Re: troubles with debian's image

[Joey Hess]

Jaime Labra Soto wrote:
> i have a problem with the images of debain, i download like 4 debian for 
> ia64, in thiferents ways
> ftp, torrent, the official release by http etc. But when i burned the 
> image into a cd-rw the miage dont boot, y try in a cd-r and dont boot only 
> happen in images for ia64 other images boot very well, please ask me what 
> is the problem i want debian for ia64 to install it in my amd 64 please 
> thanks

I don't know why so many people seem confused about this, but ia64 and
amd64 are completly different and incompatable computer architectures.
If you want debian amd64 images, you can download them from the same
page that links to the ia64 images, and they'll even work on your
hardware..

-- 
see shy jo


signature.asc
Description: Digital signature

Architecture lines added to Mirrors.masterlist

[Joey Hess]

I've extended the format of the the Mirrors.masterlist file, which is
used to record available Debian mirrors, to include machine-readable
information about what architectures are included in a mirror. This
information will be used by the Debian installer and other programs to
select an appropriate mirror for a user's architecture.

I'm ccing this to the debian-mirrors list because I suspect that a lot
of our information about which mirrors are mirroring which architectures
is out of date. The information about which architectures is available
is now included in the list of mirrors at
, so please check that the
information for your mirror is accurate, and if not, please let us know.

If you change the architectures included in your mirror in the future,
we'd appreciate a mail mentioning this so we can keep the information
up-to-date.

Also, note that I have added the amd64 Mirrors.list file onto
Mirrors.masterlist, but at least for now the amd64 information is
filtered out of the mirror list page on the official Debian website. If
it's decided that should be included there already, it's very easy to
remove the filter. The amd64 people may want to switch over to using
Mirrors.masterlist directly, or should at least keep us current as they
continue adding mirrors.

-- 
see shy jo


signature.asc
Description: Digital signature

Re: italian mirrors update

[Joey Hess]

Colin Watson wrote:
> It happens automatically on every choose-mirror rebuild, but there are
> no more of those scheduled for sarge (and we can't fit one in, get it
> built, and get all the d-i initrds rebuilt without substantially
> slipping the release timeline).

Also, even doing it for a point release (or any other reason) is now
somewhat complicated by the amd64 items now added to Mirrors.masterlist
(and will be further complicated by the rest of SCC).

Sarge's choose-mirror needs to get at least a minimum part of the
patches in trunk to handle this before it's rebuilt. Sarge's base-config
likewise. Alternatively, mirrors.masterlist could be branched for sarge
and the programs updated to download the sarge version.

-- 
see shy jo


signature.asc
Description: Digital signature

Re: Preview: Sarge release announcement

[Joey Hess]

Martin Schulze wrote:
> I've written up the release announcement for sarge:
> http://people.debian.org/~joey/stuff/debian-announce.txt
> 
> I'd love to coordinate with translators, so we can place the translation
> on the website at the same time as the original.  If you are intersted
> in this, please get in touch with me via private mail.

Thanks for doing that.

I noticed that one thing it was missing is any easy link to the
/releases/sarge/ (or stable) page. A pity, since that page is designed
to make it easy for a user to find install images, the manual, and the
release notes for upgrading. Without that link, users are left digging
through the release notes or looking from the top-level of the website
for these things.

I think that in future announcements, a link to there would be more
useful than the link that is in the announcement to the CD vendors page,
since I doubt any CD vendors will have official sarge CDs to sell on
release day.

Sorry I wasn't around to make this comment before you sent the
announcement.

-- 
see shy jo


signature.asc
Description: Digital signature

Re: A list of broken mirrors (fwd)

[Joey Hess]

Mattias Wadenstein wrote:
> So, could someone here act on this? Please remove the broken ones and 
> apply the corrections.

Done. However this is probably my last time doing something like this
in a while. We need some fresh blood to maintain the Mirrors.masterlist,
including being proactive instead of reactive about finding breakage and
communicating with mirror operators. And not just CD mirrors.

If we can't find someone, we need to start de-emphasising having more
mirrors than we can maintain and keep track of, as it's not benefical to
users.

> ftp://mirror.datafast.net.au/iso/linux/debian/
> http://mirror.datafast.net.au/iso/linux/debian/

Also fixed links to archive mirror.

> ftp://ftp.tiscali.be/debian-iso/
> http://ftp.tiscali.be/debian-iso/

/pub/debian-cd has what looks like current stuff.

> ftp://debian.das.ufsc.br/pub/debian-cd/

Removed from CD list.

> ftp://ftp.matrix.net.br/pub/debian-cd/
> http://ftp.matrix.net.br/pub/debian-cd/

Cannot connect to check, but removed from CD list.

> http://linorg.usp.br/iso/debian/ (redirects to ftp://...)

No problems accessing this via http with lftp or mozilla, don't see a
redirect, left it.

> ftp://mirror.cpsc.ucalgary.ca/debian-iso/
> http://mirror.cpsc.ucalgary.ca/debian-iso/

Removed from CD list (rsync too).

> ftp://iso.linux.hr/debian/
> http://iso.linux.hr/debian/

Seems to have a few CD images, is the directory structure not appropriate?

> ftp://ftp.bittivuoto.net/iso/debian/

Mirrors.masterlist comment notes it only accepts comments from .fi. Left
it in, although unless there's some good reason such as no other finnish
mirrors, I think we should remove it.

> ftp://ftp.nerim.net/debian-cd/

Removed.

> ftp://ftp.vthd-net.com/pub/linux/debian-cd/
> http://ftp.vthd-net.com/pub/linux/debian-cd/

Cannot access it at all, removed CD stuff for now. May need to be
revisited if this is a temporary down.

> ftp://ftp.leo.org/debian-cd/
> http://ftp.leo.org/debian-cd/

Entirely removed as it dropped all its Debian stuff. Someone should
check that the several sites that mirror from it are up-to-date and
update their mirrors-from lines.

> ftp://ftp.hk.debian.org/debian-cd/
> http://ftp.hk.debian.org/debian-cd/

Seems to have a complete set of CDs to me, what's the problem?

> http://ftp.hu.debian.org/ftp/pub/CDROM-Images/debian/

Removed broken http debian archive mirror. ftp mirror ok. Pinged admin.
ftp://ftp.hu.debian.org/pub/CDROM-Images/debian is ok, fixed paths.
Rsync is ok.

> ftp://kebo.vlsm.org/debian-cd/
> http://kebo.vlsm.org/debian-cd/

Has some Debian CDs, but ideosyncratic paths. Removed for now.

> ftp://ftp.students.cs.unibo.it/debian-cd/
> http://ftp.kreonet.re.kr/pub/Linux/debian-cd/

Down due to "temporary lack of space" since October, removed.

> ftp://koyanet.lv/debian2/
> http://koyanet.lv/ftp/debian2/

Cannot connect at all, removed CD stuff for now. May need to be
revisited if this is a temporary down.

> ftp://sajino.terra.com.pe/pub/linux/debian/

Cannot connect, removed entire site and pinged admin.

> ftp://ftp.si.debian.org/debian-cd/
> http://ftp.si.debian.org/debian-cd/

CD Removed.

> ftp://ftp.is.co.za/linux/distributions/debian-iso/

CD Removed.

> ftp://ftp.es.debian.org/debian-cd/
> http://ftp.es.debian.org/debian-cd/

As noted, seems ok, some arches not fully synced yet.

> http://debian.mirror.solnet.ch/debian-cd/
> ftp://ftp.solnet.ch/mirror/Debian/debian-cd/

All mirrors broken, removed site and pinged admin.

> ftp://ftp.nectec.or.th/pub/linux-distributions/Debian-CD/

CD removed.

> ftp://debian.org.ua/debian-cd/
> http://debian.org.ua/debian-cd/

Comment says only available to .ua users. Left alone, though damnifiknow
how we're supposed to tell if it's still working.

> ftp://debian.tod.net/debian-cd/
> http://debian.tod.net/debian-cd/

Cannot connect at all. Removed CD stuff, may need to revisit later if it
comes back.

> ftp://ftp.cs.stevens-tech.edu/pub/Linux/distributions/debian-cd/

Only 3.0 CDs. Removed CDs.

> ftp://mirror.csit.fsu.edu/debian-cd/
> http://mirror.csit.fsu.edu/debian-cd/

Ftp is down, removed all ftp stuff. 
Removed CDs.

> ftp://mirrors.xmission.com/debian-cd/
> http://mirrors.xmission.com/debian-cd/

Removed CDs.

> Corrections:
> 
> ftp://debian.sh.cvut.cz/CDImages/debian-cd/ -> 
> ftp://debian.sh.cvut.cz/debian-cd/
> ftp://debian.mirrors.tds.net/pub/linux/debian-cd/ -> 
> ftp://debian.mirrors.tds.net/pub/linux/ftp.debian.org/debian-cd/
> http://debian.mirrors.tds.net/pub/linux/debian-cd/ -> 
> http://debian.mirrors.tds.net/pub/linux/ftp.debian.org/debian-cd/
> ftp://ftp.lug.udel.edu/pub/iso-images/Debian/ -> 
> ftp://ftp.lug.udel.edu/pub/distributions/debian-cd/
> http://ftp.lug.udel.edu/pub/iso-images/Debian/ -> 
> http://ftp.lug.udel.edu/pub/distributions/debian-cd/

All applied.

