Bug#1014885: lintian wrongly complains about XS-Go-Import-Path

2023-01-18 Thread Holger Levsen
Hi,

I can confirm this issue for lintian 2.116.0 against src:piuparts
as it is in git or unstable.


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

First they came for the journalists, we don't know what happened after that.


signature.asc
Description: PGP signature


future of lintian.d.o?

2022-08-22 Thread Holger Levsen
hi,

first: it's great that lintian is under active development again!
second: it's great that UDD now has up2date information from current lintian 
runs!

(I've bcc:ed abe@d.o and lucas@d.o out of courtesy, so they see this but
won't get every reply cc:ed.)

Now my questions, as raised on #debian-qa:

< h01ger> lintian.d.o used to show verbose information how to fix those issues
  found. now on eg https://udd.debian.org/lintian/?packages=munin 
  i cannot find that. are there plans to add this back?
< h01ger> and is there a bug tracker for udd.d.o/lintian?
< h01ger> and are there plans to shutdown lintian.d.o or redirect it to 
  udd.d.o/lintian?


The 2nd question I could answer myself by now:
https://wiki.debian.org/UltimateDebianDatabase/ is pointed out in the footer
of every UDD page, and that pages points to 
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=udd;users=qa.debian@packages.debian.org
for UDD bugs.

Shall I just file a bug for question 1 and 3?


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

Historians have a word for Germans who joined the Nazi party, not because they
hated Jews,  but out of hope for  restored patriotism,  or a sense of economic
anxiety,  or a hope  to preserve their  religious values,  or dislike of their
opponents,  or raw  political opportunism,  or convenience,  or ignorance,  or 
greed.
That word is "Nazi". Nobody cares about their motives anymore.


signature.asc
Description: PGP signature


Bug#996943: lintian: fails to unpack strip-nondeterminism source package

2021-10-21 Thread Holger Levsen
Package: lintian
Version: 2.109.0
Severity: normal
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Dear Maintainer,

lintian fails to unpack the current strip-nondeterminism source package,
and thus also fails to properly check the package:

$ schroot -- lintian --info --pedantic --display-info 
strip-nondeterminism_1.12.0-2_source.changes
N:
E: strip-nondeterminism source: unpack-message-for-orig 
strip-nondeterminism_1.12.0.orig.tar.bz2 ar failed for 
strip-nondeterminism-1.12.0/t/failures/ar/857975.a
N: 
N:   Unpacking the contents of this source package produced the listed error.
N:   
N:   It probably means something is broken or the package was somehow 
constructed in a strange way. You may wish to report this as a bug to upstream.
N: 
N:   Visibility: error
N:   Show-Always: no
N:   Check: lintian
N: 
N:
I: strip-nondeterminism source: unpack-message-for-source ar failed for 
t/failures/ar/857975.a
N: 
N:   Unpacking the contents of this source package produced the listed error.
N:   
N:   It probably means something is broken or the package was somehow 
constructed in a strange way.
N: 
N:   Visibility: info
N:   Show-Always: no
N:   Check: lintian
N: 

using these files, which I've just uploaded to unstable, as dpkg and pbuilder 
nicely
cope with the same source package:

d451c96fe2094b1c42c52af258f9ac88  strip-nondeterminism_1.12.0-2.debian.tar.xz
5c0c59ab0996881055ca69810c43e702  strip-nondeterminism_1.12.0-2.dsc
736f82cc28615279e6ba01e9ba8d59f7  strip-nondeterminism_1.12.0.orig.tar.bz2

(and this also can be seen with strip-nondeterminism_1.12.0-1.dsc...)

I suspect this is because t/failures/ar/857975.a which is part of the package
is an ar archive.

Thanks for maintaining lintian!


-- 
cheers,
Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

There are no jobs on a dead planet. (Also many other things but people mostly
seem to care about jobs.)


signature.asc
Description: PGP signature


Bug#964013: lintian: embedded-javascript-library should flag sphinx files too

2020-07-13 Thread Holger Levsen
Hi,

On Mon, Jul 13, 2020 at 12:24:53PM +0200, Alexis Murzeau wrote:
> I'm getting this new lintian warning for language_data.js,
> but I can't find which binary package I should depend on.
> 
> "sphinx" (as suggested by lintian) is a virtual package provided by 
> python3-sphinx
> which doesn't contain "language_data.js" [0] and libjs-sphinxdoc (which seems 
> more
> appropriate) does not contain "language_data.js" either [1].
[...]
> This will help maintainers find the correct package to use.
 
https://salsa.debian.org/debian/developers-reference/-/commit/29014c3d02b1a44aa983557b4887f4302c2136c5
shows how to use dh_sphinxdoc (instead of dh_linktree which also does
and did the right thing here), which then in turn adds the right
depends/recommends to the binary packages.

(The dh_linktree solution used a hack/workaround in d/rules to turn
the depends into recommends, but I recommend the dh_spinxdoc solution
anyway.)


