On Fri, 22 Mar 2013 08:53:05 +0100, Thomas Koch wrote:
> Second thing is with source tarballs or Git repos. For building a Debian
> package we need a source tarball that does not contain any non-free or binary
> artifacts.
What's equally annyoing are tarballs/zipfiles that don't contain the
co
Le 22/03/2013 09:22, Thomas Koch a écrit :
> However I'm not sure whether a source.jar produced by maven can be used to
> build a Debian package. I assume that generated java code from tools like
> protobuf or jflex is included in the source.jar? We don't want generated
> source code but the "r
Le 22/03/2013 08:53, Thomas Koch a écrit :
> thank you for offering your help. As I wrote, it would be very helpful, if
> somebody (you) could start to lobby for sane artifact signing on Apache
> Conferences and on mailing lists.
>
> It doesn't make sense to sign release artifacts with GPG keys
Manfred Moser:
> Some clarifications..
dito, thx for your reply.
> > - Release source tarballs, not only binaries to maven central.
>
> This has been a requirement for open source components in Central for
> years. You can find them with the -sources classifier in a jar file. E.g.
> looking at
>
Emmanuel Bourg:
> Hi Thomas,
>
> I'm a committer on the Apache Commons project, if you have an itch to
> scratch with one of the libraries (commons-lang, commons-collections,
> etc) I should be able to help quickly.
>
> Do you have specific examples of Apache projects affected by the issues
> you
Le 22/03/2013 00:16, Hilko Bengen a écrit :
> How is the changelog and the copyright file generated?
They aren't. The changelog could be generated from the changes.xml file
in the project though. Not sure a copyright file could be generated
reliably.
> How is the version number for the .deb gen
Emmanuel Bourg writes:
> Thank you for taking the time to look into jdeb.
> My reasoning is the following:
> - The binary package must be built from the source
> - This is currently done with a fairly sophisticated make file
> - We are free to use the build tools we want (is that correct?)
> - S
* Emmanuel Bourg:
> My reasoning is the following:
> - The binary package must be built from the source
> - This is currently done with a fairly sophisticated make file
True for CDBS, with the main problem there being that CDBS is neither
appropriately documented nor particularly debuggable.
IMO
Le 21/03/2013 21:47, Hilko Bengen a écrit :
> Looking entirely from the Debian perspective, I'd have to say that this
> is totally backwards and can't be used. That perspective is flawed, but,
> well, it's my starting point...
Thank you for taking the time to look into jdeb.
My reasoning is the
* Emmanuel Bourg:
> Le 18/03/2013 23:42, Hilko Bengen a écrit :
>
>> A software developer who wants to use Maven as a build tool on Debian
>> and considers himself "a mere user" of the distribution should find that
>> the distribution is not working against but for him. And It must be easy
>> for
On Tue, Mar 19, 2013 at 01:10 +0100, Hilko Bengen wrote:
> * Wolodja Wentland:
>
> > On Sun, Mar 17, 2013 at 16:47 +0100, Hilko Bengen wrote:
> >
> >> Initially, all I wanted to do was to build a proper Debian package for
> >> ElasticSearch (#660826). It turns out that some needed
> >> build-depen
* Wolodja Wentland:
> On Sun, Mar 17, 2013 at 16:47 +0100, Hilko Bengen wrote:
>
>> Initially, all I wanted to do was to build a proper Debian package for
>> ElasticSearch (#660826). It turns out that some needed
>> build-dependencies are not in Debian yet, so I start with version 2 of
>> jackson-
Hi Thomas,
I'm a committer on the Apache Commons project, if you have an itch to
scratch with one of the libraries (commons-lang, commons-collections,
etc) I should be able to help quickly.
Do you have specific examples of Apache projects affected by the issues
you mentioned?
