Bug#1068823: Stepwise Debian upgrade to enable systems with little free storage space to upgrade without breaks due to "No space left on device"

2024-04-13 Thread David Kalnischkies
sly overestimate how easy it is for packages to be upgraded individually (compare: t64 testing migration). Best regards David Kalnischkies signature.asc Description: PGP signature

Re: /usr-move: Do we support upgrades without apt?

2023-12-21 Thread David Kalnischkies
them by generating work for many people and potentially new upgrade problems for everyone – or if we declare them, existing or not, a non-issue at least for the upgrade to trixie. And on a sidenote: I would advise to reconsider interacting with dpkg too casually – but luck is probably on your side in any case. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: /usr-move: Do we support upgrades without apt?

2023-12-21 Thread David Kalnischkies
exhibit the required setup). (I will write another mail in another subthread about the finer details of what interacting with dpkg in an upgrade means and what might be problematic if you aren't careful – in general, not just with aliasing) Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Pause /usr-merge moves

2023-12-04 Thread David Kalnischkies
On Mon, Dec 04, 2023 at 01:13:43PM +0100, Helmut Grohne wrote: > David Kalnischkies made me aware […] Oh, did he? I think he wanted to tell you something else…  As IRC seems to be really bad at transporting complicated things (who had guessed?) and I need to sort my thoughts anyhow let

Re: [APT repo] Provide a binary-all/Packages only, no primary arch list

2023-12-03 Thread David Kalnischkies
lly" also "Multi-Arch: foreign". > provide clones of a single package list for every architecture explicitly, > and having to do so whenever a new one appears. So yeah, if you want you can ship only an -all/Packages file and add the others if you ever ship some as long as you te

Re: How do you cause a re-run of autopkgtests?

2023-07-21 Thread David Kalnischkies
s the day after ~tomorrow groff will migrate as well – assuming dgit was really your only problem. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: rejection of binary package based on file timestamp

2023-07-20 Thread David Kalnischkies
es with every revision), but close enough. At least more realistic than that this software wasn't changed since the start of the unix epoch… So please drop this again if its no longer needed. Best regards David Kalnischkies P.S.: d-devel@ isn't entirely wrong as this is sufficiently esoteric,

Re: New deprecation warning in CMake 3.27

2023-06-17 Thread David Kalnischkies
as-wanted basis) Can you recommend a relatively safe & old version to use instead of < 3.5 which doesn't need bumping next month but is also available in most semi-current releases of all major distributions (as that is what most upstreams will care about if they don't have special

Re: DEP 17: Improve support for directory aliasing in dpkg

2023-05-03 Thread David Kalnischkies
ve some "random" files not present on disk. So your system might not even boot or spawns interdimensional portals. You better reinstall…' is not the type of thing you wanna here from support. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Please, minimize your build chroots

2022-12-19 Thread David Kalnischkies
On Sun, Dec 18, 2022 at 06:08:57PM +0100, Johannes Schauer Marin Rodrigues wrote: > Quoting David Kalnischkies (2022-12-18 17:18:28) > > On Fri, Dec 16, 2022 at 03:38:17PM +0100, Santiago Vila wrote: > > > Then there is "e2fsprogs", which apt seems to treat as i

Re: Please, minimize your build chroots

2022-12-18 Thread David Kalnischkies
rst. But no problem, there usually is an option to change anything in apt. If not, we can usually add it. Just don't assume that the behaviour you prefer will be the default. We have a strong tendency to make everyone unhappy. (I should know, I never get what I want.) Best regards David Kalnischkies P

Re: Firmware GR result - what happens next?

