Re: finally end single-person maintainership

2024-04-12 Thread Gioele Barabucci
ore a praise of gbp rather than a defense of debian/-only repos.) -- Gioele Barabucci

Re: finally end single-person maintainership

2024-04-09 Thread Gioele Barabucci
jenkins, mattermost, bugzilla, but funnily enough not BTS). * Project specific wikis, snippets, Docker images. * And with tag2upload salsa fulfills 50% of dgit functionality. Regards, -- Gioele Barabucci

Re: About Package Maintenance

2024-04-09 Thread Gioele Barabucci
one month for top-10% popcon packages, three months for all other packages. Tagging as "wontfix" would also be an OK response, at least the project will have a clear and explicit view of what is blocking distro-wide changes. Regards, -- Gioele Barabucci

Re: finally end single-person maintainership

2024-04-07 Thread Gioele Barabucci
matter of efficiency, one size does not fit all. The lack of a standardized sanctioned workflow is the main reason (together with unresponsive maintainers) why big cross-distro changes are nigh impossible to carry out. I would not classify it as a big advantage. Regards, -- Gioele Barabucci

Re: Validating tarballs against git repositories

2024-04-01 Thread Gioele Barabucci
these the same kinds of problem that affect go and rust packages? -- Gioele Barabucci

Re: Validating tarballs against git repositories

2024-03-31 Thread Gioele Barabucci
r changing the CI settings to reference the Salsa CI pipeline is needed only for projects in team- or maintainer-specific repositories, or when the dev wants to enable additional tests (or configure/block the default tests). Regard, -- Gioele Barabucci

Git and SHA1 collisions (Was: Re: Validating tarballs against git repositories)

2024-03-30 Thread Gioele Barabucci
n place by SHA1. But pulling a successful collision attack is not a trivial task. For instance, the xz attacker did not have all that was required to carry it out (for example they had no direct access to the git servers... yet). Regards, -- Gioele Barabucci

Re: Validating tarballs against git repositories

2024-03-30 Thread Gioele Barabucci
On 30/03/24 14:08, Jonathan Carter wrote: On 2024/03/30 12:43, Sean Whitton wrote: On 2024-03-30 08:02:04, Gioele Barabucci wrote: Now it is time to take a step forward: 1. new upstream release; 2. the DD/DM merges the upstream release VCS into the Debian VCS; 3. the buildd is notified

Re: Validating tarballs against git repositories

2024-03-30 Thread Gioele Barabucci
eed texinfo, groff, pandoc, sphinx, etc. All big packages with plenty of runtime and build-time dependencies. But as I said, for cases like arch rebootstraps, can remove the need to bootstrap a long (and often circular) chain of dependencies. Regards, -- Gioele Barabucci

Re: Validating tarballs against git repositories

2024-03-30 Thread Gioele Barabucci
, -- Gioele Barabucci

Re: Validating tarballs against git repositories

2024-03-30 Thread Gioele Barabucci
vectors, but at least _these_ attack vectors will be stopped. Regards, -- Gioele Barabucci

Re: On merging bin and sbin

2024-02-28 Thread Gioele Barabucci
On 28/02/24 19:08, Peter Pentchev wrote: On Wed, Feb 28, 2024 at 08:47:48AM -0600, r...@neoquasar.org wrote: From: Gioele Barabucci This is a quick'n'dirty list of binaries present in both /bin and /sbin: arping bin net/iputils-arping sbin net/arping (+ Conflicts:) Are any of these (like

Re: On merging bin and sbin

2024-02-28 Thread Gioele Barabucci
tools sbin comm/dahdi siggen bin sound/siggen sbin utils/tripwire sslh bin perl/libnet-proxy-perl sbin net/sslh (+ Conflicts:) tcpconnect bin net/tcputils sbin misc/libbpf-tools tcpd bin graphics/tcm sbin net/tcpd update-locale bin web/gosa-dev sbin localization/locales Regards, -- Gioele Barabucci

Re: On merging bin and sbin

2024-02-28 Thread Gioele Barabucci
* fsck.* * isosize * mkfs.* * route * tarcat But aside from the $PATH question, cacin work on ensuring that there are no conflicts between /sbin and /bin is worth pursuing as these conflicts are just bugs waiting to happen. Regards, -- Gioele Barabucci

Re: Another take on package relationship substvars

2024-02-24 Thread Gioele Barabucci
them down (a task better left to the package maintainers rather than the end users). PS: I volunteer to do the splitting. Regards, -- Gioele Barabucci

Re: Proposal for how to deal with Go/Rust/etc security bugs

2024-01-24 Thread Gioele Barabucci
prometheus, sq, firefox... -- Gioele Barabucci

Re: Policy: should libraries depend on services (daemons) that they can speak to?

2024-01-15 Thread Gioele Barabucci
(Depends:) * UsesProgramInMaintscript (Pre-Depends:) * TalksToDaemon (Depends:) * TalksToDaemonIfAvailable (Recommends:/Suggests:) * LoadsAtRuntimeIfAvailable (Recommends:/Suggests:) * IsPluginFor (Enhances:) Regards, -- Gioele Barabucci

Drawbacks of lack of mandated packaging workflow (Was: Re: Bug#1036884: 64-bit time_t: updated archive analysis, proposed transition plan with timeline)

2024-01-06 Thread Gioele Barabucci
s/-/issues/24 [2] https://salsa.debian.org/debian/grow-your-ideas/-/issues/34 Regards, -- Gioele Barabucci

Re: Deprecation of /etc/alternatives? (Re: Reaction to potential PGP schism)

2023-12-24 Thread Gioele Barabucci
gpg-is-sq-chameleon. Regards, -- Gioele Barabucci

Deprecation of /etc/alternatives? (Re: Reaction to potential PGP schism)

2023-12-23 Thread Gioele Barabucci
or sequoia-chameleon-gnupg). Regards, -- Gioele Barabucci

Re: Reaction to potential PGP schism

2023-12-21 Thread Gioele Barabucci
g that uses sequoia internally)? Would it work as a stop-gap measure while the Debian infrastructure moves from GnuPG to something else (to `sop`, for instance)? Regards, [1] https://gitlab.com/sequoia-pgp/sequoia-chameleon-gnupg not yet in Debian AFAIK -- Gioele Barabucci

Re: New Essential package procps-base

2023-11-14 Thread Gioele Barabucci
tps://salsa.debian.org/-/snippets/621>. In short, there are only 23 packages whose maintscripts assume the presence of pidof and that need to be fixed. Regards, -- Gioele Barabucci

Re: reference Debian package of multiple binaries sharing one man page

2023-11-11 Thread Gioele Barabucci
(dh_link) $grep -r dch debian/links /usr/bin/debchange /usr/bin/dch Please note that using d/links for manpages breaks building packages with , unless dh-exec is used and the manpages links are marked with . Regards, -- Gioele Barabucci

Re: Bug#1041731: Hyphens in man pages

2023-10-16 Thread Gioele Barabucci
instead large dots and contain a space between the bullet points and the text. Perhaps is it just a bug in the man-to-html conversion? Or is scdoc producing wrong roff markup? Regards, -- Gioele Barabucci

Re: Hyphens in man pages

2023-10-15 Thread Gioele Barabucci
On 15/10/23 19:13, Johannes Schauer Marin Rodrigues wrote: Quoting Gioele Barabucci (2023-10-15 17:59:32) On 15/10/23 17:33, Iustin Pop wrote: At least you're not lazy. I am, so what I did many times is add a build-depends on pandoc, and write the man page in rst or md. I think that's a worse

Re: Hyphens in man pages

2023-10-15 Thread Gioele Barabucci
for the members of the lazy club is `podlators-perl`. The `.pod` syntax is OK, and it is not as heavy a dependency as pandoc. Regards, -- Gioele Barabucci

MR against patched package (Was: Please give a test to cron package, in experimental)

