Re: Javascript trigger design

2014-12-01 Thread Thorsten Glaser
On Sat, 29 Nov 2014, Thomas Goirand wrote:

> 2/ in debian/openstack-dashboard.postinst, implement something like:
> 
> if [ "$1" = "triggered" ] ; then
>   /usr/share/openstack-dashboard/manage.py compress --force
> fi
> 
> Is it *that* simple?

No, triggers unfortunately are not that simple: if you install/upgrade
openstack-dashboard together with some of the packages it wants a
trigger on, $1="triggered" will sometimes not happen, only "configure".

Have a look at these:

• 
https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=evolvis-platfrm/evolvisforge.git;a=blob;f=mw-plugin/debian/triggers;h=723d1c077e3cf10350952cf9ded297b85cfde812;hb=HEAD
• 
https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=evolvis-platfrm/evolvisforge.git;a=blob;f=mw-plugin/debian/postinst;h=fa480512bf5b32bcfe5412544159a158e6cfab08;hb=HEAD

The thing to call when triggered is the upgrade_mediawikis shell
function, it’s called from the “triggered” case, but also from
the regular “configure” case. This is suboptimal, but apparently
needed.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1412010922450.1...@tglase.lan.tarent.de



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Thorsten Glaser
On Fri, 28 Nov 2014, Philipp Kern wrote:

> On Fri, Nov 28, 2014 at 04:40:50PM +0100, Thorsten Glaser wrote:
> > Hey, there are *still* bugs found because of s390 (not s390x).
> 
> Uhm. s390x is 64bit BE; ppc64 and sparc64 never made it into the archive.

Sure, but I was thinking of other issues, like ptrdiff_t.

bye,
//mirabilos
-- 
tarent solutions GmbH
Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/
Tel: +49 228 54881-393 • Fax: +49 228 54881-235
HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941
Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1412011037570.1...@tglase.lan.tarent.de



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Thorsten Glaser
On Sat, 29 Nov 2014, Svante Signell wrote:

> The best for kFreeBSD and Hurd would be to abandoning the Debian ship.

No.

> It is sinking

It has sunk, but not gone underwater yet completely.

> (just let the devuan people get things in order first)

And can you *please* *stop* the devuan trolling? Thanks.

bye,
//mirabilos
-- 
Yes, I hate users and I want them to suffer.
-- Marco d'Itri on gmane.linux.debian.devel.general


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1412011044080.1...@tglase.lan.tarent.de



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Thorsten Glaser
On Sat, 29 Nov 2014, Axel Wagner wrote:

[…]
> Axel Wagner

*plonk*

Congrats, you’re the second person, after Josselin.

(No, this eMail was not the only one, just the one to trigger overflow.)


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1412011045510.1...@tglase.lan.tarent.de



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Matthias Urlichs
Hi,

Thorsten Glaser:
> > Axel Wagner
> *plonk*

There have been much worse emails here than calling somebody a troll for
intentionally posting misleading information.

If it quacks like a duck, and all that.

The only other reason for you to plonk Axel I could find (after reading the
last couple of his mails here) is that he happens to disagree with you.

If you intend to appear unreasonable, then I suppose this helps.
Otherwise, not so much.

-- 
-- Matthias Urlichs


signature.asc
Description: Digital signature


Re: Bug#771668: RFP: etherpad -- edit documents collaboratively in real-time in your browser

2014-12-01 Thread Andrei POPESCU
Control: reassign -1 wnpp
Control: severity -1 wishlist

On Lu, 01 dec 14, 13:05:32, Pander wrote:
> Package: etherpad

Is this the same as

#576998  ITP: etherpad-lite -- web based collaborative real-time editor

?

> Severity: RFP
> 
> See also and link to https://bugs.launchpad.net/ubuntu/+bug/1397373
> 
> description: Etherpad allows you to edit documents collaboratively in
> real-time, much like a live multi-player editor that runs in your
> browser. Write articles, press releases, to-do lists, etc. together with
> your friends, fellow students or colleagues, all working on the same
> document at the same time.
> 
> url: http://etherpad.org
> 
> license: Apache License (AL) 2.0
> 
> (Please let me know if I am using the correct format for RFP because my
> previous requests were added additional control tags.)

As per[1] you want 'Package: wnpp' and 'Severity: wishlist' (mind the 
"and their corresponding severities to be used are:").

Any particular reason for not using 'reportbug'[2]?

[1] http://www.debian.org/devel/wnpp/#l2
[2] http://www.debian.org/devel/wnpp/#l1

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt


signature.asc
Description: Digital signature


Re: [Pkg-javascript-devel] Javascript trigger design

2014-12-01 Thread Thomas Goirand
On 11/29/2014 06:10 PM, Jérémy Lal wrote:
> Le vendredi 28 novembre 2014 à 20:46 +0100, Jonas Smedegaard a écrit :
>> Quoting Thorsten Glaser (2014-11-28 13:20:36)
>>> On Fri, 28 Nov 2014, Thomas Goirand wrote:
>>>
 It's been a long time I've been thinking about it, and I believe that 
 the only way to do this, would be to use triggers. Though I have 
 never
>>
>>> Look at libjs-protoaculous which combines prototype and scriptaculous 
>>> into one (possibly minified) js file. In (our inhouse version of) 
>>> FusionForge, we just depend on it, and it contains all the trigger and 
>>> dependency magic needed for that.
>>
>> Just looking at the package name that seems not an ideal aproach: Should 
>> we then make packages for each combination of libraries to be merged 
>> together, or am I missing a more clever logic?  Or do you perhaps point 
>> at that package not suggesting duplicating it but instead cherry-picking 
>> triggers for a system-wide structure?
> 
> I suggest bundling javascript, stylesheets, images, assets in general
> should be done using a custom, per-package, makefile (or makefile
> target). Something in postinst ?
> You can't standardize upon absence of standard.
> 
> Jérémy.

That's what I'm doing already, it's just that I *also* need to do it
when a javascript package is upgraded.

Cheers,

Thomas


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/547c608c.7000...@debian.org



Re: [Pkg-javascript-devel] Javascript trigger design

2014-12-01 Thread Jérémy Lal
Le vendredi 28 novembre 2014 à 07:04 +0800, Thomas Goirand a écrit :
> Hi,
> 
> Web application have evolved into monsters that needs lots of
> javascript. It's very common that these javascript applications are
> collecting all the .js library they use, concatenate them into a single
> file, and compress the result using all sorts of tools (node uglify is
> one of the implementation, but that's not the only one).
> 
> As much as possible, as good Debian citizens, we do package each and
> every javascript library into a separate package. But then, if there's
> an update of that JS library, the Web application package has to somehow
> know about it, and redo the concatenate & compress job. Otherwise, the
> web app would continue to use the old version.
> 
> I have this issue with the OpenStack dashboard (ie: Horizon), but also
> with a second web app which I'm currently packaging (OpenStack Fuel,
> which is a deployment software for OpenStack). Though this could of
> course be generalize to any JS app.
> 
> It's been a long time I've been thinking about it, and I believe that
> the only way to do this, would be to use triggers. Though I have never
> used triggers, and I thought it was a good idea to ask my DD friends and
> this list about it. Should there be one trigger per web app? How would
> this work?
> 
> Thoughts anyone? Jonas maybe, who did lots of JS packaging?

Instead of triggers, i'd rather make sure the web application package is
rebuilt whenever one of its Build-Depends package is updated.
That way, updates of bundled assets would be handled by the same
migration process as library updates.
Is it possible ?

Jérémy.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/1417438946.27821.14.ca...@melix.org



floating point testsuites on softfloat buildds

2014-12-01 Thread Michael Banck
Hi,

some of my packages (e.g. nwchem, but others as well) have
floating-point heavy testsuites becuse they are scientific computing
applications.

The current state on mips (but not mipsel) is that the testsuite
routinely takes too long on some autobuilders, so that sbuild kills it
after a testcase has not finished in the configured timeout (up to 5
hours).

I had another look today, and it seems this is due to most of the mips
autobuilders not having an FPU.  The same testcase (cosmo_h3co):

mips (mips-aql-01): 
524.3u 4873.9s 1:30:56.17 98.9% (0t+0ds+0avg+31986max)k 0i+0o 0pf 0swaps

mips (ball):
76.5u 1.9s 1:18.45 100.0% (0t+0ds+0avg+27876max)k 0i+286136o 0pf 0swaps

armel (hartmann):
395.8u 1.7s 6:37.76 99.9% (0t+0ds+0avg+31418max)k 0i+291224o 0pf 0swaps

i386 (brahms):
10.9u 0.5s 0:11.43 100.0% (0t+0ds+0avg+27026max)k 0i+285672o 0pf 0swaps

As you can see, the system is below 2 seconds for all buildds, except
for mips-aql-01, where it is almost 5000 seconds.  Obviously, this is
due to floating point emulation in the kernel.  

So far, I have been requesting a give-back each time it FTBFS on a mips
autobuilder and hoped that it might hit ball next time, but this is not
a sustainable approach in my opinion.

So I think there are some things to consider here:

1. Is it OK for an autobuilder not to have an FPU?

2. Is it OK for an architecture to only have autobuilders without FPUs?

3. If 1 but not 2 are OK, should there be a way for packages to say "I
should really be built on a buildd without softfloat"?

One proposal might be to add something like "XS-Buildd-Flags: hardfloat"
to debian/control for packages, which ship a floating-point heavy
testsuite as a first step.  This could possibly be extended for other
buildd machine-specific features (though I am not sure off-hand which
would benefit).


Michael


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20141201132211.gh1...@raptor.chemicalconnection.dyndns.org



Re: floating point testsuites on softfloat buildds

2014-12-01 Thread Johannes Schauer
Hi,

Quoting Michael Banck (2014-12-01 14:22:12)
> 3. If 1 but not 2 are OK, should there be a way for packages to say "I should
>really be built on a buildd without softfloat"?
> 
> One proposal might be to add something like "XS-Buildd-Flags: hardfloat"
> to debian/control for packages, which ship a floating-point heavy
> testsuite as a first step.  This could possibly be extended for other
> buildd machine-specific features (though I am not sure off-hand which
> would benefit).

I was recently told in #debian-mentors that one can mail
${arch}@buildd.debian.org to restrict the buildd's on which a package is built
for architecture ${arch}. This might be able to solve your problem for now.

I would welcome a way that allows adding metadata to my source packages which
restricts the selection of buildd's it's built on.