2022-10-14 Thread David Kalnischkies
help not installing broken packages (but that is another topic). So, who is gonna take the blame for deciding this for everyone? Best regards David Kalnischkies [0] https://salsa.debian.org/apt-team/apt/-/blob/main/apt-private/private-update.cc#L88-106 signature.asc Description: PGP signature

Re: Bug#903158: Multi-Arch: foreign and -dbgsym: too weak dependency

2022-10-10 Thread David Kalnischkies
On Mon, Oct 10, 2022 at 08:50:49AM +0800, Paul Wise wrote: > On Sun, 2022-10-09 at 18:54 +0200, David Kalnischkies wrote: > > I suppose we could use 'foo-dbgsym Enhances foo:arch (= version)'. > > That sounds interesting and would be nice generally, however... > >

Re: Bug#903158: Multi-Arch: foreign and -dbgsym: too weak dependency

2022-10-09 Thread David Kalnischkies
ing all those nitty-gritty details to policy would certainly be an interesting endeavour but if it would really be a service to human kind^W^Wcontributors I am not so sure even if its frequently used as an argument against MultiArch and related projects. Best regards David Kalnischkies [0] http

Re: Bug#903158: Multi-Arch: foreign and -dbgsym: too weak dependency

2022-10-09 Thread David Kalnischkies
cial), but that would lead us too far off-topic here… So, could that be an acceptable Option c) ? Best regards David Kalnischkies ¹ this example was explicitly chosen as its possible that you want to use them independently. I don't see a lot of reasons for independent usage of e.g

Re: Automatic trimming of changelogs in binary packages

2022-08-19 Thread David Kalnischkies
the Release files, which only stable does currently, stable-updates and stable-security rely on apts built-in fallback which is sad) Best regards David Kalnischkies P.S.: As I was quoted already, as a side note: I am not against nor in favour of trimming; I am just pointing out potential probl

Re: Project Improvements

2022-05-26 Thread David Kalnischkies
On Thu, May 26, 2022 at 08:50:21AM +0200, Marc Haber wrote: > On Wed, 25 May 2022 20:21:03 +0200, David Kalnischkies > wrote: > >apt actually marks dependencies > >of packages in section metapackages as manually installed if the > >metapackage is removed due to t

Re: Project Improvements

2022-05-26 Thread David Kalnischkies
::Never-MarkAuto-Sections in apt or reconsider having tasks be in their own Section, personally I would prefer the later. There are many other packages which feel like metapackages, but aren't for apt as they are in the 'wrong' section – which is what I meant later on in the mail, but that was arguably very well hidden. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Project Improvements

2022-05-25 Thread David Kalnischkies
(And yes, apt installs new recommends in upgrades since literal decades, so that is absolutely not a reason to use depends…) Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Bug#1008644: ITP: nala -- commandline frontend for the apt package manager

2022-03-30 Thread David Kalnischkies
from the apt team, I don't think we have the resources to help you with packaging through.) Best regards David Kalnischkies signature.asc Description: PGP signature

Re: merged-/usr transition: debconf or not?

2021-11-19 Thread David Kalnischkies
regardless, but /usr-merge undoubtedly makes heavy use of it so in an ideal world those interested in it would not only acknowledge the problems but actually work together to resolve them. Sadly, that isn't the world we seem to be stuck in at all.) Best regards David Kalnischkies ¹ You could o

Re: merged-/usr transition: debconf or not?

2021-11-11 Thread David Kalnischkies
On Wed, Nov 10, 2021 at 01:48:07AM +0200, Uoti Urpala wrote: > David Kalnischkies wrote: > > As the transition hasn't started everyone not already merged is currently > > deferring it. That is true for those who upgrade daily as well as for > > those people who seemingly o

Re: merged-/usr transition: debconf or not?

2021-11-09 Thread David Kalnischkies
On Tue, Nov 09, 2021 at 08:44:52PM +, Simon McVittie wrote: > On Tue, 09 Nov 2021 at 19:01:18 +0100, David Kalnischkies wrote: > > On Tue, Nov 09, 2021 at 03:21:25PM +, Simon McVittie wrote: > > (Minus that for 12 it is technically still supported as long as it

Re: merged-/usr transition: debconf or not?

2021-11-09 Thread David Kalnischkies
ng an official opt-out of the opt-out as long as it happens in time. (Perhaps it comes with the job as apt maintainer, but I don't "discard and redo" systems or even chroots… upgrades until hardware failure… my current build chroots are from 2013. So I can totally see me opt-out

Re: merged-/usr transition: debconf or not?

