Bug#1061499: libgssglue: disable gsasl-dovecot-gssapi-heimdal autopkgtests on armhf, re-enable them on i386

Thank you -- I am uploading a newly built package with your patch. /Simon signature.asc Description: PGP signature

Bug#1061499: libgssglue: disable gsasl-dovecot-gssapi-heimdal autopkgtests on armhf, re-enable them on i386

Thank you -- I am uploading a newly built package with your patch. /Simon signature.asc Description: PGP signature

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Re: Proposal for how to deal with Go/Rust/etc security bugs

Luca Boccassi writes: > On Wed, 24 Jan 2024 at 13:34, Simon Josefsson wrote: >> >> Luca Boccassi writes: >> >> >> Having reflected a bit, and learned through my own experience and >> >> others' insights [1] that Go Build-Depends are not transitive

Re: Request removal of cadvisor?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 10:56 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson >> > wrote: >> >> Shengjing Zhu, what do you think, can we

Re: Add Salsa pipeline to default Go pipeline?

Nilesh Patra writes: > On 24 January 2024 2:25:53 pm IST, Simon Josefsson > wrote: >>Definitely -- however I don't see how we can ever have confidence in >>uploads of core Go packages without building all reverse dependencies. >> >>If that building is on develo

Re: Request removal of cadvisor?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson wrote: >> Shengjing Zhu, what do you think, can we request removal of this package >> from unstable? >> > > Why would you bother with packages that are only in unstable? > I'm not sure how b

Re: Proposal for how to deal with Go/Rust/etc security bugs

Luca Boccassi writes: >> Having reflected a bit, and learned through my own experience and >> others' insights [1] that Go Build-Depends are not transitive, I'd like >> to update my proposal on how to handle a security bug in any Go/Rust/etc >> package and the resulting package rebuilds: > >

Request removal of cadvisor? (was: Re: golang-opentelemetry-contrib-dev: Upload to unstable)

(Dropping cc to #1059573...) Maytham Alsudany writes: >> https://salsa.debian.org/jas/golang-opentelemetry-otel/-/pipelines/629791 >> >> I think this really indicate FTBFS bugs in cadvisor, crowdsec, and >> gitlab-ci-multi-runner? Rebuilding packages in sid should work. > > I'll open bugs and

Bug#1059573: golang-opentelemetry-contrib-dev: Upload to unstable

Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: >> Hi. >> >> I was looking at golang-opentelemetry-contrib-dev because it is needed >> for etcd 3.5.x. It seems to build fine, but upstream is doing several >

Re: golang-opentelemetry-contrib-dev: Upload to unstable

Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: >> Hi. >> >> I was looking at golang-opentelemetry-contrib-dev because it is needed >> for etcd 3.5.x. It seems to build fine, but upstream is doing several >

Bug#1059573: golang-opentelemetry-contrib-dev: Upload to unstable

Hi. I was looking at golang-opentelemetry-contrib-dev because it is needed for etcd 3.5.x. It seems to build fine, but upstream is doing several concurrent releases, and we don't have the latest version in experimental. I wanted to upgrade it to the latest upstream version before doing an

Re: golang-opentelemetry-contrib-dev: Upload to unstable

Hi. I was looking at golang-opentelemetry-contrib-dev because it is needed for etcd 3.5.x. It seems to build fine, but upstream is doing several concurrent releases, and we don't have the latest version in experimental. I wanted to upgrade it to the latest upstream version before doing an

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 4:07 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> >> >> How do you all QA test Go packages before uploading them without a >> >> >> Salsa >> >> >> pipe

Proposal for how to deal with Go/Rust/etc security bugs (was: Re: Limited security support for Go/Rust? Re ssh3)

Simon Josefsson writes: >> > My naive approach on how to fix a security problem in package X >> > which is >> > statically embedded into other packages A, B, C, ... would be to >> > rebuild >> > the transitive closure of all packages that Build-De

