Bug#806481: [pkg-go] Bug#806481: Backport etcd to Stretch

2017-06-04 Thread Potter, Tim
On 5 Jun 2017, at 5:17 am, Christoph Berg  wrote:
> 
> Re: Matthew Dawson 2015-11-28 <1478545.P9uMUQs38u@cwmtaff>
>> On November 28, 2015 03:14:16 PM Dmitry Smirnov wrote:
>>> On Friday 27 November 2015 21:56:36 Paul Tagliamonte wrote:
 Mind if I do it?
>>> 
>>> Not at all, if you have time... I have no objections. :)
>>> 
 After it's in Jessie, it might be easier to keep up to date, too.
>>> 
>>> Unfortunately I can't promise that I will be of help with maintaining
>>> backport...
>> Hi Paul,
>> 
>> If I can help with this effort, let me know as I'm also interested in having 
>> etcd in Jessie.  I already started trying to get everything to compile 
>> against 
>> a stock Jessie, and was mostly successful.  To get everything working did 
>> require a newer golang (1.4 in my case).  I'm not currently a Debian project 
>> member, so I'm not sure how I can help.  Let me know either way.
> 
> It looks like etcd won't be part of stretch either - is anyone looking
> into backporting it?

There have been conversations with the security team about supporting Go
applications but they are not comfortable with it due to the compile-time 
nature of the packaging.  

If there is a CVE in package X you need to recompile and upload everything
that Build-Depends on X.  Maintainers will also need to recompile and upload
everything that B-D's on the B-Ds as it's not transitive.

There is a plan somewhere to move to creating shared libraries instead of
packaging source code in -dev debs and I may get around to doing this during
the Buster cycle.  It's only relatively recently that this feature was 
available in
Go and in Debian.


Tim.

> 
> Christoph
> ___
> Pkg-go-maintainers mailing list
> pkg-go-maintain...@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers



Bug#806481: Backport etcd to Stretch

2017-06-04 Thread Christoph Berg
Re: Matthew Dawson 2015-11-28 <1478545.P9uMUQs38u@cwmtaff>
> On November 28, 2015 03:14:16 PM Dmitry Smirnov wrote:
> > On Friday 27 November 2015 21:56:36 Paul Tagliamonte wrote:
> > > Mind if I do it?
> > 
> > Not at all, if you have time... I have no objections. :)
> > 
> > > After it's in Jessie, it might be easier to keep up to date, too.
> > 
> > Unfortunately I can't promise that I will be of help with maintaining
> > backport...
> Hi Paul,
> 
> If I can help with this effort, let me know as I'm also interested in having 
> etcd in Jessie.  I already started trying to get everything to compile 
> against 
> a stock Jessie, and was mostly successful.  To get everything working did 
> require a newer golang (1.4 in my case).  I'm not currently a Debian project 
> member, so I'm not sure how I can help.  Let me know either way.

It looks like etcd won't be part of stretch either - is anyone looking
into backporting it?

Christoph


signature.asc
Description: PGP signature