For example I recently removed the --parallel argument from the dh invocation
in the d/rules of my package "vcmi" because individual calls to c++ easily eat
up to 2.3 GB of memory which leads to failures due to heavy swapping on buildds
that set DEB_BUILD_OPTIONS=parallel=5 but only have 4 GB of physical RAM.

So in addition to asking for "hardfloat" it would be handy if one could specify
the required memory consumption as a function of parallel jobs such that either
the right buildd can be selected or the number of jobs can be reduced
accordingly.

cheers, josch


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141201144756.6173.44130@hoothoot



Re: Architectures where unaligned access is (not) OK?

2014-12-01 Thread Edmund Grimley Evans
Usually when you're loading an unaligned value you're also loading a
particular representation and endianness, which might not be the
native one, so I've often written code like this:

uint32_t load32(void *p)
{
  unsigned char *c = p;
  return
c[0] | (uint32_t)c[1] << 8 | (uint32_t)c[2] << 16 | (uint32_t)c[3] << 24;
}

(The first of the three casts isn't really necessary ...)

Unfortunately, GCC doesn't seem to turn that into a single load
instruction even when it could be. (Why not?)

If you know that you want the native representation and endianness
there's this possibility:

uint32_t load32(void *p)
{
  uint32_t r;
  memcpy(&r, p, sizeof(r));
  return r;
}

GCC turns that into a single load instruction on i386, amd64 and arm64.

Edmund


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAHDciUexgfHwWX_ijWrC1NWqhX7sc_3ktGwU8Ya4Ntjq_UX=f...@mail.gmail.com



Re: Bug#762194: Summary:Re: Bug#762194: Proposal for upgrades to jessie (lendows 1)

2014-12-01 Thread Wolodja Wentland
On Sat, Nov 29, 2014 at 12:30 -0800, Steve Langasek wrote:
> On Sat, Nov 29, 2014 at 08:14:07PM +0100, Philipp Kern wrote:

> > That's even more unlikely than to add a debconf message (which would be
> > package-owned). Yes, debian-installer is frozen. This would add new
> > udebs, new strings, new everything. We're actually trying to release.
> 
> Debian releases when it's ready.  If large numbers of our users are going to
> have a bad experience with jessie as a result of being switched to systemd,
> then we should take appropriate steps to address that, even if that means
> unfreezing the installer.

Indeed. Jessie should be released once "large numbers of our users [will] no
longer have a bad experience as a result of being switched to systemd [because
all relevant bugs have been fixed]".

As somebody who is active in user support on IRC I dread the jessie release if 
it
means that we will ask people for years to come if they have switched to systemd
after their upgrade and, if not, walk them through the process. So far most
users who had a bad experience with jessie did so because they did *not* switch
and the fact that -shim wasn't ready.

"having a bad experience" should directly translate into bugs that can, and have
to, be fixed before the release. I would welcome a more technical discussion at
this point rather than an emotional one.

Thank you and everybody else for their wonderful work and patience.
-- 
Wolodja 

4096R/CAF14EFC
081C B7CD FF04 2BA9 94EA  36B2 8B7F 7D30 CAF1 4EFC


signature.asc
Description: Digital signature


Re: [Pkg-javascript-devel] Javascript trigger design

2014-12-01 Thread Thorsten Glaser
On Mon, 1 Dec 2014, Jérémy Lal wrote:

> Instead of triggers, i'd rather make sure the web application package is
> rebuilt whenever one of its Build-Depends package is updated.

No, that’s too fragile and ties up way too many resources.
It’s fully OK to compose the final version on the users’
systems, and use rather broad versioning to restrict the
acceptable versions of the external things, if at all needed.

> That way, updates of bundled assets would be handled by the same
> migration process as library updates.

Actually no: they would be handled as *static* libraries.
The postinst/trigger method would be the same as dynamic libraries.

> Is it possible ?

Yes, but who’d be doing the work?

bye,
//mirabilos
-- 
Sometimes they [people] care too much: pretty printers [and syntax highligh-
ting, d.A.] mechanically produce pretty output that accentuates irrelevant
detail in the program, which is as sensible as putting all the prepositions
in English text in bold font.   -- Rob Pike in "Notes on Programming in C"


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/alpine.deb.2.11.1412011749030.1...@tglase.lan.tarent.de



Re: Bug#762194: Summary:Re: Bug#762194: Proposal for upgrades to jessie (lendows 1)

2014-12-01 Thread Tomas Pospisek
Am 29.11.2014 um 22:01 schrieb Philipp Kern:
> On 2014-11-29 21:30, Steve Langasek wrote:
>> Debian releases when it's ready.  If large numbers of our users are
>> going to
>> have a bad experience with jessie as a result of being switched to
>> systemd,
>> then we should take appropriate steps to address that, even if that means
>> unfreezing the installer.
> 
> Sure. But where is the evidence for that? Is there a bug that has been
> agreed upon to be RC?

Whoever upgrades their lxc guests without taking further informed action
(such as switching back to sysv), will not be able to start their LXC VM
at the next reboot( #766233 [1]).

This is currently classified as "a bug which has a major effect on the
usability of a package, without rendering it completely unusable to
everyone." and thus not RC, so if being RC is currently the precondition
to fix stuff in jessie, then you are right.

Unless at least respective documentation gets included in the release
notes (#762194 [2]) I think there will be some future unhappiness.