2021-11-09 Thread David Kalnischkies
automatic transition for whatever reason (lets say to test build packages on that box) I also have a standard way of triggering the conversion by calling dpkg-reconfigure on usrmerge at leisure before the 13 upgrade. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: deb822 sources by default for bookworm

2021-11-05 Thread David Kalnischkies
ormats, but I opted to change that as of course countless things poking into those files broke left and right. cups used to detect if it ran on a Debian-like system by checking the sources.list file for deb entries… I doubt it does nowadays as there are countless better options now, I just mention it

Re: deb822 sources by default for bookworm

2021-11-05 Thread David Kalnischkies
de nobody really uses for years (as is common in apt land – backward compat be damned ). Best regards David Kalnischkies signature.asc Description: PGP signature

Re: users not reading manpages annoyance [was: apt annoyance]

2021-10-30 Thread David Kalnischkies
ere were I before this 'emergency call' came in… mhhh) Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Bug#992692: general: Use https for {deb,security}.debian.org by default

2021-09-13 Thread David Kalnischkies
On Sun, Sep 12, 2021 at 03:10:27AM +, Paul Wise wrote: > On Fri, Sep 10, 2021 at 6:03 PM David Kalnischkies wrote: > > Because this thread started with the idea to switch the default of d-i > > and co to another URI. If you target only apt then you still need > > a solut

Re: Bug#992692: general: Use https for {deb,security}.debian.org by default

2021-09-10 Thread David Kalnischkies
On Fri, Sep 10, 2021 at 11:08:38AM -0400, Michael Stone wrote: > On Fri, Sep 10, 2021 at 04:33:42PM +0200, David Kalnischkies wrote: > > On Thu, Sep 09, 2021 at 08:53:21AM -0400, Michael Stone wrote: > > > The only thing I could see that would be a net gain would be to

Re: Bug#992692: general: Use https for {deb,security}.debian.org by default

2021-09-10 Thread David Kalnischkies
hing to do with sources. It is true that apt-cacher-ng (and perhaps others) have a mode of operation in which you prefix the URI of your (in that case caching) proxy to the URI of the actual repo, but that isn't how a proxy usually operates and/or is configured. Best regards David Kalnischkies signature.asc Description: PGP signature

Bug#992692: general: Use https for {deb,security}.debian.org by default

2021-09-05 Thread David Kalnischkies
rd apt is stricter than a normal webbrowser (a mirror list acquired via https can redirect to http mirrors though, but see the man pages for details). Best regards David Kalnischkies ¹ which deb.d.o sort of is just that it is nowadays done via SRV instead of an explicit HTTP redirect – and tha

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread David Kalnischkies
On Mon, Aug 30, 2021 at 11:53:59AM +0100, Colin Watson wrote: > On Mon, Aug 30, 2021 at 12:30:49PM +0200, David Kalnischkies wrote: > > So, while for some/most usecases something akin to DynamicUser would be > > enough, for others a more stable user would be preferred and then the

Re: Bug#969631: can base-passwd provide the user _apt?

2021-08-30 Thread David Kalnischkies
ppy to be wrong through as it isn't exactly my dream to make apt a decent service manager even through apt starts a lot of processes, so a lot of management could and should be done here… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Q: Use https for {deb,security}.debian.org by default

2021-08-22 Thread David Kalnischkies
orm of 'man in the middle' "attack" https has no chance of preventing or detecting. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: merged /usr vs. symlink farms

2021-08-22 Thread David Kalnischkies
ore reading Guillems replies which end on a similar note even though he comes from the opposite end – dpkg worried about the finer file-level details and apt about the general package-level picture meeting halfway as usual… kinda funny) Best regards David Kalnischkies P.S.: As someone will ask:

Re: Q: Use https for {deb,security}.debian.org by default

2021-08-21 Thread David Kalnischkies
I can't remember of the top of my hat. There are likely more problems as it is easier to just set the clock approximately correct than to remember all the workarounds in "the time of need"… Best regards David Kalnischkies ¹ okay, ~15 years of apt-secure are not exactly ever, but close enough. signature.asc Description: PGP signature

Re: Q: Use https for {deb,security}.debian.org by default

2021-08-21 Thread David Kalnischkies
you need some form of opt in at least. So far, that opt in was using http. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Changing how you do things: Was Re: merged /usr