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Re: Bug#964111: dpkg-source: False positive 'points outside source root'

2020-07-07 Thread Holger Levsen
On Tue, Jul 07, 2020 at 03:52:08PM +0200, Guillem Jover wrote:
> Holger, as I mentioned some days ago, I consider this case a
> regression which I was planning on fixing. This fix was already
> included earlier today in the dpkg 1.20.4 upload. :)

yup, I've seen this today. Thank you!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Re: Bug#964111: dpkg-source: False positive 'points outside source root'

2020-07-07 Thread Holger Levsen
On Mon, Jul 06, 2020 at 09:08:43PM -0700, Felix Lechner wrote:
> > not sure if this is the same bug or just a similar one:
> > lrwxrwxrwx 1 user user 9 Jul  3 16:07 debian/munin.service -> /dev/null
> As for Holger's package, Lintian also flags that condition. Source
> packages can be unpacked anywhere. We likewise consider absolute
> symlink targets unacceptable there.
> W: munin source: absolute-symbolic-link-target-in-source
> debian/munin.service -> /dev/null

sigh. so IMNSHO now lintian *and* dpkg are buggy. Or point me to policy
which prohibits files pointing to /dev/null. This worked for years.

(I haven't cloned the dpkg bug yet, as I believed Guillem would upload a
fix quickly and thus I wanted to prevent busy paperwork. IMO the bug
should be cloned and the severity raised to serious for the clone.)


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#964013: lintian: embedded-javascript-library should flag sphinx files too

2020-06-30 Thread Holger Levsen
Package: lintian
Version: 2.82.0
Severity: wishlist

Dear Maintainer,

running lintian on developers-reference 11.0.12 from bullseye results in two
warnings:

W: developers-reference-ru: embedded-javascript-library 
usr/share/developers-reference/ru/_static/jquery.js please use libjs-jquery
W: developers-reference-ru: embedded-javascript-library 
usr/share/developers-reference/ru/_static/underscore.js please use 
libjs-underscore

I fixed those two in 11.0.13 in sid, but there are still embedded javascript
libraries included, which lintian does not detect:

$ dpkg -L developers-reference|grep js
/usr/share/developers-reference/_static/doctools.js
/usr/share/developers-reference/_static/documentation_options.js
/usr/share/developers-reference/_static/language_data.js
/usr/share/developers-reference/_static/searchtools.js
/usr/share/developers-reference/_static/switchers.js
/usr/share/developers-reference/searchindex.js
/usr/share/developers-reference/_static/jquery.js
/usr/share/developers-reference/_static/underscore.js

Out of these, three of them come from Sphinx:
- doctools.js
- language_data.js
- searchtools.js

Please make lintian complain about embedding those. It seems the problem could
be quite widespread:

$ for i in doctools.js language_data.js searchtools.js ; do apt-file search 
"_static/$i" | wc -l ; done
1046
977
1046


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Re: lintian: please downgrade mailing-list-obsolete-in-debian-infrastructure warning

2020-04-24 Thread Holger Levsen
On Fri, Apr 24, 2020 at 10:22:22AM +0100, Chris Lamb wrote:
> > definitly, yes, filing this bug now.
> As mentioned elsewhere, this was already fixed yesterday in fd8ee67d.

ah, cool! & thanks for the quick fix!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


lintian: please downgrade mailing-list-obsolete-in-debian-infrastructure warning

2020-04-24 Thread Holger Levsen
package: lintian
version: 2.67.0
x-debbugs-cc: Debian Med Project List , Debian 
Developers , Debian Lintian Maintainers 
, reproducible-bui...@lists.alioth.debian.org

On Fri, Apr 24, 2020 at 09:56:24AM +0200, Andreas Tille wrote:
> today I've seen the first time this new lintian warning:
> 
>mailing-list-obsolete-in-debian-infrastructure Debian Med Packaging Team 
> 
> 
> I wonder whether we could this set from severity Warning to Pedandic.

definitly, yes, filing this bug now.

> The point is that this address works not only as maintainer but rather
> as key in several infrastrutural use case like database queries etc.
> The only reason that would convince me that a change is needed would be
> that the redirect to alioth-lists.debian.net would not work any more at
> some foreseable point of time.  So please note:  I would not mind about
> automatically replacing that address with something non-obsolete since
> we try to do some turnover of all (about 1000) Debian Med packages per
> release.  But once we start this change several tools will stop working
> reliably.  This is to much effort for something that looks cosmetical in
> my eyes.  So if you insist that this should be at severity warning I'll
> probably rather add a lintian override automatically for all our
> packages rather than automatically change the maintainer address.

we also still use reproducible-bui...@lists.alioth.debian.org as our maintainer
address for Reproducible Builds related packages and it's our advertised point
of contact for Debian related Reproducible Builds stuff and we don't have
any plan to change this any time soon.

It's true that some @lists.alioth.debian.org stopped working but *many* have
been migrated to alioth-lists.debian.net and continue to work as 
@lists.alioth.debian.org so this lintian warning creates tons of non-actionable
and doubtful (not to say false-positive) warnings.

