Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Ben Finney
Barry Warsaw writes: > On Dec 04, 2013, at 01:36 PM, Stuart Prescott wrote: > > >Having uscan call "debian/rules get-orig-source" is quite difficult to do in > >a policy-compliant way (as already noted by Jakub) as the location for the > >munged tarball is different. Having uscan call a debian/re

Re: Python 3 as default

2013-12-04 Thread Diane Trout
> Instead, I mean, what would it take for the basic Debian system to install > Python 3 only by default, and have any system scripts that depend on Python > be Python 3. Nothing. I just did a default no-tasks selected debian wheezy system and no version of python was installed. Using a cowbui

Re: Python 3 as default

2013-12-04 Thread Steve Langasek
Hi Barry, On Wed, Dec 04, 2013 at 11:25:16AM -0500, Barry Warsaw wrote: > I try to keep an eye on what other distros are doing w.r.t. Python 3. Here > are Fedora's plans: > https://fedoraproject.org/wiki/Changes/Python_3_as_Default > https://fedoraproject.org/wiki/User:Bkabrda/Py2to3GuidelineCha

Re: Python 3 as default

2013-12-04 Thread Tshepang Lekhonkhobe
On Wed, Dec 4, 2013 at 6:25 PM, Barry Warsaw wrote: > I try to keep an eye on what other distros are doing w.r.t. Python 3. Here > are Fedora's plans: > > https://fedoraproject.org/wiki/Changes/Python_3_as_Default > https://fedoraproject.org/wiki/User:Bkabrda/Py2to3GuidelineChanges > > Some of th

Python 3 as default

2013-12-04 Thread Barry Warsaw
I try to keep an eye on what other distros are doing w.r.t. Python 3. Here are Fedora's plans: https://fedoraproject.org/wiki/Changes/Python_3_as_Default https://fedoraproject.org/wiki/User:Bkabrda/Py2to3GuidelineChanges Some of these things are not relevant to us (e.g. DNF vs. yum). Others are

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Barry Warsaw
On Dec 04, 2013, at 01:36 PM, Stuart Prescott wrote: >Having uscan call "debian/rules get-orig-source" is quite difficult to do in >a policy-compliant way (as already noted by Jakub) as the location for the >munged tarball is different. Having uscan call a debian/repack from d/watch >seems a littl

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Andreas Tille
On Wed, Dec 04, 2013 at 11:30:01AM +0100, Jakub Wilk wrote: > > AFAICS they way get_main_source_dir() is currently implemented lets > malicious upstream to plant files in their tarball that would cause > arbitrary code execution... Would you mind proposing a proper fix and forward it to the accor

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Andreas Tille
On Wed, Dec 04, 2013 at 08:49:02PM +0900, Charles Plessy wrote: > > >better solution and migrating the existing information, Andreas > > >will complain. > > > > s/complain/comply/ perhaps? > > D'oh as well. > > Indeed, I meant "will not complain", sorry for the noise... I think all readers had

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Charles Plessy
Le Wed, Dec 04, 2013 at 12:13:48PM +0100, Jakub Wilk a écrit : > * Charles Plessy , 2013-12-04, 19:58: > >>>Well, there was a lenthy discussion, uscan bug, Wiki page > >>>trying to summarise everything. The people who contributed > >>>did not brought up your (and Paul's concern) and I guess > >>>C

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Julien Cristau
On Tue, Dec 3, 2013 at 17:06:22 +0100, Olivier Berger wrote: > Piotr Ożarowski writes: > > > [Olivier Berger, 2013-12-03] > >> Hi. > >> > >> I haven't spotted anything recommending a get-orig-source target in > >> debian/rules in the team's docs. > >> > >> I think it could be an interesting r

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Jakub Wilk
* Charles Plessy , 2013-12-04, 19:58: Well, there was a lenthy discussion, uscan bug, Wiki page trying to summarise everything. The people who contributed did not brought up your (and Paul's concern) and I guess Charles Plessy would have been in favour of using d/upstream. I do not think it i

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Charles Plessy
Le Wed, Dec 04, 2013 at 11:30:01AM +0100, Jakub Wilk a écrit : > * Andreas Tille , 2013-12-04, 10:41: > > >Well, there was a lenthy discussion, uscan bug, Wiki page trying > >to summarise everything. The people who contributed did not > >brought up your (and Paul's concern) and I guess Charles Pl

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Jakub Wilk
* Andreas Tille , 2013-12-04, 10:41: uscan to grow features for removing files from upstream tarballs, in a declarative way preferably. That's in devscripts git and will be included in the next devscripts version. (see [1]) So now you'll have to audit both d/watch and d/copyright before you ca

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Andreas Tille
Hi, On Wed, Dec 04, 2013 at 09:12:49AM +0100, Jakub Wilk wrote: > * Andreas Tille , 2013-12-04, 08:43: > >>uscan to grow features for removing files from upstream > >>tarballs, in a declarative way preferably. > >That's in devscripts git and will be included in the next > >devscripts version. (see

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Jakub Wilk
* Andreas Tille , 2013-12-04, 08:43: uscan to grow features for removing files from upstream tarballs, in a declarative way preferably. That's in devscripts git and will be included in the next devscripts version. (see [1]) So now you'll have to audit both d/watch and d/copyright before you ca

Re: Recommending get-orig-source for packages ?

2013-12-04 Thread Paul Wise
On Wed, Dec 4, 2013 at 3:43 PM, Andreas Tille wrote: > That's in devscripts git and will be included in the next devscripts > version. (see [1]) Awesome, thanks for your work on that. That said, the choice of debian/copyright as the location for files to be excluded seems awkward/weird. I would