2021-08-18 Thread David Kalnischkies
hat many (so far). Best regards David Kalnischkies signature.asc Description: PGP signature

Re: merged /usr

2021-08-17 Thread David Kalnischkies
On Mon, Aug 16, 2021 at 03:13:48PM +0200, Marco d'Itri wrote: > On Aug 16, David Kalnischkies wrote: > > Is perhaps pure existence not enough, do I need to provide an upgrade > > path as simple as possible as well? > If you have specific ideas about how the upgrade path

Re: merged /usr

2021-08-16 Thread David Kalnischkies
ve to do it manually" so far. Surely you came up with something a lot better after all those years. Best regards David Kalnischkies P.S.: For the avoidance of doubt: apt-get is of course going nowhere, but that cuts both ways: It isn't changing as your fingers hate change – so e.g. no new interact

Re: merged /usr

2021-08-16 Thread David Kalnischkies
On Sun, Aug 15, 2021 at 05:52:06PM +0100, Simon McVittie wrote: > On Sun, 15 Aug 2021 at 11:52:21 +0200, David Kalnischkies wrote: > One way out of this would be to say that it is a RC bug for packages > in bookworm to have different contents when built in equivalent > merged-/usr

Re: merged /usr

2021-08-15 Thread David Kalnischkies
On Sun, Aug 15, 2021 at 12:16:39AM +0100, Simon McVittie wrote: > On Sat, 14 Aug 2021 at 16:59:24 +0200, David Kalnischkies wrote: > > Wouldn't it be kinda strange to have the chroots building the packages > > for the first bookworm release using a layout which isn't supported

Re: merged /usr

2021-08-14 Thread David Kalnischkies
On Sat, Aug 14, 2021 at 02:26:29PM +0100, Simon McVittie wrote: > On Sat, 14 Aug 2021 at 14:33:44 +0200, David Kalnischkies wrote: > > the current 'transition' plan is to have the > > release notes nudge all people who upgrade instead of reinstall their > > systems, chroots a

Re: merged /usr

2021-08-14 Thread David Kalnischkies
pen question for them still as nobody is running the upgrader in there of course. See also https://bugs.debian.org/985957. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: merged /usr

2021-08-14 Thread David Kalnischkies
Best regards David Kalnischkies P.S.: I picked out only this line as I think most of the rest is more or less discussed to death already in other sub-threads and at times actually objectively wrong – like the amount of packages shipping something in /bin and co – so I don't feel like rehashing those

Re: Debian package manager privilege escalation attack

2021-08-12 Thread David Kalnischkies
n with). So, before I am rushing off to do whatever I like, could we perhaps agree on a "sensible-restricted-pager" (I dare not to name it secure…) sort-of implementation first? Oh and, btw, there is no point¹ in running 'apt changelog' with root permissions – it is beside the point here

Re: Issue with installing manually created Debian archive with APT

2021-08-01 Thread David Kalnischkies
ges=1 to disable this check. Or, simply don't try to reinstall packages for (probably) no reason… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Bug#990521: I wonder whether bug #990521 "apt-secure points to apt-key which is deprecated" should get a higher severity

2021-07-01 Thread David Kalnischkies
e are unwilling to postpone, and one we intend to win". Lets see how that will go. Cavendish surprised most experts, too. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Planning for libidn shared library version transition

2021-06-01 Thread David Kalnischkies
On Fri, May 28, 2021 at 05:12:01PM +0100, Simon McVittie wrote: > On Thu, 27 May 2021 at 16:53:45 +0200, David Kalnischkies wrote: > > dpkg has the notion of "disappearing packages" (packages which have no > > files left on a system) which could solv

Re: Planning for libidn shared library version transition

2021-05-27 Thread David Kalnischkies
themselves too much with upgrades, but are mostly used in build-chroot constructions, so you might get away without it (see also optimisation criteria "less removals" from above). As the number increases we would also need an "upgrade" command which allows those removes but not the others as our current "upgrade" becomes less and less useful. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Help required to determine why some packages are being installed

2021-05-27 Thread David Kalnischkies
-default by installing qtbase5-gles-dev (just to then figure out that gles-dev breaks qt5-default, so it has to remove the later anyhow). Thanks for looking into this: That seems like a simpler and less controversial example than the one I used for the last big round of resolver changes … and sorry

Re: Tips for debugging/testing debian/control Depends/Breaks etc changes?

