Bug#943743: ITP: golang-github-varlink-go -- Golang implementation of the Varlink protocol

2019-10-28 Thread Dmitry Smirnov
Package: wnpp Severity: wishlist Owner: Dmitry Smirnov X-Debbugs-CC: debian-devel@lists.debian.org, pkg-go-maintain...@lists.alioth.debian.org Package name: golang-github-varlink-go Version: 0.0+git20191018 License: Apache-2.0 URL: https://github.com/varlink/go

Bug#943742: ITP: python-sop -- Framework for implementing the Stateless OpenPGP CLI in Python

2019-10-28 Thread Daniel Kahn Gillmor
Package: wnpp Severity: wishlist Owner: Daniel Kahn Gillmor * Package name: python-sop Version : 0.1.1 Upstream Author : Daniel Kahn Gillmor * URL : https://gitlab.com/dkg/python-sop * License : MIT Programming Lang: Python Description : Framework for

Re: [RFC] Proposal for new source format

2019-10-28 Thread Helmut Grohne
Hi Sean, On Sun, Oct 27, 2019 at 10:11:22AM -0700, Sean Whitton wrote: > On Sat 26 Oct 2019 at 04:24PM -07, Russ Allbery wrote: > > Hm, that's an interesting thought. I do generally include that sort of > > information in the docuemntation of all packages for which I'm upstream, > > but for Debia

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Helmut Grohne
Hi Ian, On Mon, Oct 28, 2019 at 05:53:00PM +, Ian Jackson wrote: > The sticking point, as I understand it, is that this still does not > allow dak to verify that the *contents* of the .dsc were as intended > by the uploading human. [0] > > In the tag2upload proposal, the conversion from git t

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Scott Kitterman
On October 28, 2019 5:53:00 PM UTC, Ian Jackson wrote: >Scott Kitterman writes ("Re: Building Debian source packages >reproducibly (was: Re: [RFC] Proposal for new source format)"): >> Effectively tag2upload would replace DAK as the entry point for >> packages into the archive (the equivalent

Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Ian Jackson
Didier 'OdyX' Raboud writes ("Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)"): > Where I'm coming from is that we were discussing the tag2upload > problem at miniDebConf Vaumarcus. [...] I appreciate your efforts to try to unstick all this. > The h

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Ian Jackson
Scott Kitterman writes ("Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)"): > Effectively tag2upload would replace DAK as the entry point for > packages into the archive (the equivalent to the current source > package signature verification being th

Re: Init systems and docker

2019-10-28 Thread John Goerzen
On Fri, Oct 11 2019, Scott Kitterman wrote: > I have been told by docker users (I'm not one) that systemd as provided on > Debian can't be used in docker. I have no idea if that's true or not. I try > really hard to know as little about init systems as possible and trust our > maintainers who

Re: Debian and our frenemies of containers and userland repos

2019-10-28 Thread John Goerzen
On Mon, Oct 21 2019, Enrico Weigelt wrote: > On 05.10.19 03:31, Paul Wise wrote: >> On Fri, Oct 4, 2019 at 10:49 PM Enrico Weigelt wrote: >>> On 24.07.19 08:17, Marc Haber wrote: >>> Do we have a build technology that uses containers instead of chroots yet? >>> >>> Something like docke

Re: Building Debian source packages reproducibly

2019-10-28 Thread Sven Joachim
On 2019-10-28 10:05 +0100, Didier 'OdyX' Raboud wrote: > Le mercredi, 23 octobre 2019, 15.49:11 h CET Theodore Y. Ts'o a écrit : >> On Wed, Oct 23, 2019 at 11:18:24AM +1000, Russell Stuart wrote: >> > On Tue, 2019-10-22 at 16:52 -0700, Russ Allbery wrote: >> > > That seems excessively pessimistic.

Bug#943726: ITP: golang-github-ssgelm-cookiejarparser -- A Go library that parses a curl (netscape) cookiejar file into a Go http.CookieJar

2019-10-28 Thread Stephen Gelman
Package: wnpp Severity: wishlist Owner: Stephen Gelman * Package name: golang-github-ssgelm-cookiejarparser Version : 1.0.0-1 Upstream Author : Stephen Gelman * URL : https://github.com/ssgelm/cookiejarparser * License : Expat Programming Lang: Go Descript

Summary: BLAS/LAPACK Ecosys Massive Update

2019-10-28 Thread Mo Zhou
Hi fellow developers, A good news especially for Debian scientific computing users. I shall call it a massive update, even if the whole update was decomposed into many tiny steps where some of them had already been finished 1 year ago. BLAS/LAPACK are two typical and classical dense linear algebr

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Scott Kitterman
On Monday, October 28, 2019 9:45:36 AM EDT Theodore Y. Ts'o wrote: > On Mon, Oct 28, 2019 at 10:05:11AM +0100, Didier 'OdyX' Raboud wrote: > > Where I'm coming from is that we were discussing the tag2upload problem at > > miniDebConf Vaumarcus. The heart of the problem is that FTP-Master are > > (c

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Theodore Y. Ts'o
On Mon, Oct 28, 2019 at 10:05:11AM +0100, Didier 'OdyX' Raboud wrote: > Where I'm coming from is that we were discussing the tag2upload problem at > miniDebConf Vaumarcus. The heart of the problem is that FTP-Master are > (currently) not going to accept .dscs built reproducibly by a (even trusted

Re: Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Marek Mosiewicz
Hello, In fact what can be important is problem of downloading artifacts during build. At least in Java world given application can be small but be dependant on many libs which are downloaded during build. Program works, build is reproducible, but we can have no idea what it consist of. Best rega

Re: [RFC] Proposal for new source format

2019-10-28 Thread Andrey Rahmatullin
On Wed, Oct 23, 2019 at 09:49:11AM -0400, Theodore Y. Ts'o wrote: > > > That seems excessively pessimistic. What about Git makes you think > > > it's impossible to create a reproducible source package? > > > > Has it been done? Given this point has been raised several times > > before if it hasn

Building Debian source packages reproducibly (was: Re: [RFC] Proposal for new source format)

2019-10-28 Thread Didier 'OdyX' Raboud
Le mercredi, 23 octobre 2019, 15.49:11 h CET Theodore Y. Ts'o a écrit : > On Wed, Oct 23, 2019 at 11:18:24AM +1000, Russell Stuart wrote: > > On Tue, 2019-10-22 at 16:52 -0700, Russ Allbery wrote: > > > That seems excessively pessimistic. What about Git makes you think > > > it's impossible to cre