Re: Problem sending my key to keyring.debian.org

2018-10-03 Thread Chris Knadle
Joseph Herlant: > Hi, > > I'm having issues sending my updated key to keyring.debian.org: > > $ gpg --keyserver keyring.debian.org --send-keys > E823DA111E22D7857E1D865863F7800A23D7B252 > gpg: sending key 63F7800A23D7B252 to hkp://keyring.debian.org > gpg: keyserver send failed: No keyserver avai

Bug#910185: ITP: wl-clipboard -- wayland copy and paste command line utilities

2018-10-03 Thread Felipe Sateler
Package: wnpp Severity: wishlist Owner: Felipe Sateler * Package name: wl-clipboard Version : 0.0.20180901 Upstream Author : Sergey Bugaev * URL : https://github.com/bugaevc/wl-clipboard * License : GPL3+ Programming Lang: C Description : wayland copy

Bug#910186: ITP: freedict-wikdict -- bilingual dictionaries from WikDict converted by FreeDict

2018-10-03 Thread Sebastian Humenda
Package: wnpp Severity: wishlist Owner: Sebastian Humenda * Package name: freedict-wikdict Version : 2018.10.20 Upstream Author : FreeDict Developers * URL : https://freedict.org * License : GPL Programming Lang: Python, Perl, XSL, Make Description : bi

Bug#910187: ITP: eclipse-platform-ua -- Eclipse Help System Core

2018-10-03 Thread Jochen Sprickerhof
Package: wnpp Severity: wishlist Owner: Jochen Sprickerhof * Package name: eclipse-platform-ua Version : 4.7.3 Upstream Author : Eclipse Foundation, Inc. * URL : https://www.eclipse.org/eclipse/platform-ua/main.html * License : EPL-1.0 Programming Lang: Java

Re: Re-evaluating architecture inclusion in unstable/experimental

2018-10-03 Thread Philipp Kern
On 29.09.2018 00:30, John Paul Adrian Glaubitz wrote: > On 9/28/18 11:26 PM, Adam D. Barratt wrote: >> On Fri, 2018-09-28 at 14:16 +0200, John Paul Adrian Glaubitz wrote: >>> So, it's not always a purely technical decision whether a port >>> remains a release architecture. It's also often highly po

Re: Re-evaluating architecture inclusion in unstable/experimental

2018-10-03 Thread Jonathan Dowland
On Sat, Sep 29, 2018 at 05:05:17PM +0200, John Paul Adrian Glaubitz wrote: Well, I have had people from IBM fix 32-bit PowerPC code. There is naturally more involvement behind the 64-bit stuff because that's where the commercial interests are. The kernel itself dropped 32bit powerpc support yea

Re: Re-evaluating architecture inclusion in unstable/experimental

2018-10-03 Thread Dmitry Eremin-Solenikov
ср, 3 окт. 2018 г. в 17:48, Jonathan Dowland : > > On Sat, Sep 29, 2018 at 05:05:17PM +0200, John Paul Adrian Glaubitz > wrote: > >Well, I have had people from IBM fix 32-bit PowerPC code. There is > >naturally more involvement behind the 64-bit stuff because that's where > >the commercial interest

News from devscripts

2018-10-03 Thread Xavier
Dear fellow developers, devscripts 2.18.5 has been released and brings some new uscan features for developers: - in git mode, uscan is now able to verify signed tags (#827065). Example: version=4 opts="mode=git,pgpmode=gittag" \ https://github.com/rs/net-server-mail refs/tags/v(

Re: News from devscripts

2018-10-03 Thread Roberto C . Sánchez
On Wed, Oct 03, 2018 at 05:42:16PM +0200, Xavier wrote: > Dear fellow developers, > > devscripts 2.18.5 has been released and brings some new uscan features > for developers: > - in git mode, uscan is now able to verify signed tags (#827065). >Example: > > version=4 > opts="mode=git,

Re: Re-evaluating architecture inclusion in unstable/experimental

2018-10-03 Thread John Paul Adrian Glaubitz
Hi Philipp! On 10/3/18 4:29 PM, Philipp Kern wrote: > Please excuse my ignorance, but which architecture do we still have with > 2 GiB address space? The main point of removing s390 was that this was > unsustainable. The 32-bit MIPS architectures have this limitation which causes various build is

Debian packaging, dependency management and the C++ standards meeting

2018-10-03 Thread Jussi Pakkanen
Hi Last week I was at CppCon, which is the biggest C++ developers' conference in the world. There were a lot of talks about dependencies, packaging and deployment and other such things related to Debian. A representative snippet can be seen in this video starting at 1:13:56: https://www.youtube.c

Limiting the power of packages

2018-10-03 Thread Lars Wirzenius
The problem: when a .deb package is installed, upgraded, or removed, the maintainer scripts are run as root and can thus do anything. Sometimes what they do is an unwelcome surprise to the user. For example, the Microsoft Skype .deb and the Google Chrome .deb add to the APT sources lists and APT a

Re: Debian packaging, dependency management and the C++ standards meeting

2018-10-03 Thread Vincas Dargis
On 10/3/18 7:56 PM, Jussi Pakkanen wrote: An alternative, or parallel, approach could be to write a paper outlining the issues and submitting it to the standard body. It seems that papers are The communication channel for C++ ISO, it might be useful to write paper, receive feedback, and improv

Re: Debian packaging, dependency management and the C++ standards meeting

2018-10-03 Thread Jussi Pakkanen
> Well, there are about three meetings per year, and I doubt the next meeting > will be some soft of "definitive" (or will it?) It is the last meeting where things can be added to C++20 so I would call that definitive.

