Hello,
a few days ago, I ran uscan on a package where I knew there was a new
upstream version - just to encounter an validation error since the
keys in debian/upstream/signing-key.asc had expired.
After that, things escalated a little, and eventually I wrote a script
that downloads d/u/s-k for ea
Christoph Biedl wrote...
> PS: Those who want to argue lintian should for check for such expired
> key, I couldn't agree more. Please read the discussion in #985793 first.
Sorry, that should have been #964971.
signature.asc
Description: PGP signature
Hi,
> A General Resolution has been started about Richard Stallman's
> readmission to the FSF board.
>
> It currently has 1 available options, but other proposals have been suggested.
I explicitly do NOT support this GR.
My opinion, as laid out at
https://github.com/rms-open-letter/rms-open-let
Le vendredi 26 mars 2021 à 11:05:26+0100, Dominik George a écrit :
> Hi,
>
> > A General Resolution has been started about Richard Stallman's
> > readmission to the FSF board.
> >
> > It currently has 1 available options, but other proposals have been
> > suggested.
>
> I explicitly do NOT supp
Package: wnpp
Severity: wishlist
Owner: Peymaneh Nejad
* Package name: golang-github-aryann-difflib-dev
Version : 0.0~git20170710.e206f87-1
Upstream Author : Aryan Naraghi
* URL : https://github.com/aryann/difflib
* License : Expat
Programming Lang: Go
De
[replying only to -vote - please avoid cross-posting!]
Quoting Dominik George (2021-03-26 11:05:26)
> Hi,
>
> > A General Resolution has been started about Richard Stallman's
> > readmission to the FSF board.
> >
> > It currently has 1 available options, but other proposals have been
> > sugges
That letter is an hysteric attack toward free software, the FSF, GNU, and RMS
in particular. Gratuitous charges against RMS look totally undocumented and
unexcused.
Please see:
An orthodox analysis entitled Justice for Dr. Richard Matthew Stallman, which
recaps the whole story.
https://jorge
Hi,
On Fri, Mar 26, 2021 at 11:50:31AM +0100, Jonas Smedegaard wrote:
> [replying only to -vote - please avoid cross-posting!]
OK, but you actually replied only to -devel instead of -vote.
>
> Quoting Dominik George (2021-03-26 11:05:26)
> > Hi,
> >
> > > A General Resolution has been started
Package: wnpp
Severity: wishlist
Owner: Sudip Mukherjee
X-Debbugs-Cc: debian-devel@lists.debian.org
* Package name: wiredpanda
Version : v3.0.0
Upstream Author : Davi Morales, Fábio Cappabianco, Lucas Lellis, Rodrigo
Torres and Vinícius Miguel
* URL : https://github.c
Le vendredi 26 mars 2021 à 08:22:05+0300, Sergey B Kirpichev a écrit :
> Hello,
>
> I don't want to be associated with the organization, being part of the
> witch hunt like this one https://rms-open-letter.github.io/.
> Unfortunately, it seems the only option to be not involved in all
> that - lea
Seconded.
José Vieira
- Mensagem de Dominik George -
Data: Fri, 26 Mar 2021 11:05:26 +0100
De: Dominik George
Assunto: Re: General Resolution: Richard Stallman's readmission to
the FSF board
Para: debian-v...@lists.debian.org
Hi,
A General Resolution has been started
On Fri, Mar 26, 2021 at 02:08:34PM +0100, Pierre-Elliott Bécue wrote:
> I'm not trying to refrain you from leaving
Well, lets I'll try last time to make things clear as much as I can.
1) Don't get me wrong, this is the end of story, started not today.
2) It's not something like "this hurts me, pl
> 2) It's not something like "this hurts me, please do Debian
>great again - or I'll leave". I'm not in the camp of SJW's and won't
>share their methods.
You're right, it's more something like "mimimi, I will leave now
because I want to make a point, maybe try to come back later, but in
a
Le vendredi 26 mars 2021 à 16:50:06+0300, Sergey B Kirpichev a écrit :
> On Fri, Mar 26, 2021 at 02:08:34PM +0100, Pierre-Elliott Bécue wrote:
> > I'm not trying to refrain you from leaving
>
> Well, lets I'll try last time to make things clear as much as I can.
>
> 1) Don't get me wrong, this is
The FSF with out RMS would be like the Linux Foundations with out
Linus. With their personality quirks it is sometimes hard for some
people to like them but at the end of the day they get the job done.
