ssh-rsa 
B3NzaC1yc2EBIwAAAQEA3t7NRCecYDjejsIHygwdeqgvf0ys6WcfK/lpAE0iaLCldCd00H9tH8jjJL6xQeLeKouaGg5ILsvSar/Epf0wkb7QMypG3ulrHDTPNvLe87+eZ5tapzFB5t8StSzgT2oO1b9/pUou2E9uTjWeCJtMGFTW6YcJrYCuwvSk+IgKt0Tu4fPTYorlv+BZl5QZEX6VD8p7aRc1fFSWpQkPpL+jvOtcm6oT0PwYE3PjPJVT9EA0rAfkOxZIzlnb/2JgIHTnREnvUpjhgtWjQX+mR6alnBJut1xBlDMhS7Z7WWRROYbElHgdnMQKy3DFaky3Bz93UoaVRkQBHrbLpamPB6lP7Q==
 r...@strauss


signature.asc
Description: Digital signature


Bug#530748: ITP: uzbl -- A keyboard controlled browser based on Webkit

2009-05-27 Thread Stefan Ritter
Package: wnpp
Severity: wishlist
Owner: Stefan Ritter 


* Package name: uzbl
  Version : 0.0~git.20090527
  Upstream Author : Dieter Plaetinck 
* URL : http://www.uzbl.org
* License : (GPL-3, BSD-2)
  Programming Lang: (C, Bash)
  Description : A keyboard controlled browser based on Webkit

Very minimal interface. No unnecessary interface elements.

Controllable through a FIFO and with external scripts.

What is not browsing, is not in uzbl. Things like url changing,
loading/saving of bookmarks, saving history,.. are handled through external
scripts that you write.

-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#530753: ITP: staden-io-lib -- The Staden io_lib and its associated programs (three binary packages).

2009-05-27 Thread Charles Plessy
Package: wnpp
Severity: wishlist
Owner: Charles Plessy 

  Package name: staden-io-lib
  Version : 1.11.6.1
  Programming Lang: C
  Description : The Staden io_lib and its associated programs (three binary 
packages).


debian/control
--

Source: staden-io-lib
Section: science
Priority: optional
Maintainer: Debian-Med Packaging Team 

DM-Upload-Allowed: yes
Uploaders: Charles Plessy 
Build-Depends: debhelper (>= 7), autotools-dev, quilt
Standards-Version: 3.8.1
Homepage: http://staden.sourceforge.net/
Vcs-Browser: 
http://svn.debian.org/wsvn/debian-med/trunk/packages/staden-io-lib/trunk/?rev=0&sc=0
Vcs-Svn: svn://svn.debian.org/svn/debian-med/trunk/packages/staden-io-lib/trunk/

Package: staden-io-lib-utils
Section: science
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}
Description: programs for maniuplating DNA sequencing files
 The io_lib from the Staden package is a library of file reading and writing
 code to provide a general purpose trace file (and Experiment File) reading
 interface. It has been compiled and tested on a variety of unix systems,
 MacOS X and MS Windows.
 .
 This package contains the programs that are distributed with the Staden io_lib
 for manipulating and converting sequencing data files, and in particular files
 to maniuplate short reads generated by second and third generation sequencers
 and stored in SRF format.

Package: libstaden-read-dev
Section: libdevel
Architecture: any
Depends: libstaden-read1 (= ${binary:Version}), ${misc:Depends}
Description: development files for libstaden-read
 This package contains the header and development files needed to build
 programs and packages using the Staden io_lib.

Package: libstaden-read1
Section: libs
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}
Description: Staden library for reading and writing DNA sequencing results.
 This package contains the Staden io_lib, that is renamed in Debian and Fedora
 ‘staden-read’ instead of ‘read’. This library supports various DNA sequence
 read formats, in particular SCF, ABI, ALF, CTF, ZTR, SFF and SRF.


debian/copyright


Format: Machine-readable license summary, see 
‘http://dep.debian.net/deps/dep5/’.

