Re: unattended-upgrades by default?

2016-11-04 Thread Paul Wise
On Fri, Nov 4, 2016 at 2:47 AM, Steve McIntyre wrote: > * it will be a different experience compared to what people will get >when installing Debian normally, using d-i / debootstrap. That should be fixed in d-i IMO. > To solve the issue and provide security updates by default, I'm > propos

Bug#843131: ITP: constantly -- Symbolic constants in Python

2016-11-04 Thread Free Ekanayaka
Package: wnpp Severity: wishlist Owner: Free Ekanayaka * Package name: constantly Version : 15.1.0 Upstream Author : Amber Brown * URL : https://github.com/twisted/constantly * License : MIT Programming Lang: Python Description : Symbolic constants in

Re: Static linking and fPIC (Was: Re: "PIE by default" transition is underway -- wiki needs updating)

2016-11-04 Thread Ian Campbell
On Tue, 2016-11-01 at 22:54 +0200, Adrian Bunk wrote: > I do not see any reason for waiting instead of sending the binNMU  > request right now. I didn't see any movement on the dpkg front so I went ahead and did so: #843139. Thanks, Ian.

Re: DEP14 policy for two dots

2016-11-04 Thread Raphael Hertzog
Hello, On Thu, 03 Nov 2016, Ian Jackson wrote: > % Reusing this is tempting because an epoch separator can never > follow `.', so any `%' after any `.' would unambiguously mean > `escape for dot rather than colon'. But in principle `.' can > occur at the start of the version,

Re: OpenSSL 1.1.0

2016-11-04 Thread Pau Garcia i Quiles
On Fri, Nov 4, 2016 at 1:43 AM, Ian Jackson wrote: > I'm concerned that we are setting up a situation where: > > * A maintainer (or interested party) for a package which peripherally >uses openssl; > * Gets an RC bug report; > * Is threatened with autoremoval; > * Does not really know ho

Re: DEP14 policy for two dots

2016-11-04 Thread Ian Jackson
Raphael Hertzog writes ("Re: DEP14 policy for two dots"): > We have defined simple "readable" mappings for the common cases that > we encounter frequently. Now if we need mappings for silly things > that we don't encounter, I would suggest to use something easily > reversible and extendable. My pr

Re: OpenSSL 1.1.0

2016-11-04 Thread Colin Tuckley
On 04/11/16 10:53, Pau Garcia i Quiles wrote: > As I requested a few days ago, please delay making OpenSSL 1.1.0 the > default for 1 year (and even then, we should be checking the case > where something links directly to one version of OpenSSL, and also > links to something that dlopen's some othe

Re: unattended-upgrades by default?

2016-11-04 Thread Guido Günther
On Thu, Nov 03, 2016 at 06:47:28PM +, Steve McIntyre wrote: > Hey folks, > > I'm in Seattle for the Debian Cloud sprint and it's going really > well. I'll post a report in a few days summarising what we've > done. But, in the meantime, there's something that has come up which I > think merits

Bug#843158: ITP: gpxpy -- GPX file parser and GPS track manipulation library

2016-11-04 Thread Dominik George
Package: wnpp Severity: wishlist Owner: Dominik George -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 * Package name: gpxpy Version : 1.1.1 Upstream Author : Tomo Krajina * URL : http://www.trackprofiler.com/gpxpy/index.html * License : Apache Programming L

Re: unattended-upgrades by default?

2016-11-04 Thread Roland Mas
Guido Günther, 2016-11-04 12:26:51 +0100 : [...] > Please do. We should also enable needsrestart, whatmaps, checkrestart > or similar to restart affected services after these upgrades otherwise > the e.g. openssl update might go without effect until openssh, bind, > get restarted manually or reb

Re: unattended-upgrades by default?

2016-11-04 Thread Samuel Thibault
Roland Mas, on Fri 04 Nov 2016 13:29:02 +0100, wrote: > Guido Günther, 2016-11-04 12:26:51 +0100 : > > Please do. We should also enable needsrestart, whatmaps, checkrestart > > or similar to restart affected services after these upgrades otherwise > > the e.g. openssl update might go without effect

Re: unattended-upgrades by default?

2016-11-04 Thread Luca Capello
Hi there!, On Fri, 04 Nov 2016 12:26:51 +0100, Guido Günther wrote: > On Thu, Nov 03, 2016 at 06:47:28PM +, Steve McIntyre wrote: > > To solve the issue and provide security updates by default, I'm > > proposing that we should switch to installing unattended-upgrades by > > default (and enabli

Re: unattended-upgrades by default?

2016-11-04 Thread Alexandre Detiste
2016-11-04 13:29 GMT+01:00 Roland Mas : > Tangentially related: is there something similar for kernels? My > monitoring setup currently compares the age of the most recent file in > /boot with the uptime, but I feel there must be something more proper > somewhere. Unattended-Upgrades can also han

Re: unattended-upgrades by default?