2021-03-31 Thread David Kalnischkies
es your users to experience the worst of both worlds: The packages can not be co-installed forcing them through the change in one sitting and they are an upgrade nightmare as there will always be one more situation in which apt (or another resolver, or even a human) decides that (part of) an upgra

Re: Tips for debugging/testing debian/control Depends/Breaks etc changes?

2021-03-25 Thread David Kalnischkies
han 16y later…). So don't worry that you haven't heard about it yet: You are not the last one to know, you are in fact well ahead of the curve.  As said, if you have questions (or ideas), feel free to praise the cow ^Ŵ^W^W join #debian-apt on IRC, mail us at deity@d.l.o or even report a bug a

Re: `Build-Depends` parsing problem for node-* packages

2021-03-17 Thread David Kalnischkies
ullseye though as such a change would likely not get a freeze exception. Best regards David Kalnischkies ¹ ; char const * const name = "World" ; printf("Hello %s!", name) (that style reminds me of some other language I have seen but can't quite remember at the moment; I jus

Re: Help required to determine why some packages are being installed

2021-01-30 Thread David Kalnischkies
on one side actually gives the one having it a scoring advantage in apts conflict resolution, so for apt it reads in fact like -gles is the preferred package of the two making it less likely that apt holds back libqt5gui5. In practice other score points should level the playing field for libqt5gui5 th

Re: Recommending packages via virtual package

2020-04-14 Thread David Kalnischkies
isn't what you meant to say of course, but you would be surprised how often that style is used rather than the intended "I have no idea why APT does that here, could someone please explain it?". Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Recommending packages via virtual package

2020-04-14 Thread David Kalnischkies
d hence ask you to explain a bit better why you think APT is wrong and provide an example which actually shows these characteristics. Otherwise I will apparently be a tiny bit annoyed by this thread. Best regards David Kalnischkies P.S.: For these cases -o Debug::pkgDepCache::AutoInstall=1 sh

Re: trimming changelogs

2020-03-20 Thread David Kalnischkies
be applied so that this happens only to packages which end up in Debians repositories… which could complicate reproducibility as its clear for a buildd, but my local sbuild… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Is running dpkg-buildpackage manually from the command line forbidden?

2020-01-20 Thread David Kalnischkies
) Now, suggesting that apt is not an integral part of a Debian system and could henceforth be removed is of course heresy! The only thing saving you vile heretics is apts heavy involvement in the creation of these chroots. Best regards David Kalnischkies signature.asc Description: PGP signature

Accepted vim-youcompleteme 0+20191218+git9e2ab00+ds-1 (source) into unstable

2019-12-29 Thread David Kalnischkies
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 16:40:19 +0100 Source: vim-youcompleteme Architecture: source Version: 0+20191218+git9e2ab00+ds-1 Distribution: unstable Urgency: medium Maintainer: David Kalnischkies Changed-By: David Kalnischkies Changes: vim

Accepted ycmd 0+20191222+git2771f6f+ds-1 (source) into unstable

2019-12-29 Thread David Kalnischkies
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 29 Dec 2019 15:13:44 +0100 Source: ycmd Architecture: source Version: 0+20191222+git2771f6f+ds-1 Distribution: unstable Urgency: medium Maintainer: David Kalnischkies Changed-By: David Kalnischkies Closes: 912690 929987

Re: unsigned repositories

2019-08-05 Thread David Kalnischkies
eature via the config option APT::Sources::With, the commandline flag is just syntactic sugar. So, as aptitude has I think -o you could e.g. say -o APT::Sources::With::=/path/to/file.deb or if all else fails a config file of course. Best regards David Kalnischkies signature.asc Descriptio

