Source: ceph
Version: 16.2.10+ds-2
Severity: serious

In lintian-overrides you say:
https://salsa.debian.org/ceph-team/ceph/-/blob/debian/16.2.10+ds-2/debian/source/lintian-overrides#L7
# pybind js source is in src/pybind/mgr/dashboard/frontend/src
ceph source: source-is-missing src/pybind/mgr/dashboard/frontend/dist/*.js

However this is not true. The ceph dashboard is a modern javascript project,
and uses the angular framework.

Ceph upstream distributes the prebuilt js files in
src/pybind/mgr/dashboard/frontend/dist/*.js

First, this is already problematic, since you are expected to build it from
source. But it may not violate the policy.

Then the source is not only src/pybind/mgr/dashboard/frontend/src, you need
all sources of build-dependencies, which are listed at
https://salsa.debian.org/ceph-team/ceph/-/blob/debian/16.2.10+ds-2/src/pybind/mgr/dashboard/frontend/package.json
See dependencies and devDependenciessources in the package.json file.
These are not included in the ceph source package.

Modern javascript projects currently are difficult to build in Debian...
The only _clean_ solution I can think of is to drop ceph-mgr-dashboard
from Debian... But probably there are workarounds to conform our policy.

-- 
Shengjing Zhu

Reply via email to