2016-11-04 Thread Jonas Smedegaard
Quoting Guido Günther (2016-11-04 12:26:51) > We should also enable needsrestart, whatmaps, checkrestart or similar > to restart affected services after these upgrades otherwise the e.g. > openssl update might go without effect until openssh, bind, > get restarted manually or rebooted. needres

Re: unattended-upgrades by default?

2016-11-04 Thread Holger Levsen
On Fri, Nov 04, 2016 at 02:13:35PM +0100, Luca Capello wrote: > I still think that a non-manual upgrade (i.e. an upgrade which has not > been checked by a manual process, which means that a scripted upgrade is > not part of it) should not be a default on any OS, but it seems I am the > only one thi

policy-rc.d by default?

2016-11-04 Thread Apollon Oikonomopoulos
On 14:13 Fri 04 Nov , Luca Capello wrote: > I still think that a non-manual upgrade (i.e. an upgrade which has not > been checked by a manual process, which means that a scripted upgrade is > not part of it) should not be a default on any OS, but it seems I am the > only one thinking like this.

Re: DEP14 policy for two dots

2016-11-04 Thread Raphael Hertzog
On Fri, 04 Nov 2016, Ian Jackson wrote: > Raphael Hertzog writes ("Re: DEP14 policy for two dots"): > > We have defined simple "readable" mappings for the common cases that > > we encounter frequently. Now if we need mappings for silly things > > that we don't encounter, I would suggest to use some

Re: DEP14 policy for two dots

2016-11-04 Thread Ian Jackson
Raphael Hertzog writes ("Re: DEP14 policy for two dots"): > On Fri, 04 Nov 2016, Ian Jackson wrote: > > My proposal is reversible. It does not need to be extensible. > > So what about "..."? Would it give ".#.#."? Yes. I said (fixing my bug): > Insert "#": >- between each pair of adjacen

Re: unattended-upgrades by default?

2016-11-04 Thread Timo Juhani Lindfors
Steve McIntyre writes: > To solve the issue and provide security updates by default, I'm > proposing that we should switch to installing unattended-upgrades by > default (and enabling it too) *unless* something else in the > installation is already expected to deal with security updates. Sounds l

Re: policy-rc.d by default?

2016-11-04 Thread Evgeni Golov
On Fri, Nov 04, 2016 at 03:53:55PM +0200, Apollon Oikonomopoulos wrote: > On 14:13 Fri 04 Nov , Luca Capello wrote: > > I still think that a non-manual upgrade (i.e. an upgrade which has not > > been checked by a manual process, which means that a scripted upgrade is > > not part of it) should

Re: policy-rc.d by default?

2016-11-04 Thread Apollon Oikonomopoulos
On 16:07 Fri 04 Nov , Evgeni Golov wrote: > On Fri, Nov 04, 2016 at 03:53:55PM +0200, Apollon Oikonomopoulos wrote: > > While enabling unattended-upgrades by default is definitely a step > > towards better security, it would be great if we could also provide > > users/admins with an easy opt-ou

Re: unattended-upgrades by default?

2016-11-04 Thread Rhonda D'Vine
Hi! * Steve McIntyre [2016-11-03 19:47:28 CET]: > One of the topics that we've been talking about yesterday is automatic > software upgrades of cloud images. Some of the cloud platform > providers really want this so that unsophisticated / inexperienced > users of Debian images on their plat

Bug#843174: ITP: remglk -- Remote-procedure-call Glk library

2016-11-04 Thread Christoph Ender
Package: wnpp Severity: wishlist Owner: Christoph Ender * Package name: remglk Version : 0.2.3 Upstream Author : Andrew Plotkin * URL : http://eblong.com/zarf/glk/remglk/docs.html * License : MIT Programming Lang: C Description : Remote-procedure-call

Re: unattended-upgrades by default?

2016-11-04 Thread Sandro Tosi
On Fri, Nov 4, 2016 at 9:13 AM, Luca Capello wrote: > > I still think that a non-manual upgrade (i.e. an upgrade which has not > been checked by a manual process, which means that a scripted upgrade is > not part of it) should not be a default on any OS, but it seems I am the > only one thinking l

Bug#843185: ITP: aravis -- A vision library for genicam based cameras

2016-11-04 Thread Chiara Marmo
Package: wnpp Owner: Ole Streicher Severity: wishlist X-Debbugs-Cc: debian-devel@lists.debian.org,debian-as...@lists.debian.org * Package name: aravis Version : 0.5 Upstream Author : Emmanuel Pacaud * URL : https://github.com/AravisProject/aravis * License : L

Bug#843186: ITP: node-ignore-by-default -- A list of directories you should ignore by default

