On Tue, Feb 27, 2024 at 07:26:33PM +0000, [email protected] wrote:
> Request #48783 has been Rejected by serebit:

One thing that the original request missed is that this binary package
is actually a pacman package that can be installed with `pacman -U`,
meaning the whole thing is a useless unpackaging and repackaging
of the same thing.

Also, upstream binary releases of OpenSSH [0] are not a thing, this is
a binary package generated by the maintainer from openssh-dotconfig [1];
AFAIU, the rules only allow for binary packages provided by upstream.

Besides, this type of packages are better suited in a custom pacman
repository, which the maintainer is free to share. (BTW, if you
download the binary and inspect the `.BUILDINFO` file you'll see it
was not compiled in a clean chroot.)

> Not a substantial enough reason for deletion. This package falls under
> the rule that patched versions of packages in the official
> repositories are allowed.

This is of course reasonable, but I find hard to believe that doing
`sed -i 's#\.ssh#.config/ssh/g#'` on every source file and calling
it a day constitute "patching" [2], specially on something critical
as OpenSSH. This matches strings such as 'host.ssh-ed25519' [3]
which may have unintended consequences.

Just my two cents.

[0] https://www.openssh.com/portable.html
[1] https://aur.archlinux.org/packages/openssh-dotconfig
[2] https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=openssh-dotconfig#n80
[3] 
https://github.com/openssh/openssh-portable/blob/master/regress/servcfginclude.sh#L6

Reply via email to