Re: [gentoo-dev] RFC: banning "AI"-backed (LLM/GPT/whatever) contributions to Gentoo

2024-03-04 Thread Robin H. Johnson
(Full disclosure: I presently work for a non-FAANG cloud company
with a primary business focus in providing GPU access, for AI & other
workloads; I don't feel that is a conflict of interest, but understand
that others might not feel the same way).

Yes, we need to formally address the concerns.
However, I don't come to the same conclusion about an outright ban.

I think we need to:
1. Short-term, clearly point out why much of the present outputs
   would violate existing policies. Esp. the low-grade garbage output.
2. Short & medium-term: a time-limited policy saying "no AI-backend
   works temporarily, while waiting for legal precedent", which clear
   guidelines about what is being the blocking deal.
3. Longer-term, produce a policy that shows how AI generation can be
   used for good, in a safe way**.
4. Keep the human in the loop; no garbage reinforcing garbage.

Further points inline.

On Tue, Feb 27, 2024 at 03:45:17PM +0100, Michał Górny wrote:
> Hello,
> 
> Given the recent spread of the "AI" bubble, I think we really need to
> look into formally addressing the related concerns.  In my opinion,
> at this point the only reasonable course of action would be to safely
> ban "AI"-backed contribution entirely.  In other words, explicitly
> forbid people from using ChatGPT, Bard, GitHub Copilot, and so on, to
> create ebuilds, code, documentation, messages, bug reports and so on for
> use in Gentoo.
Are there footholds where you see AI tooling would be acceptable to you
today? AI-summarization of inputs, if correct & free of hallucinations,
is likely to be of immediate value. I see this coming up in terms of
analyzing code backtraces as well as better license analysis tooling.
The best tools here include citations that should be verified as to why
the system thinks the outcome is correct: buyer-beware if you don't
verify the citations.

> Just to be clear, I'm talking about our "original" content.  We can't do
> much about upstream projects using it.
> 
> Rationale:
> 
> 1. Copyright concerns.  At this point, the copyright situation around
> generated content is still unclear.  What's pretty clear is that pretty
> much all LLMs are trained on huge corpora of copyrighted material, and
> all fancy "AI" companies don't give shit about copyright violations.
> In particular, there's a good risk that these tools would yield stuff we
> can't legally use.
The Gentoo Foundation (and SPI) are both US legal entities. That means
at least abiding by US copyright law...
As of writing this, the present US Copyright office says AI-generated
works are NOT eligible for their *own* copyright registration. The
outputs are either un-copyrightable or if they are sufficiently
similarly to existing works, that original copyright stands (with
license and authorship markings required).

That's going to be a problem if the EU, UK & other major WIPO members
come to a different conclusion, but for now, as a US-based organization,
Gentoo has the rules it must follow.

The fact that it *might* be uncopyrightable, and NOT tagged as such
gives me equal concern to the missing attribution & license statements.
Enough untagged uncopyrightable material present MAY invalidate larger
copyrights.

Clearer definitions about the distinction between public domain vs
uncopyrightable are also required in our Gentoo documentation (at a high level
ineligible vs not copyrighted vs expired vs laws/acts-of-government vs
works-of-government, but there is nuance).

> 
> 2. Quality concerns.  LLMs are really great at generating plausibly
> looking bullshit.  I suppose they can provide good assistance if you are
> careful enough, but we can't really rely on all our contributors being
> aware of the risks.
100% agree; The quality of output is the largest concern *right now*. 
The consistency of output is strongly related: given similar inputs
(including best practices not changing over time), it should give
similar outputs.

How good must the output be to negate this concern?
Current-state-of-the-art can probably write ebuilds with fewer QA
violations than most contributors, esp. given automated QA checking
tools for a positive reinforcement loop.

Besides the actual output being low-quality, the larger problem is that
users submitting it don't realize that it's low-quality (or in a few
cases don't care).

Gentoo's existing policies may only need tweaks & re-iteration here.
- GLEP76 does not set out clear guidelines for uncopyrightable works.
- GLEP76 should have a clarification that asserting GCO/DCO over
  AI-generated works at this time is not acceptable.

> 3. Ethical concerns.  As pointed out above, the "AI" corporations don't
> give shit about copyright, and don't give shit about people.  The AI
> bubble is causing huge energy waste.  It is giving a great excuse for
> layoffs and increasing exploitation of IT workers.  It is driving
> enshittification of the Internet, it is empowering all kinds of spam
> and scam.
Is an ethical AI entity possible? 

Re: [gentoo-dev] [PATCH v2 1/2] check-reqs.eclass: runtime disk checks for any path.

2024-02-26 Thread Robin H. Johnson
On Mon, Feb 26, 2024 at 08:01:28AM +0100, z...@gentoo.org wrote:
> Am 26.02.24 um 07:31 schrieb Robin H. Johnson:
> > Allow checking any runtime path for installing ever-larger packages.
> > 
> > CHECKREQS_DISK_RUNTIME=( /boot:40M /:350M /opt:500M )
> 
> In the example case: Shouldn't the eclass check for 850M on / if /opt is 
> not a separate partition?
> I am not sure how often it really happens that multiple large 
> requirements for different folders exist.
I just summed up the 2 example packages here.

I do see your concern about the filesystem/mountpoint layout.

If it's a single /: that needs 850M
If it's split / and /opt: then it's the listed space in each location.

Correctly processing this would require converting each of the listed
check locations to their common mounts, summing the needs, and then
validating.

This should be possible with "stat --printf=%m" to resolve any directory
into it's mountpoint.

I'll see if it can be done trivially enough for the eclass.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation President & Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] [PATCH v2 2/2] sys-firmware/intel-microcode: check-reqs for /boot space

2024-02-25 Thread Robin H. Johnson
Signed-off-by: Robin H. Johnson 
---
 .../intel-microcode-20231114_p20231114.ebuild   | 13 +++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git 
a/sys-firmware/intel-microcode/intel-microcode-20231114_p20231114.ebuild 
b/sys-firmware/intel-microcode/intel-microcode-20231114_p20231114.ebuild
index 5d1ff1e7f4be..30aca9ccbecf 100644
--- a/sys-firmware/intel-microcode/intel-microcode-20231114_p20231114.ebuild
+++ b/sys-firmware/intel-microcode/intel-microcode-20231114_p20231114.ebuild
@@ -3,7 +3,7 @@
 
 EAPI=8
 
-inherit linux-info mount-boot
+inherit linux-info mount-boot check-reqs
 
 # Find updates by searching and clicking the first link (hopefully it's the 
one):
 # 
https://www.intel.com/content/www/us/en/search.html?keyword=Processor+Microcode+Data+File
@@ -52,6 +52,9 @@ BDEPEND=">=sys-apps/iucode_tool-2.3"
 # !

[gentoo-dev] [PATCH v2 1/2] check-reqs.eclass: runtime disk checks for any path.

2024-02-25 Thread Robin H. Johnson
Allow checking any runtime path for installing ever-larger packages.

CHECKREQS_DISK_RUNTIME=( /boot:40M /:350M /opt:500M )

Recent example of large packages:

gentoo-kernel-bin:
/ >=350MB/version (in /lib/modules)
/boot >=40MB/version

rust-bin:
/opt  >=450MB/version

Signed-off-by: Robin H. Johnson 
---
 eclass/check-reqs.eclass | 23 +++
 1 file changed, 23 insertions(+)

diff --git a/eclass/check-reqs.eclass b/eclass/check-reqs.eclass
index fac2f4553d74..1c59c69489a9 100644
--- a/eclass/check-reqs.eclass
+++ b/eclass/check-reqs.eclass
@@ -30,6 +30,13 @@
 # # install will need this much space in /var
 # CHECKREQS_DISK_VAR="1024M"
 #
+# # install will need this much space in listed paths.
+# CHECKREQS_DISK_RUNTIME=(
+#   /var:1G
+#   /boot/efi:32M
+#   /opt/giant-package-with-dedicated-disk:100G
+# )
+#
 # @CODE
 #
 # If you don't specify a value for, say, CHECKREQS_MEMORY, then the test is not
@@ -66,6 +73,11 @@ _CHECK_REQS_ECLASS=1
 # @DESCRIPTION:
 # How much space is needed in /var? Eg.: CHECKREQS_DISK_VAR=3000M
 
+# @ECLASS_VARIABLE: CHECKREQS_DISK_RUNTIME
+# @DEFAULT_UNSET
+# @DESCRIPTION:
+# How much space is needed in paths? Eg.: CHECKREQS_DISK_RUNTIME=( /:1G 
/var:5G )
+
 # @ECLASS_VARIABLE: CHECKREQS_DONOTHING
 # @USER_VARIABLE
 # @DEFAULT_UNSET
@@ -120,6 +132,7 @@ _check-reqs_prepare() {
debug-print-function ${FUNCNAME} "$@"
 
if [[ -z ${CHECKREQS_MEMORY} &&
+   "${#CHECKREQS_DISK_RUNTIME[@]}" -eq 0 &&
-z ${CHECKREQS_DISK_BUILD} &&
-z ${CHECKREQS_DISK_USR} &&
-z ${CHECKREQS_DISK_VAR} ]]; then
@@ -161,6 +174,16 @@ _check-reqs_run() {
fi
 
if [[ ${MERGE_TYPE} != buildonly ]]; then
+   if [[ "${#CHECKREQS_DISK_RUNTIME[@]}" -gt 0 ]]; then
+   for _path_size in "${CHECKREQS_DISK_RUNTIME[@]}"; do
+   _path=${_path_size/:*}
+   _size=${_path_size/*:}
+   _check-reqs_disk \
+   "${EROOT%/}${_path}" "${_size}"
+   done
+   unset _path_size _path _size
+   fi
+
[[ -n ${CHECKREQS_DISK_USR} ]] && \
_check-reqs_disk \
"${EROOT%/}/usr" \
-- 
2.43.0




[gentoo-dev] Re: [PATCH] check-reqs.eclass: more disk checks

2024-02-19 Thread Robin H. Johnson
On Mon, Feb 19, 2024 at 02:08:32PM -0800, Robin H. Johnson wrote:
> Allow checking more disk space, for users with many split volumes and
> ever-larger packages.
> 
> gentoo-kernel-bin:
> / >=350MB/version (in /lib/modules)
> /boot >=40MB/version
> 
> rust-bin:
> /opt  >=450MB/version
Meta:
Is this the time where we should rethink the CHECKREQS syntax?

CHECKREQS_DISK="/:2G /opt/random:1G /usr:1G" etc?
If we need to support paths with space, newline or array here.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation President & Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] [PATCH] check-reqs.eclass: more disk checks

2024-02-19 Thread Robin H. Johnson
Allow checking more disk space, for users with many split volumes and
ever-larger packages.

gentoo-kernel-bin:
/ >=350MB/version (in /lib/modules)
/boot >=40MB/version

rust-bin:
/opt  >=450MB/version

Signed-off-by: Robin H. Johnson 
---
 eclass/check-reqs.eclass | 44 +++-
 1 file changed, 43 insertions(+), 1 deletion(-)

diff --git a/eclass/check-reqs.eclass b/eclass/check-reqs.eclass
index fac2f4553d74..7b65f44e8c41 100644
--- a/eclass/check-reqs.eclass
+++ b/eclass/check-reqs.eclass
@@ -24,12 +24,21 @@
 # # need this much temporary build space
 # CHECKREQS_DISK_BUILD="2G"
 #
+# # install will need this much space in /
+# CHECKREQS_DISK_ROOT="1G"
+#
+# # install will need this much space in /boot
+# CHECKREQS_DISK_BOOT="128M"
+#
 # # install will need this much space in /usr
 # CHECKREQS_DISK_USR="1G"
 #
 # # install will need this much space in /var
 # CHECKREQS_DISK_VAR="1024M"
 #
+# # install will need this much space in /opt
+# CHECKREQS_DISK_OPT="1G"
+#
 # @CODE
 #
 # If you don't specify a value for, say, CHECKREQS_MEMORY, then the test is not
@@ -56,6 +65,16 @@ _CHECK_REQS_ECLASS=1
 # @DESCRIPTION:
 # How much diskspace is needed to build the package? Eg.: 
CHECKREQS_DISK_BUILD=2T
 
+# @ECLASS_VARIABLE: CHECKREQS_DISK_ROOT
+# @DEFAULT_UNSET
+# @DESCRIPTION:
+# How much space in / is needed to install the package? Eg.: 
CHECKREQS_DISK_ROOT=1G
+
+# @ECLASS_VARIABLE: CHECKREQS_DISK_BOOT
+# @DEFAULT_UNSET
+# @DESCRIPTION:
+# How much space in /boot is needed to install the package? Eg.: 
CHECKREQS_DISK_BOOT=128M
+
 # @ECLASS_VARIABLE: CHECKREQS_DISK_USR
 # @DEFAULT_UNSET
 # @DESCRIPTION:
@@ -66,6 +85,11 @@ _CHECK_REQS_ECLASS=1
 # @DESCRIPTION:
 # How much space is needed in /var? Eg.: CHECKREQS_DISK_VAR=3000M
 
+# @ECLASS_VARIABLE: CHECKREQS_DISK_OPT
+# @DEFAULT_UNSET
+# @DESCRIPTION:
+# How much space is needed in /opt? Eg.: CHECKREQS_DISK_OPT=1G
+
 # @ECLASS_VARIABLE: CHECKREQS_DONOTHING
 # @USER_VARIABLE
 # @DEFAULT_UNSET
@@ -121,8 +145,11 @@ _check-reqs_prepare() {
 
if [[ -z ${CHECKREQS_MEMORY} &&
-z ${CHECKREQS_DISK_BUILD} &&
+   -z ${CHECKREQS_DISK_ROOT} &&
+   -z ${CHECKREQS_DISK_BOOT} &&
-z ${CHECKREQS_DISK_USR} &&
-   -z ${CHECKREQS_DISK_VAR} ]]; then
+   -z ${CHECKREQS_DISK_VAR} &&
+   -z ${CHECKREQS_DISK_OPT} ]]; then
eerror "Set some check-reqs eclass variables if you want to use 
it."
eerror "If you are user and see this message file a bug against 
the package."
die "${FUNCNAME}: check-reqs eclass called but not actually 
used!"
@@ -161,6 +188,16 @@ _check-reqs_run() {
fi
 
if [[ ${MERGE_TYPE} != buildonly ]]; then
+   [[ -n ${CHECKREQS_DISK_ROOT} ]] && \
+   _check-reqs_disk \
+   "${EROOT%/}/" \
+   "${CHECKREQS_DISK_ROOT}"
+
+   [[ -n ${CHECKREQS_DISK_BOOT} ]] && \
+   _check-reqs_disk \
+   "${EROOT%/}/boot" \
+   "${CHECKREQS_DISK_BOOT}"
+
[[ -n ${CHECKREQS_DISK_USR} ]] && \
_check-reqs_disk \
"${EROOT%/}/usr" \
@@ -170,6 +207,11 @@ _check-reqs_run() {
_check-reqs_disk \
"${EROOT%/}/var" \
"${CHECKREQS_DISK_VAR}"
+
+   [[ -n ${CHECKREQS_DISK_OPT} ]] && \
+   _check-reqs_disk \
+   "${EROOT%/}/opt" \
+   "${CHECKREQS_DISK_OPT}"
fi
 }
 
-- 
2.43.0




[gentoo-dev] RFC: Block ebuilds installing tests to ${D} by default

2024-02-01 Thread Robin H. Johnson
TL;DR:
I'd like to propose a change where packages should NOT install their
tests to ${D} by default. Such an install may optionally enabled with
USE=test, which should be decoupled from FEATURES=test. Or depending on
the color of the bikeshed, we add something new like USE=install-tests.

Background:
Python packages install a number of _test.py files, and related .pyc
files. The files are generally useful for running tests after the
package is installed, and may have additional testing dependencies that
are not installed via RDEPEND.

As an example, on the livegui install media, these files take 100MB+
before squashfs compression.

Some users MAY wish to verify that a package continues to function
correctly, and they should have the USE=test dependencies available at
runtime, and the tests installed.

Such post-install testing may also require other files to be present, to
configure the test suite runs.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation President & Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Re: [gentoo-dev-announce] Last rites: net-nds/nsscache

2024-01-24 Thread Robin H. Johnson
On Wed, Jan 24, 2024 at 12:55:25PM +0100, Michał Górny wrote:
> # Michał Górny  (2024-01-24)
> # No support for Python 3.11+.  No PEP517.  Tests are not enabled.
> # The current keyworded version is from 2019.  It was bumped in 2022
> # but it has not been keyworded since (pending "testing").
> # Depends on unmaintained dev-python/bsddb3.
> # Removal on 2024-02-23.  Bug #897136.
> net-nds/nsscache
Infra needs this; upstream was AWOL for a long time, but I see they have
released 0.48/0.49 that contain much needed fixes.

I'll verify 0.49's behavior (0.47 was broken for Infra's use case).

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation President & Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: sys-block/hpacucli

2023-12-22 Thread Robin H. Johnson
On Fri, Dec 22, 2023 at 05:57:25PM +0100, Michał Górny wrote:
> # Michał Górny  (2023-12-22)
> # Unmaintained.  Unfetchable and mirror-restricted.  No revdeps.
> # Removal on 2024-01-21.  Bug #918905.
> sys-block/hpacucli
Infra needs to take this one.

Infra still has hardware that uses this to interact with the RAID
controller.

Upstream probably moved the distfiles again.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation President & Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] EGO_SUM (was: [gentoo-project] Gentoo Council Election 202306 ... Nominations Open in Just Over 24 Hours.)

2023-07-04 Thread Robin H. Johnson
On Tue, Jul 04, 2023 at 12:44:39PM +0200, Gerion Entrup wrote:
> just to be curious about the whole discussion. I did not follow in the
> deepest detail but what I got is:
> - EGO_SUM blows up the Manifest file, since every little Go module needs
>   to be respected. A lot of these Manifest files lead to a extremely
>   increased Portage tree size. EGO_SUM is just one example (though the
>   biggest one). Statically linked languages like Rust etc. have the same
>   problem.
> - The current solution is to prepackage all modules, put it somewhere on
>   a webserver and just manifest that file. This make the Portage tree
>   small in size again, but requires a webserver/mirror and is thus
>   unfriendly for overlay devs.
> 
> I'm not sure if it was mentioned before but has anyone considered hash
> trees / Merkle trees for the manifest file? The idea would be to hash
> the standard manifest file a second time if it gets too big and write
> down that hash as new manifest file and leave EGO_SUM as is.
This is out-of-tree/indirect Manifests, that I proposed here, more than
a year ago:
https://marc.info/?l=gentoo-dev=168280762310716=2
https://marc.info/?l=gentoo-dev=165472088822215=2

Developing it requires PMS work in addition to package manager
development, because it introduces phases.

- primary fetch of $SRC_URI per ebuild, including indirect Manifest
- primary validation of distfiles
- secondary fetch of $SRC_URI per indirect Manifest
- secondary validation of additional distfiles

A significantly impacted use case is "emerge -f", it now needs to run
downloads twice.

The rest of the posts also go into the matter of duplication within
EGO_SUM & the indirect Manifests: limiting the growth requires some form
of content-addressed layout.

It's absolutely something we should get developed, but it's a lot of
work.

The indirect Manifests still provide a hosting challenge for overlays.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] A problem with updating my key (again)

2023-06-14 Thread Robin H. Johnson
On Tue, Jun 13, 2023 at 05:00:16PM +, Andrey Grozin wrote:
> Hi *,
> 
> My key was going to expire soon. So, as usual, I have prolonged it for the 
> next year (several days ago). I've sent it to the Gentoo keyserver. I've 
> checked that the fingerpring of my key in LDAP coinsides with the 
> fingerprint I see locally.
Hi Andrey,

As I wrote in the direct email to you, your new key is not present on
any of the three keyservers. You said you sent it to the keyserver, but
I don't see it there. Can you please confirm what you used to upload it?

It should be these steps:
https://wiki.gentoo.org/wiki/Project:Infrastructure/Generating_GLEP_63_based_OpenPGP_keys#Submit_the_new_key_to_the_keyserver

I have just verified that the steps work because I had to update the
expiry on my own keys, and the new expiry can be verified:
https://keys.gentoo.org/pks/lookup?search=robbat2=on=on=vindex

You can check that it's present shortly after uploading again:
https://keys.gentoo.org/pks/lookup?search=grozin=on=on=vindex

If the servers are out of sync, it can be seen as well (they are in sync
as I write this):
https://motmot.keys.gentoo.org/pks/lookup?search=grozin=on=on=vindex
https://trogan.keys.gentoo.org/pks/lookup?search=grozin=on=on=vindex
https://kookaburra.keys.gentoo.org/pks/lookup?search=grozin=on=on=vindex

> It seems that the remote git has ignored the fact that my key has been 
> prolonged about 3 days ago. One year ago I had the same situation. Is 
> there any reliable way to inform this git hook about the prolongation of 
> my key?
After uploading updates to an existing key, you should need to wait at
most 20 minutes: the keyservers are exported to a keyring, that's hosted
on the qa-reports site, and that keyring is fetched frequently by other
hosts that have a need to verify keys.

If you upload a *new* primary key, you need update ldap (yourself) and
then to alert infra to re-sync the gitolite listing of permitted keys
for your user.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Re: EGO_SUM

2023-04-29 Thread Robin H. Johnson
On Fri, Apr 28, 2023 at 08:59:29AM +0200, Florian Schmaus wrote:
> On 27/04/2023 14.54, Michał Górny wrote:
> > On Thu, 2023-04-27 at 09:58 +0200, Florian Schmaus wrote:
> >> Disk space is cheap.
> > 
> > No, it's not.  Gentoo supports more hardware than your average PC with
> > beefy hard drive and/or possibility of installing one.  Let's not forget
> > that you need a ::gentoo checkout even on a system running purely
> > on binary packages.
> 
> You are right. Gentoo supports a broad range of hardware in many 
> dimensions, e.g., architecture, release date, and composition.
> 
> You seem to suggest that are Gentoo systems that can not handle the 
> additional disk space consumption of EGO_SUM Go-packages?
> 
> I can not imagine systems that are able to deal with the ~500 MiB 
> ::gentoo repository, but would break if the same repository would 
> contain 100 additional Go-packages with 200 KiB each.
> 
> Even under a "worst-case" assumption, where we would have 256 
> Go-packages with each having a 1 MiB package-directory size, any system 
> that can handle the current state of ::gentoo should be able to take the 
> additional 256 MiB (+ metadata).
This email ended up more rambling than I intended, but I wanted to get the data
out there, and enable us to look deeper at the problems and potential impacts
of the solutions.

Before the ideas and data I wanted to note the semi-conceptual ways to package
new things that have many dependency artifacts (package or distfile).

Distfile-heavy packages:

A package declares many distfile dependencies, but very few package
dependencies. The Manifest files in this case suffer a lot of
duplication - but the growth is mostly limited to ::gentoo (or
overlays).

Any change of a package that leads to slightly different Manifest file,
and while delta compression will reduce the growth factor, it's still
large (dropping a version, adding a version, adding a remotely-fetched patch.

Dependency-heavy packages:
--
A package declares many package dependencies, with the distfile growth
distributed over MANY packages. Major downside here is that
build-depends consume a lot more space & inodes to install all the
depends that are used for the ebuild, esp. when a given distfile might
be used for only one package. Want to build a complex Go-based package?
Debian/Ubuntu use this approach, and it shows might have to explicitly
package 70+ dependencies to get something you want packaged.
https://salsa.debian.org/go-team/packages/consul/-/blob/debian/sid/debian/control#L10-89
a quick back-of-napkin set of math show the Debian golang dep packages,
as of 22.04 LTS: ~30% are a dep for only one package; a further 30% are
a dep for only 2 packages.


With the above in mind, we see that it's not just the size of the Manifest, but
the combinatorial problem of Manifest revisions, with the saving roll of Git's
delta compression.

I pulled a Git listing of every Manifest blob that was larger than 64KiB
in Git history (excluding the historical conversion), and then go based
on those: 2718 blobs in total, taking up ~516MiB, 1600056 DIST entries,
for 166726 distinct distfiles.

I tried to break those distfiles down, based on filename patterns, or where
they occurred (sorted by number of distfiles here):
  76075 dist-tex (all in the tex category)
  33949 dist-mozilla (firefox*, thunderbird*)
  19314 dist-office 
  17802 dist-golang (*%2F@v%2F* files; 10160 .mod, 7642 .zip)
  10478 dist-rust (*.crate files)
   3630 dist-other
   1325 dist-jar-pom (*.jar, *.pom)
   1020 dist-tablebase-syzygy (distfiles for a specific package)
981 dist-kde (kde manifests that met the threshold)
980 dist-kernel-and-genpatches
749 dist-tessdata (again specific packages)
424 dist-bash (specific packages)
 166727 == total

The Rust & Golang counts *are* lower bounds, because it's not trivial to
take into account changes in packaging. However, the upper bound 
E.g. this distfile isn't immediately classifiable as Rust:
d3d12-rs-a990c93ec64eeab78f2292763d0715da9dba1d59.gh.tar.gz
To assume a worst case, assign the dist-other to the category of  your choice.

Ecosystems that are distfile-heavy, in order of Manifest sizes: TeX, Golang, 
Rust
Packages that are distfile-heavy: LibreOffice/OpenOffice, Firefox, Thunderbird

TeX has only a few packages, but the MOST distfiles.
dev-texlive/texlive-latexextra/Manifest peaked over 6MB with 15480 entries. For
all of Gentoo git history however, there have only been 19 revisions of that
Manifest. For all TeX packages, 286 revisions of Manifests over 37 packages.
Those 286 Manifest revisions clock in at ~94MB together before compression.

The Mozilla packages have the next most distfiles:
4 packages, 768 manifest revisions, but the largest single Manifest was only 
285519 bytes.
~88MB for all the manifest revision bytes together.

The office packages (app-office/libreoffice-l10n & app-office/openoffice-bin)
are similar to 

[gentoo-dev] Re: [gentoo-dev-announce] Gentoo Services Migration: Bugzilla, Forums, Wiki

2023-03-29 Thread Robin H. Johnson
On Wed, Mar 29, 2023 at 06:03:59AM +, Robin H. Johnson wrote:
> Hi!
> 
> This is a notification that multiple Gentoo services (bugzilla, forums,
> wiki) will be moving and temporarily offline possibly until sometime
> Saturday 2023/04/01.
> 
> We're aiming to keep the interruption much shorter, but the backup plan
> is a 3-4 day outage. Forums may have the longest outage, due to the age
> of the codebase.
Things are looking good that wiki & bugzilla have migrated cleanly,
however forums.gentoo.org will be down for an extended period.

Please continue to consult the status pages to see the Forums service
restore ETA.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Gentoo Services Migration: Bugzilla, Forums, Wiki

2023-03-29 Thread Robin H. Johnson
Hi!

This is a notification that multiple Gentoo services (bugzilla, forums,
wiki) will be moving and temporarily offline possibly until sometime
Saturday 2023/04/01.

We're aiming to keep the interruption much shorter, but the backup plan
is a 3-4 day outage. Forums may have the longest outage, due to the age
of the codebase.

For the duration, the sites will be covered by maintenance page that
serves only 503 errors.
https://infra-outage-info.gentoo.org/

Updates will be posted on https://infra-status.gentoo.org/

Why? A sponsor is decommissioning the physical hosting behind these
services. 

On behalf of Infra, I'd extend a thanks to that long-time sponsor:
Gossamer Threads, now part of Carbon60 [1], have hosted multiple Gentoo
services continuously since July 2009.

They are also donating some of the old hardware to Gentoo, and we hope
to be able to repurpose some of it.

Interested in Donating [2] to or Sponsoring Gentoo? [3][4]

[1] https://www.carbon60.com/?pk=gentoo
[2] https://www.gentoo.org/donate/
[3] https://wiki.gentoo.org/wiki/Project:Infrastructure/Sponsorship
[4] 
https://web.archive.org/web/20230329055428/https://wiki.gentoo.org/wiki/Project:Infrastructure/Sponsorship

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: dev-ruby/hiera-eyaml and dev-ruby/hiera-eyaml-gpg

2023-03-26 Thread Robin H. Johnson
On Sun, Mar 26, 2023 at 11:57:00PM +0200, David Seifert wrote:
> There's a pattern here of infra or packages added for infra rotting with
> unattended bugs or otherwise not meeting modern standards and then panic
> at the 11th hour when they're last-rited.
The *infra* packages here work fine, and pass their own tests.

> Python and Ruby packages especially *need* tests because of how brittle
> they are. An import can break because of a new or changed dependency,
> for example.
> 
> Instead of asking graaff to revert it, you should fix the package to
> work with modern Ruby implementations and get either its tests in full
> or a subset of its tests running (with a comment in the ebuild
> explaining the situation).
I explicitly said that hiera-eyaml & hiera-eyaml-gpg DO work with Ruby
3.2 even. It's only their test dependency, dev-util/aruba:0 that fails
it's own tests.

So you're implying that we are now responsible to fix the tests of every
package in our dependency tree, and you'll just remove all dependent
packages if we don't do that.

And if that's the case why didn't graaff mask dev-util/aruba:0 in
addition to hiera-eyaml & hiera-eyaml-gpg?

> It is _critical_ that we get into ruby31 or newer ASAP and graaff is
> doing hard work to get us there, especially because of the upcoming
> openssl EOL. Unmasking this would mean we have to keep ruby27 around for
> longer and can't focus efforts on newer Ruby.
I didn't say keep Ruby27 at all. hiera-eyaml in the tree WORKS on Ruby
3.0 & Ruby 3.1, and passes it's own testsuite.

The fix for Aruba:0 is just tweaking the cucumber tag syntax:
"~@foo" -> "not @foo"

I'll do the better fix anyway, making hiera-eyaml use aruba:2 instead, I
really just want better communication that we're now responsible for the
entire deptree's tests.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: dev-ruby/hiera-eyaml and dev-ruby/hiera-eyaml-gpg

2023-03-26 Thread Robin H. Johnson
On Sun, Mar 26, 2023 at 09:57:36AM +0200, Hans de Graaff wrote:
> # Hans de Graaff  (2023-03-26)
> # Mask ruby27-only packages related to hiera-eyaml. These require a now
> # masked version of puppet and other obsolete ruby27-only test
> # dependencies. Masked for removal on 2023-04-26.
> dev-ruby/hiera-eyaml
> dev-ruby/hiera-eyaml-gpg
Infra needs these, please revert.

I can confirm that the package does work properly with both Ruby 3.0 & Ruby 3.1

The Puppet/Aruba/Cucumber deps are test-only.

Looking deeper, I think the https://github.com/voxpupuli/hiera-eyaml/actions/runs/4280324437/jobs/7451960271

The same CI run *also* shows aruba-0.6.2 installed on Ruby 3.2, and used
to test hiera-eyaml (hiera-eyaml has a tiny patch in master for Ruby 3.2
support).

Lastly, if I tweak aruba-0.6.2 and install it for Ruby 3.0 & Ruby 3.1
myself without FEATURES=tests on aruba, then the tests on hiera-eyaml &
hiera-eyaml-gpg ALSO pass.

So do we really remove packages because a 2nd-order test-only dependency
fails it's own tests? (aruba:0 failing tests on Ruby 3 being the only
reason I can see to remove stuff right now).

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] FYI - master rsync breakage

2023-03-04 Thread Robin H. Johnson
FYI, I accidentally broke the master rsync mirror w/ a glibc/openssl
upgrade issue.

Waiting on a support ticket because the sponsor's serial console remote
access system seems to be broken.

Depending on expected response time, may spin up an alternate system
instead.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Gentoo - Google Summer of Code (GSoC)

2023-02-06 Thread Robin H. Johnson
On Wed, Jan 11, 2023 at 08:33:35AM -0500, Yury German wrote:
> 2. Mentors.- Last year we got four slots allocated to us by Google and
> ran a successful project, we are looking for mentors to be able to
> help mentor the applicants, and run the projects. 
Yes, I'm willing to help mentor. I've mentored more than 5 students
between multiple projects over the lifetime of GSoC.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Packages of zlogene up for grabs

2023-01-13 Thread Robin H. Johnson
On Fri, Jan 13, 2023 at 02:35:45PM +0100, Michał Górny wrote:
> app-admin/gopass
I've got use for this; but I don't need the extra parts.

> app-crypt/signing-party
Very useful, I'll take it.

> app-misc/evtest
Same

> mail-filter/procmail
I definitely need this, but I don't know about time to triage it.

> virtual/mta
Probably should go to base-system.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Last rites: net-misc/valve

2022-12-25 Thread Robin H. Johnson
# Marco Scardovi  (2022-12-22)
# Per robbat2 request, I'm gonna treeclean it as we
# are actually the only one maintaining it.
# No update upstream, EAPI 6 and with a bug #687786
# As replacement, it is possible to use pv --rate-limit
# instead.
# Removal on 2023-01-21
net-misc/valve

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] pam: thoughts on modernizing pam_limits configuration that Gentoo ships with

2022-12-11 Thread Robin H. Johnson
Please do file a bug tracking this proposal, and reference the
discussion thread.

On Sun, Dec 11, 2022 at 09:28:14AM +0100, Piotr Karbowski wrote:
> What I'd like to do is to bump the limits.conf we ship with pam to
> following
> 
>  * hard nproc 16384
>  * soft nproc 16384
>  * hard nofile 16384
>  * soft nofile 16384
>
> Those are still reasonable defaults that are much more suitable the 
> modern systems. I can only see benefits in it and am unable to think 
> about the potential drawbacks of bumping *defaults*.
Drawbacks:
- The "*" would apply it to all users on a system, not just the
  interactive ones, and reduce overall security posture.
- Does this also need a sysctl change for raising fs.file-max?

With those in mind, how can we deploy these defaults for interactive
users, while still trying to maintain the good security posture overall?

- Is using "@users" instead of "*" good enough? (I think yes)
- Should it be limited to shiny logins on X or should it also take
  effect via remote logins? (conceptually yes, but I don't see a way to
  do it today within the scope of only pam_limits**)


** The closest other solution I can find is using a distinct limits.conf
for interactive logins, selected via pam.d trickery, and I don't like
that proposal.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Last-rites: sys-boot/mbr-gpt

2022-12-04 Thread Robin H. Johnson
# Robin H. Johnson  (2022-12-04)
# sys-boot/mbr-gpt was a bizzare package extremely sensitive to compiler &
# linker changes. I don't know of any remaining consumers other than one weird
# system I have.
# If you're a consumer: syslinux gptmbr was the successor to this approach,
# you'll need to replace the contents of your BIOS Boot Partition, because it's
# not a direct 1:1 change.
# Only upstream release in 2008. Removal in 30 days.
sys-boot/mbr-gpt

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: net-mail/metamail

2022-11-24 Thread Robin H. Johnson
On Thu, Nov 24, 2022 at 01:22:11AM +, Sam James wrote:
> # Pascal Jäger  (2022-11-24)
> # No maintainer, last release in 1994. Fails to build
> # with clang-16. Runtime crash in certain conditions.
> # Removal on 2022-12-23.
> # Bugs #549922 #713492 #731256 #875464 #882263
> # Removal Bug: #882631
> net-mail/metamail
Hi!

Some of the tooling in here is common in procmail recipes. While i'm not
sad to see metamail go, I suspect there might be some surprising
usecases that need fixing.

metamail used to be very common with procmail recipes.

Two binaries stand out, and if there's anybody who runs into this
removal being a problem, these are probably cases that could use fixes.

mimencode:
https://gist.github.com/robbat2/50f8c5b51fcb7f19271545f662d9ccd5#file-foo-procmailrc-L21-L40
This recipe had a bonus that it made the mail on disk possibly to
trivially grep, whereas if it was still base64, it wouldn't have
matched. Probably possible to replace with a simple script.

metasend:
Good way to send data/files from the commandline while controlling the
MIME structure. This was sometimes used to encapsulate an entire
incoming mail in procmail and resend it. Harder to replace.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-project] Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

2022-10-29 Thread Robin H. Johnson
On Sat, Oct 29, 2022 at 02:26:29AM -0400, kuzetsa CatSwarm wrote:
> hi, this is just a quick check to see if the updated wording still 
> covers the discussion I had in -council on liberachat earlier this year.
> 
> last version I had in git repo or patch format was from july:
> 
> https://gist.githubusercontent.com/kuzetsa/f9ff15998c2ae75fcb777c5a4f56dde4/raw/4c3314045de4437a277a738b96ef302fcc07a27c/0001-glep-0076-clarify-name-policy.patch
> 
> just wanting to sign off on the finalized version, and confirm the 
> contributions I made weren't subjected to a regression during various 
> edits and bikeshed-adjacent tweaks, etc.
Please see the other branch of this email thread:
https://archives.gentoo.org/gentoo-project/message/3fa6adb018736835f3b0406d7377148e

Direct link to the proposed patch:
https://gitweb.gentoo.org/data/glep.git/commit/?h=glep76=139198d2e8560f8dfb32c8f4c34a3e49d628b184

To summarize the substantive changes since your version:
- people, not corporations
- improve the verification statement, because the Gentoo Foundation will
  cease to be a legal entity (merging into some umbrella).

Non-substantive:
- bikeshed about who gets to be in Authors.
- formatting

- Robin

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] [PATCH v5] glep-0076: Require real name instead of legal name

2022-10-22 Thread Robin H. Johnson
On Sat, Oct 22, 2022 at 08:55:09AM +0200, Ulrich Mueller wrote:
> > How's the clarification now, making it clear those are the authors for
> > version 1.2?
> I'd still prefer a single list of acknowledgements in alphabetical
> order, without any of the authors included. (But I don't have a strong
> opinion, so if you absolutely want to have a separate paragraph for 1.2,
> then go ahead.)
Paragraph kept.

> However, can we please keep the authors list (in the header) as-is?
> If we're now going to include people for adding a single sentence or
> suggestion, then we'd also have to list several (all?) of the persons
> who are listed in the original acknowledgements.
Done.

> >> Another small point: Whitespace in the new section doesn't follow the
> >> style in the rest of the GLEP, which uses two blank lines before and one
> >> blank line after section headings, as well as two spaces at the end of
> >> every sentence. (This is also what GLEP 2 says.)
> 
> > Fixed - the blank lines were inconsistent in multiple places, but the
> > two spaces were correct.
> There shouldn't be double blank lines _after_ section headings (i.e.
> only a single blank line after "Specification" and "Rationale") [1].
Fixed.

Also reworded to not say "Gentoo Foundation"; but still document the
intent about when verification could take place.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
From 376c235e0c78020adc3b5f8fa43c4f474dea8f64 Mon Sep 17 00:00:00 2001
From: "Robin H. Johnson" 
Date: Sat, 22 Oct 2022 07:38:00 -0700
Subject: [PATCH v5] glep-0076: clarify name policy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Merge discussion results about improving the name policy.

Fix whitespace for GLEP2 style:
- two spaces at the end of every sentence
- section headings:
  - two blank lines before
  - one blank line after
  - one blank line for an empty section

Authorship for revision 1.2 changes: kuzetsa CatSwarm, Richard Freeman,
John Helmert III, Robin H. Johnson, Ulrich Müller, Alec Warner

Signed-off-by: Robin H. Johnson 
Reference: https://archives.gentoo.org/gentoo-project/message/c85b78ca69802522534ee8ab0804f665
Reference: https://archives.gentoo.org/gentoo-dev/message/7d1ad38a1d77ea5726520d2ec90cffe4
---
 glep-0076.rst | 32 +++-
 1 file changed, 27 insertions(+), 5 deletions(-)

diff --git glep-0076.rst glep-0076.rst
index 2216483..cdfa33e 100644
--- glep-0076.rst
+++ glep-0076.rst
@@ -8,10 +8,10 @@ Author: Richard Freeman ,
 Michał Górny 
 Type: Informational
 Status: Active
-Version: 1.1
+Version: 1.2
 Created: 2013-04-23
-Last-Modified: 2022-07-02
-Post-History: 2018-06-10, 2018-06-19, 2018-08-31, 2018-09-26
+Last-Modified: 2022-10-22
+Post-History: 2018-06-10, 2018-06-19, 2018-08-31, 2018-09-26, 2022-07-12, 2022-10-21, 2022-10-22
 Content-Type: text/x-rst
 ---
 
@@ -83,6 +83,7 @@ copyright in a file.
 Specification
 =
 
+
 Purpose / Scope
 ---
 
@@ -137,8 +138,7 @@ the Certificate of Origin by adding ::
 Signed-off-by: Name 
 
 to the commit message as a separate line.  The sign-off must contain
-the committer's legal name as a natural person, i.e., the name that
-would appear in a government issued document.
+the contributor's name as discussed in the next section.
 
 The following is the current Gentoo Certificate of Origin, revision 1:
 
@@ -180,6 +180,24 @@ indicated by adding ``(DCO-1.1)`` at the end of the ``Signed-off-by``
 line.  Using the Gentoo Certificate of Origin is strongly preferred.
 
 
+Contributor Name
+
+
+Contributors must sign off on contributions with their name as a natural
+person (not a corporation), that can be made public, and would pass
+copyright due diligence.
+
+Nothing further is required if the name matches a government issued
+document of the contributor.
+
+If the name does not match any government issued document, it must be a
+name that can be verified by simple records search, and/or attestable in
+a written statement, with a witnessed signature as before a notary.
+
+For the purposes of this policy, verification of the name will be deferred
+until such time as required by government action or legal proceedings.
+
+
 Copyright Attribution
 -
 
@@ -344,6 +362,10 @@ In particular, the authors would like to thank David Abbott,
 Roy Bamford, Kristian Fiskerstrand, Andreas K. Hüttel, Manuel Rüger,
 Matija Šuklje, Matthew Thode, and Alec Warner for their input.
 
+Version 1.2 contains contributions by kuzetsa CatSwarm, Richard
+Freeman, John Helmert III, Robin H. Johnson, Ulrich Müller, Alec
+Warner.
+
 
 References
 ==
-- 
2.38.1



signature.asc
Description: PGP signature


Re: [gentoo-project] Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

2022-10-21 Thread Robin H. Johnson
On Sat, Oct 22, 2022 at 06:56:06AM +0200, Michał Górny wrote:
> On Fri, 2022-10-21 at 19:50 +0000, Robin H. Johnson wrote:
> > +For the purposes of this policy, the Gentoo Foundation will not request
> > +any verification of the name until such time as required by government
> > +action or legal proceedings.
> Given that we're talking about disbanding the Foundation, I'm not sure
> if it's a good idea to reference it specifically in new GLEPs. 
> Especially that to the best of my knowledge, Foundation doesn't really
> get involved in gating new contributors.
I'll be clear, I hope to set precedent for the successor organization.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-project] Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

2022-10-21 Thread Robin H. Johnson
Find attached v4 of the patch, with all of the proposed changes
included.

On Wed, Jul 13, 2022 at 09:24:25AM +0200, Ulrich Mueller wrote:
> >>>>> On Wed, 13 Jul 2022, Robin H Johnson wrote:
> 
> > On Wed, Jul 13, 2022 at 02:26:43AM +0200, Ulrich Mueller wrote:
> >> The "natural person" part was lost in this change. It also doesn't
> >> reappear in the added section below. I think we don't want any corporate
> >> entities there (or at least that's what I had taken from the previous
> >> "Sony" discussion).
> > Will re-add to the name section.
Clarified to exclude corporations.

> > For this section, I had a further thought and feel this is cleaner:
> >  to the commit message as a separate line.  The sign-off must contain
> > -the committer's legal name as a natural person, i.e., the name that
> > -would appear in a government issued document.
> > +the contributor's name as discussed in the next section.
> 
> Good point, and much better. (In fact, in the previous version I
> wondered why "Name" would have a capital letter, until I realized that
> it referred to the example above.)
> 
> Also, with the new wording, you could say "contributor's name as a
> natural person" here, and leave the next section alone. Just as a
> suggestion, with no strong preference on my side.
Done.

> > The new text was substantially written by myself, with the great suggestion
> > from kuzetsa, and then everybody else contributed good edits to it.
> 
> So far we had followed the principle not to list authors in the
> acknowledgements (which is worded "the authors would like to thank").
> If we start adding them for revision 1.2, then we'd have to add more
> names to the existing list.
How's the clarification now, making it clear those are the authors for
version 1.2?

> > If you're happy to not take extra acknowledgement that this was for Rev 1.2,
> > I'll just tweak it to add kuzetsa to authors and ajak to thanks list.
> Please do. CCing rich0 and antarus, are you happy with this?

> 
> Another small point: Whitespace in the new section doesn't follow the
> style in the rest of the GLEP, which uses two blank lines before and one
> blank line after section headings, as well as two spaces at the end of
> every sentence. (This is also what GLEP 2 says.)
Fixed - the blank lines were inconsistent in multiple places, but the
two spaces were correct.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
From 35d447a3db1ecceaa6e2e5d20412e8079180c81e Mon Sep 17 00:00:00 2001
From: "Robin H. Johnson" 
Date: Fri, 21 Oct 2022 12:50:08 -0700
Subject: [PATCH v4] glep-0076: clarify name policy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Merge discussion results about improving the name policy.

Fix whitespace for GLEP2 style:
- section heading: Two blank lines before, one blank line
- two spaces at the end of every sentence

Authorship for revision 1.2 changes: kuzetsa CatSwarm, Richard Freeman,
John Helmert III, Robin H. Johnson, Ulrich Müller, Alec Warner

Signed-off-by: Robin H. Johnson 
Reference: https://archives.gentoo.org/gentoo-project/message/c85b78ca69802522534ee8ab0804f665
Reference: https://archives.gentoo.org/gentoo-dev/message/7d1ad38a1d77ea5726520d2ec90cffe4
---
 glep-0076.rst | 38 --
 1 file changed, 32 insertions(+), 6 deletions(-)

diff --git glep-0076.rst glep-0076.rst
index 2216483..5863b84 100644
--- glep-0076.rst
+++ glep-0076.rst
@@ -5,13 +5,15 @@ Author: Richard Freeman ,
 Alice Ferrazzi ,
 Ulrich Müller ,
 Robin H. Johnson ,
-Michał Górny 
+Michał Górny ,
+John Helmert III ,
+kuzetsa CatSwarm 
 Type: Informational
 Status: Active
-Version: 1.1
+Version: 1.2
 Created: 2013-04-23
-Last-Modified: 2022-07-02
-Post-History: 2018-06-10, 2018-06-19, 2018-08-31, 2018-09-26
+Last-Modified: 2022-10-21
+Post-History: 2018-06-10, 2018-06-19, 2018-08-31, 2018-09-26, 2022-07-12, 2022-10-21
 Content-Type: text/x-rst
 ---
 
@@ -83,6 +85,7 @@ copyright in a file.
 Specification
 =
 
+
 Purpose / Scope
 ---
 
@@ -137,8 +140,7 @@ the Certificate of Origin by adding ::
 Signed-off-by: Name 
 
 to the commit message as a separate line.  The sign-off must contain
-the committer's legal name as a natural person, i.e., the name that
-would appear in a government issued document.
+the contributor's name as discussed in the next section.
 
 The following is the current Gentoo Certificate of Origin, revision 1:
 
@@ -180,6 +182,25 @@ indicated by adding ``(DCO-1.1)`` at the e

Re: [gentoo-dev] Last rites: various more revdep-less Haskell packages

2022-08-22 Thread Robin H. Johnson
On Sun, Aug 21, 2022 at 03:23:46AM +0100, Sam James wrote:
> # hololeap  (2022-08-21)
> # Monolithic mask for dev-haskell/* packages which have no reverse 
> dependencies,
> # are broken, or severely out of date. The aim is to have the Haskell overlay
> # (::haskell) be the place for development packages and only have packages
> # needed for end-user applications in ::gentoo, as the status quo has
> # proven to be unsustainable. More up-to-date versions of these packages
> # are available in ::haskell.
This subset are needed for Ganeti, which I'd really like to get back
into the main tree (I'm talking w/ upstream about newer Py3 versions).

Normal usage:
ganeti-3.0.2-r2.ebuild: >=dev-haskell/hslogger-1.1.4:0= 
=dev-haskell/regex-pcre-0.94.2:0= 
=dev-haskell/snap-core-1.0.0:0=
ganeti-3.0.2-r2.ebuild: >=dev-haskell/snap-server-1.0.0:0=

USE=test:
ganeti-3.0.2-r2.ebuild: dev-haskell/haddock:0=
ganeti-3.0.2-r2.ebuild: dev-util/shelltestrunner

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136



[gentoo-dev] Re: [gentoo-project] RFC: "Trusted contributor model"

2022-07-22 Thread Robin H. Johnson
On Fri, Jul 22, 2022 at 02:56:33PM +0300, Joonas Niilola wrote:
> Cross-posting to gentoo-dev and -project lists due to technical and
> non-technical nature. Reply-to is set to -project.
...
> 1st RFC: "Trusted contributor model"
> 
> I'm proposing us to giving special commit access to our well-reputable
> contributors (mostly proxied maintainers). They'd have access _only_ to
> their maintained package in git-tree. To understand what I mean, check
>   git shortlog -s -n net-im/telegram-desktop-bin/
>   git shortlog -s -n net-im/signal-desktop-bin/
Conceptually, yes, I think this is a good improvement. I'd like upstream
to be included as well in this set, for upstreams that know their own
package much better than us.

> On the technical side I'm not sure how to achieve this, but I know it
> can be done. For example the sync-repos are compiled like this all the
> time. If this proposal gains support, I'm willing to start figuring it
> out more in-depth.
Technically, I've got some implementation problems.

We *can* write a simple gitolite ACL that limits scope to a directory or
file, e.g. CAT/PN/

BUT, we can't write a simple gitolite ACL that limits the content within
profiles/package.mask or other files in profiles/ (we can write hooks
that might be able to do this, but that still requires the challenge of
validation inside the file).

I'd EXPECT a contributor to WANT to package.mask a cutting edge version
so it has time to bake and get well-tested, but if they can't do both
parts of the commit themselves, this process is likely problematic.

> 2nd RFC: Recruiting proven contributors without a mentor
> 
> I'm aware recruiters don't really need to ask a permission here, but I
> believe it's great to gauge the general feelings about this beforehand.
> What would you say if recruiters started more actively approaching
> potential developers? 
...
> But seeing the general lack of interest towards mentoring, maybe this is
> something we _need_ to do in near future.
Yes, let's make it possible to join by the quiz, and the recruiting
only, mentors can be optional.

But in parallel:

It's been ~7 years since I last mentored somebody, mostly for reasons of
time with having young kids.

How do we make the mentorship process more lightweight?
(and possibly the quiz process, I haven't seen how the quiz has changed
since I last mentored)

Let's start with a potential intersection of your two ideas:
(these numbers are arbitrary, but try to reflect what I see some of the
trusted contributors doing)
- 9 good submissions (patches or PRs) over a 3 month period [must be at least 
3/month]
- will get you an invite from recruiters to join
- either without a mentor, or a lightweight mentor

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Proposal to undeprecate EGO_SUM

2022-07-16 Thread Robin H. Johnson
On Sat, Jul 16, 2022 at 09:31:35PM +0300, Arthur Zamarin wrote:
> I want to give another option. Both ways are allowed by eclass, but by
> QA policy (or some other decision), it is prohibited to use EGO_SUM in
> main ::gentoo tree.
> 
> As a result, overlays and ::guru can use the EGO_SUM or dist distfile
> (remember, they don't have access to hosting on dev.g.o).
Yes; this is the option I was trying to propose as an intermediate step
until we have indirect Manifests that provide the best of both worlds
(not bloating the tree, and not requiring creation of dep tarballs).


-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

2022-07-12 Thread Robin H. Johnson
On Wed, Jul 13, 2022 at 02:26:43AM +0200, Ulrich Mueller wrote:
> The "natural person" part was lost in this change. It also doesn't
> reappear in the added section below. I think we don't want any corporate
> entities there (or at least that's what I had taken from the previous
> "Sony" discussion).
Will re-add to the name section.

For this section, I had a further thought and feel this is cleaner:
 to the commit message as a separate line.  The sign-off must contain
-the committer's legal name as a natural person, i.e., the name that
-would appear in a government issued document.
+the contributor's name as discussed in the next section.

> > +Contributor Name
> > +
> I just notice that it says "contributor" here while it is "committer"
> above. Not sure which is better, but maybe we should use the same word
> everywhere? 
I think this might warrant a larger discussion.

The Kernel DCO is required for all patches, not just commits.

The GCO rev 1 text borrowed the same word: contribution.

Specifically the author of the contribution can easily be different from the
person committing it into a VCS. Contributors are a superset of committers.

At the same time, I've already seen developers ask contributors for a
sign-off, even when it's only the developer doing the commit; which isn't
required by the Gentoo policy as it's written today.

Maybe this specific commit that changes "legal name" should stick to
"committer", which the explicit plan to make the text 


> > +Contributors must sign off on contributions with a name that can be made
> > +public and would pass copyright due diligence.
> Suggestion: "with their name as a natural person"
Agreed & queued. Will incorporate after other discussion above is concluded.

> > +For revision 1.2, further thanks are extended to kuzetsa CatSwarm,
> > +Richard Freeman, John Helmert III, Ulrich Müller and Alec Warner.
> The authors thanking themselves would be very unusual in an
> acknowledgement. :) I suggest to just add John Helmert III to the
> existing list (keeping alphabetical order). All others are either
> authors or are already mentioned.
If I do that, the specific contributions of multiple parties already in the
author list are not acknowledged for this revision: rich0, antarus, ulm.

The new text was substantially written by myself, with the great suggestion
from kuzetsa, and then everybody else contributed good edits to it.

If you're happy to not take extra acknowledgement that this was for Rev 1.2,
I'll just tweak it to add kuzetsa to authors and ajak to thanks list.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] glep-0076: Require real name instead of legal name

2022-07-12 Thread Robin H. Johnson
(CC to gentoo-project as required by the GLEP itself).

On Tue, Jul 12, 2022 at 05:28:36AM +0500, Anna Vyalkova wrote:
> This patch uses more friendly language towards potential transgender
> and plural contributors.
> 
> No other projects require to use a legal name, e.g. Linux says to use
> your real name[0].
> 
> Government issued documents are really a bad example since in some
> countries it's really hard to get your name changed there.
Hi Anna,

There was a very long discussion in #gentoo-council IRC about this
today, with many sides represented.