2016-11-04 Thread Shanavas M
Package: wnpp Severity: wishlist Owner: Shanavas M X-Debbugs-CC: debian-devel@lists.debian.org * Package name: node-ignore-by-default Version : 1.0.1 Upstream Author : Mark Wubben (https://novemberborn.net/) * URL : https://github.com/novemberborn/ignore-by-default#rea

Bug#843188: ITP: freeture -- A Free software to capTure meteors

2016-11-04 Thread Chiara Marmo
Package: wnpp Owner: Chiara Marmo Severity: wishlist X-Debbugs-Cc: debian-devel@lists.debian.org,debian-as...@lists.debian.org * Package name: freeture Version : 1.1 Upstream Author : Yoan Audureau * URL : https://github.com/fripon/freeture * License : GPL-3.0

Bug#843189: ITP: prometheus-blackbox-exporter -- Prometheus exporter for blackbox monitoring

2016-11-04 Thread Filippo Giunchedi
Package: wnpp Severity: wishlist Owner: Filippo Giunchedi * Package name: prometheus-blackbox-exporter Version : 0.2.0+git20160930.6.8cf9605-1 Upstream Author : Prometheus Authors * URL : https://github.com/prometheus/blackbox_exporter * License : Apache-2.0

Bug#843190: ITP: elpa-ido-vertical-mode -- make ido-mode display vertically

2016-11-04 Thread Lev Lamberov
Package: wnpp Severity: wishlist Owner: Lev Lamberov * Package name: elpa-ido-vertical-mode Version : 0.1.6 Upstream Author : Steven Degutis * URL : https://github.com/creichert/ido-vertical-mode.el * License : GPL-3+ Programming Lang: Emacs Lisp Descripti

Bug#805268: Bug #805268: ITA: syslinux -- collection of bootloaders (DOS FAT and NTFS bootloader)

2016-11-04 Thread Christian Seiler
X-Debbugs-Cc: debian-devel@lists.debian.org Control: owner -1 ! Control: retitle -1 ITA: syslinux -- collection of bootloaders (DOS FAT and NTFS bootloader) On Mon, 16 Nov 2015 08:29:30 + Mattia Rizzolo wrote: > Some information about this package: > > Homepage: http://www.syslinux.org/ > P

Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Ralf Treinen
Hi, in the Colis project (which aims at analyzing maintainer scripts) we found 39 maintainer scripts in stable which do not start on #!. The list is attached. Policy 6.1 says about maintainer scripts: if they are scripts (which is recommended), they must start with the usual #! convention. A

Re: unattended-upgrades by default?

2016-11-04 Thread Noah Meyerhans
On Fri, Nov 04, 2016 at 04:15:58PM +0100, Rhonda D'Vine wrote: > In theory I'm all for it, but there definitely should be some more fine > tuning for that. Please don't auto-restart varnish by needrestart, it > puts a lot of load on the backend which might be a very bad idea. And > the downtime

Re: unattended-upgrades by default?

2016-11-04 Thread Adrian Bunk
On Thu, Nov 03, 2016 at 06:47:28PM +, Steve McIntyre wrote: >... > * it will be a different experience compared to what people will get >when installing Debian normally, using d-i / debootstrap. Most >(all?) of our desktop environments already have some automatic >notification of a

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Adrian Bunk
On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: > Hi, Hi Ralf, > in the Colis project (which aims at analyzing maintainer scripts) we > found 39 maintainer scripts in stable which do not start on #!. The > list is attached. Policy 6.1 says about maintainer scripts: > > if they ar

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Sven Joachim
On 2016-11-04 21:22 +0100, Ralf Treinen wrote: > Hi, > > in the Colis project (which aims at analyzing maintainer scripts) we > found 39 maintainer scripts in stable which do not start on #!. The > list is attached. Policy 6.1 says about maintainer scripts: > > if they are scripts (which is reco

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Scott Kitterman
On November 4, 2016 5:01:31 PM EDT, Adrian Bunk wrote: >On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: >> Hi, > >Hi Ralf, > >> in the Colis project (which aims at analyzing maintainer scripts) we >> found 39 maintainer scripts in stable which do not start on #!. The >> list is att

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Ralf Treinen
On Fri, Nov 04, 2016 at 11:01:31PM +0200, Adrian Bunk wrote: > On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: > > Hi, > > Hi Ralf, > > > in the Colis project (which aims at analyzing maintainer scripts) we > > found 39 maintainer scripts in stable which do not start on #!. The > >

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Adrian Bunk
On Fri, Nov 04, 2016 at 05:05:33PM -0400, Scott Kitterman wrote: > > > On November 4, 2016 5:01:31 PM EDT, Adrian Bunk wrote: > >On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: > >> Hi, > > > >Hi Ralf, > > > >> in the Colis project (which aims at analyzing maintainer scripts) we >

