On 2015-11-26 08:03:36, Osamu Aoki wrote:
> Hi,
>
> On Wed, Nov 25, 2015 at 11:08:32AM -0500, Antoine Beaupré wrote:
>> Package: debmake
>> Version: 4.2.2-1
>> Severity: wishlist
>>
>> It would be great to see debmake in jessie... any plans for a backport?
>>
>> It seems straightforward enough...
>
> If I understood the rule of backport, I can not upload since it does not
> need to make another package. Just wget deb and "sudo dpkg -i" should
> install it without problem. (I am using it that way here under stable
> system.)
>
> The only time when we can upload such distribution independent script is
> when debian.org system needs backported package. I did such backport
> for debiandoc-sgml once. But in general that is what I understood.
>
> If you can make backport admin to allow debmake, let me know. I will
> upload it.
I think this requirement is more lax than what people think. I have
uploaded such backports in the past without problems.
The problem with wget | sudo dpkg -i is that it is a bad practice: there
is no cryptographic check of the integrity of the package at all.
One can instead add the testing sources.list to fetch the package
properly, but then some pinning needs to be implemented, which is not
always trivial...
I actually rebuilt the package from scratch using apt-get source here
because it does check the signature...
But I guess you're right: people should use the package from testing,
and this issue can be closed.
Thanks!
A.
--
Lorsque l'on range des objets dans des tiroirs, et que l'on a plus
d'objets que de tiroirs, alors un tiroir au moins contient deux
objets.
- Lejeune-Dirichlet, Peter Gustav