I apologize I didn't follow who suggested some of the ideas first, so if
something was mis-credited, the fault lies with me.

The need is for GLEP76's name requirement to balance copyright protection with
complexities of jurisdictional naming complexities [4][5].

The kernel DCO says:
"using your real name (sorry, no pseudonyms or anonymous contributions.)"

Copyright law itself, at various levels (including US law and WIPO treaty
[CR001EN]) treaty does permit copyright held by pseudonyms in many cases.
But Copyright law also makes assumptions that some body, be it publisher or
government office, holds the "real" identity (which can be discovered by legal
or other actions), and the publisher holds some liability in this process.

Thus Copyright law tries to impose the need to associate a person with a
a copyrightable work.

Thus it raises two questions:
- Is the open source organization that receives a contribution a publisher in
  this case?
- If the organization is a publisher, does this mean they are required to
  implement some level of Know-Your-Customer (KYC) system?

This is all so messy :-(. Maybe we can approach it from a different angle.

The older version of the GLEP did use the term "real name", and it was
changed to "legal name" because the advice at the time is that "real
name" wasn't well-defined.
https://bugs.gentoo.org/653118
https://gitweb.gentoo.org/data/glep.git/commit/glep-0076.rst?id=5713e7e0fbeb37a74743f11c80da2d8bdd87acf2

I previously proposed amending it further:
https://archives.gentoo.org/gentoo-project/message/26d68349541e4db54a93edf57d6e7404

But in further discussion, even my proposal didn't go far enough.

Neither "real name" or "legal name" correctly convey the underlying intent
here, and both of them have additional unwanted baggage [1][2][3], and
disproportionately impact some population groups.

Tying this back together: 
The Foundation has *zero* desire to implement a KYC system, or to be the
holders of any non-public personal information. Esp. The Foundation does
not want to even have to look at ID documents. So it's not acceptable to
just have: "send your linkage between pseudonym and name-on-ID to
trustees".

What's really needed?
GLEP76 must show that Gentoo (as a legal entity: the current Foundation, or
future umbrella), has undertaken due diligence in accepting the contribution.

The discussion in #gentoo-council ended up producing a potential text that I'll
attached as a patch.

I'd like to thank the following for their contributions to the text.

kuzetsa CatSwarm  ** significant wording
Richard Freeman 
John Helmert III 
Ulrich Müller 
Alec Warner 

[1] https://en.wikipedia.org/wiki/Battle.net#Privacy_and_Real_ID
[2] https://en.wikipedia.org/wiki/Facebook_real-name_policy_controversy
[3] https://en.wikipedia.org/wiki/Nymwars
[4] Depending where you are, it can range from very easy to almost-impossible 
to change your name.
[5] In 
https://archives.gentoo.org/gentoo-project/message/26d68349541e4db54a93edf57d6e7404,
 I linked many other examples
[CR001EN] https://wipolex-res.wipo.int/edocs/lexdocs/laws/en/cr/cr001en.html

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
From 77a948ffecf97035a42359be0a0b40ad5059fe2f Mon Sep 17 00:00:00 2001
From: "Robin H. Johnson" 
Date: Tue, 12 Jul 2022 14:52:23 -0700
Subject: [PATCH] glep-0076: clarify name policy

Signed-off-by: Robin H. Johnson 
---
 glep-0076.rst | 29 +++--
 1 file changed, 23 insertions(+), 6 deletions(-)

diff --git glep-0076.rst glep-0076.rst
index 2216483..ce98ac8 100644
--- glep-0076.rst
+++ glep-0076.rst
@@ -5,12 +5,13 @@ Author: Richard Freeman ,
 Alice Ferrazzi ,
 Ulrich Müller ,
 Robin H. Johnson ,
-Michał Górny 
+Michał Górny ,
+kuzetsa CatSwarm 
 Type: Informational
 Status: Active
-Version: 1.1
+Version: 1.2
 Created: 2013-04-23
-Last-Modified: 2022-07-02
+Last-Modified: 2022-07-12
 Post-History: 2018-06-10, 2018-06-19, 2018-08-31, 2018-09-26
 Content-Type: text/x-rst
 ---
@@ -136,9 +137,8 @@ the Certificate of Origin by adding ::
 
 Signed-off-by: Name 
 
-to the commit message as a separate l

Re: [gentoo-dev] proposal

2022-07-04 Thread Robin H. Johnson
On Mon, Jul 04, 2022 at 05:27:03PM +0200, David Seifert wrote:
> On Mon, 2022-07-04 at 16:19 +0200, Florian Schmaus wrote:
> > I'd like to propose a new metadata XML element for packages:
> > 
> >  
...
> Ultimately, all these things really matter when only the defaults
> change. Turn-right-on-red in the US is such a thing, because unless
> otherwise stated, it's the norm. Knowing our devbase, with roughly 75%
> mostly AWOL and barely reading the MLs, I don't think this idea will
> bring about the desired change. Instead, we should really just go for
> the  tag, because my feeling is that
> the default will be that most maintainers don't mind non-maintainer
> commits, except a select few territorial ones.

I had a rough draft similar proposal to this before that was never
completed into GLEP.

It had 3 states however:
a) go ahead and touch it, no additional approvals needed
b) please get a maintainer to approve it
c) do not touch it

With b) being the proposed default as status-quo at the time.

That however was years ago, and I'll entirely agree that the devbase
isn't as watchful anymore.

With that said, I stand behind the intent of making the default a), with
a migration period.

Something like this for the migration period:
July 1 to Sep 30: default is still b), to allow developers time to update
their metadata.
Oct 1 onwards: default becomes a)


-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Packages up for grabs: e.g. www-servers/nginx, www-apps/nikola, app-admin/rsyslog, ...

2022-06-08 Thread Robin H. Johnson
Infra need/wants a few of these packages, so please consider us
fallback maintainers:

On Sun, Jun 05, 2022 at 11:28:30AM +0300, Joonas Niilola wrote:
> app-metrics/mysqld_exporter
> net-libs/zeromq
> net-misc/httpstat
> sys-apps/hponcfg
> sys-block/hpacucli
> sys-block/hpssacli
> sys-block/storcli
> sys-process/incron

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Interest in a yarn / NPM eclass

2022-06-08 Thread Robin H. Johnson
On Wed, Jun 08, 2022 at 07:23:15PM +0200, Alessandro Barbieri wrote:
> I'm interested in an eclass that doesn't bundle everything together. Also
> I'm interested in anyone that can share the package maintainership (in guru
> first).
> 
> I've already tried 3 approaches:
...

Since you know this yarn/NPM ecosystem well, could you evaluate two
other ideas?
4) Solutions like EGO_SUM
5) EGO_SUM successor of 2nd-level-Metadata-Manifest that I described in the 
recent EGO_SUM thread.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] About EGO_SUM

2022-06-08 Thread Robin H. Johnson
On Fri, Jun 03, 2022 at 01:18:08PM +0200, Florian Schmaus wrote:
> EGO_SUM is marked as 'deprecated' in go-module.eclass [1, 2]. I 
> acknowledge that there are packages where the usage of EGO_SUM is very 
> problematic. However, I wonder if there are packages where using 
> dependency tarballs is problematic while using EGO_SUM would be not.
... [snip all the great points]
> Even more problematic are that dependency tarballs require additional 
> steps that would not be required when EGO_SUM is used. While those steps 
> appear simple, behavioral theory shows that even the tiniest additional 
> steps have a huge impact (e.g., online shops loose a relative large 
> share of customers if for each an additional checkout step). If we force 
> dependency tarballs for Go software, then packaging Go software just 
> become a little bit harder.
Your above is entirely correct, and I was against the plan to introduce
dependency tarballs.

> This leads me to the question why are we actually deprecating EGO_SUM? 
> It seems like a nice alternative for Go packaging that we may want to 
> keep. But maybe I am missing something?
EGO_SUM vs dependency tarballs:
- bloats ebuilds
- bloats Manifests
- bloats metadata/md5-cache/ (SRC_URI etc)
- doesn't bloat mirrors with gentoo-unique distfiles
- EGO_SUM is verifiable/reproducible from Upstream Go systems
- less downloads on upgrades (only changed Go deps, not entire dep tarballs)

EGO_SUM data right now adds, to every user's system:
- 2.6MB of text to ebuilds (340k after de-dupe)
- 7MB of text to Manifests (2M after de-dupe)
- 6.4MB+ of text to metadata/md5-cache (I don't have a easy way to calc deduped 
amount here)
On the server side:
- The sum total of Go distfiles mirrored on Gentoo mirrors right now is only 
3.4GB.
- less downloads

Dependency tarballs:
- Right now ~15GiB on each mirror, plus storage of the primary copy
  somewhere (dev.g.o right now, but not great)
- Conservatively if the remaining EGO_SUM packages converted to Dep
  tarballs, it would need another 8GB each of primary location and
  mirrors.
- larger downloads for users who DO want to upgrade a Go package (all
  new deps tarball even if only one or two deps changed)
- must be preserved much longer, unless we can introduce a guaranteed
  way to regenerate them for any prior ebuild.

I was trying to introduce a third option, but I haven't had the time to
write an entire GLEP.

The TL;DR is introducing a 2nd-level Manifest+metadata file, that tries
to move just the metadata out of the tree, in a way that can be
regenerated (specifically, a 1:1 reproducible creation from a given go.sum).
It DOES need to contain slightly more data than the present Manifest,
specifically a full SRC_URI entry for each file (upstream URI plus what
to rename it to on Gentoo side)

The 2nd-level Manifest would be listed as SRC_URI, and be handled in
src_fetch/src_unpack. Download & verify the extra distfiles, against the
Manifest checksum data (and for Golang against go.sum checksums).

The Portage mirrordist code needs the most work in this case, as it
would need to fetch the 2nd-level Manifests so it can populate Gentoo
mastermirror with the distfiles mirrored from upstream.

The storage costs for the proposed idea:
- same 1:1 base distfile storage as EGO_SUM (e.g. upstream distfiles are
  mirrored 1:1 content, just different naming)
- Probably 1 Metadata-Manifest file per ebuild $PVR (conceptually it
  could be split more or shared between some ebuilds/packages)
- Main tree Manifests: 1 DIST entry per Metadata-Manifest in a given package
- Main tree ebuilds: 1 line for the Metadata-Manifest in the ebuild.
- metadata/md5-cache: 1 src_uri line!
- mirrors: add the Metadata-Manifest

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-portage-dev] Normaliser function for distfiles

2022-05-16 Thread Robin H. Johnson
On Mon, May 16, 2022 at 07:37:40PM +0200, Markus Walter wrote:
> Hello all,
> 
> is it possible to do the following: after fetching a distfile portage runs
> an external normaliser program specified in an ebuild before checking the
> hash?
> 
> My use case is the following: I would like to improve the gs-elpa program
> and provide a precomputed overlay for melpa. However the melpa distfiles are
> rebuilt everyday and cause checksum failures. However the only thing
> changing are the timestamps. Hence if a normaliser program could simply set
> all timestamps to some predefined value (say 1.1.1970) then this problem
> should vanish.
I don't know what 'gs-elpa' & 'Melpa' are, but maybe talking to upstream
would be good here, and improving that behavior.

If the file contents or non-timestamp metadata change, absolutely the
timestamps should change. But otherwise, the timestamp should NOT
change.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] proposal: use only one hash function in manifest files

2022-04-19 Thread Robin H. Johnson
On Wed, Apr 06, 2022 at 05:23:25PM +, Robin H. Johnson wrote:
> On Wed, Apr 06, 2022 at 02:15:02AM +0200, Jason A. Donenfeld wrote:
> > 2) Comparability: other distros use SHA2-512, as well as various
> > upstreams, which means we can compare our hashes to theirs easily.
> Can we expand on this specific thread for a moment?
> 
> I was the author of GLEP59 about changing the Manifest hashes, and I
> noted at the time, with references, that the effective strength of a set
> of hashes is only that of the strongest hash.
Bump for my parent message, that I'm very surprised at the lack of
responses to two messages in this thread.

https://archives.gentoo.org/gentoo-dev/message/18216da0128ee79733fa68bb77fa8b69
https://archives.gentoo.org/gentoo-dev/message/a9974ec34dfb25810dab47e3fa322a52

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136



Re: [gentoo-dev] proposal: use only one hash function in manifest files

2022-04-06 Thread Robin H. Johnson
On Wed, Apr 06, 2022 at 07:06:30PM +0200, Jason A. Donenfeld wrote:
> No, you're still missing the point.
> 
> If SHA-512 breaks, the security of the system fails, regardless of
> what change we make. This is because GnuPG uses SHA-512 for its
> signatures.
Question directly for you Jason, because you make a professional study
of this: does the type of breakage/successful attack against against
SHA-512 matter?

e.g. is it possible that some type of attack would only work against the
Manifest entry, but NOT against the GPG signature's embedded SHA-512 (or
the opposite).

The best hypothetical idea I had was that there exists some large
special input that lets an attacker reset the output to an arbitrary
hash after their malicious payload: but it wouldn't fit in the GPG
signature space.

> 
> So I'll spell out the different possibilities:
> 1) GPG uses SHA-512. Manifest uses SHA-512 and BLAKE2b.
score -1 + 0 = -1
> 2) GPG uses SHA-512. Manifest uses SHA-512.
score -1 + 0 = -1
> 3) GPG uses SHA-512. Manifest uses BLAKE2b.
score -1 + -1 = -2
> See how from a security perspective, (2) is not worse than (1), but
> (3) is worse than both (1) and (2)?
Yes, (2) is not worse than (1) for the overall security perspective.
That leaves the discussion does (1) have other benefits / value
propositions that make it worth less than (2). (see my other thread)

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] proposal: use only one hash function in manifest files

2022-04-06 Thread Robin H. Johnson
On Wed, Apr 06, 2022 at 02:15:02AM +0200, Jason A. Donenfeld wrote:
> 2) Comparability: other distros use SHA2-512, as well as various
> upstreams, which means we can compare our hashes to theirs easily.
Can we expand on this specific thread for a moment?

I was the author of GLEP59 about changing the Manifest hashes, and I
noted at the time, with references, that the effective strength of a set
of hashes is only that of the strongest hash.

One of my regrets from GLEP59 is that it's made it harder for use cases
outside of the normal user distfile workflow.

The use case that impacted me the most was being able to compare our
distfiles were over time vs external sources, esp. if the file goes
missing or was fetch-restricted and we can't produce a new hash of it.
Maybe upstream only ever published SHA1/SHA256, and we only ever
calculated SHA512/BLAKE2b on the file. Since we never had hashes from
both sides at the same time, we cannot prove it was the same file.

We need to be able to ship one or more hashes to users, for the specific
use case of validating the distfiles they download.

As a developer, I'd like to be able to track the other hashes for a
file, without forcing ourselves to retain the file. This might be to
compare with upstream published hashes, or to compare with other
distros.

In fact it would be really nice to have a semi-automated pipeline to
plug in signed upstream hashes to our Manifests, and make it possibly to
prove our new SHA512/BLAKE2B hash was taken over the correct input in
the first place, and there wasn't any subtle supply-chain attack early
in the packaging process.

Where would those hashes go? They don't need to be in the Manifest, or
at the very least they don't need to be distributed via rsync to users
(it only costs a small amount of bytes to do so).

Where else could they go? 
- Commit messages could work.
- Git notes to a lesser degree.
- alternate repos?

> A reason why some people might prefer BLAKE2b over SHA2-512 is a
> performance improvement. However, seeing as right now we're opening
> the file, reading it, computing BLAKE2b, closing the file, opening the
> file again, reading it again, computing SHA2-512, closing the file, I
> don't think performance is actually something people care about. Seen
> differently, removing either one of them will already give us a
> performance "boost" or sorts.
Or just only verifying the "strongest" hash gives you that boost.

I do want to check into the code that you pointed out, because I'm
really sure much older versions of Portage did the CORRECT thing of only
reading the file in a single pass.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Gentoo LLVM project needs help!

2022-02-11 Thread Robin H. Johnson
On Fri, Feb 11, 2022 at 09:11:51PM +0100, Michał Górny wrote:
> > GSOC-worthy project?
> Not sure.  To rephrase what was once said to me, this is summer of
> *code*, not infra work.
Are there similar programs where the infra work might fit? 
Outreachy? paid interns?

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH 01/12] toolchain.eclass: remove EAPI 5 and 6

2022-02-01 Thread Robin H. Johnson
At a technical level, it looks fine.

But I want to clarify interaction for old systems.

Dilfridge had a proposal to ensure 3/6/12 month old systems could still
upgrade, and I'm wondering if this could break those systems.

There are 3 commits in the last year that finally removed the EAPI 5/6
toolchain consumers:
486b77ab8d28c5bfd5a4bdfc5f9a5f432ffde563
b0a39e54065f7eda2dfc719ec05e270fa7e23e38
26f684adecb5b9135f9eba9f1b63c83e3d5e5722

The latest of those was in September 2021.

Do we need to wait X months after those removals, to be able to commit
this change?

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] 2021-10-17-openssl-bindist-removal: openssl USE=bindist removal

2021-10-22 Thread Robin H. Johnson
On Sun, Oct 17, 2021 at 04:33:17PM -0700, robb...@gentoo.org wrote:
> From: "Robin H. Johnson" 
> 
> Signed-off-by: Robin H. Johnson 
> ---
>  .../2021-10-17-openssl-bindist-removal.en.txt | 38 +++
>  1 file changed, 38 insertions(+)
>  create mode 100644 
> 2021-10-17-openssl-bindist-removal/2021-10-17-openssl-bindist-removal.en.txt
No responses, so merged.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH 1/3] cvs.eclass: Support EAPI 8, drop EAPI 6 and older

2021-10-03 Thread Robin H. Johnson
Can we verify the consumers of this eclass are indeed still using CVS in
the year 2021?

If they are not, I think it would be reasonable to consider removing CVS
from the tree on 2022/01/01.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] moving kernel config checks forward: potential config checking tool

2021-09-27 Thread Robin H. Johnson
On Mon, Sep 27, 2021 at 11:47:38PM +0200, Michał Górny wrote:
> > Can we consider moving the checks for set A somewhere else, such that we
> > don't check the kernel config during package compile & install time, but
> > only check it later? This also meaningfully resolves that cases where
> > the system that has package building isn't where the packages are being
> > used.
> I'm not sure if I understand you correctly but if you mean not doing
> checks before compiling/installing, then I have to disagree.  There is
> value in knowing about this kind of problems early (hey, that's why we
> have pkg_pretend in the first place!)
Ebuilds should be able to call the tool (but it could be made optional
easily), which does the checks MORE efficiently than the present eclass
code. The ebuilds would be responsible for suitable warnings or failures
based on the tool's output.

E.g. maybe you're in a rescue environment and you know the tooling will
work fine on your final environment.

> There's certainly value in knowing 'I need to rebuild my kernel' early
> vs learning only after you've spent significant time waiting for some
> package to build.

One thing to this is if you're doing pkg_pretend for multiple packages
in a single emerge call, the tool could greatly amortize the cost of the
checks, as well as having them available after merge.

Great thought I had would be this tool could ALSO run on boot and warn
if some packages are unlikely to work

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] RFC: dev-libs/openssl USE=bindist removal

2021-09-27 Thread Robin H. Johnson
Deadline for responses: 2021/10/14!

The Foundation would like to propose that RedHat/Fedora "hobble" patch
presently applied when USE=bindist is true shall be removed from
dev-libs/openssl.

RedHat's stated reasons for the patch were originally to avoid any patent
concerns, but they have also morphed over time to present some "insecure"
things from being used entirely:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/security_hardening/using-the-system-wide-cryptographic-policies_security-hardening
"All ECC curves < 224 bits (since RHEL 6)"
"All binary field ECC curves (since RHEL 6)"

However, the Foundation would also like to be sure that no users feel that
patchset provides something critical to their usage of Gentoo.

If nobody speaks up as saying that the "hobble" patch is REQUIRED for their use
cases, the Foundation proposes that usage of the patchset be dropped from the
main tree.

Any users who might be concerned about patent compliance are encouraged to do
their own due diligence, as OpenSSL was the only Gentoo package that shipped
this type of patch, and even Fedora's upstream did not completely patch out EC
in other packages.

Below shows which EC curves are present in major distributions.
- RHEL/Fedora is the most restrictive list, with only 5 curves kept
- OpenSUSE is next, with 41 curves
- Gentoo, Debian, Ubuntu all have the same 88 curves available.

Fedora # openssl ecparam -list_curves
  secp224r1 : NIST/SECG curve over a 224 bit prime field
  secp256k1 : SECG curve over a 256 bit prime field
  secp384r1 : NIST/SECG curve over a 384 bit prime field
  secp521r1 : NIST/SECG curve over a 521 bit prime field
  prime256v1: X9.62/SECG curve over a 256 bit prime field

OpenSUSE Leap # openssl ecparam -list_curves
  secp112r1 : SECG/WTLS curve over a 112 bit prime field
  secp112r2 : SECG curve over a 112 bit prime field
  secp128r1 : SECG curve over a 128 bit prime field
  secp128r2 : SECG curve over a 128 bit prime field
  secp160k1 : SECG curve over a 160 bit prime field
  secp160r1 : SECG curve over a 160 bit prime field
  secp160r2 : SECG/WTLS curve over a 160 bit prime field
  secp192k1 : SECG curve over a 192 bit prime field
  secp224k1 : SECG curve over a 224 bit prime field
  secp224r1 : NIST/SECG curve over a 224 bit prime field
  secp256k1 : SECG curve over a 256 bit prime field
  secp384r1 : NIST/SECG curve over a 384 bit prime field
  secp521r1 : NIST/SECG curve over a 521 bit prime field
  prime192v1: NIST/X9.62/SECG curve over a 192 bit prime field
  prime192v2: X9.62 curve over a 192 bit prime field
  prime192v3: X9.62 curve over a 192 bit prime field
  prime239v1: X9.62 curve over a 239 bit prime field
  prime239v2: X9.62 curve over a 239 bit prime field
  prime239v3: X9.62 curve over a 239 bit prime field
  prime256v1: X9.62/SECG curve over a 256 bit prime field
  wap-wsg-idm-ecid-wtls6: SECG/WTLS curve over a 112 bit prime field
  wap-wsg-idm-ecid-wtls7: SECG/WTLS curve over a 160 bit prime field
  wap-wsg-idm-ecid-wtls8: WTLS curve over a 112 bit prime field
  wap-wsg-idm-ecid-wtls9: WTLS curve over a 160 bit prime field
  wap-wsg-idm-ecid-wtls12: WTLS curve over a 224 bit prime field
  brainpoolP160r1: RFC 5639 curve over a 160 bit prime field
  brainpoolP160t1: RFC 5639 curve over a 160 bit prime field
  brainpoolP192r1: RFC 5639 curve over a 192 bit prime field
  brainpoolP192t1: RFC 5639 curve over a 192 bit prime field
  brainpoolP224r1: RFC 5639 curve over a 224 bit prime field
  brainpoolP224t1: RFC 5639 curve over a 224 bit prime field
  brainpoolP256r1: RFC 5639 curve over a 256 bit prime field
  brainpoolP256t1: RFC 5639 curve over a 256 bit prime field
  brainpoolP320r1: RFC 5639 curve over a 320 bit prime field
  brainpoolP320t1: RFC 5639 curve over a 320 bit prime field
  brainpoolP384r1: RFC 5639 curve over a 384 bit prime field
  brainpoolP384t1: RFC 5639 curve over a 384 bit prime field
  brainpoolP512r1: RFC 5639 curve over a 512 bit prime field
  brainpoolP512t1: RFC 5639 curve over a 512 bit prime field
  SM2   : SM2 curve over a 256 bit prime field

Gentoo, Ubuntu, Debian # openssl ecparam -list_curves
  secp112r1 : SECG/WTLS curve over a 112 bit prime field
  secp112r2 : SECG curve over a 112 bit prime field
  secp128r1 : SECG curve over a 128 bit prime field
  secp128r2 : SECG curve over a 128 bit prime field
  secp160k1 : SECG curve over a 160 bit prime field
  secp160r1 : SECG curve over a 160 bit prime field
  secp160r2 : SECG/WTLS curve over a 160 bit prime field
  secp192k1 : SECG curve over a 192 bit prime field
  secp224k1 : SECG curve over a 224 bit prime field
  secp224r1 : NIST/SECG curve over a 224 bit prime field
  secp256k1 : SECG curve over a 256 bit prime field
  secp384r1 : NIST/SECG curve over a 384 bit prime field
  secp521r1 : NIST/SECG curve over a 521 bit prime field
  prime192v1: NIST/X9.62/SECG curve over a 192 bit prime field
  prime192v2: X9.62 curve over a 192 bit prime field
  prime192v3: X9.62 

[gentoo-dev] moving kernel config checks forward: potential config checking tool

2021-09-27 Thread Robin H. Johnson
I wanted to break the prior thread to discuss the root issue.

We have some set of packages (A) which collectively depend on one or
more kernel options being set in specific ways, and the options need to
REMAIN set if you want the packages to continue work.

There are also a subset of packages (B), usually kernel modules themselves
that will outright fail to compile if specific options are/are not set.

Can we consider moving the checks for set A somewhere else, such that we
don't check the kernel config during package compile & install time, but
only check it later? This also meaningfully resolves that cases where
the system that has package building isn't where the packages are being
used.

This secondary tooling COULD be called from pkg_setup much less, and
could do a much more efficient job of checking the state of multiple
flags. At boot, it needs to load the present config into some easy to
check for, and then it can be verified against in a lightweight manner.

Also a lot easier for users to say "i accept the responsbility of my
stuff breaking", AND for users to say "hey, why did package X broken
when I rebooted into new kernel" (because some config option changed).

It would need to keep long-term state about which packages want specific options
set/unset/modular, as well as short-term state about the config from
each boot.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Guidance on adding kernel config checks to ebuilds

2021-09-27 Thread Robin H. Johnson
On Mon, Sep 27, 2021 at 01:15:10PM -0400, Mike Gilbert wrote:
> On Mon, Sep 27, 2021 at 12:23 PM Mike Pagano  wrote:
> > > Adding linux-info calls to pkg_pretend or pkg_setup causes slowdowns
> > > when running emerge, so we should do so only when there is a
> > > compensating benefit.
> >
> > Is this a significant slowdown? Do you have any numbers?
> 
> Adding a check for CONFIG_PACKET to the dhcpcd ebuild adds around 7
> seconds of delay time to the pkg_setup and/or pkg_pretend phase on my
> system.
> 
> That's ok if a small number of packages are doing it, but it would
> become quite annoying if a significant number of them get queued up.
7 seconds is ridiculous.

