Public bug reported:

[Availability]
The package librdkafka is already in Ubuntu universe. The package librdkafka 
builds for the architectures it is designed to work on. It currently builds and 
works for architectures: any
Link to package https://launchpad.net/ubuntu/+source/librdkafka

[Rationale]
The package librdkafka is a build-time dependency of many packages, chiefly 
among them Ceph. It is notable an optional dependency, but one that enhances 
applications, typically by providing a highly scalable pub-sub mechanism. In 
Ceph, this is of particular use for bucket notification in the Rados Gateway 
space.

- There is no other/better way to solve this that is already in main or should 
go universe->main instead of this.
- This is the first time package will be in main.
- It would be great and useful to community/processes to have the package 
librdkafka in Ubuntu main. 

[Security]
- history of CVEs does not look concerning and is mostly related to 
librdkafka's dependencies (libssl, mostly).
- Package does not run a daemon as root
- Package does not use webkit1,2
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- The library does not access system resources other than compute and memory.
- Package does not open privileged ports (ports < 1024).
- Package exposes external endpoints, but they are configurable by the users.
- Package does not deal with security attestation (secure boot, tpm, signatures)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is under active development and does not seem to have any, 
long-term & critical, open bugs
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/librdkafka/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=librdkafka
  - Upstream's bug tracker https://github.com/confluentinc/librdkafka/issues
 - The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package includes a non-trivial test suite that includes scenario tests 
and fuzzing.
- The package runs a test suite on build time, if it fails, it makes the build 
fail, as seen in 
https://launchpadlibrarian.net/777052758/buildlog_ubuntu-plucky-amd64.librdkafka_2.8.0-1_BUILDING.txt.gz

The package runs an autopkgtest, and is currently passing on all
architectures we care about, as seen in
https://autopkgtest.ubuntu.com/packages/librdkafka

[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Recent build log of the package: 
https://launchpadlibrarian.net/777052758/buildlog_ubuntu-plucky-amd64.librdkafka_2.8.0-1_BUILDING.txt.gz
- Please attach the full output you have got from
  `lintian --pedantic` as an extra post to this bug.
"""
$ lintian --pedantic
Cannot find a changes file for librdkafka/2.8.0-1. It would be named like:
    librdkafka_2.8.0-1_amd64.changes
    librdkafka_2.8.0-1_multi.changes
    librdkafka_2.8.0-1_all.changes
    librdkafka_2.8.0-1_source.changes
 in any of those places:
    ..
    ../build-area
    /var/cache/pbuilder/result
"""

- This package does not rely on obsolete or about to be demoted packages except 
for pkg-config which will be resolved soon.
- This package has no python2 or GTK2 dependencies

- Packaging and build is easy, link to debian/rules
https://git.launchpad.net/ubuntu/+source/librdkafka/tree/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- I suggest maintaing the current owner or transferring to ubuntu-server
- This does not use static builds
- This does not use vendored code
- This package is not rust based

[Background information]
The Package description explains the package well
Upstream Name is librdkafka
Link to upstream project https://github.com/confluentinc/librdkafka

** Affects: librdkafka (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2119045

Title:
  [MIR] librdkafka

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/librdkafka/+bug/2119045/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to