2023-10-10 Thread Gioele Barabucci
e possible, but they will require one extra step from the maintainer (i.e. `gbp pq export`) to turn these MRs into normal standalone patch files stored in debian/patches. Regards, PS: `gbp pq import/export` is a much better interface to debian/patches compared to plain `quilt`. -- Gioele Barabucci

Re: Bug#1053165: ITS: nunit

2023-09-28 Thread Gioele Barabucci
uot;it's fully maintained" and "it's orphaned" [2]. A third option that recognizes and provides rules for low-commitment QA work on non-actively maintained packages. [1] https://lists.debian.org/debian-devel/2023/09/msg00237.html [2] https://lists.debian.org/debian-devel/2023/09/msg00358.html Regards, -- Gioele Barabucci

Re: Abandonware in testing (Re: lpr/lpd)

2023-09-25 Thread Gioele Barabucci
bian Caretaking Team" in the Maintainer: field (not the usual "QA Group", and have autotests in lieu of a specific person/team that takes care of manually testing the package. Has such a third category already been discussed or explored? -- Gioele Barabucci

Abandonware in testing (Re: lpr/lpd)

2023-09-23 Thread Gioele Barabucci
or example: packages are removed from testing if: - have been orphaned/last maintainer-uploaded more than 2 releases ago, - have no autopkgtests OR autopkgtests fail OR are not lintian/piuparts-clean. Regards, -- Gioele Barabucci

Re: debian testing daily build: installing GRUB/Bootloader and initramfs failing!!

2023-09-17 Thread Gioele Barabucci
: https://bugs.debian.org/1031183 Regards, -- Gioele Barabucci

Re: /usr/-only image

2023-09-16 Thread Gioele Barabucci
/63 -- Gioele Barabucci

Re: Default font: Transition from DejaVu to Noto

2023-09-12 Thread Gioele Barabucci
-noto-core. Regards, -- Gioele Barabucci

Re: /usr/-only image

2023-09-11 Thread Gioele Barabucci
approachable goal for Debian towards statelessness is to reach the point where no packages ship files in /var. That is often a matter of passing the right parameters to `dh_auto_configure`. Regards, -- Gioele Barabucci

Re: proposal: dhcpcd-base as standard DHCP client starting with Trixie

2023-07-11 Thread Gioele Barabucci
fitting alternative. I just wanted to explicitly mention one reason supporting that statement.) Regards, -- Gioele Barabucci

Re: Second take at DEP17 - consensus call on /usr-merge matters

2023-07-08 Thread Gioele Barabucci
the most convoluted and lock-stepped procedure can surely be carried out over a single day in an all-hands-on-deck effort. Especially if the files of non-critical packages are moved before the flag day. Regards, -- Gioele Barabucci

Re: FTBFS (reprotest) on all recent uploads

2023-06-20 Thread Gioele Barabucci
[...] This is happening for a lot of packages, but reprotest seems fine on Salsa. It looks like this issue has been fixed yesterday: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/9951365b854660b4c3ea770c11414f254c50151a -- Gioele Barabucci

Re: Adding epoch to kworkflow package to correct a wrong upstream version

2023-03-13 Thread Gioele Barabucci
-uses-date-based-version-number.tag Given than epochs are kind of a big deal, maybe that warning could be raised to the level of error (or added to ftp-master's autoreject tags), so that a package will be accepted only if that tag is explicitly overridden. Regards, -- Gioele Barabucci

Re: An email address for drive-by bug reports?

2023-03-01 Thread Gioele Barabucci
agreement. And not much different to what happens with orphaned packages (you don't maintain the package anymore, don't expect others to put in the effort to do it). Regards, -- Gioele Barabucci

An email address for drive-by bug reports?

2023-02-28 Thread Gioele Barabucci
ce to have a separate email address to which these bugs could be reassigned (maybe after a minimum amount of time?). It could be as simple as a the address of a dedicated mailing list. Regards, -- Gioele Barabucci

Bug#1030668: dinstall could run more often (every hour?)