Please change this and thank you for maintaining lintian!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

Dance like no one's watching. Encrypt like everyone is.


signature.asc
Description: PGP signature


Bug#943957: lintian: missing-systemd-service-for-init.d-script should be a warning, not just pedantic

2019-11-01 Thread Holger Levsen
package: lintian
severity: wishlist
version: 2.32.0
x-debbugs-cc: 941...@bugs.debian.org, r...@debian.org, ans...@43-1.org

On Fri, Nov 01, 2019 at 11:20:59AM -0700, Russ Allbery wrote:
> > I think there is already a lintian warning:
> >   
> > https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
> Oh!  I should have checked rather than assuming.  It would ideally be nice
> to make it a warning rather than a pedantic tag before we add it to
> Policy, but meh, and the count of tags isn't all that high.
 
I'm pretty sure this is trival and just a matter of asking via a
wishlist bug, thus doing so here.

See #941198 for more context.


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C



signature.asc
Description: PGP signature


Re: lintian jobs on jenkins.d.n

2019-08-10 Thread Holger Levsen
Hi Chris,

On Sat, Aug 10, 2019 at 12:56:21PM +0100, Chris Lamb wrote:
> [Let me know if you would no longer like direct CCs for qa-jenkins-dev@ mails]

not being cc:ed would indeed be nice here.

> Please keep them for now; we have not totally replaced them Salsa jobs
> yet (see #930487 et al.) and they sometimes catch other things. To be
> investigated...

ok & absolutly fine. 

> Thanks for asking and maintaining jenkins.debian.net.

my pleasure and thanks for maintaining lintian(.d.o)!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


lintian jobs on jenkins.d.n

2019-08-09 Thread Holger Levsen
hi,

do you still need/use the lintian related tests on jenkins.d.n or have
you already replaced them with Salsa / Debian CI?

I'd be happy to keep them (and extend them) if they are still useful!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#921752: lintian: file-without-copyright-information should exclude files like COPYING, LICENSE, etc

2019-02-08 Thread Holger Levsen
Package: lintian
Version: 2.5.118
Severity: normal

Dear Maintainer,

gosa-plugin-pwreset (0.99.5-2) has "W: file-without-copyright-information" 
for the files COPYING and COPYING.CC-BY-SA-3.0.

impressive-display (0.3.3-1) has "W: file-without-copyright-information"
for the file LICENSE.

slbackup (0.0.12-9) has "W: file-without-copyright-information" for the
file COPYING.

I believe those are all false-positives lintian should ignore.
Thanks for maintaining lintian.


-- 
tschau,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#921084: lintian: please detect .git.git in Vcs-Git-header

2019-02-01 Thread Holger Levsen
Package: lintian
Version: 2.5.124
Severity: wishlist

Dear Maintainer,

so I uploaded 
https://tracker.debian.org/news/1025869/accepted-anarchism-151-8-source-into-unstable/
and had this line in debian/control:

Vcs-Git: https://salsa.debian.org/debian/anarchism.git.git

It would be nice if lintian would point out such (and similar?) mistakes.

Thanks for maintaining lintian!


-- 
tschüß,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#918809: lintian: please don't warn if using debhelper compat 11

2019-01-09 Thread Holger Levsen
Package: lintian
Version: 2.5.120
Severity: normal

Dear Maintainer,

since recently and in pedantic mode only, lintian warns when using
debhelper-compat < 12, which I believe is a bit too early as 
https://nthykier.wordpress.com/2019/01/04/debhelper-compat-12-is-now-released/
says "We generally recommand you defer migrating to compat 12 until bullseye
(to avoid having to revert that change in case you need an unblock for the
buster release)."

Please disable this warning until Buster has been released.

Thanks for maintaining lintian!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#912040: lintian: please detect usage of the variable PIUPARTS_TEST in maintainer scripts

2018-10-29 Thread Holger Levsen
On Sun, Oct 28, 2018 at 04:08:09PM -0400, Chris Lamb wrote:
> Fixed in Git, pending upload:
>   
> https://salsa.debian.org/lintian/lintian/commit/47b1aae3bc72229377aaebd7c197427f1b462292
 
cool, thank you.


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#910453: lintian: false positive for package-does-not-use-debhelper-or-cdbs when using blends-dev

2018-10-07 Thread Holger Levsen
On Sun, Oct 07, 2018 at 09:02:30PM +0100, Chris Lamb wrote:
> Fixed in Git, pending upload:
 
\o/

thank you!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#910453: lintian: false positive for package-does-not-use-debhelper-or-cdbs when using blends-dev

2018-10-06 Thread Holger Levsen
Package: lintian
Version: 2.5.108
Severity: normal
affects: blends-dev

Dear Maintainer,

since very recently lintian emits the pedantic tag 
'package-does-not-use-debhelper-or-cdbs' when testing the src:debian-edu 
package, which build-depends on blends-dev, which depends on debhelper, which 
is then also used to build src:debian-edu. So this is a false positive, please 
fix.

