Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-02-09 Thread Felipe Sateler
On Tue, 25 Jan 2022 21:38:01 +0100, Vincent Bernat wrote: > > I think we should forego the NEW queue. If people want to check > packages, they can do it once they are in unstable with regular bugs. > Current checks are partly done by Lintian and I suppose people could > watch new Lintian

Re: Do we need to hide packages in NEW queue (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-30 Thread Francesco Poli
On Wed, 26 Jan 2022 07:38:10 +0100 Andreas Tille wrote: > Am Tue, Jan 25, 2022 at 01:45:11PM -0800 schrieb Russ Allbery: [...] > > The question, which keeps being raised in part > > because I don't think it's gotten a good answer, is what the basis is for > > treating copyright and licensing bugs

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Alec Leamas
Hi, Not a DD, still raising my voice. I'm *not* advocating that Fedora's processes are "better", just trying to add ideas. On 26/01/2022 11:43, Adam Borowski wrote: On Tue, Jan 25, 2022 at 09:38:01PM +0100, Vincent Bernat wrote: I think we should forego the NEW queue. If people want to

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Gard Spreemann
Adam Borowski writes: > On Tue, Jan 25, 2022 at 09:38:01PM +0100, Vincent Bernat wrote: >> For me, the copyright check is just a bad excuse. People upload >> non-distributable stuff everywhere and it seems the world continue to go >> round. What amount of non-distributable packages is stopped

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Stephan Lachnit
On Wed, Jan 26, 2022 at 11:43 AM Adam Borowski wrote: > > On Tue, Jan 25, 2022 at 09:38:01PM +0100, Vincent Bernat wrote: > > > > I think we should forego the NEW queue. If people want to check > > packages, they can do it once they are in unstable with regular bugs. > > Without the NEW queue,

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Adam Borowski
On Tue, Jan 25, 2022 at 09:38:01PM +0100, Vincent Bernat wrote: > For me, the copyright check is just a bad excuse. People upload > non-distributable stuff everywhere and it seems the world continue to go > round. What amount of non-distributable packages is stopped by the NEW > queue? > > I

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Adam Borowski
On Wed, Jan 26, 2022 at 10:44:37AM +0100, Gard Spreemann wrote: > Jonas Smedegaard writes: > > Quoting Vincent Bernat (2022-01-25 21:38:01) > >> I didn't comment at first because I thought someone else would raise > >> the idea. But it seems people still like the idea of a NEW queue. Not > >>

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-26 Thread Gard Spreemann
Jonas Smedegaard writes: > Quoting Vincent Bernat (2022-01-25 21:38:01) >> I didn't comment at first because I thought someone else would raise >> the idea. But it seems people still like the idea of a NEW queue. Not >> me. The NEW queue is a hindrance. > > For the record, I don't "like" the

Re: Do we need to hide packages in NEW queue (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-26 Thread Philip Hands
Andreas Tille writes: ... > May be some intermediate step would be to not hide packages in NEW queue > but exposing them as an apt source. If I'm correct this is not the case > since it had certain legal consequences for the project if code with > certain non-free licenses would be downloadable

Do we need to hide packages in NEW queue (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-25 Thread Andreas Tille
Am Tue, Jan 25, 2022 at 01:45:11PM -0800 schrieb Russ Allbery: > Jonas Smedegaard writes: > > > I just don't think the solution is to ignore copyright or licensing > > statements. > > That's not the goal. The question, which keeps being raised in part > because I don't think it's gotten a good

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Erik Huelsmann
Hi Russ, > > I just don't think the solution is to ignore copyright or licensing > > statements. > > That's not the goal. The question, which keeps being raised in part > because I don't think it's gotten a good answer, is what the basis is for > treating copyright and licensing bugs differently

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Russ Allbery
Jonas Smedegaard writes: > I just don't think the solution is to ignore copyright or licensing > statements. That's not the goal. The question, which keeps being raised in part because I don't think it's gotten a good answer, is what the basis is for treating copyright and licensing bugs

