Request for review of debootstrap change [was: Re: Second take at DEP17 - consensus call on /usr-merge matters]

2023-08-10 Thread Helmut Grohne
Hi, This is picking up on the debootstrap matter and is kinda crucial. On Thu, Jul 13, 2023 at 01:31:04AM +0100, Luca Boccassi wrote: > > After having sorted this out, what part of your safety concerns with 3C > > do remain? > > Nothing, as that stemmed from a misunderstanding of what the > impl

Re: /usr-merge: continuous archive analysis

2023-08-10 Thread Helmut Grohne
Hi Andreas, On Sun, Aug 06, 2023 at 06:44:47PM +0200, Andreas Metzler wrote: > Somehow related: If I introduce a new systemd unit should I work > around dh_installsystemd and ship it in /usr/lib/systemd/system/? Doing this is extra work now. If done correctly, it is compatible with the file move

Re: Q: How to set DMARC record for .debian.net?

2023-08-10 Thread Kentaro Hayashi
Hi, FYI: I've sent a feedback to ad...@db.debian.org for support DMARC policy in userdir-ldap/ud-mailgate via dnsZoneEntry. Here is the PoC patch: https://salsa.debian.org/kenhys/userdir-ldap/-/commit/0ba7cc582a5a31a0f2f9eda17cf2516fd494591c Regards, 2023年8月9日(水) 13:00 Kentaro Hayashi : > >

Bug#1043433: ITP: alsa-ucm-conf-asahi -- ALSA Use Case Manager configuration (and topologies) for Apple silicon devices

2023-08-10 Thread Tobias Heider
Package: wnpp Severity: wishlist Owner: Tobias Heider X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: alsa-ucm-conf-asahi Version : 1 URL : https://github.com/AsahiLinux/alsa-ucm-conf-asahi * License : BSD-3-Clause Description : ALSA Use Case

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Guillem Jover
On Wed, 2023-08-09 at 22:10:51 +0200, Johannes Schauer Marin Rodrigues wrote: > Quoting Guillem Jover (2023-08-09 20:55:17) > > I think I've mentioned this before, but dpkg-source is supposed to be > > generating reproducible source packages since around the time dpkg-deb > > has been generating re

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Andrey Rakhmatullin
On Thu, Aug 10, 2023 at 02:22:30PM +0200, Lucas Nussbaum wrote: > > It might be worth to consider changing your workflow a bit and work with > > a git repository. It does not have to be a clone of the repository (if > > any) where the package is maintained, you can start with a fresh import, > > e.

Re: Enabling -fstack-clash-protection for trixie

2023-08-10 Thread Emanuele Rocca
Hi, On 2023-08-10 02:43, Lucas Nussbaum wrote: > What I would need is a script that customizes a chroot. This is what I'm passing to sbuild --chroot-setup-commands for my builds: sbuild --chroot-setup-commands='printf "APPEND CFLAGS -fstack-clash-protection\nAPPEND CXXFLAGS -fstack-clash-prot

Re: Issues in the Patch Tagging Guidelines

2023-08-10 Thread Lucas Nussbaum
Hi, On 08/08/23 at 01:25 +0200, Guillem Jover wrote: > Hi! > > Lately I've been updating metadata in patches in packages I maintain and > noticed several issues with the Patch Tagging Guidelines, and after Lucas > created the new great patches UDD service [P] and we discussed some > other issues

Bug#1043408: ITP: golang-github-dsnet-compress -- Collection of compression related Go packages.

2023-08-10 Thread Nisha Pariyar
X-Debbugs-CC: debian-devel@lists.debian.org, debian...@lists.debian.org Package: wnpp Severity: wishlist Owner: Nisha Pariyar * Package name: golang-github-dsnet-compress Version : 0.0.1-1 Upstream Author : Joe Tsai * URL : https://github.com/dsnet/compress * License

Re: Enabling -fstack-clash-protection for trixie

2023-08-10 Thread Lucas Nussbaum
On 10/08/23 at 10:49 +0200, Emanuele Rocca wrote: > Hi, > > On 2023-08-06 11:25, Moritz Mühlenhoff wrote: > > I worked with Lucas a while back and he made an archive rebuild on amd64, > > only a minimal list of packages will need to be adapted: > > http://qa-logs.debian.net/2023/05/24/ > > Can we

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Lucas Nussbaum
On 08/08/23 at 10:26 +0200, Helmut Grohne wrote: > Are we ready to call for consensus on dropping the requirement that > `debian/rules clean; dpkg-source -b` shall work or is anyone interested > in sending lots of patches for this? My reading of the discussion is that there's sufficient interest f

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Lucas Nussbaum
Hi, On 05/08/23 at 21:01 +0200, Sven Joachim wrote: > On 2023-08-05 19:31 +0100, Wookey wrote: > > > On 2023-08-05 17:06 +0200, Lucas Nussbaum wrote: > >> > >> I wonder what we should do, because 5000+ failing packages is a lot... > >> > >> Should we give up on requiring a 'clean' target that wor

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Timo Röhling
* Jonas Smedegaard [2023-08-10 12:32]: Example: An organisation has examines licensing of Chromium as installed ontheir Android and Linux systems, expressed as SPDX datasets with SHA1 checksums for upstream tarballs. They need to do a full analysis for each upstream release, but would prefer to

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Jonas Smedegaard
Quoting Timo Röhling (2023-08-10 11:56:42) > Hi, > > * Helmut Grohne [2023-08-10 06:43]: > >When repacking, the upstream signature becomes useless and external > >parties can no longer verify it at ease. Including that upstream > >signature increases trust in the source shipped by Debian being >

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Timo Röhling
Hi, * Helmut Grohne [2023-08-10 06:43]: When repacking, the upstream signature becomes useless and external parties can no longer verify it at ease. Including that upstream signature increases trust in the source shipped by Debian being good. I don't think that problem is very relevant in prac

Re: Potential MBF: packages failing to build twice in a row

2023-08-10 Thread Helmut Grohne
Hi Wookey, On Wed, Aug 09, 2023 at 02:30:43PM +0100, Wookey wrote: > I have never tried Helmut's suggestion of removing this stuff in the > clean target. It does seem to me that removing it from the tarball > makes a lot more sense than cleaning it later. I do see all the advantages of repacking

Re: Enabling -fstack-clash-protection for trixie

2023-08-10 Thread Emanuele Rocca
Hi, On 2023-08-06 11:25, Moritz Mühlenhoff wrote: > I worked with Lucas a while back and he made an archive rebuild on amd64, > only a minimal list of packages will need to be adapted: > http://qa-logs.debian.net/2023/05/24/ Can we do the same for arm64? As far as I understand the archive rebuild