Thanks for maintaining lintian and making it better all the time!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#909674: lintian: please don't show changelog-empty-entry warning if distribution is UNRELEASED

2018-09-26 Thread Holger Levsen
Package: lintian
Version: 2.5.105
Severity: normal

Dear Maintainer,

subject says it all: please don't show changelog-empty-entry warning if
distribution is UNRELEASED.

Thanks for maintaining lintian!


-- 
cheers,
Holger

---
   holger@(debian|reproducible-builds|layer-acht).org
   PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C


signature.asc
Description: PGP signature


Bug#897213: lintian: Please remove dependency-on-python-version-marked-for-end-of-life until after Buster releases

2018-05-03 Thread Holger Levsen
On Thu, May 03, 2018 at 05:48:36AM +0100, Chris Lamb wrote:
> However, instead of removing it I've marked the tag as 
> "experimental" and with a "pedantic" severity, thus essentially
> hiding it from 99.999% of Lintian users (yet allowing us to continue
> to continue collect statistics and make it easier to re-introduce
> later)
> I also updated the tag description to say:
[...]

Thank you!


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#897213: lintian: Please remove dependency-on-python-version-marked-for-end-of-life until after Buster releases

2018-04-30 Thread Holger Levsen
On Mon, Apr 30, 2018 at 12:25:05PM -0400, Scott Kitterman wrote:
> I like the idea of pushing towards python3, but my impression of the 
> near-term 
> utility of this tag has changed.  Specifically, I see people being confused 
> about if python2.7 will be in buster (it will) and if it they should drop 
> python2.7 support from packages that still support it (they should not).

+1

> While I originally didn't think so, I've become convinced that there's no 
> wording short of something like "Ignore this tag for buster" that would fix 
> it.  At that point, I considered if the tag was useful no and concluded it is 
> not.  That's not what I thought originally.

+1

> People pay attention to lintian results and so the tags should be actionable. 
>  
> The action most people seem to read into this tag is get rid of python2.7 
> support and we're one release too early for that.

+1

Thanks, Scott.


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#896696: lintian: please improve tag description to explain that python 2 modules are only questioned on 1st upload

2018-04-23 Thread Holger Levsen
package: lintian
severity: wishlist
x-debbugs-cc: debian-de...@lists.debian.org

On Mon, Apr 23, 2018 at 06:33:20PM +0100, Chris Lamb wrote:
> For example, I think Holger is interpreting this particular tag as
> "this source package is shipping a Python 2.x" module. This is not
> the case. 
> 
> Rather, Lintian detects that this is the *initial* upload of the
> source package and, if so, asks the maintainer just to double-check
> that there is any requirement for it.
> 
> If there is such a need, the maintainer just needs to add a short,
> quick justification in the initial changelog entry and Lintian will
> then be silent on the matter.
> 
> It is thus not asking maintainers to drop Python 2 support…

Then the lintian message should be appended to say this only happens on
the first upload.

Thanks.

> As there can only be one initial upload by definition, adding an
> override here is not only a little silly given that it will trigger
> an "unused override" warning on the next upload, it can simply be
> avoided in the changelog entry as previously discussed, which 
> implicitly serves as some documentation too.

Maybe it's also worth pointing this out.

> (This talk of overrides was why I believe Holger is accidentally
> confusing the tag.)
 
Yes. And because the tag description needs improving. ;)


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#886219: lintian should be less pedantic about latest policy version

2018-01-04 Thread Holger Levsen
On Wed, Jan 03, 2018 at 11:05:09PM +, Chris Lamb wrote:
> > > - ancient-standards-version should be triggered when S-V contains a
> > >   release of Policy from the previous stable release cycle
> > This sounds good to me.

reading this once again I'm reminded that this feeds the notion that our
current stable release is ancient :-/

But I guess that ship has sailed…

> Same here Is this the consensus view? If so, I can go ahead and make
> the change.

thanks.


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#886259: please downgrade dependency-on-python-version-marked-for-end-of-life to info or pedantic

2018-01-03 Thread Holger Levsen
package: lintian
severity: wishlist
x-debbugs-cc: debian-de...@lists.debian.org, d...@list.debian.org

On Wed, Jan 03, 2018 at 02:24:46PM +, Sean Whitton wrote:
[...lots of stuff I agree with deleted...]
> Lintian errors and warnings tell you, roughly, "watch out, your upload
> might/will make the state of this package in unstable worse than it is
> as present."  By contrast, info and pedantic tags say, roughly, "here is
> another improvement you could make to this package."  Working through
> the ugprading checklist almost always falls into the latter category.

Ok, you convinced me to file this very bug now.

Context:

On Wed, Jan 03, 2018 at 01:38:48PM +, Chris Lamb wrote:
> Hi Holger,
> 
> > I think I would prefer to
> > dependency-on-python-version-marked-for-end-of-life
> > to become a pedantic warning
> 
> FYI I initially introduced this tag (and
> python-foo-but-no-python3-foo)
> as a pedantic level warning following roughly the same rationale as
> you
> outline.
> 
> However, it was raised later via https://bugs.debian.org/883581.