Name: io-lib 
Contact: James Bonfield, Simon Dear, Rodger Staden (io-lib)
Source: http://qa.debian.org/watch/sf.php/staden/io_lib-1.11.6.1.tar.gz 

Copyright: © 1994 Medical Research Council
   © Genome Research Ltd (GRL)
License: GRL or MRC
Upstream-Comment: Newer files and changes are copyright Genome Research Ltd
 using the following compatible BSD licence. Disentangling which is which is
 somewhat tricky, but it's sufficient to say that work in the CVS tree from
 August 2002 will be bound by the GRL licence instead.

License: GRL
 Copyright (c), Genome Research Ltd (GRL).
 All rights reserved.
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
 * Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
 .
 * Redistributions in binary form must reproduce the above
   copyright notice, this list of conditions and the following
   disclaimer in the documentation and/or other materials
   provided with the distribution.
 .
 * Neither the name of the Genome Research Limited nor the
   names of its contributors may be used to endorse or promote
   products derived from this software without specific prior
   written permission.
 .
 THIS SOFTWARE IS PROVIDED BY GRL ``AS IS'' AND ANY EXPRESS OR
 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED.  IN NO EVENT SHALL GRL BE LIABLE FOR ANY DIRECT,
 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 OF THE POSSIBILITY OF SUCH DAMAGE.

License: MRC
 Copyright (c) Medical Research Council 1994. All rights reserved.
 .
 Permission to use, copy, modify and distribute this software and its
 documentation for any purpose is hereby granted without fee, provided that
 this copyright and notice appears in all copies.
 .
 This file was written by James Bonfield, Simon Dear, Rodger Staden,
 as part of the Staden Package at the MRC Laboratory of Molecular
 Biology, Hills Road, Cambridge, CB2 2QH, United Kingdom.
 .
 MRC disclaims all warranties with regard to this software.

Files: io_lib/open_trace_file.c
License: GRL or MRC, and 454
 This files contains some source code owned by 454 Life Sciences Corporation.

License: 454
 Copyright 

Re: Bug#530660: ITP: agedu -- a Unix utility for tracking down wasted disk space

2009-05-27 Thread Maximiliano Curia
Hola Alexander Prinsier!

El 26/05/2009 a las 20:21 escribiste:
> Package: wnpp
> Severity: wishlist
> Owner: Alexander Prinsier 
 
> * Package name: agedu
>   Version : N/A
>   Upstream Author : Simon Tatham 
> * URL : http://www.chiark.greenend.org.uk/~sgtatham/agedu/
> * License : MIT
>   Programming Lang: C
>   Description : a Unix utility for tracking down wasted disk space
 
> Unix provides the standard du utility, which scans your disk and tells
> you which directories contain the largest amounts of data. That can help
> you narrow your search to the things most worth deleting.
 
> However, that only tells you what's big. What you really want to know
> is what's too big. By itself, du won't let you distinguish between data
> that's big because you're doing something that needs it to be big, and
> data that's big because you unpacked it once and forgot about it.

I've been looking at the agedu project and from my point of view it has some
design flaws:
 - It creates an index database file prior any query can be made, and the
   index database is loaded fully into memory on every query.
 - Unix utilities are based on the idea of, do one thing, but do it well, a du
   that has an embedded web server cannot call itself a Unix utility.
 - The web interface listens on:
   127.randrange(0-255).randrange(0-255).randrange(2-255):randrange(1025-65535)
   on behalf of "security" so other users can't see your agedu, however any user
   can type: netstat -l to see where agedu is listening
 - The use of a random ip can be quite troublesome in certain firewalls
   setups.
 - It depends on the use of atime, currently considered as a unix desing flaw
   among kernel programmers [1] and the move towards relatime and nodiratime as
   default is quite possible in the near future [2], it even polutes the 
   planet [3]. :)

For all these reasons I don't think this software should go into the Debian
archive.

Anyway, the basic idea "to have an index of files and directories sorted by
size and age" can be quite useful, and probably a worthy hack to merge with
mlocate, which would be (of course) based on mtime instead of atime, which is
a plus.