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: >> >> How do you all QA test Go packages before uploading them without a Salsa >> >> pipeline? Manually on local developer machine? >> >> >> > >> > Yes, I need to sign the changes locally, so I build packages locally. >> >> Right, I build locally too before signing

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Tom Parkin writes: > Hi Simon, > > On Mon, Jan 22, 2024 at 20:15:11 +0100, Simon Josefsson wrote: >> golang-github-katalix-go-l2tp >> https://salsa.debian.org/jas/golang-google-grpc/-/jobs/5191076 >> === RUN TestBasicSendReceive/5:_send/recv_[::1]:9000_[::1]:9

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Maytham Alsudany writes: >> https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/629139 >> >> The failures now suggest problems on other packages, list of initial 10 >> broken packages that I looked at: >> >> cadvisor: >> crowdsec: >> etcd: >> gitlab-ci-multi-runner: >>

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Further progress on grpc. I've rebuilt 1.60.1 with some EXCLUDE fixes thanks to help on irc, we've gone from 22 reverse build failures down to 16 failures, here is the pipeline: https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/629139 The failures now suggest problems on other

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: > On Fri, Jan 19, 2024 at 11:18 PM Simon Josefsson wrote: >> >> Hi. I read about the Go teams CI/CD pipeline here: >> >> https://go-team.pages.debian.net/ci.html >> >> There is no mention of the "regular" Salsa pipel

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

> 21 jan. 2024 kl. 20:09 skrev Holger Levsen : > > Hi Simon, > >> On Fri, Jan 19, 2024 at 05:32:05PM +0100, Simon Josefsson wrote: >> * URL : https://git.glasklar.is/sigsum/core/sigsum-go >> Description : tools for public and transparent l

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

> 21 jan. 2024 kl. 20:09 skrev Holger Levsen : > > Hi Simon, > >> On Fri, Jan 19, 2024 at 05:32:05PM +0100, Simon Josefsson wrote: >> * URL : https://git.glasklar.is/sigsum/core/sigsum-go >> Description : tools for public and transparent l

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Add Salsa pipeline to default Go pipeline?

Hi. I read about the Go teams CI/CD pipeline here: https://go-team.pages.debian.net/ci.html There is no mention of the "regular" Salsa pipeline: https://salsa.debian.org/salsa-ci-team/pipeline/ I tried searching for earlier discussions but didn't find any. The salsa pipeline includes many

Re: Limited security support for Go/Rust? Re ssh3

Adam Borowski writes: > On Mon, Jan 15, 2024 at 10:17:17AM +0100, Bastian Blank wrote: >> On Sun, Jan 14, 2024 at 04:24:57PM +0100, Simon Josefsson wrote: >> > Isn't that what the text refers to? Vendoring and static linking are >> > two examples of the same problem

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Simon Josefsson writes: > It seems clear that grpc cannot go to unstable right now due to reverse > dependency build failures: > > https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/627711 I took a look at some of these failures. For example, golang-github-mendersof

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Shengjing Zhu writes: > For safety, yes please upload to experimental, and people can try > rebuilding their packages and test them. I have uploaded grpc 1.59.0 to experimental, to allow build testing of reverse dependencies. Rekor needs grpc via in-toto via spiffe, and looks like it may need

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

:58.0 +0100 @@ -1,3 +1,10 @@ +golang-webpki-org-jsoncanonicalizer (0.20210204-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Add link for name used by rekor. Closes: #1060820. + + -- Simon Josefsson Thu, 18 Jan 2024 19:52:58 +0100 + golang-webpki-org-jsoncanonicalizer

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

:58.0 +0100 @@ -1,3 +1,10 @@ +golang-webpki-org-jsoncanonicalizer (0.20210204-1.1) unstable; urgency=medium + + * Non-maintainer upload. + * Add link for name used by rekor. Closes: #1060820. + + -- Simon Josefsson Thu, 18 Jan 2024 19:52:58 +0100 + golang-webpki-org-jsoncanonicalizer