-- 
see shy jo


signature.asc
Description: Digital signature

Re: Broken Link

[Joey Hess]

Kyle Pointer wrote:
> The location http://people.debian.org/~madduck/d-i/screenshots/, linked
> from http://www.debian.org/devel/debian-installer/ ( link text is
> 'screenshots' ) will return an 403 ( insufficient permissions ) error. 
> 
> Broken Link. :0(

Removed.

-- 
see shy jo


signature.asc
Description: Digital signature

Re: A list of broken mirrors (fwd)

[Joey Hess]

MJ Ray wrote:
> Good going on the fixes. Just one query:
> 
> [...]
> > > ftp://ftp.bittivuoto.net/iso/debian/
> > Mirrors.masterlist comment notes it only accepts comments from .fi. Left
> > it in, although unless there's some good reason such as no other finnish
> > mirrors, I think we should remove it.
> 
> Why? Won't most of its users be from .fi?

If we want to proactively check mirrors to make sure they work, it seems
a bit hard if we don't have a way to access them all.

I dunno, maybe it's worth making some exceptions to this in some cases,
but for Finland?

-- 
see shy jo, who will check it in 2 weeks :-P


signature.asc
Description: Digital signature

Re: proposed changes to Debian web pages

[Joey Hess]

Sue Campbell wrote:
> I'd appreciate comments and suggestions on these before implementing
> them in the main distribution.

On about.html, it says Ian Jackson, but it was Ian Murdock who started 
Debian. I doubt the date was 1996, (I'm thinking earlier).

-- 
see shy jo


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .

page copyright notices

[Joey Hess]

The copyright notices on pages on the website still reads 1997-1998, it
should be changed to 1997-1999.

-- 
see shy jo

how often is the web site updated, etc.

[Joey Hess]

I've about got Debian Weekly News set up in the web site's CVS. Congrats on
a fine web development system. :-)

What's the typical lag time before a new page makes it from cvs out to the
mirrors? And how often does master itself rebuild the web site? I'm
interested to know since I'm adding time-sensative information to the web
pages..

-- 
see shy jo

Re: list archiver

[Joey Hess]

> I think I can just regenerate new indices and Wichert's messages, but
> I might have to regenerate the whole thing.  That would be a terrific
> hit on the mirrors, so we would then have several options:

If regenerating the whole thing changes all the urls to messages, that would
be a bit of a problem to anything that links to those messages (at least DWN
and LWN have been known to, I'm sure there are others). But don't let that
stop you if you have to do it. :-)

-- 
see shy jo

sponsor page

[Joey Hess]

LinuxCentral has donated a booth for debian a LinuxWorld expo, and I belive
they have a history of some donations in the past - like donating CD's at
Atlanta Linux Showcase.

Anyway I was on the phone with them just now talking about LinuxWorld, and
they asked if there was any place on the debain website we could give them a
bit of acknowledgement for their help. I said I'd see if we could fit them
in the web site somewhere, but no promises. 

I've looked around the site and they are already in as a CD Vendor. But do
we have any other page we use to thank people about helping debian? And if
not shouldn't we? It seems reasonable to give Novare, Va Research, etc, some
credit for their support. We do have the little "visit the site sponsor"
link, but that's it.

-- 
see shy jo

Re: sponsor page

[Joey Hess]

Joey Hess wrote:
> I've looked around the site and they are already in as a CD Vendor. But do
> we have any other page we use to thank people about helping debian? And if
> not shouldn't we? It seems reasonable to give Novare, Va Research, etc, some
> credit for their support. We do have the little "visit the site sponsor"
> link, but that's it.

Ah, I just found http://www.debian.org/donations. Looks like the right
place. Could we add something at the bottom like:


The following is a list of the organizations that have made other donations
to Debian:

* LinuxCentral has supported Debian at events including Atlanta
  Linux Showcase and LinuxWorld Expo.

-- 
see shy jo

DWN problem with current/issue symlink

[Joey Hess]

I have a weird problem with the symlink News/weekly/current/issue that is
supposed to point to the current issue of Debian Weekly News. As of issue
#10 of DWN, it stopped getting updated, and it's been pointing to the wrong
issue since tuesday.

When I run the code locally to build the web site, it makes the correct
symlink:

install -d ../../../../debian.org/News/weekly/current
rm -f ../../../../debian.org/News/weekly/current/issue
ln -sf ../1999/10 ../../../../debian.org/News/weekly/current/issue

So I don't know what's going on. Is there any way I can get a log of the
build process as it's running on va so I can see what's going wrong?

I've had probably 20 people mention they saw this was wrong, so it's
becoming imporant that I get it fixed if only to save my sanity.

-- 
see shy jo

Re: license for the webpages

[Joey Hess]

James A. Treacy wrote:
> There is nothing stopping us from granting Corel the right to use material 
> from our
> web site with a different license from the current one. I would be willing to
> grant them permission to use information from our pages in any way they wish
> as long as we are in good relations with them. I'm not sure how to formalize
> this with them if our relationship with them is not based on a contract.
> Any ideas?

I think we should just change the license to something DFSG free.

-- 
see shy jo, continually suprised at how blithly a project, suposedly
dedicated to free software, continues to use non-free licenses
for web pages and logos

Re: Installing the Chinese web pages

[Joey Hess]

Darren O. Benham wrote:
> VA doesn't mirror more than once a day, either.  There is a lot of
> bandwidth potentially eatten by the mirroring (if you consider the size of
> the lists archives and the bug pages, also).  Since mirroring is once a
> day, it doesn't make sense to run the make more than once a day -- right
> before the mirroring.

I'm often bitten by this - since I like to get Debian Weekly News out on the
mirrors on the same day each week, if something goes wrong I have to bug
someone to force a mirror run or wait a day.

I wonder if it'd be practical to do more frequent (3 a day?) updates of
everything except the list archives and bug pages, to VA?

-- 
see shy jo

insite.verisim.com down

[Joey Hess]

It seems the search link on the web page isn't working because the dns for
insite.verisim.com is messed up:

[EMAIL PROTECTED]:~>host insite.verisim.com
insite.verisim.com A record currently not present

verisim.com.SOA verisim.com. hostmaster.websterwood.com. (
1999040620  ;serial (version)
3600;refresh period (1 hour)
1800;retry interval (30 minutes)
604800  ;expire time (1 week)
86400   ;default ttl (1 day)
)
verisim.com.NS  frost.cata.ca.
verisim.com.NS  dante.cata.ca.
verisim.com.NS  pns.storm.ca.
verisim.com.MX  20 dante.cata.ca.
verisim.com.MX  10 frost.cata.ca.
localhost.verisim.com.  A   127.0.0.1
harn.verisim.com.   MX  10 frost.cata.ca.
lists.verisim.com.  MX  10 frost.cata.ca.
insite.verisim.com. CNAME   verisim.com.
verisim.com.SOA verisim.com. hostmaster.websterwood.com. (
1999040620  ;serial (version)
3600;refresh period (1 hour)
1800;retry interval (30 minutes)
604800  ;expire time (1 week)
86400   ;default ttl (1 day)
)

Notice the CNAME points to verisim.com, but there is no A record for
verisim.com at all.

-- 
see shy jo

Re: Virtual packages list

[Joey Hess]

Manoj Srivastava wrote:
> If that is the case, and since it is physically in the
>  policy-package, I offer to maintain the list (assuming the people on
>  the policy list do not think do not object to this blatant grab of
>  power ;-)

Ok.. there was some confusion of debian-www about where the byhand file
virtual-package-names-list.text came from - so it comes from the
debian-policy package. 

Christian Schwarz's name needs to be removed from the file, so people stop
bothering him about it. The current text on getting modifications in is:

   1. Post to debian-devel saying what names you intend to use or what
 other changes you wish to make.
   
   2. Wait a few days for comment.

   3. Mail the maintainer of the virtual package name list (Christian
  Schwarz <[EMAIL PROTECTED]>) notifying him of the consensus reached
  (or your suggestions if noone objected).  Please include a proposed
  brief description of the new virtual name(s) for the list.  The list
  maintainer will then post the new list to debian-devel and upload it
  to the FTP site.

   4. Go and use the new or changed names.
   
Since this was written prior to debian-policy, a new and improved procedure
might be to post to debian-policy about it and if there is a consensus ask
for policy to be changed. 

-- 
see shy jo

list of machines for developers

[Joey Hess]

Since it's a common faq and it's useful to make this list available, we've
compiled a list of machines developers can get accounts on. I've set up a 
demo page that lists them all, here:
http://kitenet.net/~joey/debian.org/devel/machines

Any objections to adding this to CVS? I'm not sure if it's ok to use tables
on our web site, but they work best for this page.

-- 
see shy jo

Re: list of machines for developers

[Joey Hess]

James A. Treacy wrote:
> Just added it for you. After the next mirror update it will be available
> at http://www.debian.org/devel/machines . It has also been linked from the
> developer's page.

Heh, I had the same thing ready, just one "cvs commit" away. :-)

> Will you be maintaining the page?

I have no objection to doing so.

-- 
see shy jo

Re: Development machines (was KDE debs)

[Joey Hess]

James A. Treacy wrote:
> On Tue, May 04, 1999 at 09:12:59PM -0400, Adam Di Carlo wrote:
> > 
> > Uh.  Ok.  Did you guys add it to the web site?  Should I yank it from
> > the developer's reference and just have a link to the web URL instead?
> > 
> Yes it has been added to the web site. This type of information is
> probably better served from there than in the developer's reference
> so I'd vote for leaving it there and putting the URL in the dev ref.

I dunno, Adam seemed to fit it in very well, since the developers reference
already had specific sections on some of the servers. FWIW I like his format
and text a lot better than mine.

-- 
see shy jo

new look for website?

[Joey Hess]

Well the logo results are in and Swirl has won. So... 

Is the debian website going to get a new look to go with the new logo? The
old look is based on the colors of the old logo.

-- 
see shy jo

website hasn't mirrored

[Joey Hess]

The www.debian.org web site didn't mirror today, I can tell bacuase it
doesn't have the letest Debian Weekly News on it. It's built ok on master.
Could someone give the mirror process a kick in the pants?

Also, since I seem to run into this problem nearly every week when I try to
get Debian Weekly News up on the web site under a deadline, I'd really like
to have the ability to force a mirror myself. Who should I talk to?

-- 
see shy jo

Re: website hasn't mirrored

[Joey Hess]

Jason Gunthorpe wrote:
> The best thing for this is to probably just run a micro-mirror of that one
> section of the web site bi-daily at some selected times..

That would be very nice if it could be done.

I'd think such a thing might be nice for the security pages as well, so
fixes can show up sooner than 24 hours after they are committed.

-- 
see shy jo

Re: SPI template

[Joey Hess]

peter karlsson wrote:
> Anyway, I've been a bit annoyed on the way the SPI main page links back to
> the home page, with a href to "." on the main page and ".." on subpages. So,
> I added a slash in the template, but I didn't check it in, because I thought
> I'd better ask before changing such things.

Relative links on web pages are a very good thing. That slash would break
things if the spi pages are one day moved to not being at the top of thier
very own domain or if they're mirrored elsewhere. "index" would be much
more appropriate.

-- 
see shy jo

Re: SPI template

[Joey Hess]

peter karlsson wrote:
> No, they wouldn't. Now the links are to "." or "..", when they in reality
> should be to the directory "./" and "../". I added the trailing slash.

Oh, I thought you changed it to a slash alone. Yes, you're right.

-- 
see shy jo

Re: www.debian.org update?

[Joey Hess]

peter karlsson wrote:
> Exactly at what time is www.debian.org updated from the cvs repository?
> Sometimes it seems as if it takes >48 hours for pages to get updated.

The mirroring process has not run in over 34 hours. Maybe longer. It's
*supposed* to run every 24 hours. It's just messed up ATM. (*g*)

> there a mismatch between when the CVS repository is updated and when the
> HTML files are actually rebuilt?

The html files are built at another time and can be previewed at
http://master.debian.org/www-master/debian.org/ before they are mirrored
over to www.debian.org. That part is happening fine.

-- 
see shy jo

Re: website hasn't mirrored

[Joey Hess]

James A. Treacy wrote:
> Yes it did. Here are the dates on the log files from va (I just started one
> so that's the one from June 10. Also, times are PDT [-0700]):

Hm, I committed around 11:30pm on the 8th. It didn't appear on
www.debian.org until sometime today. I would have expected it to appear
around 3pm yesterday (all times PST).

I think maybe this time it just took forever to mirror the site - I heard on
IRC that the master <-> va link was shakey latly.

> Darren, does the scripts /debian2/web/webwml/update_web_wml and
> /debian2/web/update.mirrors work for you? If so, Joey can use them
> to update cvs and mirror if he misses the daily mirror run.

That'd be good, I do often miss the run. :-)

-- 
see shy jo

Re: website hasn't mirrored

[Joey Hess]

James A. Treacy wrote:
> Great. I implied it, but didn't explicitly state that joeyh has been added
> to group debwww so he can execute those.

Good, thanks.

-- 
see shy jo

Re: New Look (logo)

[Joey Hess]

Darren O. Benham wrote:
> If the look of sample[1|4].html is the best, we'll implement that and
> changing between the logos is simply a matter of changing the graphics
> file.

I've got no problem with work going ahead on this, but I've been talking to
the lead graphics artist for linux.com, who is a debian fan, and I hope to
convince him to come up with some draft that incorporate the logo to a
greater degree. That might take a while though, so go ahead..

-- 
see shy jo

Re: DWN index

[Joey Hess]

Darren O. Benham wrote:
> That could be how the scripts are set up.  I'll look at it when I get to
> work.

The dates on the index come from the PAGENAME variable that is set at the
top of each page. If you translate a page and translate that too, it should
work.


-- 
see shy jo

why doesn't this work?

[Joey Hess]

If you go to
http://www.debian.org/News/weekly/current/issue/ , you'll see a directory
listing with an index.html in it. Why isn't that index.html shown by default?
http://www.debian.org/News/weekly/current/issue/index works.

-- 
see shy jo

DWN change

[Joey Hess]

I have changed DWN's index page so it only displays issues up to the current
one. So I can now commit new issues before they are done and they won't show
up on the index page until after I change the current issue pointer.

This is mainly a heads up for translators, you can now get at the .wml files
for DWN directly from CVS before I actually publish. You'll still be able to
get at them via the web from my home machine as you have been doing, too.

-- 
see shy jo, wondering why the hocking big image is at the top of www.debian.org

Re: Debian banner vs JunkBuster

[Joey Hess]

Geocrawler.com wrote:
> Just to say that in the Debian page, the image for the DEBIAN logo is named 
> as banner.jpg, which also many advertising web banners use. Therefore, my 
> Junkbuster takes it out, as other software probably do, when they encounter a 
> Pics/banner*.jpg. 
> Maybe it should be changed to Debian.jpg or something different than 
> banner.jpg?

FWIW, I ran into this too. :-)

-- 
see shy jo

note to translators about DWN

[Joey Hess]

Just a quick note that http://debian.org/News/weekly/1999/29/ has
substantially changed, translators please update the page.


-- 
see shy jo

debian users groups page

[Joey Hess]

I'd like to add a page to the website listing debian user groups. I know of
at least 2, http://www.cjfearnley.com/pads/ and http://kitenet.net/~bad/,
I'll bet there are more.

If people are ok with this, I wonder where the page should be located on the
web site?

-- 
see shy jo

attention translators: weeklynews/footer.wml now uses slices

[Joey Hess]

I have modified the footer templates/debian/weeklynews/footer.wml used by
Debian Weekly News to use slices. It has english, spanish, and swedish in
there, any other translations of it should be put in, and the old
language-specific versions of the file be removed.

-- 
see shy jo

Re: Idea to improve PR

[Joey Hess]

[EMAIL PROTECTED] wrote:
> Packages with debian developers as thier upstream maintainers, that may be
> in use by people outside debian. I have marked packages I'm sure are in use
> elsewhere with a star.

Add to this list: sxid (and remove it from list #3).

-- 
see shy jo

Re: New .ca server

[Joey Hess]

Jason Gunthorpe wrote:
> Looks like www.ca.debian.org is toasted - does anyone know of any other
> .ca sites that are mirroring the web site?

Well there's always va. But I suppose that's not very helpful.

-- 
see shy jo

summary: Idea to improve PR

[Joey Hess]

> > I wonder if it would make sense to add a page on the webserver
> > listing people and packages where Debian maintainers have become
> > upstream maintainers or were upstream by nature.  This would at
> > least show that we're not only working on our distribution.
> > 
> > I don't know how many packages are affected but I'd guess they're
> > about two dozen at least.

Here's the full list of all I've been told about so far. Starred items are
known to be used outside Debian.

* alien
* cfingerd
* sysklogd
* sysvinit
* userv
* strace
* watchdog
* stat
* ecpg
* gnumach
* grub
* hurd
* ld.so
* modconf
* wvdial
* svgatextmode
* seyon
cdgrab
id3
paul
libgtkimreg
pcd2html
xteddy
syslog-summary
fdflush
bock
curves
m68k-vme-tftplilo
uutraf
members
vmelilo
libpam-mkhomedir
libpam-motd
locale-ja
locale-ko
pppconfig
hostname
mkrboot
* electric-fence
liwc
nasm-mode
pointerize
diploma
* sysadmin-guide
verse
* sex
vivid
ncurses-hexedit
* savant /* debian developer is one of a number of coauthors */
* tyvis /* debian developer is one of a number of coauthors */
* an
filters
empire-hub
empire-lafe
* gnomehack
xchain
ean13
ppmtofb
liblockfile
lockdev
publib
svgalib-dummy
mailcheck
mime-construct
signify
smtp-refuser
spamdb
spamfilter
lbdb
libplot-perl
r-pdl
seesat5
spline
wzip
rpncalc
diskless
lockfile-progs
kernellab
dnscvsutil
ftp-upload
ftpwatch
ipip
netselect
nsmon
* perlmoo
rlinetd
statnews
* pdmenu
2utf
deroff
langdrill
lincredits
* witalian
authbind
blinkd
setcd
falselogin
fakeroot
libtricks
* ltrace
nvram
tagtypes
* ticker
bookmarks
gnats2w
urlredir
skattek
horde-core
big-cursor
buici-clock
fvwmconf
oneliner
* xfstt
xtranslate
xtrlock
* wmbattery
sxid
pyrite
palm-doctoolkit
cgilib
dbview
uucpsend
apcd

-- 
see shy jo

Re: summary: Idea to improve PR

[Joey Hess]

Darren O. Benham wrote:
> On Tue, Sep 07, 1999 at 08:23:00PM -0700, Joey Hess wrote:
> > Here's the full list of all I've been told about so far. Starred items are
> > known to be used outside Debian.
> > 
> What about:  * Debbugs

I omitted stuff I think is specific to debian - you can find that list in an
earlier post I made.