[1]: http://kerneltrap.org/node/14148
[2]: http://lkml.indiana.edu/hypermail/linux/kernel/0903.3/01769.html
[3]: http://www.lesswatts.org/tips/disks.php

-- 
"EIEIO  Go home and have a glass of warm, dairy-fresh milk"
The GNU C Library Reference Manual, Chapter 2.2, Error Codes
Saludos /\/\ /\ >< `/


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Bug#530660: ITP: agedu -- a Unix utility for tracking down wasted disk space

2009-05-27 Thread Alexander Prinsier
Maximiliano Curia wrote:
>> * Package name: agedu
>>   Version : N/A
>>   Upstream Author : Simon Tatham 
>> * URL : http://www.chiark.greenend.org.uk/~sgtatham/agedu/
>> * License : MIT
>>   Programming Lang: C
>>   Description : a Unix utility for tracking down wasted disk space
[snip]
> 
> I've been looking at the agedu project and from my point of view it has some
> design flaws:
>  - It creates an index database file prior any query can be made, and the
>index database is loaded fully into memory on every query.

Yes, but the typical query needs all the information anyway, so I see no
problem with loading the whole index into memory and then running the query.

A typical query needs all the information anyway because to know the
average age of files in / you need the average age of files in /home,
/var, ... etc traversing your whole file system recursively.

It would be an improvement however to calculate the age bottom up. Eg
first do it for /home, then just remember the result and free that part
of the index from memory and then in the end you just have to take one
average again.

This could be done to improve scalability. I don't consider this loading
the index at once before-hand a design flaw, but yes it limits scalability.

>  - Unix utilities are based on the idea of, do one thing, but do it well, a du
>that has an embedded web server cannot call itself a Unix utility.

Ok, I can agree on that :) I took the description from the author's
webpage, but I can remove the wording 'Unix utility'.

>  - The web interface listens on:
>
> 127.randrange(0-255).randrange(0-255).randrange(2-255):randrange(1025-65535)
>on behalf of "security" so other users can't see your agedu, however any 
> user
>can type: netstat -l to see where agedu is listening

For authenticating the user when connecting to the built-in webserver it
has several options:

-"Magic" authentication as the author calls it: agedu looks up if the
connection is coming from the local machine and then tries to find the
entry in /proc/net/tcp. There it can find the uid of the connection
initiator, to verify it's the same uid as the one running the webserver.

-If you don't like that, you can use basic http authentication.

-It also "supports" no authentication :)

Picking a random (local) ip address is just something extra.

>  - The use of a random ip can be quite troublesome in certain firewalls
>setups.

Luckily you can override the ip address it has to listen on with
--address ip:port.

>  - It depends on the use of atime, currently considered as a unix desing flaw
>among kernel programmers [1] and the move towards relatime and nodiratime 
> as
>default is quite possible in the near future [2], it even polutes the 
>planet [3]. :)

I predict it will happily keep working with relatime. Using --mtime you
can also make it use mtime instead of atime.

> For all these reasons I don't think this software should go into the Debian
> archive.

I believe I made some worthy arguments against that. Besides that, I
really found the program useful, and probably so do probably many other
people.

> Anyway, the basic idea "to have an index of files and directories sorted by
> size and age" can be quite useful, and probably a worthy hack to merge with
> mlocate, which would be (of course) based on mtime instead of atime, which is
> a plus.

Sure, but in the mean time I'll stick to agedu ;)

Using mtime instead of atime really gives another view. I have many
files which I never write to but I do read them alot. If I wouldn't have
atime or relatime, then I wouldn't be able to find files I forgot about.

I hope I was able to change your mind about inclusion of agedu in the
Debian archive. If not, let me know ;)

Btw, I'm still looking for a sponsor (see my posting on debian-mentors).