2023-02-06 Thread Gioele Barabucci
/2019-03-10-debian-winding-down/#old-infrastructure-package-uploads Given that a dinstall run generally takes only few minutes, it should be feasible to run dinstall at least hourly. Regards, -- Gioele Barabucci

Bug#1029723: ITP: bats-file -- Helper library providing filesystem-related assertions for Bats

2023-01-26 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: bats-file Version : 0.3.0 * URL : https://github.com/bats-core/bats-file * License : CC0 Programming Lang: Bash Description : Helper

Re: propose: provide "docker" package as docker, not wmdocker

2022-12-05 Thread Gioele Barabucci
eze? Regards, -- Gioele Barabucci

Bug#1021609: ITP: bats-assert -- Helper library providing common assertions for Bats

2022-10-11 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci X-Debbugs-Cc: debian-devel@lists.debian.org, gio...@svario.it * Package name: bats-assert Version : 2.0.0 * URL : https://github.com/bats-core/bats-assert * License : CC0 Programming Lang: Bash

Bug#1021048: ITP: bats-support -- Supporting library to test bats helper libraries

2022-10-01 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: bats-support Version : 0.3.0 * URL : https://github.com/bats-core/bats-support * License : CC0-1.0 Programming Lang: bash Description

Re: Automatic trimming of changelogs in binary packages

2022-09-07 Thread Gioele Barabucci
is correct: what is being proposed is just trimming the installed changelogs, not removing them completely. And the full logs will remain in the source packages. Regards, -- Gioele Barabucci

Re: Automatic trimming of changelogs in binary packages

2022-09-07 Thread Gioele Barabucci
On 06/09/22 10:25, Paul Wise wrote: On Tue, 2022-09-06 at 07:13 +0200, Gioele Barabucci wrote: * Packages not meant to be included in Debian (and without access to a changelog server): Creators that want to preserve the full history can use the `--no-trim` option to disable the trimming

Re: Automatic trimming of changelogs in binary packages

2022-09-05 Thread Gioele Barabucci
On 18/08/22 21:18, Gioele Barabucci wrote: Does anybody have objective objections against activating automatic changelog trimming in binary packages? Hi, a couple of weeks since the initial email (thanks everybody for the input), my reading is that there is now consensus in going ahead

Re: Automatic trimming of changelogs in binary packages

2022-08-19 Thread Gioele Barabucci
}/X → /usr/share/doc/src:openssh/X Regards, -- Gioele Barabucci

Re: Automatic trimming of changelogs in binary packages

2022-08-19 Thread Gioele Barabucci
trimmed, and that it should therefore try to download the full version. This two-line footer is added to the trimmed changelogs: # Older entries have been removed from this changelog. # To read the complete changelog use `apt changelog foobar`. Regards, -- Gioele Barabucci

Re: Automatic trimming of changelogs in binary packages

2022-08-19 Thread Gioele Barabucci
ce and bandwidth. Regards, [1] https://salsa.debian.org/apt-team/apt/-/blob/main/doc/apt.conf.5.xml#L628 -- Gioele Barabucci

Automatic trimming of changelogs in binary packages

2022-08-18 Thread Gioele Barabucci
/03/msg00299.html [2] https://bugs.debian.org/954313 [3] https://salsa.debian.org/debian/debhelper/-/merge_requests/80 -- Gioele Barabucci

Userscript to manage reports directly from bugs.debian.org

2015-12-09 Thread Gioele Barabucci
ieces of information for me and put them in a ready-to-send email. This is that script. I hope this may be useful to other people as well. Cheers, -- Gioele Barabucci <gio...@svario.it>

Accepted fonts-radisnoir 0.9b-3 (source all) into unstable, unstable

2015-11-23 Thread Gioele Barabucci
-de...@lists.alioth.debian.org> Changed-By: Gioele Barabucci <gio...@svario.it> Description: fonts-radisnoir - font inspired by Bayer Universal and Bauhaus ttf-radisnoir - transitional dummy package for fonts-radisnoir Closes: 659725 661459 Changes: fonts-radisnoir (0.9b-3) unstable; ur