Re: Limiting the power of packages

2018-10-03 Thread Jonathan Dowland
On Wed, Oct 03, 2018 at 08:19:17PM +0300, Lars Wirzenius wrote: A suggestion: we restrict where packages can install files and what maintainer scripts can do. The default should be as safe as we can make it, and packages that need to do things not allowed by the default should declare they that t

Re: Limiting the power of packages

2018-10-03 Thread Mike Hommey
On Wed, Oct 03, 2018 at 08:19:17PM +0300, Lars Wirzenius wrote: > The problem: when a .deb package is installed, upgraded, or removed, > the maintainer scripts are run as root and can thus do anything. > > Sometimes what they do is an unwelcome surprise to the user. For > example, the Microsoft Sk

Re: Limiting the power of packages

2018-10-03 Thread Carl-Valentin Schmitt
in /usr only ?... I thought therefore in later years Linux had created /opt ? Lars Wirzenius schrieb am Mi., 3. Okt. 2018, 19:19: > The problem: when a .deb package is installed, upgraded, or removed, > the maintainer scripts are run as root and can thus do anything. > > Sometimes what they d

Re: Limiting the power of packages

2018-10-03 Thread Carl-Valentin Schmitt
It would be a possibility, for safety to create a new directory only for brandy 3rd-party-software like skype, Google Chrome, Swift, and else Software where huge companies are Sponsors. This would then mean, to create a second sources list for 3rd-party-links. Carl-Valentin Schmitt schrieb am

Re: Limiting the power of packages

2018-10-03 Thread Paul Wise
On Thu, Oct 4, 2018 at 1:19 AM Lars Wirzenius wrote: > The problem: when a .deb package is installed, upgraded, or removed, > the maintainer scripts are run as root and can thus do anything. anarcat wrote this related wiki page that covers this general topic: https://wiki.debian.org/UntrustedDeb

Re: News from devscripts

2018-10-03 Thread Paul Wise
On Wed, Oct 3, 2018 at 11:42 PM Xavier wrote: > devscripts 2.18.5 has been released and brings some new uscan features > for developers: These seem like a candidate for DevNews: https://wiki.debian.org/DeveloperNews -- bye, pabs https://wiki.debian.org/PaulWise

Bug#910252: ITP: libnbcompat -- NetBSD compatibility library

2018-10-03 Thread John Goerzen
Package: wnpp Severity: wishlist Owner: John Goerzen * Package name: libnbcompat Version : 20180822 Upstream Author : Joerg Sonnenberger and the NetBSD PRoject * URL : http://cdn.netbsd.org/pub/pkgsrc/current/pkgsrc/pkgtools/libnbcompat/README.html * License

Bug#910253: ITP: nmtree -- Validates modes, ownership, and contents of directory tree against specification

2018-10-03 Thread John Goerzen
Package: wnpp Severity: wishlist Owner: John Goerzen * Package name: mtree-netbsd Version : 20180822 Upstream Author : Joerg Sonnenberger and NetBSD contributors * URL : http://cdn.netbsd.org/pub/pkgsrc/current/pkgsrc/pkgtools/mtree/README.html * License : B

Re: Sending using my @debian.org in gmail

2018-10-03 Thread Simon Quigley
Hello, On 10/02/2018 09:00 PM, Joseph Herlant wrote: >> I'll add that to the wiki page in case somebody else gets the issue. > > FYI: updated https://wiki.debian.org/MigrateToDDAccount with the details. > Not sure if that would be an issue to mention gmail specifically there > as it's vendor-spec

Re: Limiting the power of packages

2018-10-03 Thread Antoine Beaupré
On 2018-10-04 08:38:09, Paul Wise wrote: > On Thu, Oct 4, 2018 at 1:19 AM Lars Wirzenius wrote: > >> The problem: when a .deb package is installed, upgraded, or removed, >> the maintainer scripts are run as root and can thus do anything. > > anarcat wrote this related wiki page that covers this gen

Re: Bug#910253: ITP: nmtree -- Validates modes, ownership, and contents of directory tree against specification

2018-10-03 Thread Antoine Beaupré
On 2018-10-03 21:03:22, John Goerzen wrote: > Package: wnpp > Severity: wishlist > Owner: John Goerzen > > * Package name: mtree-netbsd > Version : 20180822 > Upstream Author : Joerg Sonnenberger and NetBSD > contributors > * URL : > http://cdn.netbsd.org/pub/pkgsrc/

Re: Limiting the power of packages

2018-10-03 Thread Guillem Jover
Hi! On Thu, 2018-10-04 at 08:38:09 +0800, Paul Wise wrote: > On Thu, Oct 4, 2018 at 1:19 AM Lars Wirzenius wrote: > > The problem: when a .deb package is installed, upgraded, or removed, > > the maintainer scripts are run as root and can thus do anything. Paul prompted a similar discussion the ot

Re: Limiting the power of packages

2018-10-03 Thread Paul Wise
On Thu, Oct 4, 2018 at 11:31 AM Antoine Beaupré wrote: > Yes well, we *could* consider rewriting Debian to be based on > appimage/flatpak/snappy, but that would be a rather controversial > change. I think there are smaller, incremental steps we can take before > that to improve the situation witho