Regards,

Alexander


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Bug#530789: ITP: libicc -- ICC profile I/O library

2009-05-27 Thread Roland Mas
Package: wnpp
Owner: Roland Mas 
Severity: wishlist

* Package name: libicc
  Version : 2.10 (beta)
  Upstream Author : Graeme W. Gill 
* URL or Web page : http://www.argyllcms.com/
* License : MIT
  Description : ICC profile I/O library

The icclib is a set of routines which implement the reading and writing
of color profile files that conform to the International Color
Consortium (ICC) Profile Format Specification, Version 3.4.

A previous version is currently bundled as part of the argyll package,
but it's probably going to be easier to maintain as a separate one.

Roland.
-- 
Roland Mas

Death *was* hereditary.  You got it from your ancestors.
  -- in Hogfather (Terry Pratchett)



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Debian GNU/Hurd porter box strauss.debian.net available

2009-05-27 Thread Felipe Sateler
Michael Banck wrote:

> The SSH public key is attached, the key fingerprint is
> 0f:95:27:cf:9a:b2:88:bf:d7:10:24:b4:51:f9:7a:ef.

I think it would be useful to have a new package with the ssh public key 
fingerprints of all accessible debian machines, possibly signed by some DSA 
member (to detect local tampering). It would ease a trust path from the user 
to the machine. Having to look up these messages (if they exist in the first 
place), and creating a trust path from yourself to the poster when one might 
need to connect is suboptimal I think.

-- 
Felipe Sateler



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Debian GNU/Hurd porter box strauss.debian.net available

2009-05-27 Thread Paul Wise
On Thu, May 28, 2009 at 1:43 PM, Felipe Sateler  wrote:

> I think it would be useful to have a new package with the ssh public key
> fingerprints of all accessible debian machines, possibly signed by some DSA
> member (to detect local tampering). It would ease a trust path from the user
> to the machine. Having to look up these messages (if they exist in the first
> place), and creating a trust path from yourself to the poster when one might
> need to connect is suboptimal I think.

Agreed.

Adding the Debian machine SSH keys to the PGP web of trust via
monkeysphere would be nice too.

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Debian GNU/Hurd porter box strauss.debian.net available

2009-05-27 Thread Aurelien Jarno
On Thu, May 28, 2009 at 03:43:09PM +1000, Felipe Sateler wrote:
> Michael Banck wrote:
> 
> > The SSH public key is attached, the key fingerprint is
> > 0f:95:27:cf:9a:b2:88:bf:d7:10:24:b4:51:f9:7a:ef.
> 
> I think it would be useful to have a new package with the ssh public key 
> fingerprints of all accessible debian machines, possibly signed by some DSA 
> member (to detect local tampering). It would ease a trust path from the user 
> to the machine. Having to look up these messages (if they exist in the first 
> place), and creating a trust path from yourself to the poster when one might 
> need to connect is suboptimal I think.
> 

Note that all those keys are available on:

https://db.debian.org/machines.cgi

-- 
Aurelien Jarno  GPG: 1024D/F1BCDB73
aurel...@aurel32.net http://www.aurel32.net


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org



Re: Debian GNU/Hurd porter box strauss.debian.net available

2009-05-27 Thread Peter Palfrader
On Thu, 28 May 2009, Aurelien Jarno wrote:

> > > The SSH public key is attached, the key fingerprint is
> > > 0f:95:27:cf:9a:b2:88:bf:d7:10:24:b4:51:f9:7a:ef.
> > 
> > I think it would be useful to have a new package with the ssh public key 
> > fingerprints of all accessible debian machines, possibly signed by some DSA 
> > member (to detect local tampering). It would ease a trust path from the 
> > user 
> > to the machine. Having to look up these messages (if they exist in the 
> > first 
> > place), and creating a trust path from yourself to the poster when one 
> > might 
> > need to connect is suboptimal I think.
> > 
> 
> Note that all those keys are available on:
> 
> https://db.debian.org/machines.cgi

And on all d.o hosts in /etc/ssh and in LDAP and in DNS.

-- 
   |  .''`.  ** Debian GNU/Linux **
  Peter Palfrader  | : :' :  The  universal
 http://www.palfrader.org/ | `. `'  Operating System
   |   `-http://www.debian.org/


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org