RMS has done alot for FLOSS it would be sad to see his contributions
come to a halt but he can al
Package: wnpp
Severity: wishlist
Owner: Nilesh Patra
X-Debbugs-Cc: debian-devel@lists.debian.org, nil...@debian.org
* Package name: nthash
Version : 2.2.0-1
Upstream Author : Hamid Mohamadi
* URL : https://github.com/bcgsc/ntHash
* License : Expat
Programming
Christoph Biedl writes:
> Of course I understand there are various reasons why this happens, and
> several are not the maintainer's fault. But at least in some cases it's
> obvious the maintainers didn't care: When there has been an upload with
> a new upstream version released after the expirati
Timothy M Butterworth writes:
> The FSF with out RMS would be like the Linux Foundations with out
> Linus.
To me, and I dare guess, to most people, the actions of RMS are not
being weighted against the important contributions he has made. Many of
us believe that he has crossed certain lines tha
On Fri, 2021-03-26 at 09:06 -0700, Russ Allbery wrote:
> I'm not all that familiar with the intended semantics of OpenPGP key
> expirations, but intuitively I think a signature made before the
> expiration should be considered valid, even if the key has now
> expired and thus shouldn't be used to m
Ansgar writes:
> On Fri, 2021-03-26 at 09:06 -0700, Russ Allbery wrote:
>> I'm not all that familiar with the intended semantics of OpenPGP key
>> expirations, but intuitively I think a signature made before the
>> expiration should be considered valid, even if the key has now expired
>> and thus
> "Dominik" == Dominik George writes:
Dominik> With all due respect to everyone who has been offended by
Dominik> Richard Stallman, feels oppressed by him, or is negatively
Dominik> affected by his views — every single such person has to be
Dominik> heard, their fears and sorr
Dear Timothy,
Le vendredi 26 mars 2021 à 11:01:14-0400, Timothy M Butterworth a écrit :
> The FSF with out RMS would be like the Linux Foundations with out
> Linus. With their personality quirks it is sometimes hard for some
> people to like them but at the end of the day they get the job done.
>
Le vendredi 26 mars 2021 à 11:46:10+0100, Pierre-Elliott Bécue a écrit :
> Le vendredi 26 mars 2021 à 11:05:26+0100, Dominik George a écrit :
> > Hi,
> >
> > > A General Resolution has been started about Richard Stallman's
> > > readmission to the FSF board.
> > >
> > > It currently has 1 availab
Hi,
Regardless of supporting Richard Stallman or not returning to the FSF,
its organisational structure and its way of taking decisions, what is
certain is that this situation will cause division, hatred and grudge
within different Free Software communities and that will be the most
harmful thing
On Fri, Mar 26, 2021 at 12:14:19PM -0600, jathan wrote:
> I propose that in a personal way those who want to sign or not sign any
> of the letters, go ahead, but that no public statement be made on behalf
> of the Debian Project in an official way.
Such amendment was already proposed, you can secon
On 26/03/2021 18:14, jathan wrote:
Hi,
Regardless of supporting Richard Stallman or not returning to the FSF,
its organisational structure and its way of taking decisions, what is
certain is that this situation will cause division, hatred and grudge
within different Free Software communities and
On Fri, Mar 26, 2021 at 09:18:19AM -0700, Steve Langasek wrote:
> On Fri, Mar 26, 2021 at 10:52:52AM +0300, Michael Shigorin wrote:
> > > He has shown himself to be misogynist, ableist, and
> > > transphobic, among other serious accusations of impropriety.
> > > These sorts of beliefs have no place
* Russ Allbery [2021-03-26 09:35]:
We do have a trusted timestamp for the point at which the upstream tarball
and signature were uploaded to the Debian archive, though, so if the key
had not yet expired at that point, I think we can infer it wasn't expired
when the signature was made.
Once the
On Fri, Mar 26, 2021 at 11:23:21AM -0700, Steve Langasek wrote:
> On Fri, Mar 26, 2021 at 09:14:16PM +0300, Michael Shigorin wrote:
> > On Fri, Mar 26, 2021 at 09:18:19AM -0700, Steve Langasek wrote:
> > > > You absolutely have NO right to speak for all of the community
> > ..so do go and apologize
On 2021-03-26 09:35:31 -0700 (-0700), Russ Allbery wrote:
[...]