Re: unsigned repositories

2019-08-05 Thread David Kalnischkies
a Sources file? Also, --with-source actually allows to add Packages/Sources files as well, I use them for simulations only, but in theory they should work "for real", too. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Apt-secure and upgrading to bullseye

2019-07-11 Thread David Kalnischkies
t plan is to make the switch over for Suite changes automatic – if some preconditions are satisfied. The discussion about that isn't hard to find, but here you go: #931566. You are welcome to add any good ideas not already present (that hopefully shows also that this is a tiny bit more complex than

Re: Apt-secure and upgrading to bullseye

2019-07-10 Thread David Kalnischkies
ractive question) or "apt-get update --allow-releaseinfo-change" (see apt-get manpage) or [least preferred option] set the config option Acquire::AllowReleaseInfoChange for basically any apt-based client. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: buster backports question/status

2019-07-10 Thread David Kalnischkies
stion as that seems wrong (and why I put "bug" in quotes). Best regards David Kalnischkies signature.asc Description: PGP signature

Accepted vim-youcompleteme 0+20190211+gitcbaf813-0.1 (source) into unstable

2019-02-14 Thread David Kalnischkies
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 14 Feb 2019 11:38:37 +0100 Source: vim-youcompleteme Architecture: source Version: 0+20190211+gitcbaf813-0.1 Distribution: unstable Urgency: medium Maintainer: Onur Aslan Changed-By: David Kalnischkies Changes: vim

Accepted pyhamcrest 1.8.0-1.1 (source) into unstable

2019-01-09 Thread David Kalnischkies
Kalnischkies Description: python-hamcrest - Hamcrest framework for matcher objects (Python 2) python3-hamcrest - Hamcrest framework for matcher objects (Python 3) Closes: 917660 Changes: pyhamcrest (1.8.0-1.1) unstable; urgency=medium . [ David Kalnischkies ] * No-change non-maintainer upload

Accepted vim-youcompleteme 0+20181101+gitfaa019a-0.1 (source) into unstable

2018-11-02 Thread David Kalnischkies
field * d/control: Set Vcs-* to salsa.debian.org . [ Sylvestre Ledru ] * New upstream release - Refresh path-to-server-script.patch . [ David Kalnischkies ] * New upstream version 0+20181101+gitfaa019a - Use uscan to generate tarball from upstream git HEAD - Refresh

Accepted ycmd 0+20181101+git600f54d-0.1 (source) into unstable

2018-11-02 Thread David Kalnischkies
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 02 Nov 2018 19:57:14 +0100 Source: ycmd Binary: ycmd Architecture: source Version: 0+20181101+git600f54d-0.1 Distribution: unstable Urgency: medium Maintainer: Onur Aslan Changed-By: David Kalnischkies Description: ycmd

Re: Reducing the attack surface caused by Berkeley DB...

2018-01-27 Thread David Kalnischkies
ng an archive and most of these tools have a focused upstream… the apt client needed a server to start rolling, but nowadays this server side hustle is more a brake than an accelerator. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Reducing the attack surface caused by Berkeley DB...

2018-01-27 Thread David Kalnischkies
hing by it. We just (literally) moved the problem. (The other aspects I will hopefully answer with another mail in the gsoc/outreach subthread) Best regards David Kalnischkies [0] https://wiki.debian.org/Teams/Dpkg/RoadMap signature.asc Description: PGP signature

Re: Reducing the attack surface caused by Berkeley DB...

2018-01-26 Thread David Kalnischkies
ting task of actually switching code, documentation and existing databases over on the other hand… I at least don't see me enthusiastically raising my arm crying "let me, let me, …". Best regards David Kalnischkies ¹ The Census has a field for "Archive tool", but

Accepted apt-transport-tor 0.4 (source) into unstable

2018-01-22 Thread David Kalnischkies
hanged-By: David Kalnischkies <donk...@debian.org> Description: apt-transport-tor - APT transport for anonymous package downloads via Tor Changes: apt-transport-tor (0.4) unstable; urgency=medium . * fix typo in Vcs-{Git,Browser} URI * document that a-t-tor is not a The Tor Project prod