At this moment it's a trap waiting to be walked into.
*t

[1] http://bugs.debian.org/766233
[2] https://bugs.debian.org/762194


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/547c9de8.5020...@sourcepole.ch



Re: floating point testsuites on softfloat buildds

2014-12-01 Thread Bastien ROUCARIES
On Mon, Dec 1, 2014 at 2:22 PM, Michael Banck  wrote:
> Hi,
>
> some of my packages (e.g. nwchem, but others as well) have
> floating-point heavy testsuites becuse they are scientific computing
> applications.
>
> The current state on mips (but not mipsel) is that the testsuite
> routinely takes too long on some autobuilders, so that sbuild kills it
> after a testcase has not finished in the configured timeout (up to 5
> hours).
>
> I had another look today, and it seems this is due to most of the mips
> autobuilders not having an FPU.  The same testcase (cosmo_h3co):
>
> mips (mips-aql-01):
> 524.3u 4873.9s 1:30:56.17 98.9% (0t+0ds+0avg+31986max)k 0i+0o 0pf 0swaps
>
> mips (ball):
> 76.5u 1.9s 1:18.45 100.0% (0t+0ds+0avg+27876max)k 0i+286136o 0pf 0swaps
>
> armel (hartmann):
> 395.8u 1.7s 6:37.76 99.9% (0t+0ds+0avg+31418max)k 0i+291224o 0pf 0swaps
>
> i386 (brahms):
> 10.9u 0.5s 0:11.43 100.0% (0t+0ds+0avg+27026max)k 0i+285672o 0pf 0swaps
>
> As you can see, the system is below 2 seconds for all buildds, except
> for mips-aql-01, where it is almost 5000 seconds.  Obviously, this is
> due to floating point emulation in the kernel.
>
> So far, I have been requesting a give-back each time it FTBFS on a mips
> autobuilder and hoped that it might hit ball next time, but this is not
> a sustainable approach in my opinion.
>
> So I think there are some things to consider here:
>
> 1. Is it OK for an autobuilder not to have an FPU?
>
> 2. Is it OK for an architecture to only have autobuilders without FPUs?
>
> 3. If 1 but not 2 are OK, should there be a way for packages to say "I
> should really be built on a buildd without softfloat"?
>
> One proposal might be to add something like "XS-Buildd-Flags: hardfloat"
> to debian/control for packages, which ship a floating-point heavy
> testsuite as a first step.  This could possibly be extended for other
> buildd machine-specific features (though I am not sure off-hand which
> would benefit).

float are emulated on kernel. Maybe a partial subarch building with
softfloat will be worthwhile.

Bastien

>
> Michael
>
>
> --
> To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: 
> https://lists.debian.org/20141201132211.gh1...@raptor.chemicalconnection.dyndns.org
>


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAE2SPAbDprdg-gy2RU9XPatZCM-T59e=wpzu5yh7ef-0bkf...@mail.gmail.com



Re: Bug#762194: Summary:Re: Bug#762194: Proposal for upgrades to jessie (lendows 1)

2014-12-01 Thread Jonas Smedegaard
Quoting Tomas Pospisek (2014-12-01 17:57:12)
> Am 29.11.2014 um 22:01 schrieb Philipp Kern:
>> On 2014-11-29 21:30, Steve Langasek wrote:
>>> Debian releases when it's ready.  If large numbers of our users are 
>>> going to have a bad experience with jessie as a result of being 
>>> switched to systemd, then we should take appropriate steps to 
>>> address that, even if that means unfreezing the installer.
>>
>> Sure. But where is the evidence for that? Is there a bug that has 
>> been agreed upon to be RC?
>
> Whoever upgrades their lxc guests without taking further informed 
> action (such as switching back to sysv), will not be able to start 
> their LXC VM at the next reboot( #766233 [1]).
>
> This is currently classified as "a bug which has a major effect on the 
> usability of a package, without rendering it completely unusable to 
> everyone." and thus not RC, so if being RC is currently the 
> precondition to fix stuff in jessie, then you are right.
>
> Unless at least respective documentation gets included in the release 
> notes (#762194 [2]) I think there will be some future unhappiness.
>
> At this moment it's a trap waiting to be walked into.
> *t
>
> [1] http://bugs.debian.org/766233
> [2] https://bugs.debian.org/762194

What does "evidence" even mean here?

I expect systemd itself to be in good shape, not buggy.  But I do 
suspect that Debian-with-systemd is in lesser good shape, especially on 
existing systems some of which were creating by standards now 
discouraged (e.g. / and /usr on separate partitions).  By switching init 
system we are "shaking the tree", revealing bugs in other code which lay 
dormant till now.

Molly-guard seems to now fail on systems with separate / and /usr due to 
/usr being unmounted before molly-guard is called (bug#771572) - smells 
like broken init system interactions, but likely an old bug in 
Molly-guard just not revealed until exposed to a modern init system.

Should that bug be RC?

How to collect potential evidence, while playing nice with systemd 
maintainers, release team and others who are less worried?


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: signature


Re: curl and certificate verification in jessie

2014-12-01 Thread Alessandro Ghedini
On lun, dic 01, 2014 at 11:18:19 +0100, Tollef Fog Heen wrote:
> > > Is this intentional, or is that a bug in either gnutls, curl, or the 
> > > software
> > > using these libraries?
> > 
> > AFAICT this is due to the gnutls26 -> gnutls28 switch. Using libgnutls-dev 
> > to
> > build curl instead of libgnutls28-dev makes it possible to point 
> > CURLOPT_CAINFO
> > to a single leaf certificate and have the verification succeed.
> >
> > FWIW the current behaviour is the same with openssl. I don't know if 
> > there's a
> > reason for it though.
> 
> Can we get it reverted/fixed?

