Package: release.debian.org
Severity: wishlist
User: [email protected]
Usertags: britney

Hi,

I'd like to open a discussion about using https://debaudit.debian.net
data to gate testing migrations. The service is quite new, so this would
likely need a long testing period, but I guess that it's probably better
to open the discussion early.

In short, debaudit currently includes two "checkers" (orig-check and
git2dsc).  orig-check ensures that the orig tarball in Debian matches
upstream's.  git2dsc ensures that the Vcs-Git repository matches the
Debian source package.

I think that it would make sense to block migration when packages
regress (similar to what was implemented for reproducible builds, if I
remember correctly) -- that would allow packages that fail in testing to
still migrate, while still gradually improving the overall status.

The current regressions can be browsed on:
https://debaudit.debian.net/orig-check/regressions/forky
and
https://debaudit.debian.net/git2dsc/regressions/forky

There are currently 14 source packages that would be blocked because of
orig-check regressions, and 32 because of git2dsc regressions.

I'm not aware of false positives (= AFAIK, regressions are real problems
that should be fixed).

Data is refreshed every hour, and there's a JSON export with the
relevant data: https://debaudit.debian.net/results.json

Example:
  "aspell-ml": {
      "versions": [
        /* ... details about each known version ... */
      ],
      "migration_status": {
          "orig-check": {
              "can_migrate": false,
              "sid": {
                  "diagnostic": "220 - uscan failed -- network error",
                  "version": "0.04-1-11",
                  "dsc_sha256": 
"4d1a4a2890eeb834dcdae96e5b80d8c3059cef021db5eb03d894bee8bed8e0e8",
                  "url": 
"/orig-check/result/4d1a4a2890eeb834dcdae96e5b80d8c3059cef021db5eb03d894bee8bed8e0e8"
              },
              "testing": {
                  "diagnostic": "800 - identical after tarball normalization",
                  "version": "0.04-1-10",
                  "dsc_sha256": 
"2662500adb5b4e355e545b42e271dec5ae7b18d28db99b2df8883a15ea33232e",
                  "url": 
"/orig-check/result/2662500adb5b4e355e545b42e271dec5ae7b18d28db99b2df8883a15ea33232e"
              }
          },
          "git2dsc": {
              "can_migrate": false,
              "sid": {
                  "diagnostic": "700 - generated dsc differs",
                  "version": "0.04-1-11",
                  "dsc_sha256": 
"4d1a4a2890eeb834dcdae96e5b80d8c3059cef021db5eb03d894bee8bed8e0e8",
                  "url": 
"/git2dsc/result/4d1a4a2890eeb834dcdae96e5b80d8c3059cef021db5eb03d894bee8bed8e0e8"
              },
              "testing": {
                  "diagnostic": "910 - git-generated dsc identical to archive 
dsc after normalization",
                  "version": "0.04-1-10",
                  "dsc_sha256": 
"2662500adb5b4e355e545b42e271dec5ae7b18d28db99b2df8883a15ea33232e",
                  "url": 
"/git2dsc/result/2662500adb5b4e355e545b42e271dec5ae7b18d28db99b2df8883a15ea33232e"
              }
          }
      }
  },

Best,

Lucas

Reply via email to