Re: Sigstore rekor current status and request for help

Jérémy Lal writes: > Hi, > > some remarks below: Thank you! I'm following up one two items that are resolved below. I'm still working to resolve the other dependencies, and I will followup on those separately when I have something to add to discussion. >> GITHUB.COM/SASSOFTWARE/RELIC >> >>

Bug#1061101: Rebuild bindata.go using go-bindata

Package: golang-github-common-nighthawk-go-figure Severity: wishlist Hi. I noticed that the source code file bindata.go in this package was generated using go-bindata from the files in fonts/. This bug is to request that this file is re-generated from source code during the build of the Debian

Re: Introducing a new maintainer of libtool

Ileana Dumitrescu writes: >> On 16/01/2024 22:59, Simon Josefsson wrote: >> If what's on git master passes self checks, I would package it and >> prepare an alpha release and announce that to pretesters mailing list. >> Assuming there is nothing in git master that rea

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

I managed to get this package to build, and I belive it actually is required. Rekor is using it for "rekor-cli version": root@vello:~# rekor-cli version _ _ __ ___ _ ___ | _ \ | | | |/ / / _ \ | _ \ / ___| | | |_ _| |

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

I managed to get this package to build, and I belive it actually is required. Rekor is using it for "rekor-cli version": root@vello:~# rekor-cli version _ _ __ ___ _ ___ | _ \ | | | |/ / / _ \ | _ \ / ___| | | |_ _| |

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Updating golang-github-sigstore-sigstore to 1.8.0

Hi Rekor needs kms/hashivault kms/gcp kms/azure from sigstore, and I noticed sigstore was lagging behind upstream versions. I want to learn how to prepare an updated version of a Go package with proper reverse dependency rebuilds, so took this as a learning example. I merged 1.8.0 and prepared

Re: Introducing a new maintainer of libtool

Welcome Ileana! Mike Frysinger writes: > On 13 Jan 2024 14:49, Ileana Dumitrescu wrote: >> My short term plans are to review the numerous mailing list patches and >> get them merged in. This will be an easy and productive first step for >> me and libtool. I will also look at the various

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Shengjing Zhu writes: >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18 >> h1:rd389Q26LMy03gG4anandGFC2LW/xvjga5GezeeaxQk= >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18/go.mod >>

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Shengjing Zhu writes: >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18 >> h1:rd389Q26LMy03gG4anandGFC2LW/xvjga5GezeeaxQk= >> go.sum:github.com/AdamKorcz/go-fuzz-headers-1 >> v0.0.0-20230618160516-e936619f9f18/go.mod >>

Re: Limited security support for Go/Rust? Re ssh3

Bastian Blank writes: > On Tue, Jan 16, 2024 at 10:59:30AM +0100, Simon Josefsson wrote: >> Rebuilding a bit more than what is strictly needed sounds fine as a >> first solution to me. > > Building maybe. But how do you want to publish them? The security > archi

Re: Limited security support for Go/Rust? Re ssh3

"IOhannes m zmölnig (Debian GNU|Linux)" writes: > On 1/16/24 13:56, Jérémy Lal wrote: >>> >>> As Built-Using is for license compliance only, no? >>> >>> See >>> >>> https://www.debian.org/doc/debian-policy/ch-relationships.html#additional-source-packages-used-to-build-the-binary-built-using >>

Re: Sigstore rekor current status and request for help

Shengjing Zhu writes: > On Tue, Jan 16, 2024 at 4:16 AM Simon Josefsson > wrote: >> >> Hi >> >> I want to get Sigstore's rekor <https://github.com/sigstore/rekor> into >> Debian so that <https://gitlab.com/debdistutils/apt-sigstore> can be >&