I think we need to strip out a lot of the crap about trying to detect
things in the stuff being built, and reduce the check to the simplest
possible form:
$ time zgrep -w CONFIG_PACKET /proc/config.gz
CONFIG_PACKET=y

real0m0.032s
user0m0.021s
sys 0m0.018s

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Guidance on distributed patented software

2021-09-22 Thread Robin H. Johnson
On Wed, Sep 22, 2021 at 08:54:40AM -0400, Joshua Kinard wrote:
> Is there any advice on how this impacts net-misc/dropbear?  That has ECC
> (both ECDSA and Ed25519) support, and I use it for SGI/MIPS netboot images.
>  The build doesn't have any bindist uses in it, and ECC support is a
> localoptions.h compile-time option (enabled by default).  ECC is much faster
> on old SGI hardware and generating the hostkeys at bootup takes just a
> second or two, whereas RSA can take up to 10-15 seconds.  So I'd like to be
> able to use ECC on these platforms and distribute netboot images using them.
RedHat doesn't seem to disable ECC in Dropbear:
https://src.fedoraproject.org/rpms/dropbear/blob/rawhide/f/dropbear.spec

Based on what they've said for OpenSSL, I would expect that they SHOULD
have disabled ECC there, but there is certainly no consistency from
them.

Probably nobody asked legal and just shipped dropbear anyway.

If you wanted to stir the pot, you could post to the Fedora legal list
and ask for consistency ;-).


-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Guidance on distributed patented software

2021-09-20 Thread Robin H. Johnson
On Mon, Sep 20, 2021 at 08:41:21PM +0200, Ulrich Mueller wrote:
> >>>>> On Mon, 20 Sep 2021, Robin H Johnson wrote:
> 
> > RedHat's legal team clearly know something there that they aren't
> > disclosing the details of publicly, because the patches said the
> > patents expire in 2020, but when I asked off-list if EC could be
> > re-enabled based on the expiry dates in the files, they claimed that
> > patent issues were still present, without giving any detail.
> 
> If there are remaining patent issues then they should be able to support
> their claim by facts, like a patent number. Why would this be difficult,
> or what reason would they have not to disclose it?
I don't have any answer from them, but my own research did turn up a few
current patents around EC (sorted by expiry):

US8462944B2 exp 2021-12-26
US8189772B2 exp 2023-05-28
US9160530B2 exp 2024-10-28
US8213605B2 exp 2025-11-14
US10756893B2 exp 2026-01-23
US10284370B2 exp 2026-03-03
US20100023775A1 exp 2031-08-02
US8631240B2 exp 2031-08-02
US8572367B2 exp 2031-12-25
US8918648B2 exp 2032-01-31
US10079673B2 exp 2032-02-15 ** not specifically EC, more general about Entropy
US9800418B2 exp 2035-07-17

IANAL, but the difficult question is: does any open-source end up
implementing those algorithms?

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Guidance on distributed patented software

2021-09-20 Thread Robin H. Johnson
On Mon, Sep 20, 2021 at 01:27:37PM -0400, Rich Freeman wrote:
> On Mon, Sep 20, 2021 at 12:46 PM Alec Warner  wrote:
> >
> > Could we add some text to the license concepts covering patents? It
> > seems to have been omitted?
> > Is my understanding of how we manage patented software correct?
> 
> I think you have the gist of it.  Is there actually anything in the
> repo these days which is patent-encumbered?  I realize this is a
> little tangential, but I think this is probably why we don't have a
> well-thought policy: it just doesn't come up much.
Elliptic Curve cryptography is the most topical & impactful thing I'm
aware of.

RedHat have for many years stripped parts of it out of their OpenSSL &
libgcrypt packages, and continue to do it with OpenSSL-3 [1] (I note
that somebody has dropped these patches from Gentoo's openssl as of v3
and I intend to restore them).

RedHat's legal team clearly know something there that they aren't
disclosing the details of publicly, because the patches said the patents
expire in 2020, but when I asked off-list if EC could be re-enabled
based on the expiry dates in the files, they claimed that patent issues
were still present, without giving any detail.

Somebody else ALSO asked about the Brainpool EC curves specifically and
similarly got nowhere [2].

[1] 
https://src.fedoraproject.org/rpms/openssl/c/347681c6b246d9b6a08c73bb40e5eefaf8596d71?branch=rawhide
[2] https://www.spinics.net/linux/fedora/fedora-legal/msg03673.html

I feel that generally software patents as an issue for FOSS became less
common because of patent grant programs: grants existed to encourage
broad adoption of newer ideas from patents.

> Things that used to be patent-encumbered that were prevalent in FOSS
> in the past include:
> 1. The GIF file format.
> 2. FAT-based filesystems.
> 3. MPEG-related codecs (codecs might be a space where patents are
> still relevant).
> 4. RSA
I have some more fields for patents to add, where I believe active
patents DO still exist:

5. Elliptic Curve cryptography
6. "Quantum" cryptography
7. 3D Printing
8. DRM
9. UAVs/Drones (also hits EAR/ITAR)
10. Rocketry (also hits EAR/ITAR)

Other past patent stuff touching open source:
11. Model Trains (see JMRI vs Katzer)

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] Support Makefiles that set variables to a non-static value

2021-09-09 Thread Robin H. Johnson
On Wed, Sep 01, 2021 at 02:44:11PM -0400, Mike Pagano wrote:
> Previously, the kernel Makefile had to define version variables
> as static string literals to be read.
> This change will allow varibles defined as non-static values
> to be read.
Hi,

This change has broken infra systems where /usr/src/ is empty because
they use a binary kernel. /proc/config.gz does exist on those systems for this
use case.

Specifically, any package that uses linux-info to issues warnings via the '~'
syntax now fails because "getfilevar_noexec VERSION ..." returns empty string.

 * Determining the location of the kernel source code
 * Unable to find kernel sources at /usr/src/linux
 * Please make sure that /usr/src/linux points at your running kernel, 
 * (or the kernel you wish to build against).
 * Alternatively, set the KERNEL_DIR environment variable to the kernel sources 
location
 * Unable to calculate Linux Kernel version for build, attempting to use 
running version
 * ERROR: app-emulation/docker-20.10.7::gentoo failed (setup phase):
 *   Unable to determine any Linux Kernel version, please report a bug
 * 
 * Call stack:
 *   ebuild.sh, line 127:  Called pkg_setup
 *   docker-20.10.7.ebuild, line 110:  Called kernel_is 'lt' '4' '5'
 *   linux-info.eclass, line 405:  Called linux-info_get_any_version
 *   linux-info.eclass, line 678:  Called die
 * The specific snippet of code:
 *  die "Unable to determine any Linux Kernel version, 
please report a bug"

I'd like to propose that we revert the original CVS change that supported the 
fallback to getfilevar_noexec:
https://gitweb.gentoo.org/repo/gentoo/historical.git/commit/eclass/linux-info.eclass?id=ab160a941f5f52c95b47129d3243c693b05401e5

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH 0/9] drop the go-module_pkg_postinst function

2021-09-06 Thread Robin H. Johnson
On Sun, Aug 29, 2021 at 11:33:17AM -0500, William Hubbs wrote:
> It seems to me that we don't need this function any longer since the go
> ebuild displays a message when it is upgraded or downgraded explaining
> how to rebuild go packages, so I would like to remove it.
> 
> This patch series contains all of the changes I could find that need to
> happen to allow the removal.
This series seems to remove fcaps postinst in some cases where it's the
only thing otherwise left, but not all cases.

I think it would be better if the fcaps postinst was explicitly left.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Infra support for mail submission with implicit TLS on port 465

2021-08-16 Thread Robin H. Johnson
On Sat, Aug 14, 2021 at 05:15:54PM +0200, Hanno Böck wrote:
> FWIW I am Co-author of the paper that documented these attacks, so in
> case you have any questions I guess I can answer them.
Yes, I have a question: are you going to claim DJB's $500 qmail security
reward?

> > Is this supported? I don't see it in the infra docs anywhere.
> I've been using 465 for a while and probably would've noted during our
> research if Gentoo wouldn't support that.
> I guess we can conclude that it works and we should probably mention it
> in the docs.
Added to the docs now, thanks for pointing it out.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Gentoo 18th Anniversary Edition - Help Needed

2021-04-19 Thread Robin H. Johnson
Here's two I have so far
https://dev.gentoo.org/~robbat2/neddy/

On Mon, Apr 19, 2021 at 10:24:41AM +0100, Roy Bamford wrote:
> Here's where I reed your help. The missing distfiles are
> MD5 38adc94a4953a6b29e8619c25dda4887 4.2.0-4.2.1.diff.gz 54763
> MD5 d5cc6a93c7d3ad2eb02bc637a1de9cf3 net-tools-1.60-gentoo-extra.tar.bz2 5785
> 
> If your Gentoo history goes back as far as mine and you still have those 
> files, please
> share them with me. 
I am reasonable certain that I have an archive with the others, but it's
a media accessibility problem: they are stuck on either an LTO1 or LTO3
tape, and while I have an LTO drive that might work, I don't have a
suitable external SAS controller on hand. It should probably be a
project for me to media-shift those old backups onto cloud storage.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: dev-python/elasticsearch-curator

2021-03-26 Thread Robin H. Johnson
On Fri, Mar 26, 2021 at 09:27:39AM +0100, Michał Górny wrote:
> # Michał Górny  (2021-03-26)
> # Pins to a vulnerable version of dev-python/urllib3.  No maintainer
> # in Gentoo.
> # Removal on 2021-04-25.  Bug #714860.
> dev-python/elasticsearch-curator
Can you hold off a bit on this one?

The latest version in the tree IS the latest version upstream, and they
only made progress in the urllib3 issue in the past week:
https://github.com/elastic/curator/pull/1595
https://github.com/elastic/curator/issues/1589

Hopefully they'll get a new version out within the next few weeks.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] Last rites: sys-power/ncpufreqd, app-text/csvfix

2021-01-27 Thread Robin H. Johnson
On Tue, Jan 26, 2021 at 08:11:58PM +0300, Azamat Hackimov wrote:
> +# Azamat H. Hackimov  (2021-01-26)
> +# Dead upstream, no live HOMEPAGE and SRC_URI.
> +# Removal in 30 days. Bug #744013
> +app-text/csvfix
Anybody have a good replacement for csvfix?

It's useful in data processing pipelines; I agree it has a few
buggy/broken edges, but for the most part it just works on all of my
data needs.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] acct-user.eclass: don't modify existing user by default

2021-01-03 Thread Robin H. Johnson


Whissi's patch in itself is a good step forward, but I don't feel it
goes far enough, nor promotes better defaults for the unmodified cases.

On Mon, Jan 04, 2021 at 02:35:58AM +0100, Thomas Deutschmann wrote:
> Modifying an existing user is a bad default and makes Gentoo
> special because it is common for system administrators to make
> modifications to user (i.e. putting an user into another service's
> group to allow that user to access service in question) and it
> would be unexpected to see these changes reverted during normal
> world upgrade (which could break services).
> 
> This commit will make Gentoo behave like any other Linux distribution
> by respecting any user modifications by default. However, we will retain
> the functionality to reset system user and groups and users interested
> in this feature can opt-in by setting
> ACCT_USER_ALLOW_EXISTING_USER_TO_BE_MODIFIED to a non-zero value in
> their make.conf.
No default is good, and that's the mess here. The problem has started to
happen in other distros as well, not just Gentoo. usermod/gpasswd in RPM
specfiles, as well as Debian controls.

As a sysadmin, I don't want stuff messing with the system users I have
in place; but if upstream requirements change on a package impacting
user/group layout, I also expect packaging to track it. Many years ago,
qmail did this, introducing an additional user to further separate
privileges.

Unfortunately, these two things are in conflict, and I don't feel there
is an easy answer.

It's NOT the binary decision of:
- let packagers change system user
- force sysadmins to always change users manually

Nor a single knob that selects between that binary.

We need a compromise.

The best I can come up with at the moment, is that any packaging should
detect if there are user modifications, and provide control to users
based on that fact.

- if unmodified: interactive, or auto-accept, or deny
- if modified: interactive, or auto-accept, or deny

These are two distinct config knobs (I'm ok with a default value that
populates both of them).

This leads to secondary parts:
- what if the packaging change regarding users/groups is absolutely
  mandatory for the new version of a package to work correctly?
- what about conflicting user requirements? Antarus raised the HOMEDIR
  of the git user for gitolite vs gitea.

I think in this case, the packages should detect the problematic
conditions and abort, in pkg_pretend and/or pkg_setup (thinking about
binpkgs here, pkg_pretend might be too early if acct-user/X needs to
merged before the check is expected to succeed).

These checks MUST be in the package that consumes/depends on acct-user
or acct-group packages. Yes, this means constants are likely to be
duplicated, but I'm ok with that, because they are also likely to be
specifically versioned.



-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH v2] glep-0063: Add section about the Gentoo keyserver

2020-12-17 Thread Robin H. Johnson
On Thu, Dec 17, 2020 at 08:27:44PM +0100, Michał Górny wrote:
> Thank you for doing this.
> 
> That said, I'm wondering if we should keep SKS pool at all.  Did anyone
> have any success interacting with it lately?  All my attempts of
> fetching keys are resulting in server errors.
Yes, it worked for me 2 weeks ago when I fetched some keys from a local
SKS node to correspond with an upstream developer about a potential
security issue recently.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] [PATCH] glep-0063: Add section about the Gentoo keyserver

2020-12-17 Thread Robin H. Johnson
On Thu, Dec 17, 2020 at 12:49:09PM -0500, Mike Gilbert wrote:
> +Gentoo Keyserver
> +
> +
> +Gentoo infrastructure uses a keyserver that is isolated from the SKS pool.
> +This keyserver is restricted to accepting uploads from authorized Gentoo 
> hosts.
> +A script is provided on dev.gentoo.org to allow developers to upload their
> +keys.
> +
> +``gpg --export KEYID | ssh dev.gentoo.org /usr/local/bin/openpgp-key-upload``
> +
Request: Please add the text "This upload is required in addition to
uploading the SKS pool", or something to that effect.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] bouncer.gentoo.org mangling URLs: FIXED

2020-11-30 Thread Robin H. Johnson
On Mon, Nov 30, 2020 at 10:49:00PM +, Robin H. Johnson wrote:
> On Mon, Nov 30, 2020 at 07:02:08AM -0700, Raul E Rangel wrote:
> > It looks like bouncer.gentoo.org is mangling the + in the original URL
> > and converting it into a space. This also happens when I try wget and
> > using chrome to hit the URL directly.
> Yes, there was a recent change to it, moving between hosts.
> 
> I'll look into the breakage, thanks for the report.
FYI: this is fixed now.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] bouncer.gentoo.org mangling URLs

2020-11-30 Thread Robin H. Johnson
On Mon, Nov 30, 2020 at 07:02:08AM -0700, Raul E Rangel wrote:
> It looks like bouncer.gentoo.org is mangling the + in the original URL
> and converting it into a space. This also happens when I try wget and
> using chrome to hit the URL directly.
Yes, there was a recent change to it, moving between hosts.

I'll look into the breakage, thanks for the report.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Re: [gentoo-dev-announce] Last rites: app-text/cook

2020-11-28 Thread Robin H. Johnson
On Sat, Nov 28, 2020 at 09:49:21PM +0100, David Seifert wrote:
> # David Seifert  (2020-11-28)
> # Last release in 2002, multiple open bugs, no maintainer, no revdeps.
> # Bug #709512, #713300, #729518, Removal in 30 days.
> app-text/cook



-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136



Re: [gentoo-dev] A feedback about the CI bug reporting system

2020-11-06 Thread Robin H. Johnson
On Fri, Nov 06, 2020 at 08:21:39AM +0100, Agostino Sarubbo wrote:
> Hello all,
> 
> 6 months have been passed after the CI system started to file bug reports.
> ~ 4700 bugs have been submitted
> 
> We _know_ that atm is not possible to set a specific summary, instead a 
> generic summary is used in case of compile failures and test failures.
> There are also some documented limitations.
> 
> If there aren't much commits, usually you get the bug after 30 minutes after 
> the commit and this looks to be nice.
I value the quantitative knowledge of "there is some problem", but I
absolutely want process improvement to tell me "there is XYZ specific
problem" (quantitative).

Can you please tell us what you need to let others contribute to
improving the quality of the reports from your CI system?
I will happily submit patches to help improve things that matter to me
(recently, I've been repeatedly bitten by packages where DEPEND needs to
specify a newer min version; the current min version in the tree is
fine, but since I have an older version installed, and the DEPEND
statement wasn't updated, I get a failure until I re-order the updates).

Examples:
- It needs $ABC added
- If it could use $SOMETHING, it could run on a large build farm results
  in 2 minutes instead of 30 minutes.
- Compile fails on XYZ arch

No single CI system will ever continue to be successful with a growing
ecosystem if it's limited to a single build system. Sooner or later they
all need to be able to build on a farm.

> 
> Since there are conflicting opinions I would like to know if you find it 
> useful or not.
> 
> More info about the project here:
> https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/
> 
> Please keep me CC'ed
> 
> Thank you
> Agostino
> 
> 
> 

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-10-25 23:59 UTC

2020-10-26 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-10-25 23:59 UTC.

Removals:
app-backup/genbackupdata  20201019-06:47 mgorny68da83e968a
app-i18n/pology   20201019-06:46 mgorny25b21e05fc2
app-leechcraft/laretz 20201020-15:56 mgorny5e76f6d296c
app-leechcraft/lc-advancednotifications   20201020-15:56 mgornyca99b3fc0fb
app-leechcraft/lc-aggregator  20201020-15:56 mgornyf35c88f84cb
app-leechcraft/lc-anhero  20201020-15:56 mgorny8e8266aced7
app-leechcraft/lc-auscrie 20201020-15:56 mgornyba10c19564d
app-leechcraft/lc-azoth   20201020-15:56 mgornye8d5e76a45a
app-leechcraft/lc-bittorrent  20201020-15:56 mgorny53c3d3b6bb8
app-leechcraft/lc-blasq   20201020-15:56 mgornyc3c6928b58e
app-leechcraft/lc-blogique20201020-15:56 mgorny9b9d106cf15
app-leechcraft/lc-certmgr 20201020-15:56 mgorny910936a8193
app-leechcraft/lc-core20201020-15:56 mgornya9edb653964
app-leechcraft/lc-cpuload 20201020-15:56 mgorny8cd1c50c47b
app-leechcraft/lc-cstp20201020-15:56 mgorny9dbd6d4ec51
app-leechcraft/lc-dbusmanager 20201020-15:56 mgornyd0274add7e2
app-leechcraft/lc-deadlyrics  20201020-15:56 mgorny80ade40e492
app-leechcraft/lc-devmon  20201020-15:56 mgornya9617738ebd
app-leechcraft/lc-dolozhee20201020-15:56 mgornye9ad23e3e29
app-leechcraft/lc-eleeminator 20201020-15:56 mgornyf4b0a9cc34a
app-leechcraft/lc-fenet   20201020-15:56 mgorny9cabd2f160a
app-leechcraft/lc-gacts   20201020-15:56 mgorny3cbdb60e348
app-leechcraft/lc-glance  20201020-15:55 mgorny7953f787541
app-leechcraft/lc-gmailnotifier   20201020-15:55 mgorny2bd382598ba
app-leechcraft/lc-historyholder   20201020-15:55 mgornyc446b41c1ea
app-leechcraft/lc-hotsensors  20201020-15:55 mgorny177d25127a7
app-leechcraft/lc-hotstreams  20201020-15:55 mgornyb6dc76adfa5
app-leechcraft/lc-htthare 20201020-15:55 mgornybf116397d75
app-leechcraft/lc-imgaste 20201020-15:55 mgornycfccc75c680
app-leechcraft/lc-intermutko  20201020-15:55 mgorny5968655d6c0
app-leechcraft/lc-kbswitch20201020-15:55 mgornyaf08d37cfad
app-leechcraft/lc-kinotify20201020-15:55 mgorny22072d80321
app-leechcraft/lc-knowhow 20201020-15:55 mgorny7c11dc72586
app-leechcraft/lc-krigstask   20201020-15:55 mgorny9c8c21311a3
app-leechcraft/lc-lackman 20201020-15:55 mgorny648a8d69665
app-leechcraft/lc-lastfmscrobble  20201020-15:55 mgorny2ba6a980dc3
app-leechcraft/lc-laughty 20201020-15:55 mgorny34acee1d46f
app-leechcraft/lc-launchy 20201020-15:55 mgornyfdf4d105455
app-leechcraft/lc-lemon   20201020-15:55 mgorny4dbfd3d0fad
app-leechcraft/lc-lhtr20201020-15:55 mgorny41bbcc08dce
app-leechcraft/lc-liznoo  20201020-15:55 mgorny8797dd0c4e1
app-leechcraft/lc-lmp 20201020-15:55 mgornyf87b7926495
app-leechcraft/lc-mellonetray 20201020-15:55 mgornydd837ce79c9
app-leechcraft/lc-monocle 20201020-15:55 mgorny9757ee21792
app-leechcraft/lc-musiczombie 20201020-15:55 mgornyf69a53ddfe4
app-leechcraft/lc-nacheku 20201020-15:55 mgornyd4a2156c834
app-leechcraft/lc-netstoremanager 20201020-15:55 mgorny2a564ca6803
app-leechcraft/lc-networkmonitor  20201020-15:55 mgornyb7a1a546158
app-leechcraft/lc-newlife 20201020-15:55 mgorny9766e97286a
app-leechcraft/lc-ooronee 20201020-15:55 mgorny95ec58102ad
app-leechcraft/lc-otlozhu 20201020-15:55 mgorny5e61bb7f099
app-leechcraft/lcpackgen  20201020-15:55 mgorny516df744dce
app-leechcraft/lc-pintab  20201020-15:55 mgorny3c4543f04d8
app-leechcraft/lc-pogooglue   20201020-15:55 mgorny130a7babb3d
app-leechcraft/lc-popishu 20201020-15:55 mgorny97160cfa0b7
app-leechcraft/lc-poshuku 20201020-15:55 mgorny75ae40646d4
app-leechcraft/lc-qrosp   20201020-15:55 mgornyc2aea7affad
app-leechcraft/lc-rosenthal   20201020-15:55 mgorny0216f8ae6e5
app-leechcraft/lc-sb2 20201020-15:55 mgornybc8c24b6cf9
app-leechcraft/lc-scroblibre  20201020-15:55 mgornyadfccc4cc95
app-leechcraft/lc-secman  20201020-15:55 mgorny42c6fcadaf6
app-leechcraft/lc-seekthru   

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-10-25 23:59 UTC

2020-10-25 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-10-25 23:59 UTC.

Removals:

Additions:

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-10-18 23:59 UTC

2020-10-18 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-10-18 23:59 UTC.

Removals:
app-admin/recursos 20201016-07:40 mgorny 5da6f60a9a6
app-arch/unarj 20201012-21:10 chewi  b3247af8178
app-shells/mpv-bash-completion 20201013-15:50 mgorny 4aab2c972b2
dev-python/args20201013-15:50 mgorny bf104d83c2f
dev-python/meld3   20201012-08:55 mgorny 86d3f5ec4ed
dev-ruby/meterpreter_bins  20201016-07:35 mgorny a6b84e66711
dev-ruby/patch_finder  20201016-07:35 mgorny 027b1a8fc1e
dev-ruby/rb-readline-r720201016-07:35 mgorny 2170e2782bb
dev-tex/biblatex-apa   20201012-08:55 mgorny e81ab229ac1
dev-tex/chktex 20201012-08:56 mgorny ba3e90384be
dev-tex/csindex20201012-08:55 mgorny 473da6b2a58
dev-tex/detex  20201012-08:55 mgorny 5f933f71168
dev-tex/dvipost20201012-08:55 mgorny 8e42a766434
net-dialup/tkvoice 20201013-15:50 mgorny 2c182604677
net-nntp/sn20201015-10:42 mgorny 161e3e82495
net-vpn/peervpn20201012-08:54 mgorny 4b7dbb98b43
sci-chemistry/ortep3   20201016-07:40 mgorny 0c84b5560bf
sys-fs/ufsutils20201015-10:44 mgorny a22f9891dde

Additions:
acct-group/flatpak 20201018-04:28 zmedico0f9b5501114
acct-group/openldap20201017-14:17 zlogene9bc7526debb
acct-group/p2p 20200711-11:57 sam5720416e908
acct-user/flatpak  20201018-04:33 zmedico60b2e864348
acct-user/openldap 20201017-13:32 zlogene7df0eaa93cb
acct-user/p2p  20200711-11:58 samf2c924217d6
app-admin/selint   20200918-14:18 perfinion  3875b472e5c
app-crypt/openpgp-keys-voikko  20201013-16:19 juippisa17712ed31c
dev-ml/base_quickcheck 20201013-04:53 gienah 7688ec1367a
dev-ml/bin_prot20201013-04:55 gienah 21229ca9f4d
dev-ml/cairo2  20201013-04:57 gienah d59ce4d3530
dev-ml/cinaps  20201013-05:04 gienah caaa9398c3e
dev-ml/csexp   20201013-05:07 gienah 8266f07a791
dev-ml/dune-configurator   20201013-05:20 gienah 5c5cec1ca8d
dev-ml/dune-private-libs   20201013-05:21 gienah d959b5a263e
dev-ml/jst-config  20201013-05:30 gienah cebda1eeff4
dev-ml/lablgtk-sourceview  20201013-05:32 gienah d17c3fb074b
dev-ml/mccs20201013-05:50 gienah 9aa0111f86d
dev-ml/mmap20201013-05:51 gienah a41030891f4
dev-ml/opam-client 20201013-06:00 gienah 4f8af0ab6df
dev-ml/opam-core   20201013-06:02 gienah dd72f739f9f
dev-ml/opam-file-format20201013-06:06 gienah 72e9d070bbd
dev-ml/opam-format 20201013-06:08 gienah 747b06ff0f9
dev-ml/opam-installer  20201013-06:09 gienah 0adbd81f89d
dev-ml/opam-repository 20201013-06:10 gienah e86e3374585
dev-ml/opam-solver 20201013-06:10 gienah 55d97ebd254
dev-ml/opam-state  20201013-06:11 gienah 25e88ba7b81
dev-ml/ounit2  20201013-06:12 gienah d667e638e45
dev-ml/parsexp 20201013-06:12 gienah 91a930ea4e0
dev-ml/ppx_cold20201013-06:17 gienah 9696c7de34a
dev-ml/ppxfind 20201013-06:32 gienah 83f2c5391b4
dev-ml/ppx_fixed_literal   20201013-06:32 gienah f2fffc1ad22
dev-ml/ppxlib  20201013-06:40 gienah 101f0fbafc3
dev-ml/ppx_module_timer20201013-06:42 gienah f01775cf355
dev-ml/ppx_stable  20201013-06:49 gienah 4251cc06c9a
dev-ml/ppx_string  20201013-06:50 gienah c0eeb062855
dev-ml/re  20201013-06:54 gienah 326ae2d473a
dev-ml/sexplib020201013-06:58 gienah d16a5a3b08e
dev-ml/splittable_random   20201013-06:59 gienah 4eb08604c7b
dev-ml/time_now20201013-07:08 gienah a56e0c1eb01
dev-python/exdown  20201004-20:22 juippis89b4c54b237
dev-python/imread  20201011-16:50 expeditioneer  72ea7287a6c
dev-python/zstd20201018-19:36 prometheanfire 6aa6716eb11
dev-util/flatpak-builder   20201018-04:48 zmedico5f004fb3520
kde-plasma/plasma-disks20201013-11:38 asturm 940fd0e0b36
sys-apps/flatpak   20201018-04:48 zmedicoc8918d47344

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-10-11 23:59 UTC

2020-10-11 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-10-11 23:59 UTC.