As Sean explains nicely in <87vagjt3yp@zephyr.silentflame.com> I
think dependency-on-python-version-marked-for-end-of-life should be info
or pedanic at least until Buster is released.


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#886219: lintian should be less pedantic about latest policy version

2018-01-03 Thread Holger Levsen
package: lintian
severity: wishlist
x-debbugs-cc: debian-de...@lists.debian.org

On Mon, Jan 01, 2018 at 05:26:35PM +, Sean Whitton wrote:
> I think that Lintian shouldn't warn about not using the latest
> Standards-Version; perhaps it should warn when you're using a really old
> one.

Same here. IMO warnings about the last two policy versions should only be
shown in pedantic mode. If a package is 3 versions behind, then this
should be a normal lintian warning.


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#839124: lintian: please add some helpful advice how to fix tags/dbus-policy-at-console

2017-12-17 Thread Holger Levsen
Hi,

On Sat, Dec 16, 2017 at 04:50:37PM +, Simon McVittie wrote:
> Sending this specifically to you in case you missed it, since you weren't
> in Cc at the time: 

thanks, I did indeed miss it, though Chris now made me aware, but then I
postponed looking into this… so you made me revisit this earlier, thanks
for that!

> for debian-edu-config, you don't need documentation
> for how to replace /etc/dbus-1/system.d/hal-debian-edu.conf because I'm
> fairly sure it already has no practical effect:
> 
> In this specific case: you should probably drop the file (preferably
> into a bonfire), since HAL is very, very obsolete, and I very much
> hope debian-edu no longer uses or ships it. The parts of HAL where
> high-level APIs made sense were replaced by the DeviceKit services,
> which were later renamed to or replaced by udisks, upower and possibly
> others; lower-level device enumeration and change-notification were
> superseded by using udev directly.
> 
> hal was most recently in Debian as part of wheezy (oldoldstable), so
> the file triggering the lintian warning in debian-edu-config is useless
> and can safely be removed, unless debian-edu has some lookaside package
> repository with packages that are no longer in Debian (in which case I
> would still recommend dropping hal as soon as possible, because it
> hasn't been maintained for years).

thanks for all that information. and no, Debian Edu Wheezy was the last
Debian Edu release where we had some packages different than Debian
stable. Which were 5 packages where we had a bit different versions…

see http://ftp.skolelinux.org/skolelinux/wheezy_needs_love.html (and
change wheezy with squeeze, etch or lenny if you want to dig further ;)

I've now did this change in debian-edu-config.git:

+  * Drop dbus-1/system.d/hal-debian-edu.conf, as Wheezy was the last Debian
+version including hal, so since Jessie this file was without any effect.
+(See #839124 for more information.)

> If you want to configure access control for the services that replaced
> hal, you'll need to write polkit policies (but if nobody has noticed a
> problem with them, their defaults might well be fine for your use case).

/me nods.

Thanks for everyone explaining this situation!


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#839124: lintian: please add some helpful advice how to fix tags/dbus-policy-at-console

2017-12-16 Thread Holger Levsen
On Sat, Dec 16, 2017 at 12:01:56PM +, Simon McVittie wrote:
> Yes - if I knew how to summarize it in a form short enough for a Lintian
> tag description, I would already have done so.
 
a link to a longer description would also do :)


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#839124: lintian: please add some helpful advice how to fix tags/dbus-policy-at-console

2017-12-16 Thread Holger Levsen
Hi,

On Sat, Dec 16, 2017 at 10:21:40AM +, Chris Lamb wrote:
> [Adding Holger, the original submitter, to the CC - please see the last two 
> messages for some more context]
> Wow, thank you so much for the detailed explanation! 

indeed & thank you too for keeping me in the loop.

This is great news as I'd like to get rid of these issues in
src:debian-edu-config for buster and it seems there's now enough
documentation that we'll be able to do so.

That said, doing so is probably something for 2018 ;)


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#839124: lintian: please add some helpful advice how to fix tags/dbus-policy-at-console

2016-09-29 Thread Holger Levsen
Package: lintian
Severity: wishlist

Hi,

I reported on IRC and Niels asked me to file this bug and CC: Simon:

https://lintian.debian.org/tags/dbus-policy-at-console.html is not very
helpful in fixing the issue at hand, the referenced bug doesnt really
tell anything about how we should modify
https://anonscm.debian.org/git/debian-edu/debian-edu-config.git/tree/etc/dbus-1/system.d/hal-debian-edu.conf
to get rid of this lintian warning.

Please improve the tag description so it becomes more clear what should be
done.

Thanks for maintaining lintian!


-- 
cheers,
Holger


signature.asc
Description: Digital signature


Re: Bug#834616: tex4ht is uninstallable in sid: depends on experimental texlive-htmlxml

2016-08-18 Thread Holger Levsen
control: affects -1 src:lintian
# see https://jenkins.debian.net/job/lintian-tests_sid/1243/console

On Thu, Aug 18, 2016 at 09:03:07PM +0900, Norbert Preining wrote:
> If you need dependencies on tex4ht, please write them out.

why? we depend on packages which depend on packages…

> I have checked for rdepends before uploading.

maybe you made a mistake?

