hi all, On Mon, Jan 26, 2026 at 09:43:07AM +0100, Dennis van Dok wrote: > Control: tags -1 + wontfix > > Op 25-01-2026 om 10:33 schreef Andreas Tille: > > Source: lcas-lcmaps-gt4-interface > > Version: 0.3.1-1 > > Severity: important > > X-Debbugs-Cc: Dennis van Dok <[email protected]>, [email protected], > > Debian Science Team <[email protected]>, > > Debian HPC Team <[email protected]>, Package Salvaging Team > > <[email protected]> > > > > Dear maintainer, > > > > I included Debian Science team and Debian HPC team into this question > > since here should be the experts whether this package might have some > > remaining use inside Debian. > > > > I suggest removing lcas-lcmaps-gt4-interface from Debian for the > > following reasons: > > > > * relies on the Globus Toolkit (GT4), which has reached "End of Life" > > and is no longer maintained. > > While that may be true, there are still people who monitor the software for > security reasons.
*Only* the *original* Globus Toolkit is EOL, however it has been forked and is maintained and frequently updated, now under the name the Grid Community Toolkit, see https://github.com/gridcf/gct?tab=readme-ov-file#grid-community-toolkit The packages currently in Debian have for many years already been based on the GCT and are packaged for Debian by Mattias Ellert. See for example https://packages.debian.org/trixie/libglobus-gridmap-callout-error-dev which has all the information. > > * orphaned upstream so does not receive security patches, posing > > a risk to authentication workflows. > > How was this conclusion reached? I know upstream maintainer and I know that > security patches *will* be provided if issues come up. see above, upstream is not at all orphaned, neither the libglobus* dependencies nor the lcas-lcmaps-gt4-interface itself. > > * uses old X.509 GSI standards that are often incompatible with modern > > OpenSSL versions and have been replaced by OAuth2/OIDC tokens. > > This is indeed legacy software, but for the moment still used in some > scientific communities while a transition to tokens is underway. Removing it > from Debian is fine, but then we will still have to provide those > communities with Debian compatible packages through other channels. All the software packaged for Debian is kept up to date for the latest OpenSSL versions and is built and tested for a variety of distributions including Debian stable, testing etc. and the latest Fedora. > > * no function outside of legacy scientific grid computing. For standard > > servers or desktops, it is useless > > I was not aware that this was a requirement for inclusion ;-) +1 to Dennis' answer. > > * removal would reduces technical debt and prevents potential > > dependency conflicts during future Debian upgrades. > > That is highly unlikely, unless the entirity of the Globus Toolkit is also > on the block. I think the fate of this package is tied to the GT. +1 to Dennis' answer. Plus I am one of the developers of both the lcas-lcmaps-gt4-interface and the Grid Community Toolkit. So in a sense there aren't even external dependencies. > > * there are no (build-)dependencies to other packages > > * There are no votes in popcon > > Which I can understand as most site admins do not enable this for their > servers. > > > > > https://qa.debian.org/popcon-graph.php?packages=lcas-lcmaps-gt4-interface&show_installed=on&show_vote=on&want_legend=on&want_ticks=on&from_date=&to_date=&hlght_date=&date_fmt=%25Y-%25m&beenhere=1 > > * There seems to be no active maintainer > > Not true ;-) Indeed, where does this conclusion come from?! The debian package pages has clearly all the information, both about the maintainer, about the move to the Grid Community Toolkit etc. Kind regards, Mischa Sallé > > This package was highlighted in the Bug of the Day[1] initiative, which > > aims to introduce newcomers to manageable tasks and guide them through > > the workflow to solve them. The focus of this initiative is on migrating > > packages to Salsa, as it's a great way to help newcomers become familiar > > with a consistent Git-based workflow. > > I'll check it out, thanks. > > > > Kind regards > > Andreas. > > > > > > [1] https://salsa.debian.org/qa/tiny_qa_tools/-/wikis/Tiny-QA-tasks > > > > > > -- System Information: > > Debian Release: forky/sid > > APT prefers unstable > > APT policy: (500, 'unstable'), (500, 'testing'), (50, > > 'buildd-unstable'), (1, 'experimental') > > Architecture: amd64 (x86_64) > > > > Kernel: Linux 6.18.5+deb14-amd64 (SMP w/8 CPU threads; PREEMPT) > > Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE > > not set > > Shell: /bin/sh linked to /usr/bin/dash > > Init: systemd (via /run/systemd/system) > > LSM: AppArmor: enabled > -- Nikhef Room H231a Science Park 105 Tel. +31-6-4681 2202 1098 XG Amsterdam Fax +31-20-592 5155 The Netherlands Email [email protected] __ .. ... _._. .... ._ ... ._ ._.. ._.. .._..
signature.asc
Description: Digital signature