Re: Bug#882445: Proposed change of offensive packages to -offensive

2017-11-23 Thread David Kalnischkies
fensive takes off. SCNR) > I second this patch. I suggest we add it as section 3.1.1, i.e., as a > subsection to 3.1 "The package name". [As this is the first subsection I wonder if there will soon be many more "rip-off" naming conventions added like python-*, *-perl, … a

Re: apt cron autoclean not enabled by default

2017-10-08 Thread David Kalnischkies
e release notes helps preventing "decades-old" as that includes the suggestion to run 'clean' before the upgrade and Debian releases a few times within a decade… (heck, apt hasn't reached the "decades" milestone yet… so technically… but just a few more months). Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Automatic way to install dbgsym packages for a process?

2017-08-09 Thread David Kalnischkies
regards David Kalnischkies [0] https://wiki.ubuntu.com/AptElfDebugSymbols signature.asc Description: PGP signature

Re: Bug#863361: dgit-user(7): replace apt-get build-deps with mk-build-deps

2017-05-28 Thread David Kalnischkies
nstall-recommends. I would recommend not to recommend it because apt follows the general recommendation of not recommending the installation of recommendations of build-dependencies by default for all recommended Debian releases. Recommended summary: Already the default since 2011. Recommending eve

Re: apt-get upgrade removing ifupdown on jessie→stretch upgrade

2017-02-22 Thread David Kalnischkies
On Wed, Feb 22, 2017 at 09:04:16PM +0100, Luca Capello wrote: > On Wed, 22 Feb 2017 13:16:27 +0100, David Kalnischkies wrote: > > On Wed, Feb 22, 2017 at 01:06:24PM +1300, martin f krafft wrote: > > > What am I not understanding right here? Shouldn't "apt-get upgrade"

Re: apt-get upgrade removing ifupdown on jessie→stretch upgrade

2017-02-22 Thread David Kalnischkies
-picture test!) Oh, and of course the standard reply: You know, apt does print a proposal not an EULA – so you don't have to press 'yes' without reading. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: IPv6 problem for one debian mirror

2017-02-08 Thread David Kalnischkies
e fellowship of the cow! Best regards David Kalnischkies [0] https://qa.debian.org/cgi-bin/bugs-by-source signature.asc Description: PGP signature

Re: client-side signature checking of Debian archives (Re: When should we https our mirrors?)

2016-11-10 Thread David Kalnischkies
would still like to have some for a-t-tor, too. The package is even way smaller than even the smallest node packages [SCNR] nowadays and someone with an eye for detail, integration and documentation could do wonders… but I start to digress. Best regards David Kalnischkies [0] https://xkcd.com/1172/ signature.asc Description: PGP signature

Re: Multi-Arch: allowed

2016-11-01 Thread David Kalnischkies
s long as you haven't got a bugreport telling you it would be nice from some cross-folks (be it grader, builder, bootstrapper, …). Reason is that M-A:same/foreign is instantly useable/ful, but M-A:allowed is useless if nothing ends up depending on it with :any. Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Multi-Arch: allowed

2016-11-01 Thread David Kalnischkies
that smells wrong… What are you trying to express here? (and have you heard that automatic debug packages are a thing nowadays?) Best regards David Kalnischkies [0] https://wiki.ubuntu.com/MultiarchSpec [1] There are ways around it. See the "If it helps" remark for a hint. signature.asc Description: PGP signature

Re: When should we https our mirrors?

2016-10-28 Thread David Kalnischkies
On Thu, Oct 27, 2016 at 10:05:56PM +0200, Tollef Fog Heen wrote: > ]] David Kalnischkies > > I would kinda like to avoid encoding the entire answer and sending that > > in for display because it would be a lot of noise (and bugreporters will > > truncate it if it is too long

Re: When should we https our mirrors?

2016-10-26 Thread David Kalnischkies
I would kinda like to avoid encoding the entire answer and sending that in for display because it would be a lot of noise (and bugreporters will truncate it if it is too long trying to be helpful), so if people who actually know what they would need to deal with issues (I don't) would decide upon a set and

Re: When should we https our mirrors?