If you are asking if curl is gonna go back to gnutls26, I don't think that's
gonna happen. AFAICT it's not maintained upstream anymore and gnutls28 provides
stuff like ECC support that's IMO more important.

As for fixing it, you need to discuss this with the gnutls maintainers.

> We consider it a security-related regression compared to wheezy and while we
> could run private builds of the code on debian.org, that'd be pretty silly
> (and a waste of manpower).

What does "security-related regression" mean? (if anything this makes security
checks tighter). The problem, I think, is that you provide curl (and thus
gnutls) with a CA certificate that doesn't actually sign the end certificate of
the site you are trying to connect to (even if the two are the same
certificate).

Again, I don't know if this is intended or not, you need to talk with the gnutls
maintainers.

Cheers


signature.asc
Description: Digital signature


Re: curl and certificate verification in jessie

2014-12-01 Thread Daniel Kahn Gillmor
On 12/01/2014 01:50 PM, Alessandro Ghedini wrote:
> On lun, dic 01, 2014 at 11:18:19 +0100, Tollef Fog Heen wrote:
 Is this intentional, or is that a bug in either gnutls, curl, or the 
 software
 using these libraries?
>>>
>>> AFAICT this is due to the gnutls26 -> gnutls28 switch. Using libgnutls-dev 
>>> to
>>> build curl instead of libgnutls28-dev makes it possible to point 
>>> CURLOPT_CAINFO
>>> to a single leaf certificate and have the verification succeed.
>>>
>>> FWIW the current behaviour is the same with openssl. I don't know if 
>>> there's a
>>> reason for it though.
>>
>> Can we get it reverted/fixed?
> 
> If you are asking if curl is gonna go back to gnutls26, I don't think that's
> gonna happen. AFAICT it's not maintained upstream anymore and gnutls28 
> provides
> stuff like ECC support that's IMO more important.

I agree with Alessandro here: we definitely don't want to revert to
GnuTLS the 2.x series (gnutls26).  gnutls 3.x (gnutls28) is the only
viable option for jessie.

> What does "security-related regression" mean? (if anything this makes security
> checks tighter).

I'm not convinced by this argument.  Saying "i'll only accept the
following end-entity cert" is a tighter check than "i'll only accept a
cert for the end-entity certified by this CA".

However, the semantics of the CURLOPT_CAINFO call are squishy on whether
it can be used to mean the former.  And CURLOPT_ISSUERCERT appears to
have the same constraint.

Modern versions of GnuTLS have a TOFU facility [0] (similar to
known_hosts of Openssh) which could be used for the former approach, but
i don't see any way to reach that mechanism from curl.

--dkg

[0] http://gnutls.org/manual/gnutls.html#Trust-on-first-use



signature.asc
Description: OpenPGP digital signature


Bug#771708: ITP: mrtdreader -- Machine-readable travel document library and example program

2014-12-01 Thread Ruben Undheim
Package: wnpp
Severity: wishlist
Owner: Ruben Undheim 

* Package name: mrtdreader
  Version : 0.1.0
  Upstream Author : Ruben Undheim 
* URL : https://github.com/rubund/mrtdreader
* License : GPL-3+
  Programming Lang: C
  Description : Machine-readable travel document library and example program


This package contains the library libmrtd and the command line tool mrtdreader.

Machine-readable travel documents such as passports nowadays usually contain an 
RFID chip for storing various data. This library provides useful functions for 
reading out the data from these documents. This version of the library supports 
the Basic Access Control (BAC). It uses several cryptographic functions from 
either libgcrypt or libtomcrypt (depending on compile-time options - for debian 
currently libgcrypt) in order to do the necessary decryption of the content of 
the MRTDs. The key for the BAC-scheme is derived from the Machine-readable zone 
(MRZ) which is printed on the MRTD. 
 
The library depends on libnfc for the hardware interaction and only devices 
supported by libnfc will therefore work.

I think such a library is a useful addition to the debian package repository. 
It is a good example for using the libnfc library on which there are still 
rather few packages that depend.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20141201200252.2223.87389.report...@miniserver.beebeetle.com



Re: curl and certificate verification in jessie

2014-12-01 Thread J.A. Bezemer


On Mon, 1 Dec 2014, Alessandro Ghedini wrote:


On lun, dic 01, 2014 at 11:18:19 +0100, Tollef Fog Heen wrote:

Is this intentional, or is that a bug in either gnutls, curl, or the software
using these libraries?


AFAICT this is due to the gnutls26 -> gnutls28 switch. Using libgnutls-dev to
build curl instead of libgnutls28-dev makes it possible to point CURLOPT_CAINFO
to a single leaf certificate and have the verification succeed.

FWIW the current behaviour is the same with openssl. I don't know if there's a
reason for it though.


Wild guess: a certificate may indicate, in optional extra fields, if the 
signer intended it to act as CA. For example in Firefox certificate 
details, these are listed under "Extensions" as "Certificate Basic 
Constraints", "Certificate Key Usage" and/or "Netscape Certificate Type". 
It might be that modern gnutls/openssl are actually enforcing these 
fields, which would cause a single-server certificate to be considered 
invalid for CA purposes. And there might possibly be some way to override 
that decision.


