On 5 Jun 2017, at 5:17 am, Christoph Berg <m...@debian.org> wrote: > > Re: Matthew Dawson 2015-11-28 <1478545.P9uMUQs38u@cwmtaff> >> On November 28, 2015 03:14:16 PM Dmitry Smirnov wrote: >>> On Friday 27 November 2015 21:56:36 Paul Tagliamonte wrote: >>>> Mind if I do it? >>> >>> Not at all, if you have time... I have no objections. :) >>> >>>> After it's in Jessie, it might be easier to keep up to date, too. >>> >>> Unfortunately I can't promise that I will be of help with maintaining >>> backport... >> Hi Paul, >> >> If I can help with this effort, let me know as I'm also interested in having >> etcd in Jessie. I already started trying to get everything to compile >> against >> a stock Jessie, and was mostly successful. To get everything working did >> require a newer golang (1.4 in my case). I'm not currently a Debian project >> member, so I'm not sure how I can help. Let me know either way. > > It looks like etcd won't be part of stretch either - is anyone looking > into backporting it?
There have been conversations with the security team about supporting Go applications but they are not comfortable with it due to the compile-time nature of the packaging. If there is a CVE in package X you need to recompile and upload everything that Build-Depends on X. Maintainers will also need to recompile and upload everything that B-D's on the B-Ds as it's not transitive. There is a plan somewhere to move to creating shared libraries instead of packaging source code in -dev debs and I may get around to doing this during the Buster cycle. It's only relatively recently that this feature was available in Go and in Debian. Tim. > > Christoph > _______________________________________________ > Pkg-go-maintainers mailing list > pkg-go-maintain...@lists.alioth.debian.org > http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers