Public bug reported: [Availability] The package valkey is already in Ubuntu universe. The package valkey builds for the architectures it is designed to work on. It currently builds and works for architectures: amd64, amd64v3, arm64, armhf, ppc64el, riscv64, s390x Link to package https://launchpad.net/ubuntu/+source/valkey
[Rationale] - The package valkey is required in Ubuntu main to provide an in-memory database in Ubuntu main. - The package valkey will generally be useful for a large part of our user base. - There is no other/better way to solve this that is already in main or should go universe->main instead of this, other than redis which is currently in universe and has lost trust due to license changes. - This is the first time the package will be in main. - All binary packages built by valkey need to be in main to provide the its full functionality. valkey-server contains the server itself, which is the main focus of the package. It requires valkey-tools, which therefore also must be promoted. valkey-sentinel provides HA capabilities for the valkey server along with monitoring. - It would be great and useful to community/processes to have the package valkey in Ubuntu main, but there is no definitive deadline. [Security] - Had around 20 security issues in the past. - https://ubuntu.com/security/cve?package=valkey - https://security-tracker.debian.org/tracker/source-package - Security issues have been handled quickly by upstream, with fixes releases in new micro versions. - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does install services, timers or recurring jobs: valkey.service from valkey-server, sentinel.service from valkey-sentinel. - Packages do not open privileged ports (ports < 1024). - Package does expose an external endpoint, it is a valkey server endpoint on port 6379. - Packages does not contain extensions to security-sensitive software. The valkey package currently does not have an apparmor profile. [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs. - Ubuntu https://bugs.launchpad.net/ubuntu/+source/valkey/+bug - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=valkey - Upstream's bug tracker, https://github.com/valkey-io/valkey/issues - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package runs a test suite on build time, if it fails it makes the build fail, link to build log https://launchpadlibrarian.net/849254419/buildlog_ubuntu-resolute-amd64.valkey_9.0.3-0ubuntu1_BUILDING.txt.gz - The package runs multiple autopkgtests, and they currently pass on the architectures amd64, arm64, armhf, ppc64el, and s390x, link to test logs https://autopkgtest.ubuntu.com/packages/v/valkey [Quality assurance - packaging] - A mechanism to detect and fetch new upstream versions is present and works. - debian/control defines a correct Maintainer field - Please link to a recent build log of the package https://launchpadlibrarian.net/849254419/buildlog_ubuntu-resolute-amd64.valkey_9.0.3-0ubuntu1_BUILDING.txt.gz - Please attach the full output you have got from `lintian --pedantic` as an extra post to this bug. Post below, mostly manpage warnings. - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - The package will not be installed by default. - Packaging and build is easy, link to debian/rules https://git.launchpad.net/ubuntu/+source/valkey/tree/debian/rules [UI standards] - Application is generally not end-user facing (does not need translation). [Dependencies] - Used check-mir from ubuntu-dev-tools to validate all dependencies or recommends are in main. valkey-tools is the only runtime dependency not in main, but that is included in this package. [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - The owning team will be Ubuntu Server and I have their acknowledgment for that commitment. (I am on the server team and will continue to maintain it) - This does not use static builds - This package does not use vendored code. - This package is not rust based - The package has been built within the last 3 months in the archive - Build link on launchpad: The latest amd64 build for example - https://launchpad.net/ubuntu/+source/valkey/9.0.3-0ubuntu1/+build/32315587 This change will not impact other teams [Background information] The Package description explains the package well Upstream Name is Valkey Link to upstream project https://github.com/valkey-io/valkey ** Affects: valkey (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2142907 Title: [MIR] valkey To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/valkey/+bug/2142907/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
