Bug#932417: nmu: ocamlnet_4.1.2-3

2019-07-22 Thread Mattia Rizzolo
On Mon, Jul 22, 2019 at 09:21:19PM +0200, Paul Gevers wrote:
> Hi,
> 
> On 22-07-2019 20:54, Mattia Rizzolo wrote:
> > On Mon, Jul 22, 2019 at 08:41:09PM +0200, Paul Gevers wrote:
> >> I'm relatively new on the team so give me some slack. There is a
> >> permanent transition tracker for ocaml, so I *guess* this is handled
> >> differently than via regular binNMU requests:
> >> https://release.debian.org/transitions/html/ocaml.html Is there anything
> >> special here?
> > 
> > nomeata has scripts to detect this kind of stuff, for ocaml here:
> > https://people.debian.org/~nomeata/binNMUs-ocaml.txt
> > Those files are written in a way you can just pipe them into `wb`.
> 
> I noticed that. But is the RT doing that? Or do ocaml people have access
> to wb to do this themselves?

nomeata himself has wb access, and has been doing quite some of those
binnmus in the past.
However, at least in the last year, quite some of them were done by
pochu instead, coordinated on IRC on #-haskell or similar channels.

This is to say: I don't actually know where we are left, but I actually
believe there is nothing really set and properly decided, it just
happened to come up like that and that worked well enough that it stuck
there (the fact that they run in a private cronjob on people.d.o should
say enough).

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#932417: nmu: ocamlnet_4.1.2-3

2019-07-22 Thread Paul Gevers
Hi,

On 22-07-2019 20:54, Mattia Rizzolo wrote:
> On Mon, Jul 22, 2019 at 08:41:09PM +0200, Paul Gevers wrote:
>> I'm relatively new on the team so give me some slack. There is a
>> permanent transition tracker for ocaml, so I *guess* this is handled
>> differently than via regular binNMU requests:
>> https://release.debian.org/transitions/html/ocaml.html Is there anything
>> special here?
> 
> nomeata has scripts to detect this kind of stuff, for ocaml here:
> https://people.debian.org/~nomeata/binNMUs-ocaml.txt
> Those files are written in a way you can just pipe them into `wb`.

I noticed that. But is the RT doing that? Or do ocaml people have access
to wb to do this themselves?

> Incidentally, IMHO ocaml and haskell have the same issue golang has
> regarding security and stuff, but the release team never really bothered
> with them much, I think you should definitely try to work out something
> to track decently all these statically linked languages.

It's mostly s/you/these statically linked language teams together with
the security team/ here. The release team doesn't have the spoons to
drive this. And I think the golang team will have to do some of that
work if they want the golang ecosystem to be in bullseye. If nothing
happens, golang is going to be removed from testing.

Paul



Bug#932417: nmu: ocamlnet_4.1.2-3

2019-07-22 Thread Mattia Rizzolo
On Mon, Jul 22, 2019 at 08:41:09PM +0200, Paul Gevers wrote:
> I'm relatively new on the team so give me some slack. There is a
> permanent transition tracker for ocaml, so I *guess* this is handled
> differently than via regular binNMU requests:
> https://release.debian.org/transitions/html/ocaml.html Is there anything
> special here?

nomeata has scripts to detect this kind of stuff, for ocaml here:
https://people.debian.org/~nomeata/binNMUs-ocaml.txt
Those files are written in a way you can just pipe them into `wb`.

Incidentally, IMHO ocaml and haskell have the same issue golang has
regarding security and stuff, but the release team never really bothered
with them much, I think you should definitely try to work out something
to track decently all these statically linked languages.

-- 
regards,
Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540  .''`.
more about me:  https://mapreri.org : :'  :
Launchpad user: https://launchpad.net/~mapreri  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-


signature.asc
Description: PGP signature


Bug#932417: nmu: ocamlnet_4.1.2-3

2019-07-22 Thread Paul Gevers
Control: tags -1 moreinfo

Hi Kyle,

On 19-07-2019 02:12, Kyle Robbertze wrote:
> Please rebuild ocamlnet to use camlzip 1.08-1, uploaded to unstable
> yesterday. Without this, ocamlnet fails to install as it depends on an
> old build of camlzip.
> 
> nmu ocamlnet_4.1.2-3 . ANY . unstable . -m "rebuild against camlzip 1.08-1"

I'm relatively new on the team so give me some slack. There is a
permanent transition tracker for ocaml, so I *guess* this is handled
differently than via regular binNMU requests:
https://release.debian.org/transitions/html/ocaml.html Is there anything
special here?

Paul



Bug#932417: nmu: ocamlnet_4.1.2-3

2019-07-18 Thread Kyle Robbertze
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Please rebuild ocamlnet to use camlzip 1.08-1, uploaded to unstable
yesterday. Without this, ocamlnet fails to install as it depends on an
old build of camlzip.

nmu ocamlnet_4.1.2-3 . ANY . unstable . -m "rebuild against camlzip 1.08-1"

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64, i386

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_ZA.UTF-8, LC_CTYPE=en_ZA.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_ZA:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled