Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Matthias Urlichs
Hi, Manuel A. Fernandez Montecelo: > a) the minified .js is still source code, by definition. Sorry, but _my_ definition of "source code" is "whatever you customarily edit when you want to change something". _Nobody_ in their right mind edits minified Javascript. IMHO, in an ideal world we woul

ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Yunqiang Su
On amd64 system: libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and link to /lib32/ld-2.18.so libc6:i386 make /lib/ld-linux.so.2 link to /lib/i386-linux-gnu/ld-2.18.so when these 2 packages installed at the same time /lib/ld-linux.so.2 is linked to /lib/i386-linux

Makefile.am to Makefile.in: was: Re: lintian "source-is-missing" for jquery ...

2014-04-25 Thread Svante Signell
On Thu, 2014-04-24 at 23:20 -0500, Gunnar Wolf wrote: > Manuel A. Fernandez Montecelo dijo [Fri, Apr 25, 2014 at 01:27:02AM +0100]: > > To both things above, I don't think that this is different to my example of > > 'configure' script without corresponding .ac/.in; and I don't think that > > anybo

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Thu, 24 Apr 2014 20:48:47 +0100 Manuel A. Fernandez Montecelo wrote: > Hi, > > Moving from debian-devel-games to debian-devel@ for opinions about if > this lintian warning is OK to override or not, or in general about > what to do with lintian warning about minified JS. Haven't we had this d

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Manuel A. Fernandez Montecelo
2014-04-25 5:20 GMT+01:00 Gunnar Wolf : > Manuel A. Fernandez Montecelo dijo [Fri, Apr 25, 2014 at 01:27:02AM +0100]: >> To both things above, I don't think that this is different to my example of >> 'configure' script without corresponding .ac/.in; and I don't think that >> anybody >> is thinking

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Thu, 24 Apr 2014 23:20:00 -0500 Gunnar Wolf wrote: > Manuel A. Fernandez Montecelo dijo [Fri, Apr 25, 2014 at 01:27:02AM > +0100]: > > To both things above, I don't think that this is different to my > > example of 'configure' script without corresponding .ac/.in; and I > > don't think that an

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Fri, 25 Apr 2014 01:16:04 +0100 Manuel A. Fernandez Montecelo wrote: > I don't think that we should go and do the tedious work of repack > thousands of packages because of this, with no real benefit in terms > of freedom (or any other) for our users -- provided that we depend > and link to the

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Manuel A. Fernandez Montecelo
2014-04-25 8:49 GMT+01:00 Matthias Urlichs : > Hi, > > Manuel A. Fernandez Montecelo: >> a) the minified .js is still source code, by definition. > > Sorry, but _my_ definition of "source code" is "whatever you customarily > edit when you want to change something". > > _Nobody_ in their right mind

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Steve McIntyre
Yunqiang Su wrote: >On amd64 system: > > libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and link to > /lib32/ld-2.18.so > >libc6:i386 make /lib/ld-linux.so.2 link to /lib/i386-linux-gnu/ld-2.18.so > >when these 2 packages installed at the same time > /lib/ld-linux.so.2

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Fri, 25 Apr 2014 10:47:20 +0100 "Manuel A. Fernandez Montecelo" wrote: > 2014-04-25 8:49 GMT+01:00 Matthias Urlichs : > > Hi, > > > > Manuel A. Fernandez Montecelo: > >> a) the minified .js is still source code, by definition. > > > > Sorry, but _my_ definition of "source code" is "whatever yo

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Yunqiang Su
On Fri, Apr 25, 2014 at 5:58 PM, Steve McIntyre wrote: > Yunqiang Su wrote: >>On amd64 system: >> >> libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and link to >> /lib32/ld-2.18.so >> >>libc6:i386 make /lib/ld-linux.so.2 link to /lib/i386-linux-gnu/ld-2.18.so >> >>when the

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Craig Small
On Fri, Apr 25, 2014 at 09:41:37AM +0100, Neil Williams wrote: > The package is wrong if lintian reports the error. Fix the package. Not always, the way lintian checks is wrong. I'm not buying into is minimised source or not, but no matter which way you sit on that issue, the lintian checks for so

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Steve McIntyre
On Fri, Apr 25, 2014 at 06:49:49PM +0800, Yunqiang Su wrote: >On Fri, Apr 25, 2014 at 5:58 PM, Steve McIntyre wrote: >> Yunqiang Su wrote: >>>On amd64 system: >>> >>> libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and link >>> to >>> /lib32/ld-2.18.so >>> >>>libc6:i386 ma

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Fri, 25 Apr 2014 21:58:57 +1000 Craig Small wrote: > On Fri, Apr 25, 2014 at 09:41:37AM +0100, Neil Williams wrote: > > The package is wrong if lintian reports the error. Fix the package. > > Not always, the way lintian checks is wrong. I'm not buying into is > minimised source or not, but no

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Daniel Pocock
On 25/04/14 02:16, Manuel A. Fernandez Montecelo wrote: > > I don't think that we should go and do the tedious work of repack > thousands of > packages because of this, with no real benefit in terms of freedom (or > any > other) for our users -- provided that we depend and link to the canonical > v

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Andrey Rahmatullin
On Fri, Apr 25, 2014 at 06:49:49PM +0800, Yunqiang Su wrote: > >>On amd64 system: > >> > >> libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and link > >> to > >> /lib32/ld-2.18.so > >> > >>libc6:i386 make /lib/ld-linux.so.2 link to /lib/i386-linux-gnu/ld-2.18.so > >> > >>wh

Non-source Javascript files in upstream source (was: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699)

2014-04-25 Thread Ben Finney
Neil Williams writes: > On Fri, 25 Apr 2014 01:16:04 +0100 > Manuel A. Fernandez Montecelo wrote: > > > I don't think that we should go and do the tedious work of repack > > thousands of packages because of this, with no real benefit in terms > > of freedom (or any other) for our users -- provid

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Thomas Goirand
On 04/25/2014 03:48 AM, Manuel A. Fernandez Montecelo wrote: > a) the minified .js is still source code, by definition. I don't agree with this. On 04/25/2014 03:48 AM, Manuel A. Fernandez Montecelo wrote: > It's interpreted in different implementations of an ISO-approved > interpreted language,

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Solal
I agree with you. An obfuscated source isn't source and should'nt be in source packages. But in binary packages, yes. Also, as say the GNU LibreJS standard for publish free JavaScript code, If there are a comment which is an URL to the source and the corresponding source is free, the obfuscated cod

Re: lintian "source-is-missing" for jquery

2014-04-25 Thread Bas Wijnen
On Fri, Apr 25, 2014 at 10:47:20AM +0100, Manuel A. Fernandez Montecelo wrote: > Thus, the file itself being source code, You are the only one who uses a definition of source code that includes generated files. This is confusing; please don't do that. > So I believe that the lintian error consid

DFSG : Really useful?

2014-04-25 Thread Solal
Why not just take the Free Software Definition[0] instead lose a lot of time in specific guidelines. I think use the Free System Distribution Guidelines published by the FSF[1] is the best way. Use the FSDG instead of the DFSG will : -Be more efficient instead of lose a lot of time in the DFSG. -Be

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Yunqiang Su
On Fri, Apr 25, 2014 at 9:00 PM, Andrey Rahmatullin wrote: > On Fri, Apr 25, 2014 at 06:49:49PM +0800, Yunqiang Su wrote: >> >>On amd64 system: >> >> >> >> libc6-i386 make /lib/ld-linux.so.2 link to /lib32/ld-linux.so.2 and >> >> link to >> >> /lib32/ld-2.18.so >> >> >> >>libc6:i386 make

Re: DFSG : Really useful?

2014-04-25 Thread Jonas Smedegaard
Quoting Solal (2014-04-25 15:14:49) > Why not just take the Free Software Definition[0] instead lose a lot > of time in specific guidelines. > I think use the Free System Distribution Guidelines published by the > FSF[1] is the best way. Use the FSDG instead of the DFSG will : > -Be more efficien

Re: DFSG : Really useful?

2014-04-25 Thread Sven Bartscher
On Fri, 25 Apr 2014 15:14:49 +0200 Solal wrote: > Why not just take the Free Software Definition[0] instead lose a lot of > time in specific guidelines. > I think use the Free System Distribution Guidelines published by the > FSF[1] is the best way. Use the FSDG instead of the DFSG will : > -Be m

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Jeroen Dekkers
At Fri, 25 Apr 2014 14:58:35 +0200, Daniel Pocock wrote: > There is no doubt in my mind that if the rules are not strict then > sooner or later somebody will sneak something bad into some minified > Javascript - maybe it will happen upstream and the DD won't even be > aware of it. Yes, and that's

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Ben Hutchings
On Fri, 2014-04-25 at 16:39 +0800, Yunqiang Su wrote: [...] > On mips64el system: > > libc6-mips32 make /lib/ld.so.1 link to /lib/ld-2.18.so > (yes, quite strange, mips system asks for use /lib as o32 > multilib path) > > libc6:mipsel make /lib/ld.so.1 link to /lib/mipsel-linux-gnu/ld-2.