Re: Limited security support for Go/Rust? Re ssh3

tis 2024-01-16 klockan 11:22 +0100 skrev Jérémy Lal: > > > Le mar. 16 janv. 2024 à 11:00, Simon Josefsson > a écrit : > > Paul Wise writes: > > > > > On Mon, 2024-01-15 at 10:17 +0100, Bastian Blank wrote: > > > > > > > I asked for practi

Re: Limited security support for Go/Rust? Re ssh3

Paul Wise writes: > On Mon, 2024-01-15 at 10:17 +0100, Bastian Blank wrote: > >> I asked for practical solutions, not theoretical ones.  We don't have a >> suitable way to rebuild all packages just because right now. > > There are some ideas on the static linking wiki page: > >

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 8:51 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-adamkorcz-go-fuzz-headers-1 >> Version : 0.0~git2

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 8:51 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-adamkorcz-go-fuzz-headers-1 >> Version : 0.0~git2

Sigstore rekor current status and request for help

Hi I want to get Sigstore's rekor into Debian so that can be included. I'm new to Go and how Debian approaches Go code, but have made some progress. I'm now stuck. This e-mail summarize the open issues. Can

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Shengjing Zhu writes: >> https://salsa.debian.org/jas/golang-github-sigstore-rekor/-/jobs/5160982 >> >> src/github.com/sigstore/rekor/cmd/backfill-redis/main.go:44:2: >> cannot find package "sigs.k8s.io/release-utils/version" in any of: >>

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Shengjing Zhu writes: >> https://salsa.debian.org/jas/golang-github-sigstore-rekor/-/jobs/5160982 >> >> src/github.com/sigstore/rekor/cmd/backfill-redis/main.go:44:2: >> cannot find package "sigs.k8s.io/release-utils/version" in any of: >>

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 9:27 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-k8s-sigs-release-utils >> Version : 0.7.7-1 &g

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Shengjing Zhu writes: > On Mon, Jan 15, 2024 at 9:27 PM Simon Josefsson wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-k8s-sigs-release-utils >> Version : 0.7.7-1 &g

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

of it inside the official Debian as far as I can tell. My primary use-case is the trillian golang libraries, for sigstore's rekor. I'll see about starting with them only. The 'trillian' binary package can be added later, under that name or another. /Simon > Le lun. 15 janv. 2024 à 15:03, Simon Jos

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

of it inside the official Debian as far as I can tell. My primary use-case is the trillian golang libraries, for sigstore's rekor. I'll see about starting with them only. The 'trillian' binary package can be added later, under that name or another. /Simon > Le lun. 15 janv. 2024 à 15:03, Simon Jos

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Reinhard Tartler writes: > On Sun, Jan 14, 2024 at 8:36 PM Simon Josefsson wrote: > >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-cyberphone-json-canonicalization >> Version : 0.0~

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Reinhard Tartler writes: > On Sun, Jan 14, 2024 at 8:36 PM Simon Josefsson wrote: > >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson >> >> * Package name: golang-github-cyberphone-json-canonicalization >> Version : 0.0~

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Hi. What is the status of golang-google-grpc? My packaging effort of sigstore's rekor needs golang-google-grpc 1.53 according to github.com/spiffe/go-spiffe and fails with errors below. I have built golang-google-grpc from debian/experimental and the packages works fine for spiffe. When can a

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cyberphone-json-canonicalization Version : 0.0~git20220623.57a0ce2-1 Upstream Author : Anders Rundgren * URL : https://github.com/cyberphone/json-canonicalization * License

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cyberphone-json-canonicalization Version : 0.0~git20220623.57a0ce2-1 Upstream Author : Anders Rundgren * URL : https://github.com/cyberphone/json-canonicalization * License

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cyberphone-json-canonicalization Version : 0.0~git20220623.57a0ce2-1 Upstream Author : Anders Rundgren * URL : https://github.com/cyberphone/json-canonicalization * License

<    1   2   3   4   5   6   7   8   9   10   >