Just my 2c,

Anne Bezemer


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/pine.lnx.4.64.1412012029400@wormhole.robuust.nl



Bug#771718: general: Screen blanks and does not come back up unless system is suspended

2014-12-01 Thread Rik Theys
Package: general
Severity: normal

Hi,

I was thus far unable to pinpoint which component causes this behaviour as I can
not find anything in my logs (and/or journal). I have therefore assigned it
to general. Feel free to change to a more appropriate package.

I'm using KDE on Jessie with gdm3 as the login manager. The system has
systemd installed. When the system is idle for few minutes (but before the
limit set in the KDE screensaver settings), the screen will blank and will not
come back on keypress or mouse movements. I have to close the lid of the laptop
to let the system suspend. After resume I will get the unlock window
of the screensaver and can continue working.

I can login using SSH when this happens but couldn't find anything in the logs
that could explain this.

Any ideas on how to further debug this issue is appreciated. Are there any
other reports about similar behaviour?

Regards,

Rik



-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141201210250.5522.37293.reportbug@earth



Re: curl and certificate verification in jessie

2014-12-01 Thread Tollef Fog Heen
]] Alessandro Ghedini 

> On lun, dic 01, 2014 at 11:18:19 +0100, Tollef Fog Heen wrote:
> > > > Is this intentional, or is that a bug in either gnutls, curl, or the 
> > > > software
> > > > using these libraries?
> > > 
> > > AFAICT this is due to the gnutls26 -> gnutls28 switch. Using 
> > > libgnutls-dev to
> > > build curl instead of libgnutls28-dev makes it possible to point 
> > > CURLOPT_CAINFO
> > > to a single leaf certificate and have the verification succeed.
> > >
> > > FWIW the current behaviour is the same with openssl. I don't know if 
> > > there's a
> > > reason for it though.
> > 
> > Can we get it reverted/fixed?
> 
> If you are asking if curl is gonna go back to gnutls26, I don't think that's
> gonna happen. AFAICT it's not maintained upstream anymore and gnutls28 
> provides
> stuff like ECC support that's IMO more important.

I'm not asking for a particular course of action, I'm asking for a
specific goal to be reached.  (I otherwise agree that going back to
gnutls26 isn't a good idea.)

> As for fixing it, you need to discuss this with the gnutls maintainers.

That's why they are copied on the mail too.

> > We consider it a security-related regression compared to wheezy and while we
> > could run private builds of the code on debian.org, that'd be pretty silly
> > (and a waste of manpower).
> 
> What does "security-related regression" mean? (if anything this makes security
> checks tighter).

No, it doesn't necessarily.  As dkg points out, I can no longer say
«this service should have this particular cert».  This makes us
vulnerable to compromises of the CA that provides the cert for a given
service and a lowering of the overall security in this particular setup.

> The problem, I think, is that you provide curl (and thus gnutls) with
> a CA certificate that doesn't actually sign the end certificate of the
> site you are trying to connect to (even if the two are the same
> certificate).

Well, it's not a CA certificate. :-)

> Again, I don't know if this is intended or not, you need to talk with the 
> gnutls
> maintainers.

Again, they're Cc-ed.

-- 
Tollef Fog Heen
UNIX is user friendly, it's just picky about who its friends are


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87oarngjv0@aexonyam.err.no



Bug#771718: general: Screen blanks and does not come back up unless system is suspended

2014-12-01 Thread Julien Cristau
On Mon, Dec  1, 2014 at 22:02:50 +0100, Rik Theys wrote:

> Package: general
> Severity: normal
> 
> Hi,
> 
> I was thus far unable to pinpoint which component causes this behaviour as I 
> can
> not find anything in my logs (and/or journal). I have therefore assigned it
> to general. Feel free to change to a more appropriate package.
> 
> I'm using KDE on Jessie with gdm3 as the login manager. The system has
> systemd installed. When the system is idle for few minutes (but before the
> limit set in the KDE screensaver settings), the screen will blank and will not
> come back on keypress or mouse movements. I have to close the lid of the 
> laptop
> to let the system suspend. After resume I will get the unlock window
> of the screensaver and can continue working.
> 
> I can login using SSH when this happens but couldn't find anything in the logs
> that could explain this.
> 
> Any ideas on how to further debug this issue is appreciated. Are there any
> other reports about similar behaviour?
> 
The debian bug tracking system is not a user support forum.  The
'general' pseudo package even less so.  There are other places for this,
such as the debian-user list.