Re: ld.so for multiarch and multilib installed at same time

2014-04-25 Thread Ben Hutchings
On Fri, 2014-04-25 at 16:28 +0100, Ben Hutchings wrote: > On Fri, 2014-04-25 at 16:39 +0800, Yunqiang Su wrote: > [...] > > On mips64el system: > > > > libc6-mips32 make /lib/ld.so.1 link to /lib/ld-2.18.so > > (yes, quite strange, mips system asks for use /lib as o32 > > multilib path) >

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Neil Williams
On Fri, 25 Apr 2014 16:47:41 +0200 Jeroen Dekkers wrote: > At Fri, 25 Apr 2014 14:58:35 +0200, > Daniel Pocock wrote: > > There is no doubt in my mind that if the rules are not strict then > > sooner or later somebody will sneak something bad into some minified > > Javascript - maybe it will happ

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 25/04/14 17:40, Neil Williams wrote: > On Fri, 25 Apr 2014 16:47:41 +0200 Jeroen Dekkers > wrote: > >> At Fri, 25 Apr 2014 14:58:35 +0200, Daniel Pocock wrote: >>> There is no doubt in my mind that if the rules are not strict >>> then sooner o

concurrent installation of different pkg versions

2014-04-25 Thread Daniel Pocock
With all the talk about removing jquery from source packages, one thing that does arise is the question of how to support different jquery versions. This is not just a JavaScript issue though. Maybe we can have libjs-jquery-1.7 libjs-jquery-1.10 and friends all installed concurrently. Ma

Bug#745846: ITP: phpunit-version -- library that helps with managing the version number of Git-hosted PHP projects

2014-04-25 Thread David Prévot
Package: wnpp Severity: wishlist Owner: "David Prévot" Control: block 744876 by -1 * Package name: phpunit-version Version : 1.0.3 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/phpunit-version * License : BSD-3-clause Prog

Bug#745847: ITP: perm -- efficient mapping of short reads with periodic spaced seeds

2014-04-25 Thread Andreas Tille
Package: wnpp Severity: wishlist Owner: Andreas Tille * Package name: perm Version : 0.4.0 Upstream Author : Yangho Chen * URL : http://code.google.com/p/perm/ * License : Apache 2.0 Programming Lang: C++ Description : efficient mapping of short reads

Re: goals for hardening Debian: ideas and help wanted

2014-04-25 Thread Kevin Chadwick
previously on this list Paul Wise contributed: > I have written a non-exhaustive list of goals for hardening the Debian > distribution, the Debian project and computer systems of the Debian > project, contributors and users. > > https://wiki.debian.org/Hardening/Goals > > If you have more ideas,

Re: Bits from the 7th Debian Groupware Meeting

2014-04-25 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 25/04/14 21:27, Guido Gnther wrote: > The seventh Debian Groupware Meeting[1] was held in the > LinuxHotel, Essen, Germany[2]. We had one remote hacker from NYC > which brings the number of attendants up to 9. This is a short > summary of what

Bug#745853: ITP: phpunit-diff -- diff implementation - stand-alone component from PHPUnit

2014-04-25 Thread David Prévot
Package: wnpp Severity: wishlist Owner: "David Prévot" Control: block 744876 by -1 * Package name: phpunit-diff Version : 1.1.0 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/phpunit-diff * License : BSD-3-clause Programmin

Bug#745854: ITP: phpunit-exporter -- export variables for visualization - PHPUnit component

2014-04-25 Thread David Prévot
Package: wnpp Severity: wishlist Owner: David Prévot Control: block 744876 by -1 * Package name: phpunit-exporter Version : 1.0.0 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/phpunit-exporter * License : BSD-3-clause Prog

Bug#745859: ITP: phpunit-environment -- functionality to handle HHVM/PHP environments - PHPUnit component

2014-04-25 Thread David Prévot
Package: wnpp Severity: wishlist Owner: David Prévot Control: block 744876 by -1 * Package name: phpunit-environment Version : 1.0.0 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/phpunit-diff * License : BSD-3-clause Progr

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Wookey
+++ Manuel A. Fernandez Montecelo [2014-04-25 09:42 +0100]: > > ... a recent/ongoing thread, about using dh-autoreconf or something > similar ... > Nobody in the thread tried to apply the same logic with configure > script compared to minified .js. The case of configure script is even > worse, in

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Vincent Bernat
❦ 25 avril 2014 17:40 CEST, Neil Williams  : > Compared to that amount of work, stripping a few files from a tarball > using uscan is utterly trivial and I don't see why it is a problem. > It's quite a bit harder to do the right thing and persuade upstream to > not include them. How to handle th