But yeah, debbugs goes on the main list, you're right. KDE, GNOME, etc use
it..

-- 
see shy jo

Re: new developer's corner

[Joey Hess]

James A. Treacy wrote:
> Just wanted to say that I like it. Good job.

it links to http://www.debian.org/devel/extract that doesn't exist.

-- 
see shy jo

Re: new developer's corner

[Joey Hess]

Jason Gunthorpe wrote:
> 2) Xearth marker file 
> Do people want to resume the project to get this mostly complete? I have
> the necessary fields in the LDAP directory, web and console forms to
> manipulate them, etc

Yes please.

> 4) Release Info 
> Is potato really called 2.2?

We don't give it a number until we release it. Doing otherwise has led to
bad things.


-- 
see shy jo

Re: new developer's corner

[Joey Hess]

Jason Gunthorpe wrote:
> Well, I have all the stuff, we just need to get a script that
> re-generates the xearth file from the DB and another script to do a one
> time import of the existing xearth file.

Given how long it's been since thatxearth file was made, and how little data
is in it anyway, I wonder if the second script is needed at all? (I for one
have moved 3 times since I provided my coordinates.)

-- 
see shy jo

FWD: get.linux.com: Debian

[Joey Hess]

The page in particular is http://linux.com/getlinux/pages/debian/ -- any
volenteers?

- Forwarded message from Trae McCombs <[EMAIL PROTECTED]> -

Date: Mon, 20 Sep 1999 10:09:51 -0700
From: Trae McCombs <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: get.linux.com: Debian

Can you please find someone to do the Debian page of get.linux.com
for us?  The guy that started to do it did a crappy job.  :/

Anyways, let me know if you know something.
Thanks,
Trae


-- 
__ Trae McCombs _
Linux.com | Site Manager | [EMAIL PROTECTED] | 1 888 Linux 4 U ext 8700
-
  http://valinux.com/ -- VA Linux Systems

- End forwarded message -
-- 
see shy jo

web site license

[Joey Hess]

  Verbatim copying and distribution is permitted in any medium, provided this
  notice is preserved. 

  You may translate these documents and their license into another language
  providing: 

You do not deliberately change their meaning beyond changes meant to
achieve a colloquial rendering in another language

Translations of the license must be clearly marked as translations, and
the license in its original language shall continue to apply to all
translations

In the case of hypertext pages, you must maintain a copy of the original
page on the same site, and must provide a link from the translated page
to its original.

As far as I can tell, this fails point 3 of the DFSG. If so, the web site is
in violation of the spirit if not the letter[1] of our Social Contract:

When we write new components of the Debian system, we will license them
as free software.

IIRC, I have brought this up before, and I was dismissed or ignored. I would
like to discuss this again, as it concerns me greatly, especially since text
I have written, which I want to be DFSG free (Debian Weekly News), appears
on the web site under this license.

-- 
see shy jo

[1] Not the letter since it is not part of debian proper. Nor can it be,
with this license.

Re: web site license

[Joey Hess]

[EMAIL PROTECTED] wrote:
> The problem is that we do not want people putting things in our mouths so that
> it looks as if we are saying them. Thus, add the following:
> 
> You may change this document, as long as the nature of the change
> and the author of the change is indicated in-line with the change, in a form
> that is directly visible to the reader and not obscured.
> You must append to the document the reason for the change and contact
> information for the author of the change, and provide a link to the original
> document. You may not use changes to deliberately misrepresent someone else's
> opinion.

I'd rather we took advantage of DFSG point #4 and added something like:

  You may change this document, but all derived works must state that they are
  not part of the Debian web site.

I think this has basically the same effect, while giving people more freedom
to derive things from the web site.

-- 
see shy jo

red alert: web site not building

[Joey Hess]

So I want to get DWN out tonight (finished it 6 hours late) and:

[EMAIL PROTECTED]:~>/debian2/web/webwml/update_web_wml
cvs update: could not open /debian/home/treacy/.cvspass: Permission denied
cvs [update aborted]: use "cvs login" to log in first
make -C chinese install
make[1]: Entering directory /debian2/web/webwml/chinese'
install -d ./../../debian.org/
install: ./../../debian.org/: Operation not permitted
install: ./../../debian.org/: Operation not permitted
make[1]: [install] Error 1 (ignored)
wml -q -o UNDEFuZH:contact.zh.html --prolog='/usr/bin/perl -pe
"s/^(([\\x00-\\x7F]|([\\x80-\\xFF].))+[\\x80-\\xFF])\$/\$1/;"'
contact.wml
ePerl:Error: Perl parsing error (interpreter rc=2)

 Contents of STDERR channel: -
syntax error at /tmp/wml.18661.tmp1 line 584, near ")"
BEGIN not safe after errors--compilation aborted at /tmp/wml.18661.tmp1 line
658.
--
** WML:Break: Error in Pass 3 (rc=74).
make[1]: *** [contact.zh.html] Error 1
make[1]: Leaving directory /debian2/web/webwml/chinese'

-- 
see shy jo

Re: Suggestion: Cleaning up the front page

[Joey Hess]

peter karlsson wrote:
> * Moving the Debian Weekly News stuff up to where the other news items are
>   listed.

Hm, my name is still on the main page, isn't it?

I really think that's showing undue favoratism towards a developer, to make
this Joey Hess person be the only developer who rates mention on the main
debian web page, and I really want to remove it. I also feel it's hyping DWN
just a little too much. I suggest the following change to the page:

  Joey Hess' Debian Weekly News is a supreme summary of what's happened in
  the world of Debian.

  Debian Weekly News is an in-depth summary of what's happening in the world of
  Debian.

-- 
see shy jo

Re: slink & 1/2

[Joey Hess]

Adam Di Carlo wrote:
> Joey Hess <[EMAIL PROTECTED]> writes:
> > There is an apt repository here:
> > deb http://va.debian.org/~joeyh/ stable-update/
> > 
> > The updates are security fixes (but little or nothing that's not in the
> > current stable 2.1r3; this predates it by a few days), a y2k fix, and
> > numerous fixes to make all packages work with the 2.2.12 kernel, which is
> > included.
> 
> Should http://www.debian.org/releases/slink/ point at this?

I doubt it, it's not official.

-- 
see shy jo

attention translatiors -- DWN change

[Joey Hess]

The main index page for news/Weekly has changed. I've added very short
descriptions of the contents of each issue to the page.

That text actually comes from a SUMMARY="..." field at the top of each issue
of DWN. I've added such summaries to all the English pages. Translators will
need to translate those. 

You may also need to copy the changes I made to
english/template/debian/weeklynews/index.html, if there are
language-specific versions of that template.

-- 
see shy jo

mistaken polish translation

[Joey Hess]

Just wanted to bring this to the attention of someone doing polish
translation of the web site, since I deleted something they did:

RCS file: /cvs/webwml/webwml/english/template/debian/weeklynews/footer.wml,v

revision 1.21
date: 1999/12/01 04:04:31;  author: joeyh;  state: Exp;  lines: +0 -2
I don't know who added "Cotygodniowe wiadomoci Debiana tworzy" in an EN
slice to this file, but I have backed it out posthaste.

-- 
see shy jo

Re: Care!

[Joey Hess]

Darren O. Benham wrote:
> Someone(s) are not taking due care when committing...
> 
> These files all have unresolved conflicts IN THE ARCHIVE.  Please verify
> that
> 
>   1) The changes you make build and look right
>   2) You execute cvs update before cvs commit

Perhaps we need a commitinfo filter that notices conflicts in what's being
checked in and rejects the commits.

-- 
see shy jo

noticed while building the web site

[Joey Hess]

wml -q -D CUR_YEAR=2000 -o UNDEFuHR:vendors.hr.html   vendors.wml
Out of memory!
** WML:Break: Error in Pass 9 (rc=1).

Hm, that can't be good.

-- 
see shy jo

Re: Sorting on country names [was Re: Debian WWW CVS: treacy]

[Joey Hess]

James A. Treacy wrote:
> Since slices are handled in the last pass of wml, we can't use them in a
> sort function. We'd have to put the countries in a perl hash. This
> actually wouldn't be difficult since we are (probably) going to convert
> to using the iso3166 abbrevs for countries and this could be done at
> the same time.

Oh yeah, I have the fully iso3166 converted file here; I have for some time.
If that's helpful; it was only half an hours work to create it.

-- 
see shy jo

Re: OOM Web Stuff

[Joey Hess]

Jason Gunthorpe wrote:
> Masters recent hard crashes have been caused by the Web WML Program
> forcing the machine to go OOM and die horribly. I have tracked this down
> to the exact wml causing this:

> master{treacy}/debian2/web/webwml/romanian/News/weekly#make 
> cd . && wml -q -D CUR_YEAR=2000 -o UNDEFuRO:index.ro.html   index.wml \
>     -DWML_SRC_REALNAME="Joey Hess" -DWML_SRC_USERNAME=joeyh
> ePerl:Error: Perl runtime error (interpreter rc=1)
> 
>  Contents of STDERR channel: -
> Out of memory!
> Out of memory!
> --
> Out of memory!
> ** WML:Break: Error in Pass 3 (rc=1).
> make: *** [index.ro.html] Error 1

Ah, it looks like ytesterday's fix wasn't sufficient. I think the fix I have
added now should be. It'd odd it ran ok yesterday after I applied the fix.