> Enjoy

we're trying…

have a good trip with hopefully good network! ;-)


-- 
cheers,
Holger


signature.asc
Description: Digital signature


Bug#763339: lintian: please recognize squeeze-lts as suite

2014-09-29 Thread Holger Levsen
package: lintian
severity: wishlist
x-debbugs-cc: debian-...@lists.debian.org

Hi,

it would be great if lintian could recognize squeeze-lts as a valid suite.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Re: Jenkins job for Lintian tests

2014-04-05 Thread Holger Levsen
Hi Niels,

On Donnerstag, 13. März 2014, Niels Thykier wrote:

 I have tried to create a Jenkins job configuration for continuously
 checking the Lintian test suite in the master branch.  I based it on the
 ruby-qa jobs and I would like it to run in at least sid and stable
 (testing is a nice addition, but not strictly necessary).

running it against all three is fine.

 Just to confirm that I got it right; it will mail
 lintian-ma...@debian.org on failed builds (and the first successful one
 after a failure)?

yes.

my comments so far:

[04:23]   h01ger | nthykier: i've merged your lintian-tests.yaml now. 
http://jenkins.debian.net/job/lintian-tests_stable/1/ is the first test run
[04:26]   h01ger | there's some stuff missing, like triggering by git 
commits (and not time based as your config implies) and irc notification, but 
thats pretty minor, esp. compared to the failure we see in the above url :)
[04:26]   h01ger |  /tmp/chroot-testrun: line 8: ./ci-run: No such file 
or directory
[04:27]   h01ger | nthykier: whats the test you actually want to run?
[04:27]  * | h01ger clones the lintian repo locally...

More tomorrow/today... :)


cheers,
Holger




signature.asc
Description: This is a digitally signed message part.


Bug#737867: please warn about Required-Start: $all in legacy init scripts

2014-02-06 Thread Holger Levsen
package: lintian
severity: wishlist
x-debbugs-cc: 
debian-de...@lists.debian.org,pkg-sysvinit-de...@lists.alioth.debian.org

Hi,

On Donnerstag, 6. Februar 2014, Thomas Goirand wrote:
 BTW, Debian has a way too many LSB header scripts with Required-Start:
 $all, which is very bad. A decent init system has to deal with this, and
 there's no sane way to do so but arbitrarily breaking what the author of
 the script wrote. A lintian warning telling that $all is just bad would
 be a very nice thing.


cheers,
Holger



signature.asc
Description: This is a digitally signed message part.


Bug#498591: the cause for this was fixed 4.4 years ago, closing this one now too

2014-01-22 Thread Holger Levsen
Hi,

#498590 was the cause for this bug, #64071, and #498590 was closed in 
September 2009, rather at the beginning of the squeeze release cycle. So I'm 
closing this bug now, as probably all packages exposing this bug have been 
rebuild using a newer menu version since then. Also, there is a discussion in 
#699390 to drop menu from the desktop-task...

Lintian maintainers, I recommend you close #498591 with wontfix as well.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#527843: symlink-has-double-slash should be pedantic, or?

2009-05-08 Thread Holger Levsen
Hi Russ,

I agree for foo/../bar symlinks, but not for foo//bar symlinks, which are 
those from kde which make up a huge portion of 
http://lintian.debian.org/tags/symlink-has-double-slash.html

So please make foo/../bar symlinks minor issues and foo//bar a pedantic ones.


regards,
Holger


signature.asc
Description: This is a digitally signed message part.


Bug#464837: should warn about merciurial files

2009-01-11 Thread Holger Levsen
Hi,

On Sonntag, 11. Januar 2009, Russ Allbery wrote:
 I didn't see a reply to the above comment (although there was some other
 further discussion about restructuring these patterns in Lintian).  In the
 absence of further information on this, I'm going to assume that Lintian's
 current behavior here is okay and close this bug.

If you havent changed anything in lintian, I dont think lintians behaviour is 
the right one, it still wont complain about left over mercurial files.

 If you have any more information about what these files are for and are
 sure that they should be omitted, please feel free to reopen.

Sadly I don't know mercurial at all, so I cannot give you that information.


regards,
Holger, who thinks this bug should be reopened, but wont override your 
decision.



signature.asc
Description: This is a digitally signed message part.


Bug#381485: any news on the lintian check?

2008-09-12 Thread Holger Levsen
Hi Raphael,

On Friday 12 September 2008 04:38, Raphael Geissert wrote:
 As promised, attached is a patch in a mbox implementing that check.
 I've only made it check executable scripts in /etc, as not to slow down
 lintian even more for just one check.

Thats great, thank you!

