Alexander GQ Gerasiov <[email protected]> writes:

> I see all the dependencies are in Debian (there is only 
> golang-github-go-piv-piv-go-dev (>= 2.0) in experimental for now), that's
> great, guys!

We should try to get that one into unstable, I think yubikey-agent and
golang-github-smallstep-certificates needs attention and I've been
working on the later one recently so this may be fixed by now.

> As I use sbctl myself I've made an update for your package:

Thank you!  I have merged some of these fixes now, into:

https://salsa.debian.org/go-team/packages/sbctl/

with pipeline here:

https://salsa.debian.org/jas/sbctl/-/pipelines/959775

The failures are mostly because of the experimental dependency.

> 2. bootctl integration to cover the situation, when systemd-boot-efi got
>    updated.
> 3. New installation auto setup.

I didn't merge this, as I can't evaluate it.  What do you think about
having 'sbctl' as a package for the binary only, and a new separate
package 'sbctl-setup' as a package that 'Depends: sbctl' and includes
your postinst/prerm scripts?  That would make me more comfortable, and
allows simpler testing.

> 4. Use upstream git tags in gbp.

Is there some advantage with that?  I thought the Debian practice was to
add a signed upstream/0.18 tag, to have some way to track if upchange is
moving their tags around.

> I do not like current bootctl integration a lot, because it has 2 problems:
> * writing signed files to /usr/lib/systemd/boot/efi
> * calling bootctl update directly instead of triggering systemd-boot-signed
> Both moments could be discussed with systemd maintainers.

Sure, and having this in 'sbctl-setup' make things easier to discuss, I
think.

> Also there is tests/ dir in upstream sources, that contains plenty of
> pre-compiled binaries. May be we should exclude them from sources as I'm not
> sure all of them are DFSG-compatible.

We could try asking upstream to remove them, but we may not succeed.

> Feel free to use my work from https://salsa.debian.org/gq/sbctl
> And do not hesitate to contact me if any help is needed.

I've added you to Uploaders: so feel free to push fixes and help
co-maintain this.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to