-- 
see shy jo

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

Arrrgh! 

I brought this up on debian-www some time back, and I thought we agreed to
change it to something free.

I am rather pissed off that my work on the web pages (DWN) continues to go
out under this license. If something isn't done soon, I may move future
issues, and keep the copyright, rahter than assigning to SPI as I have done
so far. Sigh.

Tomasz Wegrzanowski wrote:
> Why Debian's web pages are under such a licence ?
> It's not DFSG-free.
> 
>  start 
> License
> 
> Copyright © 1997-1998
> Software in the Public Interest (SPI)
> P.O. Box 1326
> Boston, MA 02117.
> 
> Verbatim copying and distribution is permitted in any medium, provided
> this notice is preserved.
> You may translate these documents and their license into another language
> providing:
> 
>  You do not deliberately change their meaning beyond changes meant
>  to achieve a colloquial rendering in another language
>  Translations of the license must be clearly marked as translations,
>  and the license in its original language shall continue to apply to
>  all translations
>  In the case of hypertext pages, you must maintain a copy of the
>  original page on the same site, and must provide a link from the
>  translated page to its original.
> 
> "Debian", The Debian Penguin Logo, "Open Hardware",
> and the Open Hardware Logo are trademarks of Software in the Public
> Interest, Inc.
> * end *

-- 
see shy jo, in New York

web page has duttch leakage

[Joey Hess]

The front page of the website has leaked text from the dutch translations in
two places -- the link to DWN and "select a server near you". I have tried
with netscape and w3m, this doesn't seem to be a broswer issue.

-- 
see shy jo, in New York

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

James A. Treacy wrote:
> I don't care about this issue (got too many things going on at once). Come to
> a consensus about what to do and someone do it.

Well I hope _someone_ gives a damn about little things like our social
contract!

-- 
see shy jo

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

James A. Treacy wrote:
> People need to remember that the web content is the responsibility of
> everyone. Most of the people on this list (including you, Joey) have
> CVS access.  If you see a small problem, fix it. If you see a bigger
> problem, discuss it on debian-www and then fix it.

I have CVS access, but I don't have the right to go change the copyright
behind people's back. I'm not the copyright holder of the web site.

-- 
see shy jo

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

Chris Lawrence wrote:
> The solution seems rather obvious:
> 
> Don't assign the copyright and use your own license.
> 
> I can't see a problem with putting pages on the web site that have a
> less restrictive license than the SPI copyright.  As a matter of fact,
> there can't be a problem, because the web site hosts documents under
> the GPL and other licenses.

The DWN stuff was just one case; I'm very concerned in general about the web
site violating our social contract.

-- 
see shy jo

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

Joey Hess wrote:
> > AFAIK the reason content licenses are like this is primarily to prevent
> > people from changing the content without changing the attribution (ie,
> > would you like it if someone added a nasty paragraph to DWN and got it
> > posted to /. with your name on it!?)
> 
> In case you aren't aware, the DFSG allows clauses that prevent this by
> requiring the authors name be removed and/or that the name of the document
> be changed.

Oh, I meant to add that in situations like that, lawsuits can be satisfying
(I guess), but what you really have to do is get the record corrrected
quickly, and legal mumbo-jumo in a license won't help much.

-- 
see shy jo, in New York

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

Jason Gunthorpe wrote:
> I also don't entirely see how content falls under the social contract..
> That 'S' in DFSG stands for software after all!

Well, if you don't think the web site includes softtware, think again.

However, in the more general sense, some of us belive that free
documentation is just as important as free software. It's not all of debian,
but there's certianly a sizable contingent.

> AFAIK the reason content licenses are like this is primarily to prevent
> people from changing the content without changing the attribution (ie,
> would you like it if someone added a nasty paragraph to DWN and got it
> posted to /. with your name on it!?)

In case you aren't aware, the DFSG allows clauses that prevent this by
requiring the authors name be removed and/or that the name of the document
be changed.

-- 
see shy jo, in New York

Re: Why Debian's webpages aren't DFGS-free ?

[Joey Hess]

Craig Small wrote:
> OK, if it's all right by everyone I'll get something going so that the
> web pages are DFSG compliant.  This doesn't mean I make the decision all
> by myself or do all the work, but I can act as a central point and make
> sure this does happen.

Ok, great. Thanks!

> I guess the main questions are:
> 1) What should the license be?

You might want to check the archive, I did think we had discussed this
before and came to some sort of agreement. Unfortunatly, I'm not in a
position to check this week.

> 2) Who needs to "bless" it?

Legally, just SPI, since most pages on the web site assign copyright to them
via the foooter #include.

-- 
see shy jo, in New York

Re: Mirror List?

[Joey Hess]

Jason Gunthorpe wrote:
> Would anyone be willing to do some major maintinance on our mirror list?
> Some of the things needed are,
>   * Change all country names to use ISO codes

I did this a while back, but time issues prevented me from committing it. I
will.

> Email me if you want to do this and I'll send you the list.

Isn't it just available from debian www CVS?

-- 
see shy jo

news/weekly chinese web site build hangs; disabled

[Joey Hess]

install -d ../../../../debian.org/News/weekly
cd . && WMLOPTS="-DWML_SRC_REALNAME=\"Joey Hess\" -DWML_SRC_USERNAME=joeyh"
wml  -o [EMAIL PROTECTED]:index.zh-cn.html.tmp -o
[EMAIL PROTECTED]:index.zh-tw.html.tmp --prolog='/usr/bin/perl -pe
"s/^(([\\x00-\\x7F]|([\\x80-\\xFF].))+[\\x80-\\xFF])$/\$1/;"' 

This command sat there doing nothing for a good half an hour. Strace of
similar commands shows wml locks up in a read().

Since I have to get Debian Weekly News out **NOW**, I am hacking the
chinese translation under News/weekly to not build at all.

-- 
see shy jo

Re: news/weekly chinese web site build hangs; disabled

[Joey Hess]

James A. Treacy wrote:
> The .wml file name is missing the filename. News/weekly does things
> differently from the rest of the site. I'm pressed for time so can't
> look into this now.

Ah, that's obvious. I'll see if I can fix it from here.

-- 
see shy jo

FWD: packages

[Joey Hess]

- Forwarded message from Mark Sutton <[EMAIL PROTECTED]> -

Date: Thu, 9 Mar 2000 09:56:57 -0500 (EST)
From: Mark Sutton <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: packages


Dear Joey Hess,

I like the Debian News feature and read it regularly. Thanks
for the work you do. 

I have one comment that I think would help the web site be better
but I do not know the work involved. It may also be that the information
is already there and I don't know how to access it. I like the list
of new packages that is included each newsletter but find the brief
description fustrating. My natural reaction is to click on the link to
the package. When I do that I go to the package page and it gives me
a list of dependencies and where to download the package. Is it possible
to add a link to the documentation for the code or to a more complete
description? I dislike having to download the package just to see if I am
interested in using it.

To be more explicit in the current newsletter is the package description:

unison: A file-synchronization tool for Unix and Windows 

I am at a loss on how to find more information about this package without
downloading the package and installing it.

Thanks
Mark Sutton

- End forwarded message -

-- 
see shy jo

Bug#60268: www.debian.org: search default broken

[Joey Hess]

Package: www.debian.org
Version: 2313
Severity: normal

http://www.debian.org/Lists-Archives/ says that "Selecting nothing will
search the most recent quarter.", but that's not true. Search for "Debian"
on debian-devel, and do not select a date. 0 matches. Select the last date
in the select box. Many matches.

-- System Information
Debian Release: 2.2
Kernel Version: Linux kite 2.2.14 #1 Mon Jan 10 21:43:42 PST 2000 i686 unknown

Bug#61151: www.debian.org: social contract page incorrect about OSD

[Joey Hess]

Package: www.debian.org
Version: 2327
Severity: normal
Page: http://www.debian.org/social_contract

"Debian, the producers of the Debian GNU/Linux system, have created the
Debian Social Contract. The contract, initially designed as as a set of
commitments that we agree to abide
by, has been adopted by the free software community as the basis of the
Open Source Definition."

That's a bit misleading, since the OSD does not include the entirety of the 
social contract, but just the DFSG, which is either just a part of the
social contract, or a standalone document, depending on who you ask.

The bottom of the page gets it right, so I don't really know why the
topmost paragraph is there at all.

