On Mon, Dec 29, 2025 at 08:13:30PM +0100, Simon Josefsson wrote:
> Sorry for noise, I found the likely reason:

No problem at all -- if anything, I appreciate following up on this and
being as thorough as you are!
 
> https://sources.debian.org/src/geoipupdate/7.1.0-1/debian/control#L8
> 
> That is, you are using 'Build-Depends-Arch' instead of 'Build-Depends'
> to pull in 'golang-github-cenkalti-backoff-dev'.

That's a good find!
 
> None of my methods to find reverse build dependencies seem to deal with
> this.
> 
> I'm reading
> https://www.debian.org/doc/debian-policy/ch-relationships.html about the
> header, but it doesn't manage to enlighten me.  I don't recall using
> this header myself, so I don't know its exact semantics.
> 
> Is 'geoipupdate' right to use Build-Depends-Arch here?

Excellent question. Quite honestly I don't recall how this got there;
according to git, this dates back to the original packaging of the Go
version in 2019. 

However, the control file was partially created using dh-make-golang,
and its changelog entry for version 0.3.3-1 provides a clue:
>    - Move Build-Depends-{Arch,Indep} back into Build-Depends.
>      For Go packages, golang-any and dependencies are always needed
>      regardless of whether we are building a program or a library,
>      and it is not like we need e.g. texinfo to build *-doc packages,
>      so the use Build-Depends-Arch and Build-Depends-Indep served
>      no purpose other than unnecessarily complicating things.

So I believe this is a historical artifact at this point. I just pushed
a change to geoiupdate's git to deprecate this B-D-Arch usage, which
will find its way into the next release.

> Why doesn't 'dak rm' complain about removing a package?
> 
> Why doesn't ratt/dose identify this package?

These are both good questions, and I think orthogonal to whether
geoipupdate was correct or not to use B-D-Arch.

Regards,
Faidon

Reply via email to