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Manuel A . Fernandez Montecelo
2014-04-26 00:08 Vincent Bernat: ❦ 25 avril 2014 17:40 CEST, Neil Williams  : Compared to that amount of work, stripping a few files from a tarball using uscan is utterly trivial and I don't see why it is a problem. It's quite a bit harder to do the right thing and persuade upstream to not incl

Re: lintian "source-is-missing" for jquery

2014-04-25 Thread Charles Plessy
Le Fri, Apr 25, 2014 at 03:48:51PM +0200, Bas Wijnen a écrit : > > Ignoring a bug because you set your priorities is understandable and > (in some cases) good. Adding an override is not. There are also benefits from using an override: - It shows that the message has been received by the mainta

Re: DFSG : Really useful?

2014-04-25 Thread Paul Wise
On Fri, Apr 25, 2014 at 10:34 PM, Sven Bartscher wrote: > nonfree [...], which we don't want to drop (as far as I know). Some Debian members definitely wanted to drop it in 2004, not sure about today though. https://www.debian.org/vote/2004/vote_002 https://www.debian.org/vote/2004/gr_non_free_t

Re: concurrent installation of different pkg versions

2014-04-25 Thread Paul Wise
On Sat, Apr 26, 2014 at 1:39 AM, Daniel Pocock wrote: > a generalized approach is needed. Multiple versions of a package seems undesirable to me, for the same reasons as static libraries and embedded code copies are undesirable. Systems that do this already exist though: https://nixos.org/ http

Re: concurrent installation of different pkg versions

2014-04-25 Thread Charles Plessy
Le Sat, Apr 26, 2014 at 11:41:17AM +0800, Paul Wise a écrit : > On Sat, Apr 26, 2014 at 1:39 AM, Daniel Pocock wrote: > > > a generalized approach is needed. > > Multiple versions of a package seems undesirable to me, for the same > reasons as static libraries and embedded code copies are undesir

Re: concurrent installation of different pkg versions

2014-04-25 Thread Steve Langasek
On Sat, Apr 26, 2014 at 02:07:22PM +0900, Charles Plessy wrote: > Le Sat, Apr 26, 2014 at 11:41:17AM +0800, Paul Wise a écrit : > > On Sat, Apr 26, 2014 at 1:39 AM, Daniel Pocock wrote: > > > a generalized approach is needed. > > Multiple versions of a package seems undesirable to me, for the sam

Re: concurrent installation of different pkg versions

2014-04-25 Thread Charles Plessy
Le Fri, Apr 25, 2014 at 10:11:58PM -0700, Steve Langasek a écrit : > On Sat, Apr 26, 2014 at 02:07:22PM +0900, Charles Plessy wrote: > > Le Sat, Apr 26, 2014 at 11:41:17AM +0800, Paul Wise a écrit : > > > On Sat, Apr 26, 2014 at 1:39 AM, Daniel Pocock wrote: > > > > > a generalized approach is nee

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Steve M. Robbins
On April 25, 2014 04:40:26 PM Neil Williams wrote: > Jeroen Dekkers wrote: > > part. But if the minified javascript files in the upstream tarball > > aren't used when building the binary packages because the javascript > > libraries are already packaged in Debian, then it isn't possible that > >

Re: Non-source Javascript files in upstream source (was: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699)

2014-04-25 Thread Steve M. Robbins
On April 25, 2014 11:02:29 PM Ben Finney wrote: > Neil Williams writes: > > On Fri, 25 Apr 2014 01:16:04 +0100 > > > > Manuel A. Fernandez Montecelo wrote: > > > I don't think that we should go and do the tedious work of repack > > > thousands of packages because of this, with no real benefit in

Re: Non-source Javascript files in upstream source

2014-04-25 Thread Ben Finney
"Steve M. Robbins" writes: > On April 25, 2014 11:02:29 PM Ben Finney wrote: > > We promise the source for everything any recipient downloads as part > > of Debian. If non-source files are distributed in Debian source > > packages, without a way to confidently guarantee the corresponding > > sour

Re: lintian "source-is-missing" for jquery -- was Re: Bug#744699: Frets On Fire bug report 744699

2014-04-25 Thread Daniel Pocock
On 26/04/14 01:31, Manuel A. Fernandez Montecelo wrote: > 2014-04-26 00:08 Vincent Bernat: >> ❦ 25 avril 2014 17:40 CEST, Neil Williams : >> >>> Compared to that amount of work, stripping a few files from a tarball >>> using uscan is utterly trivial and I don't see why it is a problem. >>> It's