 Of course the final decision is up to the lintian maintainers :)

Sure :)

Hint: this bug is a blocker for 438885 which is important ;-)


regards,
Holger


pgpndnG6fY9tf.pgp
Description: PGP signature


Bug#381485: any news on the lintian check?

2008-09-12 Thread Holger Levsen
Hi Frank,

On Friday 12 September 2008 21:05, Frank Lichtenheld wrote:
 Which doesn't change anything about the fact that it is whishlist for
 lintian. 

Sure :) (It's definitly wishlist for lintian.)

And I also (literally) wish lintian would support preventing issues which 
where the reason for a mass bug filing in May 2006 and were made serious in 
August 2007.

 And to say that it is a blocker is really only a 
 BTS-technical term, not something that is really true in any
 meaningful sense outside of the BTS scope (I hope you know what I mean).

Well, yes and no. It (not being fixed) prevents (blocks) that those issues 
come back again and again.

 That said, I applaud your effort to clean up the general package :)

Thanks. 

Thanks also for your work on lintian, I love lintian, it rocks! :)


regards,
Holger


pgpBTq2H0VEa6.pgp
Description: PGP signature


Bug#464837: should warn about merciurial files

2008-02-09 Thread Holger Levsen
package: lintian
version: 1.23.44

Hi,

lintian doesnt warn about left over mercurial files in the source package, 
like it does with svn or cvs files.

The following files remained unnoticed in my source package:

 .hg_archival.txt  |2 
 .hgignore |   29 
 .hgtags   |   10 


regards,
Holger


pgpOB06RtnZJG.pgp
Description: PGP signature


Bug#464837: should warn about merciurial files

2008-02-09 Thread Holger Levsen
Hi Frank,

On Saturday 09 February 2008 17:24, Frank Lichtenheld wrote:
   .hg_archival.txt  |2
 Out of curiosity, what is this one for?

I dont really know.

$ cat .hg_archival.txt 
repo: 7efd15ce4dab28ef21588ffef8ca00550290bd1d
node: a5b9cf969979239cd27f592589e9712669f6e110
$

regards,
Holger


pgpX9aee1LjmQ.pgp
Description: PGP signature


Bug#379176: info from irc

2006-07-26 Thread Holger Levsen
Hi,

from #debian-release

Jul 24 11:34:05 *   h01ger would be interested in comments on #379176 or 
http://lists.debian.org/debian-policy/2006/07/msg00033.html - as I read the 
FHS, packages (the distributor) can put stuf
f into /srv - they (the packages) just need to cope with changes a local admin 
does there...
Jul 24 11:35:26 vorlonwhich Debian packages don't
Jul 24 11:35:41 vorlonso Debian packages shouldn't ship anything 
under /srv...
Jul 24 11:38:16 h01gerwhy? not even directories? if its 
configurable? (therefore they would be able to deal with changes..)
Jul 24 11:38:37 Ganneff   they wouldnt per default, or you would add a 
mess of debconf.
Jul 24 11:39:24 vorlonnothing you *ship* is ever configurable, it's 
embedded in the file list of the .deb.
Jul 24 11:44:09 h01gerHowever /srv should always exist on FHS 
compliant systems and _should be used as the default location_ for such 
data.
Jul 24 11:48:01 vorlonand the expansion of such data does *not* 
include the sorts of files that are shipped in packages.
Jul 24 11:52:05 Mithrandirit's really pointless to sasy should be used 
as the default location without specifying a structure.  IMNSHO.
Jul 24 11:54:15 h01gervorlon, you mean site specific? imho this 
(the first sentence of the rationale) doesnt imply exclusivly site specific
Jul 24 11:54:45 h01gerand i also agree, the paragraph about /srv in 
FHS is to short and unspecific :)
Jul 24 11:57:31 vorloner, of course it implies exclusively 
site-specific
Jul 24 12:01:13 h01gerhow does this match with footnote 20?
Jul 24 12:05:01 vorlonuh... footnote 20 sounds like a grant of 
permission to shoot ourselves in the foot which we should politely 
decline. ;)
Jul 24 12:06:52 h01ger.oO( boring ;)
Jul 24 12:35:07 ajhrm?
Jul 24 12:35:15 aji wrote most of what the fhs has to say about /srv, i 
think
Jul 24 12:35:55 ajmostly it should be dealt with like we deal 
with /usr/local, i would've though -- mkdir to make directories, and rmdir || 
true to get rid of them
Jul 24 12:44:55 *   h01ger nods. ic. so maybe some more clarification in 
the next version of the FHS would be good :)
Jul 24 13:28:51 Mithrandiraj: /usr/local has a defined structure, /srv 
doesn't though.
Jul 24 13:29:29 ajMithrandir: the distro can define a structure; but 
just like /usr/local, it's got to cope with the administrator possibly 
deciding on their own structure instead
Jul 24 13:31:08 Mithrandiraj: apart from the fact that we haven't 
decided on a structure and people are using it already, so assuming a 
particular structure there now would make us step on toes
.
Jul 24 13:31:53 MithrandirI know of at least two different structures in 
use, /srv/{www,ftp,gopher,mail,...} and /srv/{domain1,domain2}/{www,ftp,...}
Jul 24 13:32:19 ajMithrandir: sure
Jul 24 13:32:55 ajMithrandir: you can define a template structure on an 
initial install up to a point -- as per /var/www or /var/cvs or whatever
Jul 24 13:33:36 Mithrandiron an initial install, sure.
Jul 24 13:34:32 *   fjp would like to see an easy way to point e.g. 
apache's root to /srv/www on install