2016-10-24 Thread David Kalnischkies
nt an opportunistic use of https if a-t-https is installed and "_https._tcp." srv-lookups get a favorable response by letting http ask for that first and internally redirect in that case. So, you see, as usually, there isn't a shortage on ideas. If someone wants to work on any feel free to joi

Re: client-side signature checking of Debian archives

2016-10-24 Thread David Kalnischkies
for because it isn't. Various people have said for various teams already which technical challenges need to be solved before we can seriously think about rolling out https on a broad scale and as usual the problems aren't fixing themselves if only we talk long enough about them… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: When should we https our mirrors?

2016-10-19 Thread David Kalnischkies
ing to do security) have I bet the security team would be overjoyed if all clients talking to a mirror would embed such code… Best regards David Kalnischkies ¹ overloaded term, here it means: "Debian Signature Algorithm" – SCNR signature.asc Description: PGP signature

Re: When should we https our mirrors?

2016-10-19 Thread David Kalnischkies
left as an exercise to the reader. Best regards David Kalnischkies P.S.: There are various arguments why -https is in terms of mirrors – as their content is static and public knowledge – more an obfuscation rather than 'real' security/privacy enhancement. If you want more/better have a l

Accepted apt-transport-tor 0.3 (source) into unstable

2016-10-01 Thread David Kalnischkies
hanged-By: David Kalnischkies <donk...@debian.org> Description: apt-transport-tor - APT transport for anonymous package downloads via Tor Closes: 755675 812490 835128 Changes: apt-transport-tor (0.3) unstable; urgency=medium . [ David Kalnischkies ] * use apt 1.3 directly instead of an e

Re: Repeated Upgrade of Package

2016-08-23 Thread David Kalnischkies
Not sure what tool you are using to generate an apt repository, but it seems rather non-standard given that it includes the deb file also in the Release file… using one of the many already existent solutions might be better… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Handling Multi-Arch packages that must be installed for every enabled architecture?

2016-06-26 Thread David Kalnischkies
oes OR exist as | then?, is it a versioned relation, keeping API and/or ABI, what if v2 of a package adds/modifies/removes the field, interaction with autoremove……… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Handling Multi-Arch packages that must be installed for every enabled architecture?

2016-06-25 Thread David Kalnischkies
ng with packages. For Multi-Arch itself I managed to hide away most of it behind implicit dependency relations, versioned provides and 'strange' virtual packages for the libapt-based ones which made that transition quite "easy" all things considered, but we can't pretend it will always be that "easy"… Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Problem with Google APT repo

2016-06-17 Thread David Kalnischkies
;too weak hash" – but error is error either way, so you may want to talk to the repository maintainers (there are more than just this repository with such an issue) and I should write a patch to produce a better message as we were talking in the APT team about it for a while now… Best regards Dav

Re: Debian i386 architecture now requires a 686-class processor

2016-05-12 Thread David Kalnischkies
is of a proud heart stirreth up strife: but …". Best regards David Kalnischkies signature.asc Description: PGP signature

Re: How shall I report a bug in the .deb packaging itself?

2015-12-24 Thread David Kalnischkies
On Thu, Dec 24, 2015 at 01:50:45AM +0100, Alberto Salvia Novella wrote: > Luis Felipe Tabera Alonso: > David Kalnischkies: > > It is not a good idea to perform autoremoves unattended for situations > > in which you have installed A (gui) depends B (console) depends > > C

Re: How shall I report a bug in the .deb packaging itself?

2015-12-22 Thread David Kalnischkies
ood that others put a stop to such ideas before those ideas have a chance to hurt me (and I can assure you, I implemented ideas which never should have been and now taunt me by their mere existence). Best regards David Kalnischkies signature.asc Description: PGP signature

Re: Upcoming version of apt-file - using apt-acquire and incompatibilities

2015-12-08 Thread David Kalnischkies
On Sun, Dec 06, 2015 at 08:50:55AM -0500, The Wanderer wrote: > On 2015-12-06 at 07:01, David Kalnischkies wrote: > > On Sat, Dec 05, 2015 at 07:58:07AM -0500, The Wanderer wrote: > > (as I am sightly lying, it is actually possible – just not very > > accessible for a user and

  1   2   3   >