Accepted fonts-femkeklaver 1.0-2 (source all) into unstable, unstable

2015-11-19 Thread Gioele Barabucci
-de...@lists.alioth.debian.org> Changed-By: Gioele Barabucci <gio...@svario.it> Description: fonts-femkeklaver - simple handwriting font ttf-femkeklaver - transitional dummy package for fonts-femkeklaver Closes: 804917 Changes: fonts-femkeklaver (1.0-2) unstable; urgency=medium . * Pre

Accepted fonts-kristi 20100000-2 (source all) into unstable, unstable

2015-11-03 Thread Gioele Barabucci
-de...@lists.alioth.debian.org> Changed-By: Gioele Barabucci <gio...@svario.it> Description: fonts-kristi - casual cursive script typeface with a "felt-tip pen" feel Changes: fonts-kristi (2010-2) unstable; urgency=medium . * Improve summary and description Checksums-Sha1: 9b676986f14fb7ffe3

Bug#803690: ITP: fonts-pompiere -- a playful script font

2015-11-01 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci <gio...@svario.it> * Package name: fonts-pompiere Version : 20110715 Upstream Author : Karolina Lach for Sorkin Type * URL : https://www.google.com/fonts/specimen/Pompiere * License : O

Bug#800815: ITP: fonts-kristi -- Kristi font

2015-10-03 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci <gio...@svario.it> * Package name: fonts-kristi Version : 2010 Upstream Author : Birgit Pulk * URL : https://www.google.com/fonts/specimen/Kristi * License : OFL-1.1 Description : Krist

Accepted fonts-leckerli-one 20110000-1 (source all) into unstable, unstable

2015-10-01 Thread Gioele Barabucci
-de...@lists.alioth.debian.org> Changed-By: Gioele Barabucci <gio...@svario.it> Description: fonts-leckerli-one - Leckerli One font Closes: 798202 Changes: fonts-leckerli-one (2011-1) unstable; urgency=medium . * Initial release. (Closes: #798202) Checksums-Sha1: 0a0f007cdaf4106876d6a2ea57a0

Bug#798202: ITP: fonts-leckerli-one -- Leckerli One font

2015-09-06 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci <gio...@svario.it> * Package name: fonts-leckerli-one Version : 2011 Upstream Author : Gesine Todt * URL : http://www.example.org://www.google.com/fonts/specimen/Leckerli+One * License : O

Accepted ruby-filepath 0.6-1 (source all)

2013-10-27 Thread Gioele Barabucci
...@lists.alioth.debian.org Changed-By: Gioele Barabucci gio...@svario.it Description: ruby-filepath - small library to manipulate paths Closes: 723905 Changes: ruby-filepath (0.6-1) unstable; urgency=low . * Initial release (Closes: #723905) Checksums-Sha1: 0c239e7dcaf169e4af796ecf7ceb6494167cd487

Bug#725318: ITP: ruby-launchy -- helper class for launching cross-platform applications in a fire and forget manner

2013-10-03 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci gio...@svario.it * Package name: ruby-launchy Version : 2.3.0 Upstream Author : Jeremy Hinegardner * URL : http://rubygems.org/gems/launchy * License : ISC Programming Lang: Ruby Description

Bug#725320: ITP: rumember -- Remember The Milk Ruby API and command line client

2013-10-03 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci gio...@svario.it * Package name: rumember Version : 1.0.1 Upstream Author : Tim Pope * URL : https://github.com/tpope/rumember * License : MIT Programming Lang: Ruby Description : Remember

Bug#723905: ITP: ruby-filepath -- Small gem to manipulate paths

2013-09-20 Thread Gioele Barabucci
Package: wnpp Severity: wishlist Owner: Gioele Barabucci gio...@svario.it * Package name: ruby-filepath Version : 0.6 Upstream Author : Gioele Barabucci gio...@svario.it * URL : https://rubygems.org/gems/filepath * License : CC0 Programming Lang: Ruby