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Adrian Bunk
On Fri, Nov 04, 2016 at 10:21:13PM +0100, Ralf Treinen wrote: > On Fri, Nov 04, 2016 at 11:01:31PM +0200, Adrian Bunk wrote: > > On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: > > > Hi, > > > > Hi Ralf, > > > > > in the Colis project (which aims at analyzing maintainer scripts) we

Re: OpenSSL 1.1.0

2016-11-04 Thread Adrian Bunk
On Thu, Nov 03, 2016 at 10:49:30AM -0300, Lisandro Damián Nicanor Pérez Meyer wrote: > On jueves, 3 de noviembre de 2016 12:34:23 P. M. ART Tino Mettler wrote: > > On Wed, Nov 02, 2016 at 14:02:52 -0300, Lisandro Damián Nicanor Pérez Meyer > > wrote: > > > > [...] > > > > > Today we the Qt/KDE t

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Russ Allbery
Ralf Treinen writes: > in the Colis project (which aims at analyzing maintainer scripts) we > found 39 maintainer scripts in stable which do not start on #!. The > list is attached. Policy 6.1 says about maintainer scripts: > if they are scripts (which is recommended), they must start with the

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Sven Joachim
On 2016-11-04 15:03 -0700, Russ Allbery wrote: > Ralf Treinen writes: > >> in the Colis project (which aims at analyzing maintainer scripts) we >> found 39 maintainer scripts in stable which do not start on #!. The >> list is attached. Policy 6.1 says about maintainer scripts: > >> if they are

Re: unattended-upgrades by default?

2016-11-04 Thread Holger Levsen
On Fri, Nov 04, 2016 at 10:51:15PM +0200, Adrian Bunk wrote: > Should Debian also default to automatically reboot? > > If the answer is "no", then nothing is a solution that does not also > solve how to notify the user when a new security update of the kernel > was automatically installed on his

Re: unattended-upgrades by default?

2016-11-04 Thread Adrian Bunk
On Fri, Nov 04, 2016 at 10:27:00PM +, Holger Levsen wrote: > On Fri, Nov 04, 2016 at 10:51:15PM +0200, Adrian Bunk wrote: > > Should Debian also default to automatically reboot? > > > > If the answer is "no", then nothing is a solution that does not also > > solve how to notify the user when

Re: unattended-upgrades by default?

2016-11-04 Thread Josh Triplett
Rhonda D'Vine wrote: > * Steve McIntyre [2016-11-03 19:47:28 CET]: > > One of the topics that we've been talking about yesterday is automatic > > software upgrades of cloud images. Some of the cloud platform > > providers really want this so that unsophisticated / inexperienced > > users of Debian

Mini Debian Conference Japan 2016 Call for Proposals

2016-11-04 Thread Roger Shimizu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Mini Debian Conference Japan 2016 Call for proposals deadline is the end of next weekend Nov. 13 (Sunday). Please submit your talk proposal, which main topic is about Debian. It is also fine if anything related to the software running on Debian, o

Fwd: Bug#843207: ITP: man2texi -- man page to texinfo file converter

2016-11-04 Thread Paul Hardy
Forwarding to debian-devel... -- Forwarded message -- From: Paul Hardy Date: Fri, Nov 4, 2016 at 4:38 PM Subject: Bug#843207: ITP: man2texi -- man page to texinfo file converter To: sub...@bugs.debian.org Cc: Matt Kraai , "Nelson H. F. Beebe" , Andreas Metzler Package: wnpp Se

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Holger Levsen
Hi Ralf, On Fri, Nov 04, 2016 at 09:22:02PM +0100, Ralf Treinen wrote: > in the Colis project (which aims at analyzing maintainer scripts) we > found 39 maintainer scripts in stable which do not start on #!. The > list is attached. Policy 6.1 says about maintainer scripts: > > if they are scrip

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Holger Levsen
On Fri, Nov 04, 2016 at 03:03:09PM -0700, Russ Allbery wrote: > (We unfortunately don't have good language for this in Policy. Right now, > the must/should distinction conflates two things: severity, and certainty. > We used to have the same problem in Lintian and explicitly split severity > and c

Re: Intended MBF: maintainer scripts not starting on #!

2016-11-04 Thread Russ Allbery
Holger Levsen writes: > On Fri, Nov 04, 2016 at 03:03:09PM -0700, Russ Allbery wrote: >> (We unfortunately don't have good language for this in Policy. Right >> now, the must/should distinction conflates two things: severity, and >> certainty. We used to have the same problem in Lintian and exp

Re: Bug#843185: ITP: aravis -- A vision library for genicam based cameras

2016-11-04 Thread Paul Wise
On Sat, Nov 5, 2016 at 1:13 AM, Chiara Marmo wrote: > Description : a vision library for genicam based cameras It would be great if you could add some metadata about which hardware is supported. By doing so, you will enable users to discover your package when they plug in a new device supp