Removals:
app-crypt/acmebot  20201009-08:04 mgorny d168b61c08d
app-misc/mswinurl_launcher 20201009-07:53 mgorny 9d7c12e1bd8
app-misc/mtail 20201009-07:52 mgorny a68262d6a27
app-text/silvercity20201009-07:52 mgorny af36240d2fd
app-vim/conque 20201009-08:04 mgorny 9238841ae94
dev-libs/qrosspython   20201009-07:51 mgorny ce5e26e9dab
dev-perl/Net-Kismet20201007-07:25 mgorny 6e8341a3a45
dev-python/backports-unittest-mock 20201009-07:21 mgorny 644776f076c
dev-python/flask-appconfig 20201007-07:26 mgorny 2b28884c93c
dev-python/matplotlib-python2  20201011-14:28 zlogenefb157138b11
dev-python/mini-amf20201007-07:26 mgorny e25efcc86c2
dev-python/oauth   20201009-07:50 mgorny 7297f9b2de3
dev-python/pyinsane20201007-07:24 mgorny 9f6ea350701
dev-python/pysendfile  20201010-06:00 mgorny 0fcca8a5a79
dev-python/redlock-py  20201009-08:03 mgorny e06e907312b
dev-python/root_numpy  20201009-08:03 mgorny dffbe638a09
dev-python/rootpy  20201009-08:03 mgorny 50ed73901e8
dev-python/SchemaObject20201009-07:51 mgorny d67d88c8af4
dev-ruby/pygments_rb   20201009-07:50 mgorny f6a29ee7397
dev-tex/dvi2tty20201010-06:00 mgorny a1fc56e3fa9
dev-util/doxy-coverage 20201009-07:49 mgorny 1d6e4b3620f
dev-util/mpatch20201009-07:48 mgorny dbdc2f4d7bd
dev-util/setconf   20201009-08:02 mgorny 2874f8647d8
dev-vcs/cvs2svn20201009-07:47 mgorny aae2f4c1513
media-sound/codecgraph 20201009-07:38 mgorny 242ab80a603
media-sound/freebirth  20201009-08:09 mgorny a317a27554b
net-analyzer/mk-livestatus 20201009-07:23 mgorny 3e77be52575
net-misc/pssh  20201009-07:38 mgorny 5d18c2c1b1b
net-misc/ris-linux 20201009-07:37 mgorny 74195dda3fc
net-wireless/kismet-ubertooth  20201007-07:25 mgorny 9c0527146e9
net-wireless/mousejack 20201009-07:37 mgorny 57e999f4d36
net-wireless/python-wifi   20201009-07:37 mgorny 924e4a096e0
sci-biology/amos   20201009-07:34 mgorny 1df82e97d59
sci-biology/embassy-meme   20201009-07:33 mgorny 96c3a9acc9e
sci-biology/meme   20201009-07:33 mgorny d2b309d1c79
sci-biology/shrimp 20201009-07:32 mgorny 7a7bbd341b0
sci-biology/vienna-rna 20201009-07:22 mgorny 79d0df0bd01
sci-electronics/linsmith   20201007-14:55 tomjbe 4782ebcebd4
sci-misc/gato  20201009-07:32 mgorny 8133e0f14ba
sci-physics/rivet  20201009-07:32 mgorny 703a3e4221e
sys-cluster/heartbeat  20201009-07:31 mgorny 3f5834ad43f
sys-fs/owfs20201009-07:21 mgorny ffd86cfb0f6
www-servers/cherokee   20201009-07:20 mgorny 32b08650cb9
x11-misc/dsx   20201009-07:31 mgorny bdf03aa2b82

Additions:
acct-group/croc20201005-13:41 sultan b0287c17b9e
acct-group/jabber  20201011-21:39 conikost   de00139a70e
acct-group/sks 20201008-22:36 samc12728f3082
acct-user/croc 20201005-13:39 sultan ced0eabac20
acct-user/jabber   20201011-21:48 conikost   88dea29ba96
acct-user/pgbouncer20201008-02:30 titanofold 20834a76451
acct-user/sks  20201008-22:37 samb7e200ad5f8
app-crypt/openpgp-keys-miniupnp20201006-08:36 mgorny 5de233ce1e6
dev-cpp/robin-map  20200930-21:19 samadb952e0417
dev-libs/qtcompress20200928-08:52 juippis32fa1fd73e5
dev-python/fastjsonschema  20201011-14:22 mgorny 9b70f573cdc
dev-python/pydantic20201008-16:30 sbraz  b46fa2605f7
media-libs/quarter 20201005-22:05 reavertm   af3bcec7772
media-libs/SoQt20201005-22:04 reavertm   23b04b0d146
net-im/prosody-modules 20201007-21:39 conikost   7421df2888e
net-wireless/gr-m2k20201006-20:17 zerochaos  43aea490071
net-wireless/gr-scopy  20201006-19:20 zerochaos  dfd79505911
net-wireless/libm2k20201006-20:10 zerochaos  7b8f4150702
x11-misc/revelation20201007-07:40 juippisff3bd31b2d8

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
dev-python/matplotlib-python2,removed,zlogene,20201011-14:28,fb157138b11

Re: [gentoo-dev] [PATCH v2 4/6] app-crypt/openpgp-keys-miniupnp: Package keys used by miniupnp upst

2020-10-06 Thread Robin H. Johnson
While I'm absolutely in favour of the overall intent here, I'm not so
sure of the design.

I'm worried about the proliferation of tiny packages just to convey the
keys; and how versioning should work if upstream rotates their keys.
I picked this message in the thread to respond to, because it was
clearest that this could break when the keys are rotated. The old
releases might not be verifiable with the new keys.

Additionally:
- not all upstream providers ship .asc files of their keys
- some upstreams use signed DIGESTS files rather than directly signing
  the distfiles (esp. where distfiles are larger)

Can we instead:
Inside the ebuild and/or metadata.xml: convey: 
1. URL(s) to fetch keys, incl a keyserver support
2. Full key fingerprint

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-10-04 23:59 UTC

2020-10-04 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-10-04 23:59 UTC.

Removals:
app-admin/passook 20200930-15:15 samebe886820c4
app-cdr/pburn 20200930-15:15 sam7361842f290
app-i18n/scim-wijesekera  20201001-15:12 mgorny 29802384239
app-text/cutemarked   20201004-18:31 asturm 25d98aad8ea
app-text/fbless   20201001-09:58 pinkbyte   2853263da87
dev-cpp/icnc  20201001-15:11 mgorny 5853a44d263
dev-db/sqliteodbc 20200930-15:12 sam28d92a57c3d
dev-db/tokumx 20201001-15:10 mgorny 3ee1284a71e
dev-embedded/ftdi_eeprom  20200930-15:16 sam2f1032085b9
dev-go/siphash20201001-15:11 mgorny 40c34be253b
dev-libs/hsa-ext-rocr 20201001-15:06 mgorny ccc5a899af6
kde-apps/libkgeomap   20201004-18:29 asturm 10f1e2bf763
media-sound/traverso  20200929-10:07 fordfrog   2164afbe6f4
net-fs/nfstest20201001-15:10 mgorny cef513ee94c
net-irc/irc-server20200930-15:10 samca36de6c32a
net-irc/nebula20200930-15:08 samaa09f5bd19e
net-irc/ptlink-ircd   20200930-15:18 sam23ce2ab5bab
net-irc/ptlink-opm20200930-15:11 samcd2d3b8877f
net-irc/xaric 20200930-15:09 sam8e2f9447ec0
net-mail/maildirtree  20200930-15:13 sam1d2534bb6b1
sec-policy/selinux-consolekit 20201004-14:41 zlogene167553ba3e3
sys-auth/consolekit   20201004-14:33 zlogene39ece3ff246
sys-boot/udk  20201001-15:09 mgorny a88a0d76f13
sys-cluster/pbs-python20201001-15:09 mgorny 30bebfe6308
www-apps/ampache  20201001-15:07 mgorny 82d2c7a0103
www-plugins/freshplayerplugin 20201004-18:34 asturm 200a2c952c8

Additions:
acct-group/argus  20201003-15:29 soap   f69146322d6
acct-group/dictd  20201003-15:29 soap   880be4675f5
acct-group/flows  20201003-15:29 soap   d745ea27761
acct-group/gamemode   20200920-17:55 juippis9049e5f0fa1
acct-group/nzbget 20201003-19:18 sbraz  6abe635bc4d
acct-group/sancp  20201003-15:29 soap   9b132ab5c7c
acct-group/tinyproxy  20200928-11:59 bkohler58316b1744d
acct-user/argus   20201003-15:29 soap   888d8e31515
acct-user/darkstat20201003-15:29 soap   f0bcc86161a
acct-user/dictd   20201003-15:29 soap   5b44d52e72e
acct-user/flows   20201003-15:29 soap   772e9b180e0
acct-user/nzbget  20201003-19:23 sbraz  b3580e50167
acct-user/sancp   20201003-15:29 soap   c0380e88057
acct-user/tinyproxy   20200928-12:07 bkohlerbf40bcffda2
app-admin/op-cli-bin  20201001-20:22 williamh   ac439edc59f
dev-libs/inih 20200920-11:07 juippis5868d5bb08a
dev-qt/qtstyleplugins 20200930-21:09 chewi  dbec6742130
media-sound/deadbeef  20200929-20:59 slashbeast fd8ef4388c4
net-analyzer/nikto20200907-21:25 juippisc42fef2a7d2
net-mail/hyperkitty   20201001-17:24 hanno  7acc109c3c4
sci-geosciences/grass 20201004-15:23 soap   b91a9b0c0e3
sci-libs/libecpint20201003-20:40 junghans   ff77abc98e9

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
www-plugins/freshplayerplugin,removed,asturm,20201004-18:34,200a2c952c8
app-text/cutemarked,removed,asturm,20201004-18:31,25d98aad8ea
kde-apps/libkgeomap,removed,asturm,20201004-18:29,10f1e2bf763
sec-policy/selinux-consolekit,removed,zlogene,20201004-14:41,167553ba3e3
sys-auth/consolekit,removed,zlogene,20201004-14:33,39ece3ff246
app-i18n/scim-wijesekera,removed,mgorny,20201001-15:12,29802384239
dev-go/siphash,removed,mgorny,20201001-15:11,40c34be253b
dev-cpp/icnc,removed,mgorny,20201001-15:11,5853a44d263
dev-db/tokumx,removed,mgorny,20201001-15:10,3ee1284a71e
net-fs/nfstest,removed,mgorny,20201001-15:10,cef513ee94c
sys-boot/udk,removed,mgorny,20201001-15:09,a88a0d76f13
sys-cluster/pbs-python,removed,mgorny,20201001-15:09,30bebfe6308
www-apps/ampache,removed,mgorny,20201001-15:07,82d2c7a0103
dev-libs/hsa-ext-rocr,removed,mgorny,20201001-15:06,ccc5a899af6
app-text/fbless,removed,pinkbyte,20201001-09:58,2853263da87
net-irc/ptlink-ircd,removed,sam,20200930-15:18,23ce2ab5bab
dev-embedded/ftdi_eeprom,removed,sam,20200930-15:16,2f1032085b9
app-cdr/pburn,removed,sam,20200930-15:15,7361842f290
app-admin/passook,removed,sam,20200930-15:15,ebe886820c4
net-mail/maildirtree,removed,sam,20200930-15:13,1d2534bb6b1
dev-db/sqliteodbc,removed,sam,20200930-15:12,28d92a57c3d
net-irc/ptlink-opm,removed,sam,20200930-15:11,cd2d3b8877f
net-irc/irc-server,removed,sam,20200930-15:10,ca36de6c32a

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-09-27 23:59 UTC

2020-09-27 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-09-27 23:59 UTC.

Removals:
app-emulation/ganeti  20200921-07:32 mgornyc275097da67
app-emulation/ganeti-instance-debootstrap 20200921-07:32 mgornyb05155344b3
app-emulation/ganeti-instance-image   20200921-07:32 mgornya97e05f41ca
app-emulation/virtualbox-bin  20200921-07:31 mgorny68b8db6d3b1
app-forensics/openscap20200921-07:30 mgornye654e951eea
app-misc/email2trac   20200921-07:29 mgorny2c869cd2e3f
app-misc/workrave 20200921-06:44 mgorny88ee8b8deac
app-office/openoffice-bin 20200921-07:43 mgornyb96138a4605
app-portage/etc-proposals 20200921-06:14 mgorny6610558bee4
app-portage/gpytage   20200921-06:14 mgorny43e1683cadf
app-portage/pqlop 20200921-14:10 mgornyc29d7ea68a1
app-text/landslide20200921-14:10 mgorny554b22ea89f
dev-db/mysql-workbench20200921-06:13 mgorny7db99d87e8c
dev-haskell/asn1-data 20200921-14:31 mgornyc2b88532758
dev-haskell/bio   20200926-20:53 slyfox2061aae04d0
dev-haskell/certificate   20200921-14:30 mgornye95da8d7a55
dev-haskell/cipher-blowfish   20200926-20:54 slyfox4476e10f872
dev-haskell/citeproc-hs   20200926-20:55 slyfox34a724d2709
dev-haskell/cryptocipher  20200926-20:54 slyfox4476e10f872
dev-haskell/drift 20200924-22:39 slyfoxf7590a52e55
dev-haskell/glade 20200924-22:40 slyfox6320b8a2480
dev-haskell/hastache  20200921-14:31 mgorny7db00df9ce1
dev-haskell/process-conduit   20200926-20:56 slyfoxd15d3a401c6
dev-lang/epic 20200921-14:30 mgorny449473eefb5
dev-perl/gnome2-vfs-perl  20200921-05:55 mgorny7144c49c79e
dev-python/corner 20200921-14:25 mgorny1b7c9596c9e
dev-python/dogpile-core   20200921-14:25 mgorny4a878d37b23
dev-python/faulthandler   20200921-07:42 mgornyae23e70af21
dev-python/fdsend 20200921-07:41 mgorny8cc023a58ec
dev-python/girder-client  20200921-14:24 mgorny9af02ba91dd
dev-python/ipynb  20200921-14:24 mgorny51e00af264c
dev-python/jira   20200921-14:24 mgorny7d90667258c
dev-python/jplephem   20200921-14:23 mgornyfef04872a2c
dev-python/natgrid20200921-14:23 mgorny2c532ae3636
dev-python/pcapy  20200921-14:23 mgorny957469c03f8
dev-python/promises   20200921-14:22 mgornybb24d1585f8
dev-python/pyds9  20200921-14:15 mgornyfa4825b30e1
dev-python/pyflann20200921-14:14 mgorny304b98d0ad8
dev-python/pygsl  20200921-14:14 mgorny54fe1df7459
dev-python/pygtk  20200921-14:29 mgorny2af490dc930
dev-python/python-ntpdshm 20200921-14:14 mgornyc34d06ccf5e
dev-python/sphinxcontrib-napoleon 20200921-14:13 mgorny1986d5c41d3
dev-python/textfsm20200921-14:13 mgorny00ce7912350
dev-python/whelk  20200921-14:13 mgorny3d1543c5496
dev-util/bam  20200921-06:12 mgorny97221f2c365
dev-util/molecule 20200921-14:09 mgornye725dde2b40
dev-util/molecule-core20200921-14:09 mgorny8390e68d59b
dev-util/molecule-plugins 20200921-14:09 mgorny620f7328a12
dev-vcs/git-spindle   20200921-14:09 mgorny40d2a9d7393
games-action/openclonk20200921-05:56 mgornyd36ae2a4b12
games-roguelike/mazesofmonad  20200924-22:41 slyfoxd731587059e
media-gfx/birdfont20200921-14:08 mgornyf95295b64b7
media-gfx/displaycal  20200921-06:11 mgorny638444910ab
media-gfx/sigal   20200921-14:07 mgornyad45260c36e
media-libs/libxmlbird 20200921-14:07 mgornyaa6b4465780
media-libs/slv2   20200921-14:28 mgorny4d737f71059
media-plugins/gimp-resynthesizer  20200921-06:10 mgorny246e0c7a149
net-analyzer/pbgpp20200921-06:06 mgorny004c7c427fa
net-fs/s3ql   20200921-14:05 mgornyc127715cbd5
net-libs/openpgm  20200921-06:05 mgorny460b507b892
net-misc/dmr_utils20200921-14:04 mgorny259cd9d326d
net-wireless/chirp   

Re: [gentoo-dev] Last rites: next batch of py2 packages

2020-09-21 Thread Robin H. Johnson
On Sat, Sep 19, 2020 at 02:51:10PM +0200, Michał Górny wrote:
> # Michał Górny  (2020-09-19)
> # These packages (or package versions) still require Python 2.7.
> # They are either dead upstream, their Python 3 porting efforts are
> # not progressing or their maintainers are simply unresponsive.
> # Please do not remove any packages from this list unless you actually
> # port them to Python 3.
> # Removal in 30 days.  Please find relevant bugs on tracker bug #694800.
> app-admin/github-backup-utils
Pending upstream accepting my PR to port to Py3, because the python
usage was very trivial.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-09-20 23:59 UTC

2020-09-20 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-09-20 23:59 UTC.

Removals:
dev-haskell/frown20200920-09:01 slyfox a2c72597ac2
dev-haskell/hashed-storage   20200914-07:14 slyfox 32e41084d49
dev-haskell/network-bytestring   20200914-07:15 slyfox d05d1f60276
dev-haskell/regex-tdfa-rc20200920-09:05 slyfox 1bd4088da15
dev-haskell/testpack 20200920-09:04 slyfox 0877762fa7a
dev-haskell/yesod-platform   20200920-09:00 slyfox e71543c3074
dev-haskell/yesod-routes 20200920-09:00 slyfox 95a7009e0c1
dev-java/java-sdk-docs   20200920-02:27 gyakovlev  9e79957e035
dev-java/netbeans-harness20200918-22:35 gyakovlev  f29f706c3b7
dev-java/netbeans-platform   20200918-22:34 gyakovlev  142ee89e7e8
dev-java/oracle-jdk-bin  20200918-22:36 gyakovlev  6a7faaad2f8
dev-java/oracle-jre-bin  20200918-22:36 gyakovlev  03c170e1755
dev-python/ansimarkup20200918-22:28 gyakovlev  74a870e5403
dev-python/maintboot 20200917-22:17 bman   9e5ffd76788
dev-python/mem_top   20200917-22:07 bman   ba249325e53
dev-python/notify-python 20200917-22:06 bman   e93890db7d3
dev-python/paver 20200914-17:20 mgorny f77ae0921b5
dev-python/pyblake2  20200917-22:19 bman   023f68cd5c1
dev-python/pygpu 20200917-22:15 bman   4334956d3ee
dev-python/pyminuit  20200917-22:16 bman   b2980227174
dev-python/pysha320200917-22:19 bman   023f68cd5c1
dev-python/robotbackgroundlogger 20200917-22:12 bman   5fa247def83
dev-python/robotframework20200917-22:11 bman   0f5948c104c
dev-python/sleekxmpp 20200917-22:14 bman   faa7409c2d4
dev-ruby/bcat20200916-06:17 graaff f679292cecc
dev-tex/crosstex 20200914-17:22 mgorny 3a9c59b471c
dev-vcs/git-bz   20200914-17:19 mgorny c157b7b4349
games-util/pogo-manager-bin  20200918-22:33 gyakovlev  eb216b6dbf4
media-video/photofilmstrip   20200917-22:13 bman   cf7082ed081
net-p2p/bisq 20200918-22:33 gyakovlev  8828564687a
net-wireless/lorcon-old  20200914-17:22 mgorny 77ce292ea2a
sci-mathematics/geogebra 20200918-22:32 gyakovlev  90984c758ee
sys-block/blocks 20200917-22:17 bman   9e5ffd76788
www-plugins/passff   20200918-22:24 gyakovlev  fe9edcfa2ea

Additions:
app-admin/ansible-base   20200915-16:47 prometheanfire e1e0f4b0d48
app-admin/xkcdpass   20200914-14:28 bkohler2f86e20b3ca
dev-python/autoprop  20200915-18:43 expeditioneer  f069a04345e
dev-python/django-appconf20200916-17:21 hanno  6a0439a43d6
dev-python/django-compressor 20200916-17:22 hanno  dfdfe54b5c1
dev-python/django-picklefield20200917-14:46 hanno  b9f6eb387b7
dev-python/easyprocess   20200817-16:26 juippisd6000cdc6b2
dev-python/entrypoint2   20200817-16:29 juippisda0d2e425ff
dev-python/fcl   20200915-18:26 expeditioneer  5a840ef9cea
dev-python/glooey20200916-14:03 expeditioneer  50b2dbcd174
dev-python/mss   20200817-16:28 juippis0a39e7986b6
dev-python/pooch 20200917-00:51 expeditioneer  b1fda0fbff6
dev-python/pydata-sphinx-theme   20200817-16:55 juippisa98473aab93
dev-python/pyscreenshot  20200817-16:30 juippis8febbc3aa2a
dev-python/pytest-datadir20200914-16:35 juippisaec083f0f4b
dev-python/pytest-faulthandler   20200817-16:52 juippis666dcc26519
dev-python/pytest-ordering   20200817-16:56 juippisfc9c0547b76
dev-python/pytest-regressions20200914-16:36 juippis1560c69eb5a
dev-python/pytest-xvfb   20200817-16:50 juippisd0e9ec302e6
dev-python/pyvirtualdisplay  20200817-16:49 juippis598c34306a3
dev-python/rcssmin   20200916-12:26 hanno  7f46541385f
dev-python/rjsmin20200916-12:29 hanno  78e0d02bcb4
dev-python/robot-detection   20200916-17:30 hanno  a0118dbd575
dev-python/sphinx-multiversion   20200902-18:52 juippis7de47c97caf
dev-python/sphinx-panels 20200817-16:51 juippis2999bcd4d00
dev-python/vecrec20200915-18:53 expeditioneer  885e6890e0f
dev-python/vncdotool 20200817-16:30 juippis54ec1696f45
dev-util/protobuf-cucumber   

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-09-13 23:59 UTC

2020-09-13 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-09-13 23:59 UTC.

Removals:
app-emacs/ghc-mod20200909-07:45 slyfox35008845c5a
app-eselect/eselect-opencl   20200912-20:37 slashbeast09c9e4c4aea
app-eselect/eselect-opengl   20200912-20:38 slashbeast89f9953622c
app-text/vlna20200911-09:32 zlogene   085e322e0ad
dev-haskell/blaze-builder-enumerator 20200912-08:37 slyfox5dc44c18f9e
dev-haskell/cabal-helper 20200909-07:45 slyfox35008845c5a
dev-haskell/chell-quickcheck 20200912-09:19 slyfox9cba813d70c
dev-haskell/cmdlib   20200912-09:24 slyfox3138d0cbb62
dev-haskell/crypto-conduit   20200912-14:23 slyfox4019edee13a
media-sound/jackbeat 20200907-06:13 mgorny77016787000
media-sound/specimen 20200907-06:14 mgornyf974ba0c4f5
media-sound/tapiir   20200907-06:15 mgorny8bf69c6ded0
net-misc/termpkg 20200912-20:43 sam   1e5c7251175
sys-apps/modutils20200907-06:15 mgorny7e69b0876ef
virtual/emacs20200912-17:27 ulm   df2507b4239
virtual/modutils 20200907-06:15 mgorny340f6f937c4
x11-libs/flowcanvas  20200912-10:03 fordfrog  a505e144a26

Additions:
acct-group/consul_exporter   20200913-05:14 williamh  7800656ec37
acct-group/mongodb_exporter  20200907-21:32 williamh  a10d9e9094a
acct-user/consul_exporter20200913-05:20 williamh  3dcdabe724c
acct-user/mongodb_exporter   20200907-21:39 williamh  fce980b4852
app-dicts/sword-VieStrongsGreek  20200911-00:40 marecki   d04ed838d71
app-emulation/firecracker-bin20200613-13:03 juippis   69eb27243a3
dev-libs/date20200812-14:32 sam   57218032b02
dev-libs/vc-intrinsics   20200913-15:05 marecki   cbe8bf889cd
dev-perl/String-Util 20200910-17:39 kentnl222dda8e343
dev-perl/Test-Compile20200908-09:18 kentnl547d871d889
dev-python/asttokens 20200910-07:54 mgornyff5315fb668
dev-python/django-allauth20200911-10:52 hanno 750e66d4aaf
dev-python/django-gravatar2  20200911-10:53 hanno 86b44b56480
dev-python/executing 20200910-08:12 mgorny5b3dc74582c
dev-python/fakeredis 20200910-20:43 mgornyd687a5bea74
dev-python/flask-compress20200912-11:47 titanofold4a9a6820195
dev-python/junit-xml 20200907-09:05 mgornyce3699c84cd
dev-python/jupyterlab_pygments   20200911-01:02 mgorny3ed131a17a9
dev-python/nbclient  20200911-00:51 mgornybd85d246154
dev-python/nest_asyncio  20200911-00:55 mgorny14bd227cf95
dev-python/python3-openid20200911-10:42 hanno 30ec5e66f4a
dev-python/xxhash20200906-16:44 expeditioneer 25a20900778
dev-util/rustup  20200908-20:31 gyakovlev a7a2c1f6028
games-rpg/broken-age 20200908-20:12 chewi 67d73a73ea2
net-mail/django-mailman3 20200911-11:10 hanno 58fb50d36a9
net-mail/mailmanclient   20200911-11:07 hanno bc3a7d9116a
net-mail/postorius   20200911-11:16 hanno 2db0edb7327

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
net-misc/termpkg,removed,sam,20200912-20:43,1e5c7251175
app-eselect/eselect-opengl,removed,slashbeast,20200912-20:38,89f9953622c
app-eselect/eselect-opencl,removed,slashbeast,20200912-20:37,09c9e4c4aea
virtual/emacs,removed,ulm,20200912-17:27,df2507b4239
dev-haskell/crypto-conduit,removed,slyfox,20200912-14:23,4019edee13a
x11-libs/flowcanvas,removed,fordfrog,20200912-10:03,a505e144a26
dev-haskell/cmdlib,removed,slyfox,20200912-09:24,3138d0cbb62
dev-haskell/chell-quickcheck,removed,slyfox,20200912-09:19,9cba813d70c
dev-haskell/blaze-builder-enumerator,removed,slyfox,20200912-08:37,5dc44c18f9e
app-text/vlna,removed,zlogene,20200911-09:32,085e322e0ad
app-emacs/ghc-mod,removed,slyfox,20200909-07:45,35008845c5a
dev-haskell/cabal-helper,removed,slyfox,20200909-07:45,35008845c5a
virtual/modutils,removed,mgorny,20200907-06:15,340f6f937c4
sys-apps/modutils,removed,mgorny,20200907-06:15,7e69b0876ef
media-sound/tapiir,removed,mgorny,20200907-06:15,8bf69c6ded0
media-sound/specimen,removed,mgorny,20200907-06:14,f974ba0c4f5
media-sound/jackbeat,removed,mgorny,20200907-06:13,77016787000
Added Packages:
dev-libs/vc-intrinsics,added,marecki,20200913-15:05,cbe8bf889cd
dev-libs/date,added,sam,20200812-14:32,57218032b02

[gentoo-dev] Re: [gentoo-project] [infra] Bugzilla/Forums DB maintenance 2020/09/12 04:00 UTC

2020-09-12 Thread Robin H. Johnson
On Sat, Sep 12, 2020 at 12:15:26AM +, Robin H. Johnson wrote:
> FYI,
> 
> Sorry for short notice, but hardware failures have critically reduced
> some redundancy, so not taking chances with the Bugzilla database (parts
> were on order to ensure the redundancy, but they haven't arrived in time
> for the next failure)
> 
> Therefore, there will be an outage to migrate the DB to different
> hardware, probably starting around 2020/09/12 04:00 UTC.
The Bugzilla migration is completed.