Cheers,
Julien


signature.asc
Description: Digital signature


Using USB serial device with a cdc-acm driver

2014-12-01 Thread Dmitriy Fitisov
Hello everyone,
we have a small device of our own, which communicates through serial USB on 
Windows.
Now we need it to work on Raspberry (yes, I know this is Debian, which is 
Raspberry based on).
USB descriptors configured as a modem, so, when I connect it to Linux, cdc-acm 
module is loaded.
However, there is apparently some process which is watching modems, so on 
connection
I got some info on my device - on Ubuntu it is AT commands, for which I have 
adapted firmware
(seems ModemManager is running), but on Raspberry I cannot find out what 
process attaches 
to my "modem" and what it wants. 
It sends a data similar to terminal control sequence. 
Where should I look at? I want to turn this process off.
Ubuntu does not use inittab anymore, but Raspberry seems still uses.
I do not see anything suspicious in /etc/inittab:


# /etc/inittab: init(8) configuration.
# $Id: inittab,v 1.91 2002/01/25 13:35:21 miquels Exp $

# The default runlevel.
id:2:initdefault:

# Boot-time system configuration/initialization script. 
# This is run first except when booting in emergency (-b) mode.
si::sysinit:/etc/init.d/rcS

# What to do in single-user mode.
~~:S:wait:/sbin/sulogin

# /etc/init.d executes the S and K scripts upon change
# of runlevel.
#
# Runlevel 0 is halt.
# Runlevel 1 is single-user.
# Runlevels 2-5 are multi-user.
# Runlevel 6 is reboot. 

l0:0:wait:/etc/init.d/rc 0
l1:1:wait:/etc/init.d/rc 1
l2:2:wait:/etc/init.d/rc 2
l3:3:wait:/etc/init.d/rc 3
l4:4:wait:/etc/init.d/rc 4
l5:5:wait:/etc/init.d/rc 5
l6:6:wait:/etc/init.d/rc 6
# Normally not reached, but fallthrough in case of emergency.
z6:6:respawn:/sbin/sulogin

# What to do when CTRL-ALT-DEL is pressed.
ca:12345:ctrlaltdel:/sbin/shutdown -t1 -a -r now

# Action on special keypress (ALT-UpArrow).
#kb::kbrequest:/bin/echo "Keyboard Request--edit /etc/inittab to let this work."

# What to do when the power fails/returns.
pf::powerwait:/etc/init.d/powerfail start
pn::powerfailnow:/etc/init.d/powerfail now
po::powerokwait:/etc/init.d/powerfail stop

# /sbin/getty invocations for the runlevels.
#
# The "id" field MUST be the same as the last
# characters of the device (after "tty").
#
# Format:
#  :::
#
# Note that on most Debian systems tty7 is used by the X Window System,
# so if you want to add more getty's go ahead but skip tty7 if you run X.
#
1:2345:respawn:/sbin/getty --noclear 38400 tty1
2:23:respawn:/sbin/getty 38400 tty2
3:23:respawn:/sbin/getty 38400 tty3
4:23:respawn:/sbin/getty 38400 tty4
5:23:respawn:/sbin/getty 38400 tty5
6:23:respawn:/sbin/getty 38400 tty6

# Example how to put a getty on a serial line (for a terminal)
#
#T0:23:respawn:/sbin/getty -L ttyS0 9600 vt100
#T1:23:respawn:/sbin/getty -L ttyS1 9600 vt100

# Example how to put a getty on a modem line.
#
#T3:23:respawn:/sbin/mgetty -x0 -s 57600 ttyS3


#Spawn a getty on Raspberry Pi serial line
#T0:23:respawn:/sbin/getty -L ttyAMA0 115200 vt100


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/99ff66e5-df2b-4a64-b62d-2ff35526e...@radier.ca



Re: Bug#752450: ftp.debian.org: please consider to strongly tighten the validity period of Release files

2014-12-01 Thread Wouter Verhelst
On Mon, Dec 01, 2014 at 04:55:55AM +0100, Christoph Anton Mitterer wrote:
> On Sat, 2014-11-22 at 11:42 +0100, Wouter Verhelst wrote: 
> > Except that if a firewall "protects" a user from using their printer
> > (random example, not sure how likely)
> Well most security guys are probably sceptical about any automagical
> confiugration of things like a printer... so "protects" can actually
> really mean protect here.
> 
> But apart from that, other distros seem to manage that problem (simply
> allowing the CUPS ports?)

As said, "cups" is an example. It's not about cups specifically, it's
about the fact that you want a computer to *do something*, not break
because "firewall!"

> >  and they have no way of fixing
> > that (or even understanding what's wrong), that's not very helpful. This
> > is why I said "with the current state of affairs".
> > 
> > Before we enable a firewall by default, we should, IMO, have the
> > following:
> 
> 
> > - A way for a user to configure it without understanding iptables.
> IMHO, this is a bad idea. If a user doesn't know what he's doing that he
> usually makes more harm than good.

I didn't say "without knowing what they're doing", I said "without
understanding iptables". There's a difference, and it's not subtle.

> People probably have to accept the fact that they cannot blindly act
> without any knowledge and this still work.

Not in all cases, no, that much is true.

However, there are a few common configurations where we *can* usefully
provide a default configuration for the system. When my father uses his
laptop, he never uses it for anything but "browsing the web", "printing
out his writings", and "reading his mail". Any kind of server on such a
machine is most likely *wrong*.

This configuration is common, and easy to configure. Yes, there may be a
few corner cases where the default firewall config will not do what is
expected. That's not necessarily a problem.

> > - A way for a user to debug (without understanding iptables) if things
> >   don't work.
> Mhh, that I agree,... OTOH, having some basic knowledge on iptables and
> debuggin is rather easy, at least speaking about simple cases like "I
> block my CUPS port"... other cases like IPv6 needs ICMPv6 to work or
> things that require protocol level knowledge are nothing that one can
> really automagical debug for a user without the willingness to learn
> about these things.

