On 29.05.2025 23:53, Aurelien Jarno wrote:
Package: qemu-user Version: 1:9.1.0+ds-4 Severity: serious Justification: Policy 7.8
Hm. I especially asked a few times about this one, and the consensus was to change initial Built-Using: tag which were there, to Static-Built-Using. That happened in the version you're filing this bug report against.
glibc is mostly is mostly licensed under the LGPL, which requires that the full source code of the incorporating binary package be made available. According to Debian Policy ยง7.8 [1] such a binary package MUST list the glibc source package (and possibly others) in the Built-Using: field. Please also note that Build-Using-Static is not (yet?) part of the
Static-Built-Using it is, I think. Ok.
Debian Policy, and more importantly that DAK does not know about this field, so can't use it to retain the older versions in the archive in order to satisfy the licenses.
Yes, I've got lintian warning about this one, and asked about it too, with the answer was that lintian just doesn't know this tag yet, but DAK does. So I'm really confused, why multiple people told me Static-Built-Using is the right tag to use here. The initial question wasn't come from nowhere: we were hitting migration issues again and again, due to some libs (including glibc) being of an unknown version to DAK, and constantly needing attention. While this versions aren't actually needed for runtime. So.. my intention was to simplify handling of qemu migration for the ftp masters, and I did ask how can I do that. Sigh.. /mjt
