Control: tags -1 patch Niels Thykier:
[...] Hi,
For starters, tagging this one pending, since git now has a fix in the form of `Rules-Requires-Root: binary-targets`:
https://salsa.debian.org/debian/krb5/-/blob/master/debian/control?ref_type=heads#L30
[...]The patch from Guillem looks promising. Given the use of debhelper, and the affected code occurs before dh_fixperms (which has no -X), then I see no path where it could misbuild. If I had been aware of krb5 in my MBF, this is most likely the patch I had provided as well. I can do a rebuild later with deb to confirm 0 delta.
I have now performed the rebuild and Guillem's patch produces bit-for-bit identical .deb files compared to the `Rules-Requires-Root: binary-targets` solution as I assumed it would in my previous email.
That said, the simplest solution is to set `Rules-Requires-Root: binary- targets`, which will push krb5 back to the previous default. So if you are pressed for time/spoons, then pick that route and come back to Guillem's patch later. The primary goal of the MBF was to flip the default; migrating individual packages are nice but secondary.
> [...]This statement is still true. A `Rules-Requires-Root: binary-targets` now is better than a `Rules-Requires-Root: no` that you are uncertain about regardless of the reason for the said (hypothetical) uncertainty. We can always answer lingering questions at a later stage such as post Trixie and migrate krb5 to a fully rootless at that time if relevant.
Best regards, Niels
OpenPGP_signature.asc
Description: OpenPGP digital signature
