Your message dated Sat, 21 Oct 2023 12:19:03 +0000
with message-id <e1quawz-00gdmt...@fasolo.debian.org>
and subject line Bug#837060: fixed in debootstrap 1.0.133
has caused the Debian Bug report #837060,
regarding debootstrap: Do not install packages of Priority:required for buildd 
variant
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
837060: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837060
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: debootstrap
Version: 1.0.81
Severity: normal

Hi,

in Debian, every binary package implicitly depends on all binary
packages marked as Essential:yes and every source package implicitly
build-depends on the binary package build-essential. Policy ยง4.2 says:

 | it must be possible to build the package and produce working binaries
 | on a system with only essential and build-essential packages installed
 | and also those required to satisfy the build-time relationships
 | (including any implied relationships).

Currently, programs in Debian that facilitate building source packages
in "clean" environments like sbuild and pbuilder use debootstrap to
create this "minimal" environment. Specifically, they use the buildd
variant provided by debootstrap.

Unfortunately it seems that in addition to installing the minimum
required packages (all Essential:yes, build-essential and (unfortunately
necessarily) apt), debootstrap also installs all packages marked as
Priority:required (and their transitive dependencies).

Thus, it can easily happen that source packages in Debian do not
correctly declare their build dependencies on packages that are
Priority:required because they happen to always be installed in
virtually any environment that the source package will probably ever be
built in (because they were all created by debootstrap).

I think this is a bug in the package list installed by the buildd
variant. Since the buildd variant is meant to provide a clean and
minimal environment to build source packages, it should try hard not to
install any extra packages which would then make it impossible to test
whether a source package is policy compliant in the build dependencies
it declares.

Thank you!

cheers, josch

--- End Message ---
--- Begin Message ---
Source: debootstrap
Source-Version: 1.0.133
Done: Luca Boccassi <bl...@debian.org>

We believe that the bug you reported is fixed in the latest version of
debootstrap, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 837...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bl...@debian.org> (supplier of updated debootstrap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Oct 2023 12:38:26 +0100
Source: debootstrap
Architecture: source
Version: 1.0.133
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Luca Boccassi <bl...@debian.org>
Closes: 837060
Changes:
 debootstrap (1.0.133) unstable; urgency=medium
 .
   [ Luca Boccassi ]
   * Mark debootstrap as MA: foreign
   * Drop obsolete d/rules overrides and stop changing user/group in
     Makefile
   * d/copyright: switch format to DEP5
 .
   [ Johannes Schauer Marin Rodrigues ]
   * functions: use mount from the outside to support chroots without mount
     installed
   * Let the buildd variant only install essential, build-essential and apt
     (Closes: #837060)
Checksums-Sha1:
 1f9b3377b892d7adf587f7ce8de5857af632106a 2047 debootstrap_1.0.133.dsc
 6e67a647597506b97ff2fbfa9cce52ac4f58674b 90855 debootstrap_1.0.133.tar.gz
 a41fa159d449a2fe08c9ecdaad71e25df69872c0 6796 
debootstrap_1.0.133_source.buildinfo
Checksums-Sha256:
 85c55c0a5fa5cdc856f0acff5359d4c1b51456b7b52fb4211ad0f3a4ec113589 2047 
debootstrap_1.0.133.dsc
 11931eec3aafaff1cd0b840f450395fe3f156cef96a5458e7c91b653dfb0d6d6 90855 
debootstrap_1.0.133.tar.gz
 bbd2dfb5efff6e044306ae9e09fd92746461b1781d02fdfbf5fc1d5ad71a18b6 6796 
debootstrap_1.0.133_source.buildinfo
Files:
 b24da6bf763232b0823f1de5b4da9b1e 2047 admin optional debootstrap_1.0.133.dsc
 66c41602dd70ea5122eb44a5ab862028 90855 admin optional 
debootstrap_1.0.133.tar.gz
 bd361c10c9c6ac612c6a54bebce0f5af 6796 admin optional 
debootstrap_1.0.133_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Gj0M
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to