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Vincent Bernat
❦ 25 January 2022 21:51 +01, Jonas Smedegaard: >> I didn't comment at first because I thought someone else would raise >> the idea. But it seems people still like the idea of a NEW queue. Not >> me. The NEW queue is a hindrance. > > For the record, I don't "like" the NEW queue. > > I don't

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Jonas Smedegaard
Quoting Vincent Bernat (2022-01-25 21:38:01) > I didn't comment at first because I thought someone else would raise > the idea. But it seems people still like the idea of a NEW queue. Not > me. The NEW queue is a hindrance. For the record, I don't "like" the NEW queue. I don't like current

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Vincent Bernat
❦ 21 January 2022 09:51 -05, M. Zhou: > I'd rather propose choice C. Because I to some extent understand > both sides who support either A or B. I maintain bulky C++ packages, > and I also had a little experience reviewing packages on behalf of > ftp-team. I didn't comment at first because I

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-25 Thread Andreas Tille
Am Mon, Jan 24, 2022 at 06:50:17PM -0500 schrieb Theodore Y. Ts'o: > > So could the Release Team figure out a way to automatically rebuild > packages that have source dependencies on static libraries? > > This would solve the problem of new binary packages causing a full > ftpmasters policy

Re: Back to the topic of changed binary named (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-25 Thread Stephan Lachnit
On Mon, Jan 24, 2022 at 8:15 AM Andreas Tille wrote: > > However, my point was that I want to know what policy ftpmaster applies > to new binary names and to focus on this topic. I really want to know > that policy of ftpmaster and I really would like to see that documented > and I'm afraid that

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-24 Thread Theodore Y. Ts'o
On Mon, Jan 24, 2022 at 08:48:28PM +0100, Paul Gevers wrote: > Hi Ted, > > I think this is the second time you write something like this, but for > dynamically linked libraries, the rebuild happens (by the Release Team, > (please use transition trackers for that) because we automatically track >

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-24 Thread Paul Gevers
Hi Ted, On 24-01-2022 19:44, Theodore Y. Ts'o wrote: No, dpkg-shlibsdeps doesn't save you. Again, consider the hypothetical package libshaky, which over the period of 9 months, has soname changes which generate (over time) packages libshaky3, libshaky4, libshaky6, libshaky7, and libshaky8.

Re: Back to the topic of changed binary named (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-24 Thread Theodore Y. Ts'o
On Mon, Jan 24, 2022 at 08:15:30AM +0100, Andreas Tille wrote: > Hi Paul and others, > > its surely an interesting topic how to avoid binary name changes and its > also interesting to discuss ABI changes and workarounds. > > However, my point was that I want to know what policy ftpmaster applies

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-24 Thread Theodore Y. Ts'o
On Mon, Jan 24, 2022 at 10:20:48AM +0800, Paul Wise wrote: > On Sun, 2022-01-23 at 17:43 -0500, Theodore Y. Ts'o wrote: > > > That only works if there are no other packages depending on those > > shared libraries which are coming from other source packages. > > I don't think that is true, I

Back to the topic of changed binary named (Was: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not))

2022-01-23 Thread Andreas Tille
Hi Paul and others, its surely an interesting topic how to avoid binary name changes and its also interesting to discuss ABI changes and workarounds. However, my point was that I want to know what policy ftpmaster applies to new binary names and to focus on this topic. I really want to know

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-23 Thread Paul Wise
On Sun, 2022-01-23 at 17:43 -0500, Theodore Y. Ts'o wrote: > That only works if there are no other packages depending on those > shared libraries which are coming from other source packages. I don't think that is true, I believe you can put multiple things in the depends section of an shlibs

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-23 Thread Theodore Y. Ts'o
On Sat, Jan 22, 2022 at 08:58:37AM +0800, Paul Wise wrote: > > The other thing that's perhaps considering here is that unfortunately, > > there are some upstreams that are extremely irresponsible with library > > ABI backwards compatibility, where they bump the SONAME essentially at > > every