Please report any issues by email to in...@gentoo.org or IRC in
#gentoo-infra (devs only).

Esp. interested if it repeatedly loses login sessions, we briefly safe
this issue in testing, and aren't entirely sure we have it solved.

> Forums will come soon as well, but is lower priority than Bugzilla.
Further news to follow for Forums.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] [infra] Bugzilla/Forums DB maintenance 2020/09/12 04:00 UTC

2020-09-11 Thread Robin H. Johnson
FYI,

Sorry for short notice, but hardware failures have critically reduced
some redundancy, so not taking chances with the Bugzilla database (parts
were on order to ensure the redundancy, but they haven't arrived in time
for the next failure)

Therefore, there will be an outage to migrate the DB to different
hardware, probably starting around 2020/09/12 04:00 UTC.

Forums will come soon as well, but is lower priority than Bugzilla.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] [infra] Anti-spam changes: removal of malware patrol and other older ClamAV rules

2020-09-11 Thread Robin H. Johnson
Hi,

As a result of a recent high-impact [1] false positive spam detection in
Gentoo mail, we've disabled using the MalwarePatrol ruleset in Clamav
for spam detection for all inbound mail to @gentoo.org

All other old rulesets that haven't seen an update in more than 1 year
were also cleaned out, as they seem to be no longer available upstream
or explicitly no longer updated.

[1] Notably, MalwarePatrol's basic subscription got an entry matching
any mail with "https://docs.google.com; in it, which ended up blocking
some mail about GSOC payments this year. Upstream MalwarePatrol provides
minimal workarounds for that only: see "False positives" on:
https://www.malwarepatrol.net/non-commercial/ 

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-09-06 23:59 UTC

2020-09-06 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-09-06 23:59 UTC.

Removals:
app-accessibility/sphinx320200902-08:04 mgorny814099f6c24
app-accessibility/sphinxbase 20200902-08:04 mgorny7346fbcbd7a
app-accessibility/SphinxTrain20200902-08:03 mgornydad0fbb14f9
app-arch/ipkg-utils  20200902-08:07 mgorny713a6299705
app-backup/cachedir  20200902-08:11 mgorny3c92b58d075
app-crypt/openssl-blacklist  20200902-08:03 mgornye2d70d36819
app-crypt/ssh-multiadd   20200902-08:02 mgorny1ba4d8419c6
app-dicts/sword-Dan  20200902-07:43 mgorny6e64a844113
app-dicts/sword-FreLSG   20200902-07:43 mgorny36dcc40060c
app-dicts/sword-HNV  20200902-07:43 mgorny0960aac8007
app-dicts/sword-KJVD 20200902-07:43 mgorny46798c1a7a5
app-dicts/sword-RST  20200902-07:43 mgornyb1f74a33556
app-dicts/sword-SpaSEV   20200902-07:43 mgorny7e7d31ea976
app-dicts/sword-WEB  20200902-07:43 mgornyfe7fdf1255a
app-misc/evemu   20200902-08:11 mgornyfdc95efee40
app-mobilephone/obexftp  20200902-08:13 mgorny1f2084670db
dev-haskell/dbus-core20200905-07:08 mgorny87d40c89912
dev-haskell/hans 20200905-07:08 mgorny3a288a6a325
dev-haskell/shellish 20200902-07:45 slyfox8ec29738803
dev-libs/liboobs 20200905-07:08 mgorny2133310fc1f
dev-python/backports-abc 20200902-07:50 zlogene   1339b10d553
dev-python/backports-lzma20200902-07:51 zlogene   3063be38a54
dev-python/cddb-py   20200902-07:46 zlogene   c064c847187
dev-python/cloudlib  20200902-08:08 mgorny1f913adb556
dev-python/distributed   20200902-07:42 zlogene   e02a2e52544
dev-python/elementtree   20200902-07:49 zlogene   f04feabf433
dev-python/flup  20200902-07:53 mgornyd103c2aa9a3
dev-python/gntp  20200905-07:09 mgornyb2d3e7bfa33
dev-python/google-apputils   20200902-08:08 mgorny259fc1e0276
dev-python/id3-py20200902-07:53 mgornya7825c203e4
dev-python/mox   20200902-08:08 mgornyebf2e6ec1fb
dev-python/pupynere  20200902-07:53 mgorny9ae5d3093b2
dev-python/pyid3lib  20200902-07:54 mgorny21716e741cc
dev-python/pylzma20200902-07:54 mgorny92bf7ccd26d
dev-python/pyode 20200902-07:59 mgorny411444a72db
dev-python/pyrex 20200902-08:01 mgorny08cd12b08f8
dev-python/python-openid 20200902-08:09 mgornye0d7f4de398
dev-python/pythonutils   20200905-07:10 mgorny3173b492772
dev-python/pyvorbis  20200902-08:01 mgorny7cee2c736ee
dev-python/ruamel-std-pathlib20200902-07:40 zlogene   5825db00b2c
dev-util/cmdtest 20200902-08:23 mgorny6bf3f61c8cc
dev-util/coccigrep   20200902-08:20 mgorny0ab6136abf3
dev-util/coccinelle  20200902-08:20 mgorny58395d3a0c0
dev-util/tailor  20200902-08:22 mgorny868624420ad
dev-vcs/gitinspector 20200902-08:23 mgornyf5fc4a47d97
dev-vcs/rapidsvn 20200902-08:18 mgorny0aa048a4d87
dev-vcs/svnmailer20200902-08:23 mgorny43512e61410
mail-filter/dspam20200904-00:07 sam   591c43d3d90
mail-filter/rmilter  20200904-00:07 sam   7a5dc2ad519
media-gfx/cptutils   20200902-08:17 mgorny4f2c364313f
media-gfx/printrun   20200902-08:01 mgorny93767da982a
media-sound/jack 20200902-07:48 zlogene   dedf81771fd
net-analyzer/nikto   20200904-00:06 sam   734a83031a6
net-mail/libpst  20200902-08:21 mgornybc770124494
net-wireless/cpyrit-cuda 20200902-08:15 mgornyd6b7d33f8d8
net-wireless/cpyrit-opencl   20200902-08:16 mgorny1a23854f6e2
net-wireless/pyrit   20200902-08:16 mgorny0daca614398
sys-auth/pam_radius  20200904-00:07 sam   3e34515f48f
sys-fs/rarfs 20200831-11:49 pinkbyte  abecd04e109
sys-fs/traydevice20200902-08:22 mgorny97645f68ded
www-apache/mod_scgi  20200902-08:03 mgorny039c68f53c5
www-apps/dspam-web   20200904-00:08 sam   135e90ac4e1
www-apps/scgi20200902-08:03 mgornyececf487d57
www-misc/nx_util 20200902-08:14 mgorny233113890bf
x11-misc/pypanel 20200902-08:09 mgornyd4174aeb8f4

Additions:
acct-group/kismet

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-08-30 23:59 UTC

2020-08-30 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-08-30 23:59 UTC.

Removals:
app-admin/conkyforecast  
20200827-18:31 asturm   74ab9e2c20a
app-arch/cfv 
20200827-18:32 asturm   f7d4b264fff
app-cdr/cdcover  
20200827-18:32 asturm   14ec0f86c89
app-eselect/eselect-mpost
20200824-07:09 mgorny   68ccaf14376
app-eselect/eselect-pdftex   
20200824-07:08 mgorny   30192ee05a9
app-text/jadetex 
20200824-07:07 mgorny   94fa7ab4159
app-text/passivetex  
20200824-07:07 mgorny   f08c8a75493
dev-python/sphinxtogithub
20200824-07:06 mgorny   e86d0c63240
dev-tex/aastex   
20200829-09:09 zlogene  77df96b91d0
dev-tex/herm-pic 
20200829-09:47 zlogene  ad25a8532b8
dev-tex/hlatex   
20200829-09:01 zlogene  3d8a0ab8fea
dev-tex/metapost 
20200824-07:08 mgorny   61d3bfa8316
dev-tex/slatex   
20200829-09:05 zlogene  e72ee252c9d
media-sound/edna 
20200827-18:30 asturm   32f22b5061c
media-sound/moosic   
20200827-18:28 asturm   4a63247b026
media-sound/positron 
20200827-18:29 asturm   a4b667590e8

Additions:
acct-group/airdcppd  
20200823-09:59 sbraz40936fefc84
acct-group/fingerprint   
20200829-12:30 soap 26d29b2ab38
acct-group/oprofile  
20200830-12:30 bircoph  a3ec7fa1559
acct-user/airdcppd   
20200823-10:02 sbrazf50500730af
acct-user/oprofile   
20200830-12:41 bircoph  b6b86b1d0e5
app-accessibility/kontrast   
20200828-16:14 asturm   1bfb397f8bc
app-emulation/distrobuilder  
20200825-14:56 williamh 8fc5737fbea
app-vim/mediawiki
20200824-05:39 robbat2  5f126c41e8c
dev-haskell/blaze-textual
20200829-18:27 slyfox   f7fb6ae06bd
dev-haskell/dictionary-sharing   
20200829-08:15 slyfox   8f089e5a8de
dev-haskell/double-conversion
20200829-18:27 slyfox   b8c2116db30
dev-haskell/git  
20200829-08:47 slyfox   0a012c7f06b
dev-haskell/inspection-testing   
20200829-18:34 slyfox   7565ebf9869
dev-haskell/mysql
20200829-18:25 slyfox   bedf56d3783
dev-haskell/mysql-simple 
20200829-18:29 slyfox   06cd3957024
dev-haskell/persistent-mysql 
20200829-18:31 slyfox   c52e7e7d996
dev-haskell/persistent-postgresql
20200829-18:35 slyfox   bd26628771e
dev-haskell/persistent-qq
20200829-18:30 slyfox   9af21c46cb4
dev-haskell/postgresql-libpq 
20200829-18:33 slyfox   9891cbd2e44
dev-haskell/postgresql-simple
20200829-18:34 slyfox   a416439a68b
dev-haskell/size-based   
20200829-08:16 slyfox   f53af4b022e
dev-haskell/testing-type-modifiers   
20200829-08:16 slyfox   a915aa6e646
dev-lua/lua-bit32
20200806-16:48 juippis  1454027f487
dev-python/lcdproc   
20200830-01:03 conikost 9bc56824c76
dev-python/mpdlcd
20200830-01:08 conikost 26eb14759b3
games-fps/chocolate-doom 
20190513-15:54 chewiee8b2f04fc1
games-simulation/sky-rogue   
20200829-11:49 chewifd6284c9283
gnome-extra/gnome-shell-extension-control-blur-effect-on-lock-screen 
20200830-10:00 pacho3b7d3b75913
net-irc/znc-clientbuffer 
20200830-18:46 whissi   8f6e7049fe6
net-irc/znc-igloo-push   

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-08-23 23:59 UTC

2020-08-23 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-08-23 23:59 UTC.

Removals:
app-admin/denyhosts  20200820-13:18 mgorny   
fbf8bbf4d18
app-dicts/stardict-quick-eng-fra 20200820-11:29 mgorny   
cfed3239cc2
app-misc/ifp-line20200820-11:33 mgorny   
c7edad733ea
app-mobilephone/wammu20200820-12:51 mgorny   
08c7a836ade
dev-go/goptlib   20200820-12:49 mgorny   
6649da26a7f
dev-perl/gnome2-perl 20200817-07:41 kentnl   
1e34e8f2ad1
dev-python/algopy20200820-12:46 mgorny   
8fb6a431b35
media-gfx/uniconvertor   20200820-11:34 mgorny   
5a97c4b6915
media-video/plasma-mediacenter   20200818-09:31 asturm   
3282fc17948
net-libs/osptoolkit  20200821-11:53 sam  
2ee800eadf7
net-print/pkpgcounter20200820-13:15 mgorny   
73266dcfcd3
sci-libs/scipy-python2   20200820-13:15 mgorny   
9fb7fa411cc
sci-visualization/pyxplot20200820-13:14 mgorny   
f5c5fc89ee8
sys-kernel/genkernel-next20200820-12:49 mgorny   
07151d9604b

Additions:
acct-group/grafana   20200819-23:40 whissi   
e6ac88c721e
acct-group/monkeysphere  20200819-15:34 whissi   
b73b647b9c4
acct-group/named 20200821-17:30 chutzpah 
10725b46aea
acct-group/sanlock   20200821-16:06 mschiff  
0fb30e9f9ab
acct-group/smmsp 20200817-01:50 bman 
ba0dd542dff
acct-user/grafana20200819-23:44 whissi   
118f3e3be0c
acct-user/monkeysphere   20200819-15:36 whissi   
15e496907e0
acct-user/named  20200821-17:30 chutzpah 
130bf6f94f5
acct-user/sanlock20200821-16:07 mschiff  
9701eb1af76
acct-user/smmsp  20200817-01:50 bman 
ba0dd542dff
app-text/fb2edit 20200817-14:47 grozin   
8a80ec8f006
dev-haskell/chimera  20200822-21:26 slyfox   
f1d2c1080d6
dev-haskell/criterion-measurement20200822-22:36 slyfox   
ab2d8fe3bc4
dev-haskell/dense-linear-algebra 20200822-22:34 slyfox   
ce5821d3f2b
dev-haskell/exact-pi 20200822-21:26 slyfox   
a7e23ca02fa
dev-haskell/integer-roots20200822-21:24 slyfox   
c0fac2fb8a5
dev-haskell/microstache  20200822-22:35 slyfox   
b3c0f576d71
dev-haskell/mod  20200822-21:23 slyfox   
6b57a26f514
dev-haskell/numtype-dk   20200822-21:25 slyfox   
0d2cfb7d296
dev-haskell/primitive-addr   20200822-21:23 slyfox   
8da73a9368e
dev-haskell/quickcheck-classes   20200822-21:23 slyfox   
4a5dcbf3447
dev-haskell/quickcheck-classes-base  20200822-21:22 slyfox   
360d4307d0e
dev-haskell/semirings20200822-21:15 slyfox   
fa3f634ec50
dev-perl/CGI-Application 20200821-09:49 kentnl   
cc26e0dfd24
dev-perl/CGI-Application-Dispatch20200821-12:31 kentnl   
ed4f9573f4b
dev-perl/CGI-Application-Plugin-Redirect 20200821-12:44 kentnl   
174ac399058
dev-perl/CGI-Application-Server  20200821-13:59 kentnl   
f2505314d76
dev-perl/HTTP-Exception  20200821-11:42 kentnl   
cf34c810e05
dev-perl/HTTP-Server-Simple-Static   20200821-11:11 kentnl   
33a79ab31f4
dev-perl/Test-HTTP-Server-Simple 20200821-13:49 kentnl   
1ce19e3a173
games-arcade/open-supaplex   20200821-11:16 chewi
fcde7bf5739
gnome-extra/gnome-shell-extension-bing-wallpaper 20200821-12:55 pacho
42521a5c451
net-im/element-desktop-bin   20200818-14:15 steils   
4954554b439

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
net-libs/osptoolkit,removed,sam,20200821-11:53,2ee800eadf7
app-admin/denyhosts,removed,mgorny,20200820-13:18,fbf8bbf4d18
net-print/pkpgcounter,removed,mgorny,20200820-13:15,73266dcfcd3
sci-libs/scipy-python2,removed,mgorny,20200820-13:15,9fb7fa411cc
sci-visualization/pyxplot,removed,mgorny,20200820-13:14,f5c5fc89ee8
app-mobilephone/wammu,removed,mgorny,20200820-12:51,08c7a836ade
sys-kernel/genkernel-next,removed,mgorny,20200820-12:49,07151d9604b
dev-go/goptlib,removed,mgorny,20200820-12:49,6649da26a7f
dev-python/algopy,removed,mgorny,20200820-12:46,8fb6a431b35
media-gfx/uniconvertor,removed,mgorny,20200820-11:34,5a97c4b6915

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-08-16 23:59 UTC

2020-08-16 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-08-16 23:59 UTC.

Removals:
app-text/glosung 20200814-09:47 asturm   1a89808d24d
dev-tex/xmltex   20200811-13:57 zlogene  f0f009c9687
x11-misc/xmonad-log-applet   20200815-08:04 slyfox   2ee58aa265a

Additions:
app-cdr/dolphin-plugins-mountiso 20200813-11:16 asturm   0e04e39641c
dev-haskell/git-lfs  20200811-21:00 slyfox   8fde6b30128
dev-haskell/http-client-restricted   20200811-21:01 slyfox   bfd335b51e6
dev-haskell/leancheck20200814-21:48 slyfox   f2a52549edf
dev-haskell/test-framework-leancheck 20200814-21:49 slyfox   90b67d12a22
dev-python/osrf_pycommon 20200811-15:41 aballier 868d8b71db3
dev-ros/ament_cmake_cppcheck 20200811-15:09 aballier 13da45b131a
dev-ros/ament_cmake_cpplint  20200811-15:16 aballier a68029adc5f
dev-ros/ament_cmake_gmock20200811-13:46 aballier eeeb24823e5
dev-ros/ament_cmake_pytest   20200811-14:32 aballier 12a7f909cf0
dev-ros/ament_cmake_ros  20200811-13:43 aballier e5ecca61281
dev-ros/ament_cmake_uncrustify   20200811-15:22 aballier b3603e61ea4
dev-ros/ament_cppcheck   20200811-14:42 aballier 8a58654e73d
dev-ros/ament_cpplint20200811-15:13 aballier 64c54372640
dev-ros/ament_uncrustify 20200811-15:20 aballier 0ba3870835e
dev-ros/python_cmake_module  20200811-15:27 aballier 11bbe26c407
kde-misc/markdownpart20200816-21:15 asturm   b79f2e0b0f8
sci-libs/libhomfly   20200812-20:29 mjo  cf8616b021a
sys-libs/pam_wrapper 20200815-04:24 mattst88 f703af0874e

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
x11-misc/xmonad-log-applet,removed,slyfox,20200815-08:04,2ee58aa265a
app-text/glosung,removed,asturm,20200814-09:47,1a89808d24d
dev-tex/xmltex,removed,zlogene,20200811-13:57,f0f009c9687
Added Packages:
kde-misc/markdownpart,added,asturm,20200816-21:15,b79f2e0b0f8
sys-libs/pam_wrapper,added,mattst88,20200815-04:24,f703af0874e
dev-haskell/test-framework-leancheck,added,slyfox,20200814-21:49,90b67d12a22
dev-haskell/leancheck,added,slyfox,20200814-21:48,f2a52549edf
app-cdr/dolphin-plugins-mountiso,added,asturm,20200813-11:16,0e04e39641c
sci-libs/libhomfly,added,mjo,20200812-20:29,cf8616b021a
dev-haskell/http-client-restricted,added,slyfox,20200811-21:01,bfd335b51e6
dev-haskell/git-lfs,added,slyfox,20200811-21:00,8fde6b30128
dev-python/osrf_pycommon,added,aballier,20200811-15:41,868d8b71db3
dev-ros/python_cmake_module,added,aballier,20200811-15:27,11bbe26c407
dev-ros/ament_cmake_uncrustify,added,aballier,20200811-15:22,b3603e61ea4
dev-ros/ament_uncrustify,added,aballier,20200811-15:20,0ba3870835e
dev-ros/ament_cmake_cpplint,added,aballier,20200811-15:16,a68029adc5f
dev-ros/ament_cpplint,added,aballier,20200811-15:13,64c54372640
dev-ros/ament_cmake_cppcheck,added,aballier,20200811-15:09,13da45b131a
dev-ros/ament_cppcheck,added,aballier,20200811-14:42,8a58654e73d
dev-ros/ament_cmake_pytest,added,aballier,20200811-14:32,12a7f909cf0
dev-ros/ament_cmake_gmock,added,aballier,20200811-13:46,eeeb24823e5
dev-ros/ament_cmake_ros,added,aballier,20200811-13:43,e5ecca61281

Done.

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-08-09 23:59 UTC

2020-08-09 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-08-09 23:59 UTC.

Removals:
dev-tex/cjk-latex20200804-10:02 zlogene  814a4d02b1d
kde-apps/kblog   20200807-18:21 asturm   f9300873b60
virtual/wireguard20200806-10:38 zx2c47fefa20b819

Additions:
acct-group/unbound   20200806-12:32 whissi   07521c403cb
acct-user/unbound20200806-12:41 whissi   bb79af5372f
app-emacs/vterm  20200804-11:28 ulm  8d01f01ca8e
dev-haskell/alex-tools   20200805-08:08 slyfox   e8b8483ac9f
dev-haskell/binary-instances 20200804-06:38 slyfox   42d19b038a4
dev-haskell/only 20200804-07:31 slyfox   270c3a0b6e4
dev-haskell/text-short   20200804-07:45 slyfox   ed0af4f6834
dev-haskell/uri-bytestring-aeson 20200804-06:55 slyfox   8df338804fd
dev-perl/Pod-Parser  20200807-21:34 dilfridge5caa85f86f5
net-proxy/microsocks 20200805-21:15 chutzpah 90938bfdf79
sys-fs/exfatprogs20200805-06:21 polynomial-c f969b88e97f
sys-power/dptfxtract 20200804-08:56 pachof5fddfa4003

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
kde-apps/kblog,removed,asturm,20200807-18:21,f9300873b60
virtual/wireguard,removed,zx2c4,20200806-10:38,7fefa20b819
dev-tex/cjk-latex,removed,zlogene,20200804-10:02,814a4d02b1d
Added Packages:
dev-perl/Pod-Parser,added,dilfridge,20200807-21:34,5caa85f86f5
acct-user/unbound,added,whissi,20200806-12:41,bb79af5372f
acct-group/unbound,added,whissi,20200806-12:32,07521c403cb
net-proxy/microsocks,added,chutzpah,20200805-21:15,90938bfdf79
dev-haskell/alex-tools,added,slyfox,20200805-08:08,e8b8483ac9f
sys-fs/exfatprogs,added,polynomial-c,20200805-06:21,f969b88e97f
app-emacs/vterm,added,ulm,20200804-11:28,8d01f01ca8e
sys-power/dptfxtract,added,pacho,20200804-08:56,f5fddfa4003
dev-haskell/text-short,added,slyfox,20200804-07:45,ed0af4f6834
dev-haskell/only,added,slyfox,20200804-07:31,270c3a0b6e4
dev-haskell/uri-bytestring-aeson,added,slyfox,20200804-06:55,8df338804fd
dev-haskell/binary-instances,added,slyfox,20200804-06:38,42d19b038a4

Done.

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-08-02 23:59 UTC

2020-08-02 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-08-02 23:59 UTC.

Removals:
app-arch/deltarpm   20200728-02:33 bman  f63396228c1
app-backup/holland  20200728-18:45 bman  38311722644
app-backup/holland-backup-example   20200728-18:45 bman  38311722644
app-backup/holland-backup-pgdump20200728-18:45 bman  38311722644
app-backup/holland-backup-random20200728-18:45 bman  38311722644
app-backup/holland-backup-sqlite20200728-18:45 bman  38311722644
app-backup/holland-lib-common   20200728-18:45 bman  38311722644
app-backup/holland-lib-lvm  20200728-18:45 bman  38311722644
app-cdr/burn-cd 20200728-18:45 bman  38311722644
app-crypt/virtualsmartcard  20200728-02:33 bman  f63396228c1
app-dicts/duali-data20200728-02:33 bman  f63396228c1
app-dicts/opendict  20200728-18:45 bman  38311722644
app-dicts/sword-FarsiOPV20200729-12:27 marecki   e6c579565fc
app-dicts/sword-FreMartin   20200729-13:28 marecki   569fc37bd6f
app-dicts/sword-FreSegond   20200729-12:57 marecki   e62c2428014
app-dicts/sword-WebstersDict20200729-12:16 marecki   630b0081f66
app-editors/editra  20200728-18:45 bman  38311722644
app-editors/leo 20200728-18:45 bman  38311722644
app-emulation/playonlinux   20200728-18:45 bman  38311722644
app-misc/scope  20200729-11:20 zlogene   79d3d94c908
app-office/taskcoach20200728-18:45 bman  38311722644
app-text/bibus  20200728-18:45 bman  38311722644
app-text/duali  20200728-02:33 bman  f63396228c1
app-text/mftrace20200728-02:33 bman  f63396228c1
app-text/queequeg   20200728-02:33 bman  f63396228c1
app-text/referencer 20200728-02:33 bman  f63396228c1
dev-db/SchemaSync   20200728-18:45 bman  38311722644
dev-libs/libmacaroons   20200728-02:33 bman  f63396228c1
dev-libs/tut20200728-02:33 bman  f63396228c1
dev-python/elib-intl20200728-02:33 bman  f63396228c1
dev-python/eunuchs  20200728-02:33 bman  f63396228c1
dev-python/medusa   20200728-02:33 bman  f63396228c1
dev-python/python-iwscan20200728-02:33 bman  f63396228c1
dev-python/squaremap20200728-18:45 bman  38311722644
dev-util/cargo-tree 20200731-10:44 gyakovlev 225fa99bca9
dev-util/confix 20200728-02:33 bman  f63396228c1
dev-util/qmtest 20200728-02:33 bman  f63396228c1
dev-util/unrpyc 20200728-02:33 bman  f63396228c1
dev-util/wxglade20200728-18:45 bman  38311722644
games-board/teg 20200801-20:03 asturmbd91ed1b641
games-engines/gemrb 20200728-02:33 bman  f63396228c1
media-gfx/fontypython   20200728-18:45 bman  38311722644
media-gfx/fr0st 20200728-18:45 bman  38311722644
media-sound/guimup  20200802-11:13 leio  39e3197981d
media-sound/lilycomp20200728-02:33 bman  f63396228c1
media-video/tovid   20200728-02:33 bman  f63396228c1
net-mail/archivemail20200728-02:33 bman  f63396228c1
net-mail/getmail20200728-02:33 bman  f63396228c1
net-wireless/airpwn 20200728-02:33 bman  f63396228c1
sci-chemistry/apbs  20200728-18:45 bman  38311722644
sci-chemistry/bkchem20200728-02:33 bman  f63396228c1
sci-chemistry/eden  20200728-18:45 bman  38311722644
sci-chemistry/p3d   20200728-18:45 bman  38311722644
sci-chemistry/pdb2pqr   20200728-18:45 bman  38311722644
sci-chemistry/pdb-tools 20200728-18:45 bman  38311722644
sci-chemistry/prodecomp 20200728-18:45 bman  38311722644
sci-chemistry/pymol-plugins-bni-tools   20200728-02:33 bman  f63396228c1
sci-chemistry/pymol-plugins-caver   20200728-18:45 bman  38311722644
sci-chemistry/pymol-plugins-dssp20200728-18:45 bman  38311722644
sci-chemistry/pymol-plugins-emovie  20200728-02:33 bman  f63396228c1

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-07-26 23:59 UTC

2020-07-26 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-07-26 23:59 UTC.

