Hi,

On Fri, 18 Oct 2019, Moritz Mühlenhoff wrote:
> > I started having a look at packaging the new upstream release of
> > rekall, to support python 3 (mostly because rekall is a r-dep of some
> > of the packages i maintain). For now it looks like the most immediate
> > need is to get aff4 ported to python3, as it's a strong dependency of
> > rekall, so i filed #936091
> 
> JFTR, src:pyaff4 is now in the archive.

We prepared the update in git a while ago, I uploaded it to experimental
because I'm not sure that it's really working at this point. I'm not a
rekall user and would like Hilko and/or Sasha to have a look at it.

But I wanted to upload it right now because of the binary-NEW delay that
we will have in any case...

In fact, I'm pretty sure it's broken. I get the same error when I run
debian/tests/linux-image-tests and when I run "rekal --filename
/proc/kcore":

[...]
  File "/usr/lib/python3/dist-packages/rekall/plugins/addrspaces/aff4.py", line 
125, in __init__
    os.path.join(cache_dir, "aff4_cache")))
TypeError: Set() missing 1 required positional argument: 'value'

Looks like rekall needs an older version of pyaff4 :-(

https://github.com/google/rekall/issues/493

Since rekall is the only reverse dependency I will likely prepare
a 0.27+really0.26.post6 for python3-pyaff4 unless you feel like patching
the code for this update:
https://github.com/aff4/pyaff4/commit/c72c52ab1faea21ca1afb331d5bdf31270fe3dc2

I don't know if there are others API breaking change in 0.27.

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Support Debian LTS: https://www.freexian.com/services/debian-lts.html
Learn to master Debian: https://debian-handbook.info/get/

Reply via email to