Your message dated Mon, 07 Dec 2020 19:33:36 +0000
with message-id <e1kmmgo-00093w...@fasolo.debian.org>
and subject line Bug#975929: fixed in check-manifest 0.45-2
has caused the Debian Bug report #975929,
regarding python-logfury: autopkgtest tries to use pip to download and install
code from the internet
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
975929: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=975929
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python-logfury
Version: 0.1.2-4
Severity: serious
Justification: ftp-master autoreject ruling
Hi,
Your package has an autopkgtest, awesome. However, I noticed that it
tries to install Python code using pip. Running downloaded code from
internet is not allowed in the Debian archive; see the ftp-masters
autoreject list [1], so this must be prevented. Note that the download
is only tried with the latest upload of check-manifest, so this seems to
be a fallback mechanism which should be turned off.
Downloading data seems to be allowed, but please add a needs-internet
restriction in that case.
Your autopkgtest seems to need an update for check-manifest, that's how
I discovered this issue. If this is an issue with check-manifest, please
clone this issue and reassign one of the two.
Paul
[1] https://ftp-master.debian.org/REJECT-FAQ.html [Non-Main II]
https://ci.debian.net/data/autopkgtest/testing/amd64/p/python-logfury/8443183/log.gz
autopkgtest [11:55:16]: test command1: [-----------------------
[*] testing on python3.8:
running nosetests
running egg_info
creating src/logfury.egg-info
writing src/logfury.egg-info/PKG-INFO
writing dependency_links to src/logfury.egg-info/dependency_links.txt
writing requirements to src/logfury.egg-info/requires.txt
writing top-level names to src/logfury.egg-info/top_level.txt
writing manifest file 'src/logfury.egg-info/SOURCES.txt'
reading manifest file 'src/logfury.egg-info/SOURCES.txt'
reading manifest template 'MANIFEST.in'
writing manifest file 'src/logfury.egg-info/SOURCES.txt'
WARNING: The pip package is not available, falling back to EasyInstall
for handling setup_requires/test_requires; this is deprecated and will
be removed in a future version.
Searching for build>=0.1
Reading https://pypi.org/simple/build/
Download error on https://pypi.org/simple/build/: [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get
local issuer certificate (_ssl.c:1124) -- Some packages may not be found!
Couldn't find index page for 'build' (maybe misspelled?)
Scanning index of all packages (this may take a while)
Reading https://pypi.org/simple/
Download error on https://pypi.org/simple/: [SSL:
CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get
local issuer certificate (_ssl.c:1124) -- Some packages may not be found!
No local packages or working download links found for build>=0.1
error: Could not find suitable distribution for
Requirement.parse('build>=0.1')
autopkgtest [11:55:17]: test command1: -----------------------]
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: check-manifest
Source-Version: 0.45-2
Done: Sergio Durigan Junior <sergi...@debian.org>
We believe that the bug you reported is fixed in the latest version of
check-manifest, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 975...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sergio Durigan Junior <sergi...@debian.org> (supplier of updated check-manifest
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 06 Dec 2020 18:12:47 -0500
Source: check-manifest
Architecture: source
Version: 0.45-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+pyt...@tracker.debian.org>
Changed-By: Sergio Durigan Junior <sergi...@debian.org>
Closes: 975929
Changes:
check-manifest (0.45-2) unstable; urgency=medium
.
* d/control: Add python3-build as a B-D. (Closes: #975929)
* d/control: Bump Standards-Version to 4.5.1.
Checksums-Sha1:
93a4274a86573deeadafa5f7775787ba3a05e34e 2381 check-manifest_0.45-2.dsc
4fc8f5938eabaeffc9af689e1e009473d27c9316 5080
check-manifest_0.45-2.debian.tar.xz
facf100ba6a3c2076190504f616a7687ffcd818b 7835
check-manifest_0.45-2_amd64.buildinfo
Checksums-Sha256:
ab3559f556acb4a79f31afa19362d5f8a0e9e134cf7c29d82f11cdfba12d0549 2381
check-manifest_0.45-2.dsc
38b02d6ecfd4b6781e74fa19f1b79a9eef1d8aee3bbff0c617216276a39805f6 5080
check-manifest_0.45-2.debian.tar.xz
ce7e2747377eb64b0a763c54b70ddee699c69d7823ca31e28a44d80a4ce59c51 7835
check-manifest_0.45-2_amd64.buildinfo
Files:
c6719b4c8aa778ca74de5fa3c9cad208 2381 utils optional check-manifest_0.45-2.dsc
e3f7325c82642852a1640a763784746b 5080 utils optional
check-manifest_0.45-2.debian.tar.xz
3f23caa4468cfc0fcc2ee84ea540c0c9 7835 utils optional
check-manifest_0.45-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=JV9y
-----END PGP SIGNATURE-----
--- End Message ---