Removals:
dev-python/Numdifftools20200723-18:36 bman 59207df0adf
dev-python/pyscaffold  20200723-18:36 bman 59207df0adf
dev-python/pytest-runner   20200724-20:20 bman 5656631766c
dev-tex/cdcover20200719-12:40 ulm  18e9276dab5
dev-tex/circuit_macros 20200719-12:40 ulm  18e9276dab5
dev-tex/currvita   20200719-12:40 ulm  18e9276dab5
dev-tex/curve  20200719-12:40 ulm  18e9276dab5
dev-tex/dot2texi   20200719-12:40 ulm  18e9276dab5
dev-tex/ellipsis   20200719-12:40 ulm  18e9276dab5
dev-tex/envlab 20200719-12:40 ulm  18e9276dab5
dev-tex/europecv   20200719-12:40 ulm  18e9276dab5
dev-tex/feynmf 20200723-18:37 bman eeaf00ab918
dev-tex/flabels20200719-12:40 ulm  18e9276dab5
dev-tex/floatflt   20200719-12:40 ulm  18e9276dab5
dev-tex/g-brief20200719-12:40 ulm  18e9276dab5
dev-tex/harvard20200719-12:40 ulm  18e9276dab5
dev-tex/lazylist   20200719-12:40 ulm  18e9276dab5
dev-tex/leaflet20200719-12:40 ulm  18e9276dab5
dev-tex/newlfm 20200719-12:40 ulm  18e9276dab5
dev-tex/polytable  20200719-12:40 ulm  18e9276dab5
dev-tex/rcsinfo20200719-12:40 ulm  18e9276dab5
dev-tex/svninfo20200719-12:40 ulm  18e9276dab5
dev-tex/texpower   20200719-12:40 ulm  18e9276dab5
dev-tex/tipa   20200719-12:40 ulm  18e9276dab5
dev-tex/translator 20200719-12:40 ulm  18e9276dab5
media-sound/rgain  20200724-21:31 asturm   b3215a66c25
sci-chemistry/relax20200723-18:36 bman 59207df0adf
x11-misc/nts   20200724-21:29 asturm   8dd62ef4ef8

Additions:
acct-group/postfix_exporter20200725-19:48 williamh e4e601659dd
acct-group/ubridge 20200725-18:56 bman 973ed8bc7b1
acct-user/postfix_exporter 20200725-19:49 williamh 5d2d80ac62b
app-misc/OpenRGB   20200720-04:30 chutzpah 676d261eac8
dev-cpp/libodb 20200721-10:41 gienah   696d1bbaddd
dev-cpp/libodb-sqlite  20200721-10:42 gienah   0313417f6c2
dev-db/phppgadmin  20200720-07:57 tupone   39559f13bcd
dev-python/jaraco-context  20200720-16:33 mgorny   272c9a97d4c
dev-ros/ament_cmake_copyright  20200723-12:56 aballier 736b8d11e16
dev-ros/ament_cmake_export_targets 20200723-11:31 aballier df14b345167
dev-ros/ament_cmake_lint_cmake 20200723-12:52 aballier 2459f6c67ba
dev-ros/ament_cmake_xmllint20200723-13:57 aballier 555bb946d86
dev-ros/ament_copyright20200723-12:42 aballier b7af3859774
dev-ros/ament_flake8   20200723-12:36 aballier 054fdabce01
dev-ros/ament_lint 20200723-12:35 aballier a08538dd64d
dev-ros/ament_lint_auto20200723-12:15 aballier 563ebf9e9ed
dev-ros/ament_lint_cmake   20200723-12:48 aballier cb41a1624cf
dev-ros/ament_pep257   20200723-12:43 aballier 7383b51ba85
dev-ros/ament_xmllint  20200723-13:53 aballier 0045ebb34bd
sys-process/bashtop20200514-06:45 dolsen   2905f6a4850
x11-misc/appmenu-gtk-module20200726-17:53 asturm   ce5c0c6e75b
x11-misc/xsettingsd20200726-15:24 asturm   79827cc70b8

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
media-sound/rgain,removed,asturm,20200724-21:31,b3215a66c25
x11-misc/nts,removed,asturm,20200724-21:29,8dd62ef4ef8
dev-python/pytest-runner,removed,bman,20200724-20:20,5656631766c
dev-tex/cdcover,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/circuit_macros,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/currvita,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/curve,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/dot2texi,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/ellipsis,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/envlab,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/europecv,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/flabels,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/floatflt,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/g-brief,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/harvard,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/lazylist,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/leaflet,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/newlfm,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/polytable,removed,ulm,20200719-12:40,18e9276dab5
dev-tex/rcsinfo,removed,ulm,20200719-12:40,18e9276dab5

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-07-19 23:59 UTC

2020-07-19 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-07-19 23:59 UTC.

Removals:
app-misc/webcomics-collector  20200713-04:48 mgorny7b01197db97
app-mobilephone/kannel20200715-17:37 bman  7d441d1f185
app-mobilephone/kannel-sqlbox 20200715-17:37 bman  7d441d1f185
app-text/xindy20200713-04:54 mgorny784c82ccc3c
dev-embedded/gnome-avrdude20200718-13:04 asturm59087e6894d
dev-libs/389-adminutil20200713-04:51 mgornyaef3f76fb56
dev-libs/svrcore  20200713-04:52 mgorny7414f8c33bb
dev-python/dnslib 20200713-04:49 mgorny9b529964fb1
dev-python/hglib  20200715-17:36 bman  57154e19cb3
dev-ruby/rack-mount   20200713-04:47 mgorny556b7efb7fb
dev-util/cdiff20200713-04:53 mgorny62f7495f92d
games-board/gnono 20200718-13:07 asturm476ad2cf126
games-board/mt_gtk_client 20200718-13:06 asturm0710d81507d
games-board/sirius20200718-13:05 asturmcdf6c4e03a6
games-puzzle/gtetrinet20200718-13:06 asturmb68ba6db7ff
media-libs/pymemphis  20200719-19:27 asturm906e24a221b
net-misc/pytvshows20200713-04:48 mgorny229fae0ad78
net-nds/389-ds-base   20200713-04:50 mgornyeb6602276b3
net-news/rawdog   20200713-04:48 mgorny33d2318fee7

Additions:
acct-group/chronograf 20200712-21:47 williamh  8dbd1eefe54
acct-group/docker_auth20200714-00:31 williamh  55e51b98e3e
acct-group/influxdb   20200712-19:47 williamh  4109dd052eb
acct-group/kapacitor  20200712-21:10 williamh  2c2415262a0
acct-group/nginx-vts-exporter 20200714-22:49 williamh  84dbc150608
acct-group/openvpn_exporter   20200715-15:39 williamh  a868b897345
acct-user/chronograf  20200712-21:48 williamh  4bb3f578714
acct-user/docker_auth 20200714-00:40 williamh  63fe03faf64
acct-user/influxdb20200712-19:50 williamh  c5c7ebb7018
acct-user/kapacitor   20200712-21:11 williamh  f9dff188bd2
acct-user/nginx-vts-exporter  20200714-22:51 williamh  f9e0f88890a
acct-user/openvpn_exporter20200715-15:44 williamh  8583650a765
app-editors/pyvim 20200719-14:15 monsieurp 1d39f31bc45
app-misc/freewvs  20200715-18:00 hanno f2ec2b6acae
dev-lang/cxprolog 20200719-09:45 keri  bbe7289e65c
dev-libs/clipper  20200623-04:52 expeditioneer 4ff9c10ea72
dev-python/findimports20200715-10:03 mgorny6bcf0bdc431
dev-python/pony   20200715-06:24 mgornyd14e21cbbb6
dev-python/pylatex20200717-08:44 juippis   93a0a85dde9
dev-python/pyre2  20200717-01:03 chutzpah  f624cb66279
dev-python/quantities 20200717-08:43 juippis   1a193d349c5
dev-python/zxcvbn 20200715-05:50 mgorny9fcd2852540
dev-ros/actionlib_tools   20200716-17:33 aballier  03ffaa65b3c
dev-ros/rosbridge_msgs20200715-15:05 aballier  2e2a4b05a8c
dev-util/build2   20200719-13:33 gienah67e602f6277
sci-geosciences/GeographicLib 20200716-15:29 aballier  0df93936248

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
media-libs/pymemphis,removed,asturm,20200719-19:27,906e24a221b
games-board/gnono,removed,asturm,20200718-13:07,476ad2cf126
games-puzzle/gtetrinet,removed,asturm,20200718-13:06,b68ba6db7ff
games-board/mt_gtk_client,removed,asturm,20200718-13:06,0710d81507d
games-board/sirius,removed,asturm,20200718-13:05,cdf6c4e03a6
dev-embedded/gnome-avrdude,removed,asturm,20200718-13:04,59087e6894d
app-mobilephone/kannel-sqlbox,removed,bman,20200715-17:37,7d441d1f185
app-mobilephone/kannel,removed,bman,20200715-17:37,7d441d1f185
dev-python/hglib,removed,bman,20200715-17:36,57154e19cb3
app-text/xindy,removed,mgorny,20200713-04:54,784c82ccc3c
dev-util/cdiff,removed,mgorny,20200713-04:53,62f7495f92d
dev-libs/svrcore,removed,mgorny,20200713-04:52,7414f8c33bb
dev-libs/389-adminutil,removed,mgorny,20200713-04:51,aef3f76fb56
net-nds/389-ds-base,removed,mgorny,20200713-04:50,eb6602276b3
dev-python/dnslib,removed,mgorny,20200713-04:49,9b529964fb1
app-misc/webcomics-collector,removed,mgorny,20200713-04:48,7b01197db97
net-misc/pytvshows,removed,mgorny,20200713-04:48,229fae0ad78
net-news/rawdog,removed,mgorny,20200713-04:48,33d2318fee7
dev-ruby/rack-mount,removed,mgorny,20200713-04:47,556b7efb7fb
Added Packages:
app-editors/pyvim,added,monsieurp,20200719-14:15,1d39f31bc45
dev-util/build2,added,gienah,20200719-13:33,67e602f6277
dev-python/pylatex,added,juippis,20200717-08:44,93a0a85dde9
dev-python/quantities,added,juippis,20200717-08:43,1a193d349c5

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-07-12 23:59 UTC

2020-07-12 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-07-12 23:59 UTC.

Removals:
dev-ros/shape_tools20200709-12:07 aballier   2517553f907
www-apps/otrs  20200709-12:41 sam934a47e2dfc

Additions:
acct-group/mysqld_exporter 20200706-23:29 whissi 5af94a0e45a
acct-group/privoxy 20200712-06:39 bircoph1ad46d602c2
acct-user/mysqld_exporter  20200706-23:31 whissi 797089af62c
acct-user/privoxy  20200712-07:00 bircoph69181ddeb01
dev-games/openscenegraph-openmw20200529-01:22 juippis74f618175eb
dev-games/recastnavigation 20200616-21:41 juippis70236cb91b9
dev-libs/cgreen20200629-17:49 juippisf5a3ab31a3b
dev-perl/SQL-Abstract-Classic  20200709-09:48 kentnl db6cae4b291
dev-python/pytest-freezegun20200708-07:59 mgorny f038d8dc1fa
dev-ros/joint_state_publisher_gui  20200708-14:21 aballier   2da685a5651
gui-libs/xdg-desktop-portal-wlr20200707-19:58 prometheanfire 143880fae5d
kde-frameworks/kdav20200711-12:55 asturm ef9511a56b3
media-libs/noise-suppression-for-voice 20200706-17:22 zerochaos  dd582914ea1

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
www-apps/otrs,removed,sam,20200709-12:41,934a47e2dfc
dev-ros/shape_tools,removed,aballier,20200709-12:07,2517553f907
Added Packages:
acct-user/privoxy,added,bircoph,20200712-07:00,69181ddeb01
acct-group/privoxy,added,bircoph,20200712-06:39,1ad46d602c2
kde-frameworks/kdav,added,asturm,20200711-12:55,ef9511a56b3
dev-libs/cgreen,added,juippis,20200629-17:49,f5a3ab31a3b
dev-perl/SQL-Abstract-Classic,added,kentnl,20200709-09:48,db6cae4b291
dev-ros/joint_state_publisher_gui,added,aballier,20200708-14:21,2da685a5651
dev-python/pytest-freezegun,added,mgorny,20200708-07:59,f038d8dc1fa
dev-games/recastnavigation,added,juippis,20200616-21:41,70236cb91b9
dev-games/openscenegraph-openmw,added,juippis,20200529-01:22,74f618175eb
gui-libs/xdg-desktop-portal-wlr,added,prometheanfire,20200707-19:58,143880fae5d
acct-user/mysqld_exporter,added,whissi,20200706-23:31,797089af62c
acct-group/mysqld_exporter,added,whissi,20200706-23:29,5af94a0e45a
media-libs/noise-suppression-for-voice,added,zerochaos,20200706-17:22,dd582914ea1

Done.

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-07-05 23:59 UTC

2020-07-05 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-07-05 23:59 UTC.

Removals:
app-admin/dxf 20200702-10:33 zlogene
a36b150fa75
app-crypt/openvpn-blacklist   20200704-02:22 bman   
17ed872c633
app-eselect/eselect-metasploit20200702-10:23 zlogene
f13acbb05d5
app-forensics/volatility  20200704-02:22 bman   
17ed872c633
app-misc/cbrpager 20200701-23:24 asturm 
6e9b0f5475f
app-misc/ignuit   20200701-23:23 asturm 
5f50f6b6a52
app-misc/yagtd20200704-02:22 bman   
17ed872c633
app-text/pylize   20200704-02:22 bman   
17ed872c633
app-vim/easytags  20200704-02:22 bman   
17ed872c633
app-vim/notes 20200704-02:22 bman   
17ed872c633
dev-db/metakit20200704-02:22 bman   
17ed872c633
dev-python/backports-shutil_get_terminal_size 20200704-02:22 bman   
17ed872c633
dev-python/backports-shutil_which 20200704-02:22 bman   
17ed872c633
dev-python/backports-ssl-match-hostname   20200704-02:22 bman   
17ed872c633
dev-python/editobj20200702-15:22 zlogene
4cc4d66bd0f
dev-python/fastparquet20200702-10:36 zlogene
ddd2628a2e6
dev-python/gql20200702-10:30 zlogene
6425a102a11
dev-python/graphql-core   20200702-10:30 zlogene
6425a102a11
dev-python/numba  20200702-10:36 zlogene
ddd2628a2e6
dev-python/py2play20200702-15:23 zlogene
0ff8754659e
dev-python/pyopenal   20200702-15:25 zlogene
72a6d30a10d
dev-python/python-wpactrl 20200704-02:22 bman   
17ed872c633
dev-python/raven  20200702-10:36 zlogene
ddd2628a2e6
dev-python/soya   20200702-15:26 zlogene
11cf953ec95
dev-python/sphinxcontrib-documentedlist   20200702-10:36 zlogene
ddd2628a2e6
dev-python/thriftpy   20200702-10:36 zlogene
ddd2628a2e6
dev-python/toro   20200702-10:36 zlogene
ddd2628a2e6
dev-util/bakefile 20200704-02:22 bman   
17ed872c633
dev-vcs/git-deps  20200704-02:22 bman   
17ed872c633
dev-vcs/git-remote-hg 20200704-02:22 bman   
17ed872c633
games-action/d1x-rebirth  20200703-20:02 chewi  
dc8eb9addc3
games-action/slune20200702-15:20 zlogene
c97a989e01f
games-emulation/openmsx   20200704-02:22 bman   
17ed872c633
games-kids/childsplay 20200704-02:22 bman   
17ed872c633
games-mud/lyntin  20200704-02:22 bman   
17ed872c633
games-sports/ski  20200704-02:22 bman   
17ed872c633
mail-filter/tmda  20200704-02:22 bman   
17ed872c633
media-libs/aldumb 20200702-10:47 zlogene
b370400e46d
media-sound/cplay 20200704-02:22 bman   
17ed872c633
media-sound/tunapie   20200704-02:22 bman   
17ed872c633
media-video/subdl 20200704-02:22 bman   
17ed872c633
net-firewall/dshieldpy20200704-02:22 bman   
17ed872c633
net-mail/offlineimap  20200704-02:22 bman   
17ed872c633
net-misc/switzerland  20200704-02:22 bman   
17ed872c633
net-wireless/multimode20200704-02:22 bman   
17ed872c633
sci-biology/last  20200704-02:22 bman   
17ed872c633
sci-chemistry/hollow  20200704-02:22 bman   
17ed872c633
sci-chemistry/modeller20200704-02:22 bman   
17ed872c633
sci-chemistry/pymol-plugins-msms  20200704-02:22 bman   
17ed872c633
sci-geosciences/tilecache 20200704-02:22 bman   
17ed872c633
sci-libs/deap 20200704-02:22 bman   
17ed872c633
sci-libs/pycifrw  20200704-02:22 bman   
17ed872c633
www-apps/curator  20200704-02:22 bman   
17ed872c633
x11-apps/whyteboard   20200704-02:22 bman   
17ed872c633
x11-plugins/purple-plugin_pack20200704-02:22 bman   
17ed872c633
x11-themes/terminology-themes 20200701-06:49 juippis
9b1ebf1cc55

Additions:
acct-group/carbon 20200705-09:18 grobian
31c853a1602

Re: [gentoo-dev] Last rites: */* More Py2 only items

2020-06-29 Thread Robin H. Johnson
On Sun, Jun 28, 2020 at 07:57:18PM -0700, Alec Warner wrote:
> On Sun, Jun 28, 2020 at 5:35 PM Aaron Bauman  wrote:
> > app-crypt/virtualsmartcard
Upstream supposedly fixed it for py3 several years ago, maybe trivial
bump?

> > net-nds/nsscache
> Infra uses this, we will have to look into bumping it.
Bump done.

> > sys-apps/x86info
Also bumped this for trivial python usage, but surprised that upstream
seems to have stopped real maintenance of it with no clear replacement
in sight.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-portage-dev] [PATCH] ecompress: optimize docompress -x precompressed comparison

2020-06-29 Thread Robin H. Johnson
On Sun, Jun 28, 2020 at 12:54:56PM -0700, Zac Medico wrote:
> Use sort and comm with temporary files in order to compare lists
> of docompress -x and precompressed files, since the file lists
> can be extremely large. Also strip ${D%/} from paths in order to
> reduce length.
+1 looks much better.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-06-28 23:59 UTC

2020-06-28 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-06-28 23:59 UTC.

Removals:
app-metrics/buildbot-prometheus 20200627-00:40 bman  bc8bdd812f7
dev-db/clickhouse   20200627-00:49 bman  72ae4614583
net-fs/ncpfs20200627-00:45 bman  d427fe8c7ee
net-misc/charm  20200627-00:35 bman  5b83079c4f1
net-misc/ipx-utils  20200627-00:45 bman  d427fe8c7ee
sys-cluster/polysh  20200627-00:35 bman  5b83079c4f1

Additions:
acct-group/cvmfs20200626-13:05 amadio98e82738a8c
acct-group/sabnzbd  20200628-12:36 whissi507799c2fe1
acct-user/cvmfs 20200626-13:07 amadio196600334c4
acct-user/sabnzbd   20200628-12:37 whissi78fc1154672
app-text/vgrep  20200628-22:58 whissi24d5a90e18b
dev-libs/libclangformat-ide 20200519-01:15 zx2c4 dd9332b486f
dev-ml/stdlib-shims 20200612-03:18 juippis   4f065399f83
dev-python/latexcodec   20200502-12:22 juippis   669176a7eef
dev-python/pybtex   20200602-10:16 juippis   eb876389142
dev-qt/qtquicktimeline  20200511-01:35 zx2c4 d4797905da3
dev-util/chroot-wrapper 20200627-19:47 chutzpah  f96df9fce30
games-misc/usolitaire   20200625-05:26 monsieurp 1a6f528d0ba
games-util/acc  20200622-20:19 chewi e2b9f0ceb1d
media-gfx/netpaint  20200625-06:17 monsieurp 9ec66d490fd
net-irc/irccloud-desktop-bin20200625-00:40 zx2c4 0cfb3563464
sci-mathematics/mathematica 20200624-14:10 dilfridge c288c4436e2
sys-cluster/k9scli  20200625-19:51 williamh  cb6b0565d7a
www-apache/mod_maxminddb20200430-21:32 whissi1df35586c28

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
dev-db/clickhouse,removed,bman,20200627-00:49,72ae4614583
net-fs/ncpfs,removed,bman,20200627-00:45,d427fe8c7ee
net-misc/ipx-utils,removed,bman,20200627-00:45,d427fe8c7ee
app-metrics/buildbot-prometheus,removed,bman,20200627-00:40,bc8bdd812f7
net-misc/charm,removed,bman,20200627-00:35,5b83079c4f1
sys-cluster/polysh,removed,bman,20200627-00:35,5b83079c4f1
Added Packages:
app-text/vgrep,added,whissi,20200628-22:58,24d5a90e18b
acct-user/sabnzbd,added,whissi,20200628-12:37,78fc1154672
acct-group/sabnzbd,added,whissi,20200628-12:36,507799c2fe1
dev-python/pybtex,added,juippis,20200602-10:16,eb876389142
dev-python/latexcodec,added,juippis,20200502-12:22,669176a7eef
dev-util/chroot-wrapper,added,chutzpah,20200627-19:47,f96df9fce30
www-apache/mod_maxminddb,added,whissi,20200430-21:32,1df35586c28
acct-user/cvmfs,added,amadio,20200626-13:07,196600334c4
acct-group/cvmfs,added,amadio,20200626-13:05,98e82738a8c
sys-cluster/k9scli,added,williamh,20200625-19:51,cb6b0565d7a
dev-libs/libclangformat-ide,added,zx2c4,20200519-01:15,dd9332b486f
dev-qt/qtquicktimeline,added,zx2c4,20200511-01:35,d4797905da3
media-gfx/netpaint,added,monsieurp,20200625-06:17,9ec66d490fd
games-misc/usolitaire,added,monsieurp,20200625-05:26,1a6f528d0ba
net-irc/irccloud-desktop-bin,added,zx2c4,20200625-00:40,0cfb3563464
sci-mathematics/mathematica,added,dilfridge,20200624-14:10,c288c4436e2
dev-ml/stdlib-shims,added,juippis,20200612-03:18,4f065399f83
games-util/acc,added,chewi,20200622-20:19,e2b9f0ceb1d

Done.

Re: [gentoo-dev] */*: Mask Py2 only packages

2020-06-27 Thread Robin H. Johnson
On Sat, Jun 27, 2020 at 10:08:26AM +0300, Joonas Niilola wrote:
> 
> On 6/27/20 2:28 AM, Robin H. Johnson wrote:
> >
> > TL;DR: Please make it easier to search on the QA reports site for
> > issues, and only show things directly relevant to the search.
> >
> > A long time ago, there was blizzy's site that listed packages that were
> > stabilization candidates, and you could filter by developer. It really
> > helped making it easier to detect and progress.
> 
> $ pkgcheck --color true scan $(git grep -l robb...@gentoo.org
> '**/metadata.xml' | cut -d/ -f1-2) -c StableRequestCheck -R
> FormatReporter --format 'stabilize {category}/{package}-{version}  # {desc}'
> 
> There's also a bug open to integrate some of the pkgchecks to p.g.o,
> https://bugs.gentoo.org/725704
Yep, this ties to the large scope of making it easier to show QA issues
from many sources/checks, filtering by many ways.

> > At a bare minimum, having an on-site way that already expands the data
> > and makes it searchable by developer.
> 
> You can filter the output.html per-dev/per-project, but it's not as
> verbose as running pkgcheck locally can be.
> 
> https://qa-reports.gentoo.org/output/gentoo-ci/output.html;maintainer=robbat2
> https://qa-reports.gentoo.org/output/gentoo-ci/output.verbose.html;maintainer=robbat2
The maintainer= flag also doesn't seem documented anywhere? (I checked
the source and see the 'include-projects' flag as well, so it's just a
matter of making this stuff much better known and a little bit cleaner.

> It doesn't straight out show python2 like this, but with the
> package.deprecated entry for it, it'll flag newly added py2 commits.
Also it's broken in the XML machine-readable version :-(.
https://qa-reports.gentoo.org/output/gentoo-ci/output.xml;maintainer=robbat2
returns a 404

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-dev] */*: Mask Py2 only packages

2020-06-26 Thread Robin H. Johnson
On Fri, Jun 26, 2020 at 01:48:31PM -0400, Aaron Bauman wrote:
> So, thanks for proving my point that all the tooling changes, notices,
> ML posts, etc don't matter. Someone *will* find something to complain
> about. 
They will also complain about the status quo, you won't win there!

> >2.  The report does not list maintainers, which means nobody is likely
> >to know they have a package on the list.
> >
> 
> Do you argue just to argue? Sad. If someone like Robin (who at one
> point had like 5% of the tree under his maintainer ship) complained
> about that I may see it worthwhile. 
Some of the packages shown on the py27 list I had LONG forgotten that I
maintained: I'll try and get to fixing them now.

I did q-text-as-data this week, because I actually needed it for a quick
project and I haven't used it since I changed my default python away
from py27 last month.

> Just another red herring...
I'm mostly speaking to the QA team here, and Python team indirectly:
Indirectly because the Python team is one of the few teams to step up
and provide QA checks outside of the QA team directly. This thread
however has shown that output of those checks however needs to become
easier to consume.

TL;DR: Please make it easier to search on the QA reports site for
issues, and only show things directly relevant to the search.

A long time ago, there was blizzy's site that listed packages that were
stabilization candidates, and you could filter by developer. It really
helped making it easier to detect and progress.

At a bare minimum, having an on-site way that already expands the data
and makes it searchable by developer.

Have files like https://qa-reports.gentoo.org/output/gpyutils/py2.txt
directly loaded into qa-reports and expanded out (which is cachable) and
then let devs search w/ their browser.

cat/package:slot (reason) (all-direct-maintainers),(expanded-projects)

get-git-file.sh tries very hard to get there for the gentoo-ci output,
needs performance and usability improvements, but it's vastly better
than the py2.txt file already.
Some issues:
- Make it more visible! Right now you have to have a link to it from
  somewhere else, and it doesn't accept a branch name
  (https://qa-reports.gentoo.org/output/gentoo-ci/HEAD/output.html
  returns 404)
- Why does it take 15 seconds to load?
- Add filter by developers (by direct maintainer OR membership in alias)
- Add filter by package/cat
- Add filter by check name
- Machine-readable format should be the same data as human-readable (I
  can't just take the .xml and grep it, it doesn't have maintainers at
  all)

> >> See above. Qa-reports will output a very nice list (even a graphic!)
> >of such things. Anyway, yes, I do expect devs to understand their
> >packages state if they maintain it. Don't be so myopic.
> >
> >Well, you can expect whatever you want, and then you can be frustrated
> >out of your mind when 95% of devs fail to meet your expectations.
> >
> I am not frustrated. I will continue to perform the same in intervals to 
> drive the removal of Py2. 
Can we have that graphic in a searchable text format? <3.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


Re: [gentoo-portage-dev] [PATCH] ecompress: fix "Argument list too long" for sed (bug 727522)

2020-06-24 Thread Robin H. Johnson
On Tue, Jun 23, 2020 at 05:36:14PM -0700, Zac Medico wrote:
> From: Patrick McLean 
> 
> Use sed -f to feed commands to sed via stdin, in order to avoid
> the "Argument list too long" error reported in bug 727522.
Will this need to move to a tempfile in the near future, for the size of
sed_args? Maybe do that work now?