regards,
Holger


pgpGYtVOsRQiV.pgp
Description: PGP signature


Bug#379176: E: foo: non-standard-toplevel-dir srv/ is policy not an error

2006-07-22 Thread Holger Levsen
Hi,

On Saturday 22 July 2006 02:49, you wrote:
 By my reading of FHS 2.3, no Debian-supplied package should be installing
 files into /srv, since /srv is reserved for the local administrator for
 local data.  The error message may not be accurate, but it looks to me
 like this still should be an error.  Am I missing something?

I don't think you are correct:

In
http://www.debian.org/doc/packaging-manuals/fhs/fhs-2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM
the last sentence about /srv says:

--begin quote -
Distributions must take care not to remove locally placed files in these 
directories without administrator permission. [20]

[20]

This is particularly important as these areas will often contain both files 
initially installed by the distributor, and those added by the administrator.
--end quote -


So, as I read it, /srv is clearly designed for files from the distribution and 
locally added ones.


regards,
Holger


pgpQNIaZzhHOt.pgp
Description: PGP signature


Bug#379176: E: foo: non-standard-toplevel-dir srv/ is policy not an error

2006-07-22 Thread Holger Levsen
Hi,

On Saturday 22 July 2006 17:35, you wrote:
 How can that be reconciled with:

 The methodology used to name subdirectories of /srv is unspecified as
 there is currently no consensus on how this should be done. One method
 for structuring data under /srv is by protocol, eg. ftp, rsync, www,
 and cvs. On large systems it can be useful to structure /srv by
 administrative context, such as /srv/physics/www, /srv/compsci/cvs,
 etc. This setup will differ from host to host. Therefore, no program
 should rely on a specific subdirectory structure of /srv existing or
 data necessarily being stored in /srv. However /srv should always
 exist on FHS compliant systems and should be used as the default
 location for such data.

 I don't see any way that shipping files under /srv in a Debian package
 would be consistent with the second-to-last sentence above.

I do. But I think this is getting out of scope of this bug :) Maybe the FHS 
should be reworded, but definitly linda should not announce this as an error.

apache might ship with DocumentRoot in /srv/www - but apache must also work, 
if you modify this. You might have many DocumentRoots, in /srv/webserver/foo 
and in /srv/webserver/foo2...

It says no program should rely on a specific subdirectory structure of /srv, 
not no program should rely on a specific directory in /srv - especially if 
you define this directory in the programms configuration.


regards,
Holger


pgp5iiLMexvqT.pgp
Description: PGP signature


Bug#379176: E: foo: non-standard-toplevel-dir srv/ is policy not an error

2006-07-22 Thread Holger Levsen
Hi,

On Saturday 22 July 2006 18:34, you wrote:
 Yes, and if you ship files in /srv, then your package is creating and
 insisting upon a particular structure in /srv.  Even if the binaries in 
 the package don't insist, the *package* is insisting. 

Yup. That's a structure my package created. Obviously I can depend on that. 

This is different to a structure the FHS mandates, like for example in /var: 
in /var you can rely on /var/lib, /var/log, ... - there is no such structure 
the FHS mandates for /srv. That's what is ment with that sentence.

 If the local
 administrator decides they want to organize /srv differently, your files
 get in the way.  If they delete them or move them, every time the package
 is upgraded, they're re-installed.  To me, that seems to break the point
 that the above paragraph is driving at.

Not to me :) I agree it's annoying, but it's the same as today with 
say, /var/www. If I delete it, because I use /srv/www, an upgrade of apache 
recreates that directory, while it doesnt change my config.

 Certainly, I can see shipping configuration that points to /srv for local
 data by default, and even a postinst that creates an initial structure in
 /srv for the package if this is the first install, but putting the files
 directly in the package seems to me to be forcing more structure than is
 allowed here.

So you agree that the lintian error is wrong :)

 Maybe we should take this to debian-policy and see what other folks think?

Sure. Go ahead. And thanks for caring!

 I could be wrong and I'm happy to change lintian accordingly if the
 consensus is that I'm wrong.

Obviously I could be wrong as well... ;)


regards,
Holger


pgpl46wppJEQV.pgp
Description: PGP signature


Bug#379176: E: foo: non-standard-toplevel-dir srv/ is policy not an error

2006-07-21 Thread Holger Levsen
package: lintian
version: 1.23.22

Hi,

the new version of policy mandates FHS 2.3, which requires /srv, so this is 
clearly no error :-)


regards,
Holger


pgpgcKg6kzDZx.pgp
Description: PGP signature