Hello, On 2025-05-08 08:09, Phil Wyett wrote:
The package is looking promising. Will tag as 'confirmed' and hope a DD will find the time to review and possibly sponsor your package.
I am interested in having DuckDB in Debian. Thanks Mocus Zhang for working on it!
I gave the packaging on salsa.debian.org a look. I have the following comments:
1. I noticed in debian/patches/add-soname you are adding a soname to a shared library. Doing so on Debian side (via patch) is generally frowned upon. This should be done by the upstream, as only they can (or cannot) guarantee the API/ABI compatibility of their shared library. Thus I would suggest either upstreaming the soname or dropping the shared library altogether. Breaking API/ABI compatibility causes real mess.
2. Have you considered unembedding third-party sources, especially mbedtls? Many of the embedded sources seem to be packaged in Debian (at least brotli, mbedtls, snappy, thrift). Embedded sources cause unnecessary package bloat and, more important, issues with security.
Best wishes, Andrius