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Re: News item: xorg-server dropping default suid

2020-06-22 Thread Robin H. Johnson
On Sun, Jun 21, 2020 at 09:22:37PM +0200, Piotr Karbowski wrote:
> Hi,
> 
> Please find news item attached.
I feel that this news item should ALSO remind people that consolekit is
deprecated per a news item a few months ago:

News Item v3: Desktop profile switching USE default to elogind

xorg-server[elogind] forces sys-auth/pambase[elogind]
and users who previously had USE='-systemd -elogind' probably have
USE=consolekit set.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-06-21 23:59 UTC

2020-06-21 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-06-21 23:59 UTC.

Removals:
app-cdr/sync2cd  20200618-00:51 bman b295ad0c99a
app-i18n/atokx3  20200616-12:49 asturm   bb04fe44a8e
app-shells/rssh  20200620-04:46 bman a710a919055
app-text/getxbook20200618-00:51 bman b295ad0c99a
dev-python/assets20200618-00:51 bman b295ad0c99a
dev-python/bokeh 20200620-04:52 bman a8823e4da11
dev-python/bz2file   20200618-00:51 bman b295ad0c99a
dev-python/flexx 20200620-04:52 bman a8823e4da11
dev-python/gconf-python  20200621-23:09 asturm   8cec92324ae
dev-python/gnome-python-base 20200621-23:09 asturm   7e4b739eda6
dev-python/jaxml 20200618-00:51 bman b295ad0c99a
dev-python/kid   20200618-00:51 bman b295ad0c99a
dev-python/pygtksourceview   20200621-23:08 asturm   c037972f080
dev-python/python-urljr  20200618-00:51 bman b295ad0c99a
dev-python/restkit   20200620-04:48 bman 157b2f4a82f
dev-python/selectors34   20200618-00:51 bman b295ad0c99a
dev-python/stomper   20200618-00:51 bman b295ad0c99a
dev-python/txtorcon  20200620-04:50 bman bb163772165
dev-python/YURL  20200618-00:51 bman b295ad0c99a
dev-tex/revtex   20200620-04:49 bman e9566407501
net-analyzer/ripe-atlas-tools20200620-04:55 bman 141428dfb12
net-libs/ripe-atlas-sagan20200620-04:55 bman 141428dfb12
net-proxy/mitmproxy  20200620-04:54 bman cafca86e0ff
sci-chemistry/nmrdepaker 20200618-11:15 asturm   c12caa121cb
www-client/ripe-atlas-cousteau   20200620-04:55 bman 141428dfb12

Additions:
acct-group/fvwm-crystal  20200610-00:42 bman 26f7df4dfbd
app-misc/asciicast-tools 20200617-23:59 chutzpah 60e97ab40bf
app-text/foliate 20200615-16:34 grozin   adc5e44f43a
dev-python/requests-unixsocket   20200621-09:45 mgorny   cc81527c2dd
dev-python/text-unidecode20200618-20:34 mgorny   abb41af9d2a
dev-ruby/kramdown-parser-gfm 20200618-18:26 robbat2  8b7b6e78f48
dev-ruby/kramdown-syntax-coderay 20200619-07:48 graaff   f0372fd601f
dev-ruby/terminal-table  20200619-05:34 graaff   b1820f5ad86
dev-ruby/unicode-display_width   20200619-05:31 graaff   6d2655b62eb
dev-util/gitlab-ci-linter20200619-18:21 williamh 23c20f353ec
net-misc/oidc-agent  20200619-17:12 marecki  f1f6e093d99
net-proxy/mitmproxy  20200620-17:41 bman ea1bca05f2c
sys-auth/AusweisApp2 20200523-16:22 conikost 3664d1690fe

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
dev-python/gnome-python-base,removed,asturm,20200621-23:09,7e4b739eda6
dev-python/gconf-python,removed,asturm,20200621-23:09,8cec92324ae
dev-python/pygtksourceview,removed,asturm,20200621-23:08,c037972f080
net-analyzer/ripe-atlas-tools,removed,bman,20200620-04:55,141428dfb12
net-libs/ripe-atlas-sagan,removed,bman,20200620-04:55,141428dfb12
www-client/ripe-atlas-cousteau,removed,bman,20200620-04:55,141428dfb12
net-proxy/mitmproxy,removed,bman,20200620-04:54,cafca86e0ff
dev-python/bokeh,removed,bman,20200620-04:52,a8823e4da11
dev-python/flexx,removed,bman,20200620-04:52,a8823e4da11
dev-python/txtorcon,removed,bman,20200620-04:50,bb163772165
dev-tex/revtex,removed,bman,20200620-04:49,e9566407501
dev-python/restkit,removed,bman,20200620-04:48,157b2f4a82f
app-shells/rssh,removed,bman,20200620-04:46,a710a919055
sci-chemistry/nmrdepaker,removed,asturm,20200618-11:15,c12caa121cb
app-cdr/sync2cd,removed,bman,20200618-00:51,b295ad0c99a
app-text/getxbook,removed,bman,20200618-00:51,b295ad0c99a
dev-python/YURL,removed,bman,20200618-00:51,b295ad0c99a
dev-python/assets,removed,bman,20200618-00:51,b295ad0c99a
dev-python/bz2file,removed,bman,20200618-00:51,b295ad0c99a
dev-python/jaxml,removed,bman,20200618-00:51,b295ad0c99a
dev-python/kid,removed,bman,20200618-00:51,b295ad0c99a
dev-python/python-urljr,removed,bman,20200618-00:51,b295ad0c99a
dev-python/selectors34,removed,bman,20200618-00:51,b295ad0c99a
dev-python/stomper,removed,bman,20200618-00:51,b295ad0c99a
app-i18n/atokx3,removed,asturm,20200616-12:49,bb04fe44a8e
Added Packages:
dev-python/requests-unixsocket,added,mgorny,20200621-09:45,cc81527c2dd
net-proxy/mitmproxy,added,bman,20200620-17:41,ea1bca05f2c
sys-auth/AusweisApp2,added,conikost,20200523-16:22,3664d1690fe
dev-util/gitlab-ci-linter,added,williamh,20200619-18:21,23c20f353ec
net-misc/oidc-agent,added,marecki,20200619-17:12,f1f6e093d99
dev-ruby/kramdown-syntax-coderay,added,graaff,20200619-07:48,f0372fd601f
dev-ruby/terminal-table,added,graaff,20200619-05:34,b1820f5ad86

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-06-14 23:59 UTC

2020-06-14 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-06-14 23:59 UTC.

Removals:
acct-group/octoprint 20200614-08:28 mgorny 892989d763c
acct-user/octoprint  20200614-08:28 mgorny ab28053f19e
app-admin/pdk20200614-20:15 prometheanfire b3d38a79fc4
dev-go/go-protobuf   20200612-19:38 williamh   5f6e1a93c0b
dev-python/addons20200614-08:31 mgorny 160d4044866
dev-python/bytecodeassembler 20200614-08:31 mgorny 8ac7c2950a8
dev-python/decoratortools20200614-08:31 mgorny 733a3c82008
dev-python/extremes  20200614-08:30 mgorny f1f8dd9620c
dev-python/importing 20200614-08:30 mgorny 6310447bda5
dev-python/peak-rules20200614-08:30 mgorny a5c3a060d39
dev-python/pyprotocols   20200614-08:30 mgorny e74911f28ac
dev-python/ramlfications 20200614-08:27 mgorny 93550eb06b1
dev-python/symboltype20200614-08:30 mgorny 9bc0f0c7df6
sys-kernel/spl   20200610-21:58 gyakovlev  f1058995e5b
www-apps/octoprint   20200614-08:27 mgorny 39167367a16
x11-libs/libXxf86misc20200608-17:28 mattst88   ba5e02f6957

Additions:
acct-group/icingaweb220200609-17:50 prometheanfire affc6dfb97d
acct-group/znc   20200513-18:24 sbraz  b2eb57797f4
acct-user/znc20200513-18:32 sbraz  52f0c43fa2a
dev-libs/libgnt  20200611-18:58 polynomial-c   caf07e79987
dev-libs/rocclr  20200608-16:54 candrews   828795a9fd9
dev-python/argparse-manpage  20200612-00:38 chutzpah   a3e80efa119
dev-python/fsspec20200614-11:56 mgorny 5e390682d8c
dev-python/influxdb  20200611-13:52 juippis48003f4ea73
dev-python/loky  20200614-17:54 mgorny 72cd97ce4ae
dev-python/sgmllib3k 20200612-14:26 mgorny b031a84bb8d
dev-python/spur  20200612-11:14 mgorny a25c3337970
dev-ruby/middleware  20200613-05:06 graaff ab0d4572963
games-action/assault-android-cactus+ 20200610-20:38 chewi  4203b25ea0c
mail-client/mutt-wizard  20200220-04:00 juippiscfb881f34b6
media-plugins/gst-plugins-webrtc 20200611-07:57 leio   5b5077592ef

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
app-admin/pdk,removed,prometheanfire,20200614-20:15,b3d38a79fc4
dev-python/addons,removed,mgorny,20200614-08:31,160d4044866
dev-python/bytecodeassembler,removed,mgorny,20200614-08:31,8ac7c2950a8
dev-python/decoratortools,removed,mgorny,20200614-08:31,733a3c82008
dev-python/extremes,removed,mgorny,20200614-08:30,f1f8dd9620c
dev-python/importing,removed,mgorny,20200614-08:30,6310447bda5
dev-python/peak-rules,removed,mgorny,20200614-08:30,a5c3a060d39
dev-python/pyprotocols,removed,mgorny,20200614-08:30,e74911f28ac
dev-python/symboltype,removed,mgorny,20200614-08:30,9bc0f0c7df6
acct-group/octoprint,removed,mgorny,20200614-08:28,892989d763c
acct-user/octoprint,removed,mgorny,20200614-08:28,ab28053f19e
www-apps/octoprint,removed,mgorny,20200614-08:27,39167367a16
dev-python/ramlfications,removed,mgorny,20200614-08:27,93550eb06b1
dev-go/go-protobuf,removed,williamh,20200612-19:38,5f6e1a93c0b
sys-kernel/spl,removed,gyakovlev,20200610-21:58,f1058995e5b
x11-libs/libXxf86misc,removed,mattst88,20200608-17:28,ba5e02f6957
Added Packages:
dev-python/loky,added,mgorny,20200614-17:54,72cd97ce4ae
dev-python/fsspec,added,mgorny,20200614-11:56,5e390682d8c
dev-ruby/middleware,added,graaff,20200613-05:06,ab0d4572963
dev-python/sgmllib3k,added,mgorny,20200612-14:26,b031a84bb8d
dev-python/spur,added,mgorny,20200612-11:14,a25c3337970
acct-user/znc,added,sbraz,20200513-18:32,52f0c43fa2a
acct-group/znc,added,sbraz,20200513-18:24,b2eb57797f4
dev-python/argparse-manpage,added,chutzpah,20200612-00:38,a3e80efa119
dev-libs/libgnt,added,polynomial-c,20200611-18:58,caf07e79987
dev-python/influxdb,added,juippis,20200611-13:52,48003f4ea73
media-plugins/gst-plugins-webrtc,added,leio,20200611-07:57,5b5077592ef
games-action/assault-android-cactus+,added,chewi,20200610-20:38,4203b25ea0c
acct-group/icingaweb2,added,prometheanfire,20200609-17:50,affc6dfb97d
dev-libs/rocclr,added,candrews,20200608-16:54,828795a9fd9
mail-client/mutt-wizard,added,juippis,20200220-04:00,cfb881f34b6

Done.

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-06-07 23:59 UTC

2020-06-07 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-06-07 23:59 UTC.

Removals:
media-plugins/gimp-lensfun 20200601-22:18 asturm 63cf8d6f236
x11-drivers/xf86-input-keyboard20200606-10:57 slashbeast 0e6b1d8cf0d
x11-drivers/xf86-input-mouse   20200606-10:57 slashbeast 0e6b1d8cf0d

Additions:
acct-group/motion  20200604-07:04 juippis8d6281579d9
acct-user/motion   20200604-07:05 juippis1d0f7143e0c
app-backup/kup 20200602-14:09 asturm fd92483d159
dev-libs/libucl20200426-16:09 bman   effe59a4a91
dev-python/asteval 20200607-10:36 pacho  d5712a4e760
dev-python/black   20200602-22:15 chutzpah   17e0e5f755f
dev-python/klein   20200601-04:06 dolsen 5e038299cef
dev-python/lmfit   20200607-10:38 pacho  474620d5b9d
dev-python/python-dotenv   20200603-16:02 sping  b0200d1528d
dev-python/tubes   20200601-00:54 dolsen 2b487afce49
dev-ruby/sys-uname 20200607-08:34 graaff 9c8c5ead1d7
dev-util/buildbot-badges   20200601-20:30 dolsen 961c3974a74
dev-util/cucumber-cucumber-expressions 20200607-09:06 graaff 7970871b5c0
dev-util/cucumber-tag-expressions  20200607-08:58 graaff 78ffd36be3b
gui-apps/lavalauncher  20200518-02:15 bman   d9417ccd322
gui-wm/hikari  20200426-16:15 bman   10ac27bddb6
kde-plasma/kwayland-server 20200604-14:21 asturm 9931cc419a3
mail-mta/notqmail  20200521-08:57 mgorny d331eb76b16
sci-libs/volk  20200529-16:02 zerochaos  07401ce1325

--
Robin Hugh Johnson
Gentoo Linux Developer
E-Mail : robb...@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removed Packages:
x11-drivers/xf86-input-keyboard,removed,slashbeast,20200606-10:57,0e6b1d8cf0d
x11-drivers/xf86-input-mouse,removed,slashbeast,20200606-10:57,0e6b1d8cf0d
media-plugins/gimp-lensfun,removed,asturm,20200601-22:18,63cf8d6f236
Added Packages:
dev-python/lmfit,added,pacho,20200607-10:38,474620d5b9d
dev-python/asteval,added,pacho,20200607-10:36,d5712a4e760
dev-util/cucumber-cucumber-expressions,added,graaff,20200607-09:06,7970871b5c0
dev-util/cucumber-tag-expressions,added,graaff,20200607-08:58,78ffd36be3b
dev-ruby/sys-uname,added,graaff,20200607-08:34,9c8c5ead1d7
gui-apps/lavalauncher,added,bman,20200518-02:15,d9417ccd322
gui-wm/hikari,added,bman,20200426-16:15,10ac27bddb6
dev-libs/libucl,added,bman,20200426-16:09,effe59a4a91
mail-mta/notqmail,added,mgorny,20200521-08:57,d331eb76b16
kde-plasma/kwayland-server,added,asturm,20200604-14:21,9931cc419a3
acct-user/motion,added,juippis,20200604-07:05,1d0f7143e0c
acct-group/motion,added,juippis,20200604-07:04,8d6281579d9
dev-python/python-dotenv,added,sping,20200603-16:02,b0200d1528d
dev-python/black,added,chutzpah,20200602-22:15,17e0e5f755f
app-backup/kup,added,asturm,20200602-14:09,fd92483d159
dev-util/buildbot-badges,added,dolsen,20200601-20:30,961c3974a74
dev-python/klein,added,dolsen,20200601-04:06,5e038299cef
dev-python/tubes,added,dolsen,20200601-00:54,2b487afce49
sci-libs/volk,added,zerochaos,20200529-16:02,07401ce1325

Done.

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-05-31 23:59 UTC

2020-05-31 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-05-31 23:59 UTC.

Removals:
app-laptop/batti 20200529-19:44 asturm
f3470366927
app-misc/metromap20200529-19:45 asturm
54516f3baf0
app-mobilephone/ganyremote   20200531-00:03 asturm
4ba95898c09
app-office/pybliographer 20200531-00:02 asturm
6620383efa6
app-text/djvusmooth  20200531-10:11 mgorny
6dd499c09b4
dev-embedded/pk2-la  20200529-19:45 asturm
f1f36259768
dev-go/go-crypto 20200531-10:24 mgorny
5b426ca4581
dev-go/go-net20200531-10:24 mgorny
9761dd993c7
dev-go/go-sys20200531-10:24 mgorny
16cb1381d8d
dev-python/asynctest 20200531-10:26 mgorny
e8edc616daf
dev-python/dap   20200531-10:05 mgorny
1f8b027877c
dev-python/flower20200531-10:26 mgorny
4e78f60eec4
dev-python/nose-descriptionfixer 20200531-10:09 mgorny
3c7caae43b6
dev-python/paramunittest 20200531-10:04 mgorny
5b948583b87
dev-python/parsley   20200531-10:05 mgorny
6a9a2798912
dev-python/pastescript   20200531-10:05 mgorny
991a4faf9c4
dev-python/patch 20200531-10:05 mgorny
80328fd5204
dev-python/pgpdump   20200531-10:06 mgorny
fbc2bcab724
dev-python/pillowfight   20200531-10:06 mgorny
44bee57dbda
dev-python/placefinder   20200531-10:09 mgorny
13fd291be70
dev-python/pyalsaaudio   20200531-10:09 mgorny
9b9eb2ecd72
dev-python/pyjade20200531-10:10 mgorny
c84367122f4
dev-python/pyodbc20200531-10:11 mgorny
c84aaacd065
dev-python/pyswisseph20200531-10:11 mgorny
6a8c83d1c5d
dev-python/python-bibtex 20200531-00:02 asturm
6620383efa6
dev-python/python-djvulibre  20200531-10:11 mgorny
e2c21bf91d4
dev-python/pythonmagick  20200531-10:11 mgorny
b1095b04dfe
dev-python/riak-python-client20200531-10:26 mgorny
70c95656a99
dev-python/scoop 20200531-10:14 mgorny
a790f5c6ae1
dev-python/sdnotify  20200531-10:15 mgorny
9e771a69b86
dev-python/sphinxcontrib-googleanalytics 20200531-10:15 mgorny
261a043965e
dev-python/utmp  20200531-10:15 mgorny
0b364503c16
dev-python/versiontools  20200531-10:15 mgorny
b07bd54b4c5
dev-python/xstatic   20200531-10:21 mgorny
dc98212d00b
dev-python/xstatic-bootstrap-scss20200531-10:21 mgorny
3c9f9658bb7
dev-python/xstatic-datatables20200531-10:21 mgorny
e30c84708a7
dev-python/xstatic-jquery20200531-10:21 mgorny
5eef33c8459
dev-python/xstatic-patternfly20200531-10:21 mgorny
04e4e25446c
dev-python/xstatic-patternfly-bootstrap-treeview 20200531-10:21 mgorny
a66b7ea7d39
games-action/rune20200531-10:02 mgorny
a0881c57e89
net-firewall/ufw-frontends   20200529-19:48 asturm
3397c6c8e97
net-irc/quassel-irssi20200531-10:26 mgorny
9c4251f66f7
net-libs/quasselc20200531-10:27 mgorny
c62bb6b2589
sys-auth/AusweisApp2 20200525-14:00 conikost  
f3d76e96e57
sys-cluster/openais  20200531-10:27 mgorny
ab48cfb785a
sys-fs/pysize20200529-19:43 asturm
5f8e0933bbb
www-client/seamonkey-bin 20200531-10:25 mgorny
27c0d7e372a
x11-misc/icewmcp 20200529-19:46 asturm
a1344cc8721
x11-misc/obmenu  20200531-10:04 mgorny
488c0778b6a
x11-misc/obtheme 20200531-10:03 mgorny
0ad950fbeb2
x11-misc/wbarconf20200529-19:47 asturm
7714018b8c4
x11-misc/wmakerconf  20200531-10:27 mgorny
c0c8660b28a
x11-plugins/fsviewer 20200531-10:27 mgorny
f20ea9b282c

Additions:
acct-group/clair 20200530-20:01 williamh  
bc69dd0963b
acct-user/clair  20200530-20:07 williamh  
b34524f
app-metrics/fusioninventory-agent

Re: [gentoo-dev] [RFC] Ideas for gentoostats implementation

2020-05-24 Thread Robin H. Johnson
On Mon, May 04, 2020 at 11:57:03PM +0100, Andrey Utkin wrote:
> Since it is going to be opt-in and optional anyway, we seem to be fine with
> having just partial data.
> 
> I assume we have logs of distfiles downloads from Gentoo infrastructure, and
> can negotiate access to relevant logs of our mirrors. That constitutes partial
> data correlated with users' installation activity, as good as it gets.
This assumption is wrong at the root.

> If we do have some such data, are we using it in any way for the discussed
> purposes?
> 
> If we don't, but could get it, would we be able to use that data for these
> purposes? If no, why?
> 
> If we can't get the data, why?
Simply put: Gentoo does not run the last-mile edge of distfile distribution.

$ dig @ns1.gentoo.org +noall +answer distfiles.gentoo.org IN A
distfiles.gentoo.org.   7200IN  A   64.50.233.100
distfiles.gentoo.org.   7200IN  A   140.211.166.134
distfiles.gentoo.org.   7200IN  A   64.50.236.52
$ echo 140.211.166.134 64.50.233.100 64.50.236.52 |fmt -1 |xargs -n1 dig +short 
-x 
ftp-osl.osuosl.org.
ftp-nyc.osuosl.org.
ftp-chi.osuosl.org.

And historically also TDS & another provider.

Plus all of the regional mirrors that don't even have .gentoo.org
hostnames.

I would like to replace the legacy http://distfiles.gentoo.org/
functionality with a redirection service, at which point you could have
partial data, but it answers a very different question than Goose.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Treasurer
E-Mail   : robb...@gentoo.org
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136


signature.asc
Description: PGP signature


[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2020-05-24 23:59 UTC

2020-05-24 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2020-05-24 23:59 UTC.

Removals:
app-admin/ara 20200523-09:30 mgorny1db2ba29f90
app-admin/installer   20200523-09:30 mgorny09ff3b09b67
app-backup/bup20200523-09:52 mgornyea4ac42ea4f
app-backup/kup20200523-09:52 mgorny409d596d048
app-crypt/gkeys   20200523-09:30 mgorny8d2f337ba3e
app-crypt/manuale 20200523-09:31 mgorny8b110924d6f
app-misc/openastro20200523-09:33 mgorny6c0e233c163
app-misc/openastro-data   20200523-09:33 mgorny21fc9ff1306
app-text/doconce  20200523-09:33 mgorny452767d5ce1
dev-python/cligj  20200523-09:51 mgorny0eecfa6fbed
dev-python/demjson20200523-09:44 mgorny9f02499ad61
dev-python/dexml  20200523-09:44 mgorny2102361b72a
dev-python/django-durationfield   20200523-09:46 mgornyba90d913751
dev-python/django-setuptest   20200523-09:46 mgornyd5f4d13d414
dev-python/django-spurl   20200523-09:46 mgorny942b64bd6e0
dev-python/fabric 20200523-09:25 mgorny9b095454da9
dev-python/filemagic  20200523-09:47 mgornydd6d8e93656
dev-python/flask-bootstrap20200523-09:44 mgorny0bf915ce1aa
dev-python/invoke 20200523-09:26 mgorny439daea00ff
dev-python/ipdbplugin 20200523-09:52 mgorny976fe7cf9dc
dev-python/junit-xml  20200523-09:52 mgornya94b53f4e2d
dev-python/kivy-garden20200523-09:54 mgornybe715c67705
dev-python/potr   20200523-09:27 mgornyfaf686e9ee2
dev-python/pycrypto   20200523-09:28 mgorny09301ae9f54
dev-python/PyDbLite   20200523-09:54 mgornya99a6ac1972
dev-python/rst2pdf20200523-09:43 mgorny8a9bc6d7776
dev-python/URLObject  20200523-09:51 mgornye347f07c429
dev-ruby/libxml   20200523-05:30 graaffad99b66d9fd
dev-tcltk/tcl-mccp20200520-13:10 zlogene   3bf80a01ff1
dev-util/bumpversion  20200523-09:34 mgornyaa8d18f29fe
dev-util/spec-cleaner 20200523-09:34 mgornyb98f5ed0bea
dev-vcs/ghp-import20200523-09:34 mgornyf81936cb8d5
dev-vcs/git-imerge20200523-09:35 mgorny0a9700d7d70
games-misc/OilWar 20200523-08:24 mgornya4560afd406
media-fonts/symbola   20200523-08:27 mgorny62cf7d5a108
media-gfx/qrencode-python 20200523-09:36 mgorny9d872e948bb
media-gfx/svg2rlg 20200523-09:43 mgorny870019d3f18
media-sound/lyvi  20200523-09:37 mgorny888bfbefa0f
media-video/griffith  20200523-09:44 mgorny176d35ce731
net-misc/gns3-converter   20200524-22:38 bman  2412a2c9f40
net-misc/ssvnc20200523-09:24 mgornyc221e57b59e
net-misc/trackma  20200523-09:37 mgornyd0a9de6ebb6
sci-biology/bioruby   20200523-05:30 graaff3ded18d070f
sci-geosciences/gpxpy 20200523-09:39 mgorny995a7185504
sci-geosciences/seawater  20200523-09:39 mgornyb9ce9d9f91a
sci-libs/Fiona20200523-09:40 mgornybf069f689f7
sys-apps/fwupdate 20200523-08:28 mgorny874ae4c3664
sys-boot/raspberrypi-mkimage  20200523-09:40 mgornye20a0fe53f1

Additions:
acct-group/apache 20200518-22:01 dilfridge a051f029599
acct-group/exabgp 20200520-01:13 chutzpah  9767b116546
acct-group/svnusers   20200515-21:56 dilfridge 818b21ac751
acct-user/apache  20200518-22:07 dilfridge 7f5d121b079
acct-user/exabgp  20200520-01:14 chutzpah  391c96e931e
acct-user/svn 20200515-21:57 dilfridge 7ba67bfc1b1
app-arch/lxqt-archiver20200427-19:44 asturm57eff76851b
app-portage/gander20200519-11:16 mgorny3c390008467
dev-cpp/cpp-taskflow  20200523-07:00 tamikofcb2ebb167a
dev-python/pynput 20200522-16:40 zerochaos e21822563d8
dev-python/pyside220200522-16:29 zerochaos 7e19d8487c6
dev-python/python-email-validator 20200519-12:01 mgorny3c0085f33b1
dev-python/shiboken2  20200522-16:33 zerochaos b8a532bc7a5
dev-ruby/brotli   20200523-07:43 graaffaba59edc078
dev-ruby/rantly   20200523-06:56 graaff831d772121d
dev-util/webhook  20200521-05:05 robbat2   b09a6f16b76
gui-apps/kanshi   20200518-11:51 bman  c6bbd5cfd19
media-libs/elgato-streamdeck  20200519-19:51 zerochaos e2263e63d56
media-video/streamdeck-ui 20200522-16:50 zerochaos e21afa26df4
sci-mathematics/sympow20200516-11:02 mjo   fccf8fbb4fe
sci-physics/vmc 

  1   2   3   4   5   6   7   8   9   10   >