> We do have a trusted timestamp for the point at which the upstream
> tarball and signature were uploaded to the Debian archive, though,
> so if the key had not yet expired at that point, I think we can
> infer it wasn't expired when
Timo Röhling writes:
> Once the package has been uploaded, it does no longer make a difference
> whether or not the upstream package was signed in the first place: any
> package will be protected by the Debian archive keys anyway.
If this were the case, it would be fine to re-sign *.dsc files, b
Hi,
Please descalate, it is an emergency. The RMS debate is very difficult
for many people I guess, painful or, at least, energy consumer. It often
results to ghoughts about the compliance of some mails with the code of
conduct. But those 2 mails are clearly not acceptable from the formal
poi
On 2021/03/26 21:22, Michael Shigorin wrote:
> Jonathan, I hereby demand that the Debian Project gets rid
> of this manipulative, insultive, divisive and libelous member.
> He (them? it?) can't even stand by the rules (pro|im)posed.
I'm asking both of you, and everyone else for that matter, to kee
* Russ Allbery [2021-03-26 13:01]:
If this were the case, it would be fine to re-sign *.dsc files, but there
has been quite a lot of opposition to that in the past. The upstream
signing key is at least as useful as the signature on the *.dsc file, for
exactly the same reasons.
I do not underst
* Russ Allbery [2021-03-26 13:01]:
Personally, I'd be happy to drop the upstream signing keys from all of my
packages and save a bit of work. I never use them as the package
maintainer because I'm the only upstream of my packaging that signs
packages, and therefore I already know the tarballs a
Timo Röhling writes:
> * Russ Allbery [2021-03-26 13:01]:
>> If this were the case, it would be fine to re-sign *.dsc files, but
>> there has been quite a lot of opposition to that in the past. The
>> upstream signing key is at least as useful as the signature on the
>> *.dsc file, for exactly
Hi,
I just learned that what was formerly something like
https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
.*/archive/#PREFIX#@ANY_VERSION@\.tar\.gz
has to be
https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
.*/archive.*/#PREFIX#@ANY_VERSION@\.tar\.gz
now (at least) si
Hi Andreas,
* Andreas Tille [2021-03-26 22:38]:
https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
.*/archive.*/#PREFIX#@ANY_VERSION@\.tar\.gz
As .* also matches forward slashes, I use
https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
.*/#PREFIX#@ANY_VERSION@\.tar\.gz
Hi Timo,
On Fri, Mar 26, 2021 at 10:55:14PM +0100, Timo Röhling wrote:
> Hi Andreas,
>
> * Andreas Tille [2021-03-26 22:38]:
> > https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
> > .*/archive.*/#PREFIX#@ANY_VERSION@\.tar\.gz
>
> As .* also matches forward slashes, I use
>
> ht
Le 26/03/2021 à 22:38, Andreas Tille a écrit :
> Hi,
>
> I just learned that what was formerly something like
>
>https://github.com/#GITHUBUSER#/#PACKAGE#/releases/latest
> .*/archive/#PREFIX#@ANY_VERSION@\.tar\.gz
>
> has to be
>
>https://github.com/#GITHUBUSER#/#PACKAGE#/releases/lat
Russ Allbery wrote...
> I think there's a bit of subtlety here in that if upstream uses a key with
> an expiration that they periodically extend (to provide a time-based
> cut-off if they lose control of the key for whatever reason, for
> instance), and that package is rarely updated because it's
Hi,
> The problem is that for good reason, we no longer trust the FSF under
> its current governance to do that. What you are affectively asking
> people to do is to pursue justice in regard to things rms did in a forum
> where rms has much more power than they do and where rms (and the voting
>
I'm asking both of you, and everyone else for that matter, to keep this
off of debian-devel. We're freezing for release, this is debian-devel,
not twitter, if you have disagreements to figure out, please do it
elsewhere.
This makes sense, but unfortunately the email on debian-announce went
o
On Fri, Mar 26, 2021 at 11:43:27PM +0100, Yadd wrote:
> Le 26/03/2021 à 22:38, Andreas Tille a écrit :
> > I just learned that what was formerly something like
> >
> > .*/archive/
> >
> > became now
> >
> > .*/archive/refs/tags/
> >
> > This breaks at least all Debian Med packages r
44 matches
Mail list logo