-- System Information
Debian Release: 2.2
Kernel Version: Linux kite 2.2.14 #1 Mon Jan 10 21:43:42 PST 2000 i686 unknown

Bug#61151: www.debian.org: social contract page incorrect about OSD

[Joey Hess]

James A. Treacy wrote:
> Is the following better?

looks fine

> 
> --- social_contract.wml.origTue Mar 28 10:32:10 2000
> +++ social_contract.wml Tue Mar 28 10:26:12 2000
> @@ -16,7 +16,8 @@
>-->
>  
>  Debian, the producers of the Debian GNU/Linux system, have created the
> -Debian Social Contract. The contract, initially designed
> +Debian Social Contract. The Debian 
> Free Software
> +Guidelines (DFSG) part of the contract, initially designed
>  as as a set of commitments that we agree to abide by, has been adopted by
>  the free software community as the basis of the
>  http://www.opensource.org/osd.html";>Open Source Definition.
> @@ -71,7 +72,7 @@
>   lists) for non-free software packages.
>  
>  
> -The Debian Free Software Guidelines
> +The Debian Free Software Guidelines (DFSG)
>  
> Free Redistribution
>   The license of a Debian component may not restrict any

-- 
see shy jo

Re: Problem in the CVSweb script

[Joey Hess]

Jason Gunthorpe wrote:
> 
> On Tue, 28 Mar 2000, Javier Fdz-Sanguino Pen~a wrote:
> 
> > - (most complicated but best) make cvsweb.conf use a pserver 
> > access (as anonymous no r/w access is needed IIRC).
> 
> Is this even possible?

No, it's not. cvsweb accesses the repository directly. 

The proper solution is to make a separate directory for cvs lockfiles, and
give www-data write access to that, plus either give www-data write access to
CVSROOT/history or delete the file.

-- 
see shy jo

Bug#61735: www.debian.org: mailing list search has y2k bug

[Joey Hess]

Package: www.debian.org
Version: 2404
Severity: normal

According to http://www.debian.org/Lists-Archives/: 

  Date filter
  Selecting nothing will search the most recent quarter.

But try searching for a recent thread, like "Signing Packages.gz" in
debian-devel. First, select no date -- no matches are found. Then select
the most recent quarter from the list -- matches are found.

I suspect it is figuring out the "most recent quarter" by ordering them
similarly to how they are ordered in the select box on that page, which puts
"Oct to Dec 99" at the top, and all the dates in 00 at the bottom.

-- System Information
Debian Release: 2.2
Kernel Version: Linux kite 2.2.14 #1 Mon Jan 10 21:43:42 PST 2000 i686 unknown

forcing web site mirror

[Joey Hess]

I was able to run /debian2/web/update.mirrors on master to force the web
site to be mirrored. However, the user that was suid to has vanished,
and the user's home directory is gone as well, removing the program that
script used to call.

So now there doesn't seem to be a way to force a web site mirror.

-- 
see shy jo

Re: forcing web site mirror

[Joey Hess]

Darren O. Benham wrote:
> Huh?  The user was jt!

No..

[EMAIL PROTECTED]:~>ls -l /debian2/web/update.mirrors
-rwsr-xr--   1 1167 debwww234 Nov 25  1998 
/debian2/web/update.mirrors*
[EMAIL PROTECTED]:~>grep 1167 /etc/passwd*
/etc/passwd.safe:archvsync:x:1167:1167:Archive Sync
User,,,:/home/archvsync:/bin/bash
[EMAIL PROTECTED]:~>ls -l /home/archvsync
ls: /home/archvsync: No such file or directory
[EMAIL PROTECTED]:~>locate archivsync 
[EMAIL PROTECTED]:~>locate archvsync
/debian/home/archvsync
...
[EMAIL PROTECTED]:~>f archvsync 
Login: archvsyncName: Archive Replication
Directory: /debian/home/archvsync   Shell: /bin/bash
Never logged in.
No mail.
No Plan.

So the user has been removed from /etc/passwd for some reason (but is still
visible to finger, which makes me think NIS or something related), and the
home directory moved. I think.

-- 
see shy jo

no web update today?

[Joey Hess]

I committed at 2000/05/03 02:43:21 (GMT), and my changes did not show up
on the website today. I guess the build didn't happen?

-- 
see shy jo

to reiterate, why are there no security updates on the front page? (Or, 17 security holes the security team hasn't told you about)

[Joey Hess]

Ok, since nobody from the security team replied to my earlier question,
all I can do is ask it again:

Why is the last security update listed on the www.debian.org web page,
and the last security announcement posted to debian-security-announce,
from way back in March? 

I know there have been more recent security updates, based on the thread
that resulted from my question. A lot of them. So why is the security
team not doing anything to get those announced?

Again, the web site says:

   [28 Mar 2000] dump - 
reported exploit in dump
   [09 Mar 2000] mtr - 
possible local exploit in mtr
   [28 Feb 2000] nmh - 
remote exploit in nmh
   [26 Feb 2000] htdig - 
remote users can read files with webserver uid
   [14 Feb 2000] make - 
symlink attack in make
   [01 Feb 2000] apcd - 
symlink attack in apcd

While a quick grep of debian-changes for this month and April for
"security" finds:

imap (4.7c-1) frozen; urgency=high
  * SECURITY: addresses buffer overflow problems mentioned on BugTraq

zope (2.1.6-1) frozen; urgency=high
  * To the release manager: As you can see from changelog.gz, 2.1.6
and 2.1.5 were bug fix releases only. Among the fixed bugs are
two fixes for potential security holes, therefore I think this
release should go into potato:
- Fixed a bug that could allow someone with a lot of Zope zen
  to change the apparent AUTHENTICATED_USER to access things
  that they shouldn't.
- Fixed a potential security hole that could allow users with
  permission to add Folders and edit DTML (and a who have a
  lot of Zope zen) to get access to things that they shouldn't.

horde (2:1.2.0-1.pre11.6) frozen unstable; urgency=low
  * Upstream security update

imp (2:2.2.0-1.pre11.6) frozen unstable; urgency=low
  * Upstream secuirty fixes

apache (1.3.9-13) frozen unstable; urgency=medium
  * [RC, security] Backported security fix for Cross Site Scripting issue
(CERT Advisory CA-2000-02) from apache 1.3.11 patch.

kon2 (0.3.9b-0slink1) stable; urgency=high
   * [Security FIX] buffer overrun security problem fixed.

xlockmore (4.12-4.1) stable; urgency=high
   * Non-maintainer upload by security team
   * Fix buffer overflow in resource handling

orbit (0.5.0-5) frozen unstable; urgency=medium
  * Postinst for liborbit0 creates default /etc/orbitrc, if none exists.
Default file disables tcp, for security (closes: Bug#52519).  More

dhelp (0.3.23) unstable frozen; urgency=low
  * dsearch: security fix for glimpse's temp files (#60853)

mh (6.8.4-JP-3.03-32.3) frozen unstable; urgency=low
  * Fix another security hole related to the previous fix.
(buffer overflow problem in quote escape)

freewnn (1.1.0+1.1.1-a016-1) frozen; urgency=low
  * New upstream release with security-related fixes.
- fixes for msg_open() bug ([freewnn:00350]).
- freewnn-size_limit.diff ([freewnn:00361]).
- freewnn-mkdir.diff ([freewnn:00359]).

roxen (1.2beta2-3.1) stable; urgency=high
   * Security fix - html encoding the output of the tags
 referer, accept-language, clientname, file
 Attacker can include code to be parsed by the server

floppybackup (1.3-2) stable; urgency=high
   * Security Fix - fixed temporary file use

mtr (0.28-1) stable; urgency=high
   * Security fix for theoretical stack-smash-and-fork attack -
 s/seteuid/setuid/ in mtr.c

nmh (0.27-0.28-pre8-4) stable; urgency=high
   * Applied patch to fix security hole which allowed untrusted shell
 code to be executed.

w3m (0.1.8-1) frozen unstable; urgency=medium
  * new upstream version
  - security fix potential buffer overflow exploit

angband (290-1) unstable; urgency=low
  * Update files in /var/lib/games/angband/data/ on install. Also, make
sure that the scores files are not owned by first player that runs the
game, this fixes a (minor) security issue.

-- 
see shy jo

Re: to reiterate, why are there no security updates on the front page? (Or, 17 security holes the security team hasn't told you about)

[Joey Hess]

Joey Hess wrote:
> Ok, since nobody from the security team replied to my earlier question,

I've not spoken with Martin Schultze in private mail. He indicated he
(and thus presumably, the rest of the security team) wasn't aware of these
security fixes. That, of course, is a pretty good reason why the
security team hasn't announced them.

What I'm wondering is if there is some prodedure we can put in place to
facilitate the security team in making announcements of security fixes.
As I understand things from my (very) brief stint on the security team,
its jobs are:

1. To dig up security holes (from bugtraq, private security lists not
   open to the public, find them themselves, etc), and make maintainers
   aware of them.
2. If a maintainer does not/cannot respond quickly enough, to fix the
   security holes.
3. To ensure that security fixes are available for all platforms,
   including those the maintainer does not have easy access to.
4. To backport the fixes into stable as necessary.
4. To post security announcements in a standard, consistent format, that
   explains the hole, points to fixed files, and is PGP signed so
   outsiders can trust the annoucement.

It seems to me that the list of fixes I posted shows that in this
particular case, 1 and 2 were not a problem. Lots of debian folks read
bugtraq, and the maintainers found out about the holes (although perhaps the
security team, in some cases, did not!). The maintainers fixed the holes.

I don't know about 3. 4 seemed to be at least partly dealt with by the
maintainers of the changelog entires I posted, and wasn't even necessary
for all of them.

The main problem appears to be in 5. I wonder then, if we can do something
to ease the security team's job in step 5. For example, if there was a
published template a maintainer could fill in the blanks in about a
security hole they have just fixed in their package, and then send it on
to the security team to let them take care of step 3, do final touchups,
sign it, and announce it, I think this might lessen the burden on the
security team. I have attached a rought draft of such a template to this
message, based on the format of existing debian security advisories.