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-23 Thread Stephan Lachnit
On Fri, Jan 21, 2022 at 7:04 PM Paul Gevers wrote: > > It's not only the copyright that the ftp-master are responsible for. New > binaries fill a place in the Debian namespace and they *are* the keepers > of that. One could say that for new binaries packages whose src is already in Debian, the

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-22 Thread Andreas Tille
Hi, Am Fri, Jan 21, 2022 at 07:04:33PM +0100 schrieb Paul Gevers: > > I have heard this argument and my mail was simply to find out what > > fellow developers think about this. IMHO the issue is sufficiently > > important to have some kind of documented consensus about this. > > It's not only

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-22 Thread Simon McVittie
On Sat, 22 Jan 2022 at 08:58:37 +0800, Paul Wise wrote: > On Fri, 2022-01-21 at 13:55 -0500, Theodore Ts'o wrote: > > The other thing that's perhaps considering here is that unfortunately, > > there are some upstreams that are extremely irresponsible with library > > ABI backwards compatibility,

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Paul Wise
On Fri, 2022-01-21 at 13:55 -0500, Theodore Ts'o wrote: > Can we have better automated tooling, either in Lintian, or in when > source packages are rebuilt, that can take care of this? > > The other thing that's perhaps considering here is that unfortunately, > there are some upstreams that are

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Theodore Ts'o
On Fri, Jan 21, 2022 at 01:28:54PM -0500, Scott Kitterman wrote: > > 1. When the SO name changes and the binary package name is adjusted > accordingly, it is not super rare for the maintainer to mess something up in > the renaming and end up with an empty binary package, which does no one any

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Scott Kitterman
On Friday, January 21, 2022 1:33:07 PM EST Adam Borowski wrote: > On Fri, Jan 21, 2022 at 01:28:54PM -0500, Scott Kitterman wrote: > > 2. New binary package "steals" binary from another source. This is > > sometimes OK. Sometimes it's accidental. It could also be malicious (I > > don't

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Adam Borowski
On Fri, Jan 21, 2022 at 01:28:54PM -0500, Scott Kitterman wrote: > 2. New binary package "steals" binary from another source. This is > sometimes > OK. Sometimes it's accidental. It could also be malicious (I don't remember > if I've every actually seen this done for an intentional "steal"

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Scott Kitterman
On Friday, January 21, 2022 12:19:12 PM EST Andreas Tille wrote: > Hi Mo, > > Am Fri, Jan 21, 2022 at 09:51:12AM -0500 schrieb M. Zhou: > > I'd rather propose choice C. Because I to some extent understand > > both sides who support either A or B. I maintain bulky C++ packages, > > and I also had

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Paul Gevers
Hi, I'm not involved in ftp-master, but... On 21-01-2022 18:19, Andreas Tille wrote: Am Fri, Jan 21, 2022 at 09:51:12AM -0500 schrieb M. Zhou: I'd rather propose choice C. Because I to some extent understand both sides who support either A or B. I maintain bulky C++ packages, and I also had a

Re: Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread Andreas Tille
Hi Mo, Am Fri, Jan 21, 2022 at 09:51:12AM -0500 schrieb M. Zhou: > I'd rather propose choice C. Because I to some extent understand > both sides who support either A or B. I maintain bulky C++ packages, > and I also had a little experience reviewing packages on behalf of > ftp-team. > > A --

Lottery NEW queue (Re: Are libraries with bumped SONAME subject of inspection of ftpmaster or not

2022-01-21 Thread M. Zhou
Hi Andreas, Thank you for mentioning this. Your post inspired me to came up a new choice. On Fri, 2022-01-21 at 11:33 +0100, Andreas Tille wrote: > > This recently happed for me in the case of onetbb (which was not > uploaded by myself - so I'm not even asking for myself while other > packages