Emmanuel Bourg
Le 18/03/2013 23:42, Hilko Bengen a écrit :
> A software developer who wants to use Maven as a build tool on Debian
> and considers himself "a mere user" of the distribution should find that
> the distribution is not working against but for him. And It must be easy
> for a newcomer to turn Maven-b
> Le 18/03/2013 22:44, Manfred Moser a écrit :
>
>> If there is interest in the debian community to have a controlled
>> repository server running that only provides approved jars you could run
>> Sonatype Professsional. As an open source project you could get a free
>> license. If there is any int
* Emmanuel Bourg:
> What about leveraging the Maven infrastructure and downloading the
> dependencies directly from the central Maven repository (or a Debian
> operated mirror) instead of repackaging every single jar into it's own
> deb file (as long as it's open source of course) ?
Packages in t
Le 18/03/2013 22:44, Manfred Moser a écrit :
> If there is interest in the debian community to have a controlled
> repository server running that only provides approved jars you could run
> Sonatype Professsional. As an open source project you could get a free
> license. If there is any interest i
Hi all,
Some clarifications..
> Hi Emmanuel,
>
> I'm happy to find someone from the java side, especially from apache here
> on a
> debian list. Perhaps you could help us as an intermediator and raise
> awareness
> for the pain we have when dealing with java in general and often the ASF
> in
> sp
Hi Emmanuel,
I'm happy to find someone from the java side, especially from apache here on a
debian list. Perhaps you could help us as an intermediator and raise awareness
for the pain we have when dealing with java in general and often the ASF in
special.
Some points that come to my mind:
- D
Hilko Bengen:
> Hi,
>
> what follows is a somewhat rant-y account of the things that can go
> wrong when someone who is experienced in Debian packaging (but rather
> new to this Java thing) tries to prepare pacakges that are built using
> Maven:
Hi Hilko,
thank you for working on java stuff. I c
Hello,
On Mon, Mar 18, 2013 at 10:27 AM, Emmanuel Bourg wrote:
> Le 18/03/2013 02:35, Scott Howard a écrit :
>
>> A Debian operated mirror wouldn't be
>> enough, we'd need volunteers scouring the licensing and source code of
>> all the libraries in that mirror.
>
> Considering that the POM decl
Le 18/03/2013 02:35, Scott Howard a écrit :
> A Debian operated mirror wouldn't be
> enough, we'd need volunteers scouring the licensing and source code of
> all the libraries in that mirror.
Considering that the POM declares the license used this could be
automated for most of the libraries.
E
On Mon, Mar 18, 2013 at 09:27 +, Wolodja Wentland wrote:
> On Sun, Mar 17, 2013 at 16:47 +0100, Hilko Bengen wrote:
>
> > Initially, all I wanted to do was to build a proper Debian package for
> > ElasticSearch (#660826). It turns out that some needed
> > build-dependencies are not in Debian y
On Sun, Mar 17, 2013 at 16:47 +0100, Hilko Bengen wrote:
> Initially, all I wanted to do was to build a proper Debian package for
> ElasticSearch (#660826). It turns out that some needed
> build-dependencies are not in Debian yet, so I start with version 2 of
> jackson-core by downloading the jack
On 03/17/2013 06:35 PM, Scott Howard wrote:
> On Sun, Mar 17, 2013 at 4:59 PM, Emmanuel Bourg wrote:
>> Le 17/03/2013 16:47, Hilko Bengen a écrit :
>>
>>> I don't mean to offend anyone here nor belittle hard work that has gone
>>> into the mentioned tools, but can't we do better than this?
>>
>> W
On Sun, Mar 17, 2013 at 4:59 PM, Emmanuel Bourg wrote:
> Le 17/03/2013 16:47, Hilko Bengen a écrit :
>
>> I don't mean to offend anyone here nor belittle hard work that has gone
>> into the mentioned tools, but can't we do better than this?
>
> What about leveraging the Maven infrastructure and do
Le 17/03/2013 16:47, Hilko Bengen a écrit :
> I don't mean to offend anyone here nor belittle hard work that has gone
> into the mentioned tools, but can't we do better than this?
What about leveraging the Maven infrastructure and downloading the
dependencies directly from the central Maven repos
27 matches
Mail list logo