If these proto-announcements were filed in a public place[1] we could also
more easily keep up with the progress of the security team, and tell if
they were getting swamped and needed more help.

-- 
see shy jo

[1] As most of them can be; once a maintainer has fixed a security hole,
noting it in the changelog, and generating a diff, and uploads and
(auto-)announces the package, the fact of the security hole is already
pretty public.
# Enter the name of your package here:
Package:
# Enter the type of vulnerability here, breifly. Common types include:
# [local exploit, remote exploit, denial of service, symlink attack]
Vulnerability type:
# Does it effect only Debian? [yes no]
Debian-specific:
# Has the exploit been accomplished in real-world testing; does a
# program to exploit it exist? [yes no]
Known exploits:

# Now use one paragraph to explian the vulnerability. Be sure to mention
# what version of the package is vulnerable, and which version(s) of Debian
# it was distributed in.

The version of  as distributed in Debian GNU/Linux 2.x (aka )
# frobnigated the baz incorrectly; mass havoc may result.

This has been fixed in version , and we recommend that you
upgrade immediatly.

Re: to reiterate, why are there no security updates on the front page? (Or, 17 security holes the security team hasn't told you about)

[Joey Hess]

Anthony Towns wrote:
> > What I'm wondering is if there is some prodedure we can put in place to
> > facilitate the security team in making announcements of security fixes.
> 
> Isn't this essentially the point of setting urgency to "high" in
> debian/changelog?

Well, your idea of looking at, and consistently using urgency=high for
security updates would make it eaiser for the team to find them. But
that's only the first step -- they have to generate an advisory, and for
that they have to know what versions the security hole was in, how
severe it is, and a general description of it. That's why I thought a
template listing those items might be a good idea.

(I've also used urgengy=high for updates that fixed very important
but non-security-related things.)

-- 
see shy jo

complete clone of the debian website

[Joey Hess]

http://www.491.org/projets/api/

Shocking.

-- 
see shy jo

Re: API (debian site design ripped?)

[Joey Hess]

Darren O. Benham wrote:
> 2) violate the stricter copyright of the "Official Logo"

"This logo or a modified version may be used by anyone to refer to the
Debian project" (for the plain swirl).

At the top of the web page, where we have " Debian", they
have " API". So it is clear to me that they are using the
swirl to refer to API, and thus violating the copyright.

-- 
see shy jo

Re: Libranet download

[Joey Hess]

Josip Rodin wrote:
> I've put a link to Libranet site at our website, on the `related links'
> page.

You might like to check out this url for entirely too many debian-based
distributions.
http://www.bahnhof.se/~chimbis/cgi-bin/ratatosk/db.cgi?db=default&uid=default&ID=&Distribution=&URL=&Contact=&Type=---&Category=---&Language=---&Kernel=---&Codebase=Debian&WM=---&Description=&Reviews=&Bundles=&Usenet=&Date=&Userid=&keyword=&mh=100&sb=---&so=ascend&view_records=View+Records

-- 
see shy jo

Re: Change needed in english/ports/Makefile

[Joey Hess]

Chris Lawrence wrote:
> I finally figured out why the new m68k page doesn't build: it's not in
> the Makefile.  Can someone in the webwml group add the m68k directory
> to the list of directories it builds?

Well, you needed a m68k/Makefile too :-P

I've added it and made the appropriate mods and it seems to work.
Committed.

-- 
see shy jo

Re: list archives have moved

[Joey Hess]

James A. Treacy wrote:
> I'm in the process of committing the last of the changes
> (I hope). The site seems to be working ok. If someone feels
> like fixing the searching on the list archives before I can
> get to it tomorrow, be my guest.

Looks like all of Debian weekly news' links to
../../../../List-Archives/ have not been changed in cvs yet.

I could do it myself, but is it possible whatever search and replace you
did missed such links?

-- 
see shy jo

Re: list archives have moved

[Joey Hess]

James A. Treacy wrote:
> Mind checking again? I forgot to update first so I missed
> News/weekly/2000/22, but everything else was changed.

Ok, looks good now.

-- 
see shy jo

Re: Help fix bad links on the web site

[Joey Hess]

James A. Treacy wrote:
> A rather long list of bad links on the web site can be
> found at http://www.debian.org/~treacy/.
> 
> Please help fix them by taking a section and working
> on it. Start by fixing the easy mistakes first. Once
> we get the list down to a managable sice, we can worry
> about the rest.
> 
> Announce which section you will be working on here so
> we don't duplicate effort.

I'll take /News/weekly/

There are a whole slew of errors listed that are all links to
/Lists-Archives/. I'm not sure if this has to do with the new
lists.debian.org website, or what. I've spot checked a few, and they
seem to be ok on the actual website.

I'm ignoring those and correcting all the other broken links that are 
listed.

-- 
see shy jo

Re: Help fix bad links on the web site

[Joey Hess]

Here is a problem with your link checker:

Looking into http://localhost/News/weekly/1999/24/index.sv.html 
  http://localhost/News/weekly/1999/24/signdebs : error 404 Not Found

The html though, is:



This is not a link at all..

Also, when you search/replaced for lists.debian.org, you also messed up
any links onto http://www.debian.or.jp/Lists-Archives/. Probably only
affected me, and I have corrected the ones the link checker found.

I've now corrected as much as I can in News/weekly/.

-- 
see shy jo

uh..

[Joey Hess]

[EMAIL PROTECTED]:~/debian/weekly>make install
test -d ../../../../debian.org/News/weekly || mkdir -p 
../../../../debian.org/News/weekly
cd . && wml -q -D CUR_YEAR=2000 -o UNDEFuEN:index.en.html   index.wml \
-DWML_SRC_REALNAME="Joey Hess" -DWML_SRC_USERNAME=joeyh
ePerl:Error: Perl runtime error (interpreter rc=2)

 Contents of STDERR channel: -
Day '00' out of range 1..31 at /tmp/wml.30475.tmp1.wml line 1123
--
** WML:Break: Error in Pass 3 (rc=74).
make: *** [index.en.html] Error 1
+ exit 2

Does anyone have any idea why this started happening? I didn't touch anything..

-- 
see shy jo

Re: uh..

[Joey Hess]

James A. Treacy wrote:
> It's working fine on master. Could you make sure english/templates
> is up to date and try again?

That fixed it, thank you.

-- 
see shy jo

various breakage

[Joey Hess]

http://lists.debian.org/debian-user-0008/threads.html

Not Found

The requested URL /debian-user-0008/threads.html was not found on this
server.

And yet a link to that url appeared on http://lists.debian.org/

Also, spi-inc.org is quite broken. Not sure if this list deals with that
site though.

-- 
see shy jo

Re: various breakage

[Joey Hess]

Craig Small wrote:
> On Mon, Aug 07, 2000 at 08:55:43PM -0700, Joey Hess wrote:
> > Also, spi-inc.org is quite broken. Not sure if this list deals with that
> > site though.
> 
> That site looks fine to me. I think they're transferring or doing
> something to it.  Could be a DNS problem like that had before.

75% of links on the front page are broken.

[EMAIL PROTECTED]:~>wget http://spi-inc.org/about
--21:55:13--  http://spi-inc.org:80/about
   => `about'
Connecting to spi-inc.org:80... connected!
HTTP request sent, awaiting response... 404 Not Found
21:55:13 ERROR 404: Not Found.

[EMAIL PROTECTED]:~>wget http://spi-inc.org/donations 
--21:55:29--  http://spi-inc.org:80/donations
   => `donations'
Connecting to spi-inc.org:80... connected!
HTTP request sent, awaiting response... 404 Not Found
21:55:29 ERROR 404: Not Found.

[EMAIL PROTECTED]:~>wget http://spi-inc.org/contact
--21:55:44--  http://spi-inc.org:80/contact
   => `contact'
Connecting to spi-inc.org:80... connected!
HTTP request sent, awaiting response... 404 Not Found
21:55:44 ERROR 404: Not Found.

Verified on 3 separate machines on disjoint networks.

-- 
see shy jo

lists.debian.org not updating some lists

[Joey Hess]

[EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org>ls debian-user-0008
ls: debian-user-0008: No such file or directory
[EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org>ls debian-user-000* -d
debian-user-0001/  debian-user-0003/  debian-user-0005/  debian-user-0007/
debian-user-0002/  debian-user-0004/  debian-user-0006/

So no debian-user posts this month? Hmmm.

[EMAIL 
PROTECTED]:/org/www.debian.org/lists.debian.org/debian-security-announce-00>grep
^Date: ../../lists/debian-security-announce-00 |tail 
Date: Sun, 2 Jul 2000 06:37:40 -0700
Date: Sun, 16 Jul 2000 02:40:24 -0400
Date: Sun, 16 Jul 2000 19:41:16 -0700
Date: Thu, 27 Jul 2000 04:41:52 +0200
Date: Fri, 28 Jul 2000 10:17:27 -0400
Date: Mon, 31 Jul 2000 16:03:26 +0200 (CEST)
Date: Sun, 6 Aug 2000 14:23:16 +0200 (CEST)
Date: Mon, 7 Aug 2000 23:23:10 +0200 (CEST)
Date: Tue, 08 Aug 2000 13:13:13 +0530
Date: Mon, 7 Aug 2000 14:29:06 -0700
[EMAIL 
PROTECTED]:/org/www.debian.org/lists.debian.org/debian-security-announce-00>ls
-l threads.html
-rw-rw-r--   1 treacy   debwww   4261 Jul 31 11:22 threads.html

So it has not updated to the posts made on the 6th or 7th?

[EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org/debian-devel-0008>ls -l
threads.html
-rw-r--r--   1 treacy   debwww  54065 Aug  8 11:24 threads.html

And yet debian-devel is updating ok. What's going on?

Unfortunatly, I can't for the life of me find the cron job that runs
mhonarc.

-- 
see shy jo

packages.debian.org is hosed

[Joey Hess]

Randolph and I were noticing that new packages are not shnowing up on
packages.debian.org anymore. For example, the archive has:

lftp ftp.debian.org:/debian/dists/unstable/main/binary-i386/editors> dir 
codecomma*
-rw-rw-r--   1 ftp  ftp262000 Aug  5 18:52 codecommander_0.9.7-2.deb

But packages.debian.org is not aware of this package. 

Well I tracked this one down. 

[EMAIL PROTECTED]:/org/www.debian.org/cron/daily_updates>./2packages 
getting Packages/Sources from unstable
/org/ftp.debian.org/ftp/dists/unstable/main/source/Sources.gz: No such
file or directory

[EMAIL PROTECTED]:/org/www.debian.org/cron/daily_updates>ls -l 
/org/ftp.debian.org 
total 1
-rw-r--r--   1 root root  596 Jan 19  2000 apache.conf
lrwxrwxrwx   1 root root4 Oct 27  1998 debian -> ftp/
lrwxrwxrwx   1 root root   18 Feb 14  1999 ftp -> ../ftp.root/debian

Both of these links are broken.

What really confuses me is this in today's log:

run-parts: executing /org/www.debian.org/cron/daily_updates/2packages
getting Packages/Sources from unstable
updating Packages/unstable
getting Packages/Sources from frozen
updating Packages/frozen
getting Packages/Sources from stable
updating Packages/stable
Re-indexing files for web searches
[EMAIL PROTECTED]:/org/www.debian.org/cron/daily_updates>

So how on earth does it work with a broken symlink?

-- 
see shy jo

Re: lists.debian.org not updating some lists

[Joey Hess]

So it looks like every single one of these things is *fine* on master.
But IIRC master is no longer where the lists stuff is hosted. So
something is wrong here.

BTW, I can't see any way on earth that the 5coords script could be
working on va either, as it references files in directories that do not
exist.

Just massively confused and annyoed. It looks like shit with the website 
has managed to delay DWN AGAIN. 

Joey Hess wrote:
> [EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org>ls debian-user-0008
> ls: debian-user-0008: No such file or directory
> [EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org>ls debian-user-000* -d
> debian-user-0001/  debian-user-0003/  debian-user-0005/  debian-user-0007/
> debian-user-0002/  debian-user-0004/  debian-user-0006/
> 
> So no debian-user posts this month? Hmmm.
> 
> [EMAIL 
> PROTECTED]:/org/www.debian.org/lists.debian.org/debian-security-announce-00>grep
> ^Date: ../../lists/debian-security-announce-00 |tail 
> Date: Sun, 2 Jul 2000 06:37:40 -0700
> Date: Sun, 16 Jul 2000 02:40:24 -0400
> Date: Sun, 16 Jul 2000 19:41:16 -0700
> Date: Thu, 27 Jul 2000 04:41:52 +0200
> Date: Fri, 28 Jul 2000 10:17:27 -0400
> Date: Mon, 31 Jul 2000 16:03:26 +0200 (CEST)
> Date: Sun, 6 Aug 2000 14:23:16 +0200 (CEST)
> Date: Mon, 7 Aug 2000 23:23:10 +0200 (CEST)
> Date: Tue, 08 Aug 2000 13:13:13 +0530
> Date: Mon, 7 Aug 2000 14:29:06 -0700
> [EMAIL 
> PROTECTED]:/org/www.debian.org/lists.debian.org/debian-security-announce-00>ls
> -l threads.html
> -rw-rw-r--   1 treacy   debwww   4261 Jul 31 11:22 threads.html
> 
> So it has not updated to the posts made on the 6th or 7th?
> 
> [EMAIL PROTECTED]:/org/www.debian.org/lists.debian.org/debian-devel-0008>ls -l
> threads.html
> -rw-r--r--   1 treacy   debwww  54065 Aug  8 11:24 threads.html
> 
> And yet debian-devel is updating ok. What's going on?
> 
> Unfortunatly, I can't for the life of me find the cron job that runs
> mhonarc.
> 
> -- 
> see shy jo

-- 
see shy jo

Re: Updating www pages for 2.2

[Joey Hess]

Javier Fdz-Sanguino Pen~a wrote:
> 
>   I have checked in today (after updating installation and release
> notes spanish translations) and found out that the www pages are not 2.2
> ready. 
>   I did this for the spanish translations (changed the /index latest
> release and some notes on releases/potato/index and releases/index). Should
> I do this to for the english pages? Is anybody out there? :P

JT and I have mostly done it now, and JT is forcing a web site build.
All translators should update things.

I think we really could have handled this better -- like branched the
web site last week and simply merged that branch in today. Oh well,
there's always next time.

-- 
see shy jo

parts of the website build hang for a very long time

[Joey Hess]

I've been making some changes to DWN's templates, which is causing all
of News/weekly/ to be rebuilt. However, I've discovered that some of the
pages in there seem to hang wml forever, or at least for a very long
time. 

For example, cd webwml/english/News/weekly/1999/27 and run:

wml -q -D CUR_YEAR=2000 -DWML_SRC_REALNAME="Joey Hess" \
-DWML_SRC_USERNAME=joeyh -o UNDEFuEN:[EMAIL PROTECTED]   mail.wml

It seems to get stuck in some slice handing code, with -v3, the last
thing I see is long list of slice begin and end points. Same thing happens 
in 1999/23/mail.wml, and about 10 more.

On my laptop, which has an outdated checkout of the web site (from before
when Make.common went away..), I don't see these problems; the same pages 
build in half a minute. I updated it to the current site and it's still
ok, so now I'm wondering if this is a potato/woody issue (my laptop runs
potato and doesn't have the problem; my desktop runs woody, and does).

BTW, I'll shortly be checking in a lot of changes to News/weekly/, but
my checkin in not causing the hang, I can reproduce it on the site as it
is right now too.

-- 
see shy jo

Re: parts of the website build hang for a very long time

[Joey Hess]

Joey Hess wrote:
> build in half a minute. I updated it to the current site and it's still
> ok, so now I'm wondering if this is a potato/woody issue (my laptop runs
> potato and doesn't have the problem; my desktop runs woody, and does).

Hmm. I just realized something.. I'm running perl 5.6 on my desktop too.
That may well be it. I'd like to know if anyone else can reproduce my
problem on a woody box.

-- 
see shy jo

Re: FWD: Re: A few comments on recent changes; ATTN: translators, DWN

[Joey Hess]

> Joey; could you please look into using spokendate to create the DWN
> indexes? That would make the index pages of the translations look
> nicer, I think, since the date would always be in the local language,
> no matter whether the issue has been translated or not.

This is done now. Each issue of DWN uses a field named PUBDATE instead
of the old PAGENAME. I have updated all the english pages, but all 
translations have yet to be updated, and will be broken in the meantime.

It works ok, but i have a problem. If I have a wml file that has this at
the top:

#use wml::debian::weeklynews::header PUBDATE="2000-8-22"

And wml::debian::weeklynews::header currently looks like this:

#use wml::debian::template title="Debian Weekly News - $(PUBDATE)$(PAGENAME)" 
NOHOMELINK="yes" BARETITLE="yes" NOCOMMENTS="yes" SUMMARY="$(SUMMARY)"

I want to make it use the spokendate function from ctime to modify
PUBDATE, and pass the result into this #use. How can I do that?

-- 
see shy jo

Re: FWD: Re: A few comments on recent changes; ATTN: translators, DWN

[Joey Hess]

peter karlsson wrote:
> Can't you just do a <:=spokendate($(PUBDATE)):> or similar? I think I used
> something like that when I fiddled with using the DWN summaries as meta
> description tags. Or perhaps the syntax was <:=spokendate(""):>
> there, I do not remember.

That works everywhere except for in a #use line, where it produces nice
error messages like:

Bareword found where operator expected at /tmp/wml.31115.tmp1.wml line 1203, 
near ""Debian Weekly News - <:=spokendate(); print "Contributing"
(Missing operator before Contributing?)
syntax error at /tmp/wml.31115.tmp1.wml line 1203, near ""Debian Weekly 
News - <:=spokendate(); print "Contributing"
Missing right curly or square bracket at /tmp/wml.31115.tmp1.wml line 1357, at 
end of line
syntax error at /tmp/wml.31115.tmp1.wml line 1357, at EOF
Execution of /tmp/wml.31115.tmp1.wml aborted due to compilation errors.

-- 
see shy jo

Re: Debian push mirrors to be updated more than once per day

[Joey Hess]

James A. Treacy wrote:
> Now that the list archives are seperated from the rest of the Debian
> web site, updating mirrors is much more sane. We are now considering
> updating the primary mirrors multiple times per day (either every 4
> or 8 hours). Before we implement this, it seemed a good idea to see
> if any of you have any objections to this.

FWIW, this will make my life about 4x or 8x easier.

Thanks!

-- 
see shy jo