I'm not talking about a default firewall that will interfere with
ICMPv6 (or ICMPv4, for that matter; blocking ICMP is evil). I'm talking
about a default firewall that will do things like close ports 80, 22,
25, etc.

If a user tries to connect to port 22 from a remote machine and it
doesn't work, this user should have an easy way of figuring out "why
doesn't my SSH connection work".

That's not too difficult to accomplish.

> > - A way for a package maintainer to assert that this particular package
> >   needs a hole in the firewall to be useful, and that this hole needs to
> >   be available to a particular group of remote machines. E.g., cups
> >   would not expect connections from the other end of the world, while
> >   webservers would.
> This is really a bad idea. Most sysadmins probably wouldn't want their
> firewall rules to be automagically changed by some pseudo-smart
> mechanism.

Who said anything about "automatigically changing" or "pseudo-smart
mechanism"?

I'm suggesting that a package be able to communicate to some other part
of the system that it needs a hole in the firewall. That other part of
the system can then decide (based on user configuration or interactive
input) to ignore the request, change the firewall (with a better
understanding of how the firewall is configured), mail root, segfault,
or spawn nasal daemons.

Or just not exist, if the local sysadmin decides not to allow firewalls.

> In fact, no one can really know how fire wall rules are set up, and even
> the placement of a rule make completely change the semantics.

Well, no, that's true. If we ship a default firewall, we know what the
firewall looks like. If the user installs a different piece of firewall
software, and that piece has understanding of this proposed mechanism,
then it may assume it knows what the firewall rules look like.

If the local sysadmin wrote their own scripts to handle firewall, and
they incorporated support for this proposed mechanism, then they should
damn well understand what they did.

Here's what I'm suggesting:

User: apt-get install apache
Apache package: "Hello system. If you're a server, you will probably
want to open port 80/tcp in the firewall."
System firewall: "here you go."

User: apt-get install cups
Cups package: "Hello system. If you're a user machine and you're on
something resembling a 'home network', you will probably want to open
port 631/tcp".
System firewall: "we're not on a home network, but I've stored that
information for later reference, thanks."

User: apt-get install ntpd
Ntpd package: "Hello system. There

Re: Javascript trigger design

2014-12-01 Thread Thomas Goirand
On 12/01/2014 04:26 PM, Thorsten Glaser wrote:
> On Sat, 29 Nov 2014, Thomas Goirand wrote:
> 
>> 2/ in debian/openstack-dashboard.postinst, implement something like:
>>
>> if [ "$1" = "triggered" ] ; then
>>  /usr/share/openstack-dashboard/manage.py compress --force
>> fi
>>
>> Is it *that* simple?
> 
> No, triggers unfortunately are not that simple: if you install/upgrade
> openstack-dashboard together with some of the packages it wants a
> trigger on, $1="triggered" will sometimes not happen, only "configure".
> 
> Have a look at these:
> 
> • 
> https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=evolvis-platfrm/evolvisforge.git;a=blob;f=mw-plugin/debian/triggers;h=723d1c077e3cf10350952cf9ded297b85cfde812;hb=HEAD
> • 
> https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=evolvis-platfrm/evolvisforge.git;a=blob;f=mw-plugin/debian/postinst;h=fa480512bf5b32bcfe5412544159a158e6cfab08;hb=HEAD
> 
> The thing to call when triggered is the upgrade_mediawikis shell
> function, it’s called from the “triggered” case, but also from
> the regular “configure” case. This is suboptimal, but apparently
> needed.
> 
> bye,
> //mirabilos

Hi Thorsten,

First, thanks a lot for your help here. It's really appreciated. I hope
I'll get it this time...

I did get the point I needed to do it on my postinst too, and I am doing
it already. So let me rephrase, just to make sure I got it:

So if I understand well (by reading your example package), the only
thing I have to do (for horizon) is:

1/ Create a debian/openstack-dashboard.triggers that would contain a
list of "interest /usr/share/javascript/", for example:

interest /usr/share/javascript/jsencrypt

then I'd get triggered in my postinst, and then I should do:

2/ in debian/openstack-dashboard.postinst, implement something like:

if [ "$1" = "configure" ] ; then

/usr/share/openstack-dashboard/manage.py compress --force

fi
if [ "$1" = "triggered" ] ; then
/usr/share/openstack-dashboard/manage.py compress --force
fi

Is it *that* simple? I'm surprised by the "interest" thing just being
hinted with a directory. Does this mean that if anything changes in that
directory, then there's a trigger, and the openstack-dashboard compress
stuff will happen?

Cheers,

Thomas Goirand (zigo)


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/547cefc9.1080...@debian.org



Re: Javascript trigger design

2014-12-01 Thread Brian May
On 2 December 2014 at 09:46, Thomas Goirand  wrote:
>
> if [ "$1" = "configure" ] ; then
> 
> /usr/share/openstack-dashboard/manage.py compress --force
> 
> fi
> if [ "$1" = "triggered" ] ; then
> /usr/share/openstack-dashboard/manage.py compress --force
> fi
>
> Is it *that* simple? I'm surprised by the "interest" thing just being
> hinted with a directory. Does this mean that if anything changes in that
> directory, then there's a trigger, and the openstack-dashboard compress
> stuff will happen?
>

There might be times when compress is run twice.  e.g. when
upgrading openstack-dashboard and /usr/share/javascript/jsencrypt at the
same time.

However I cannot think of anyway to fix this in a way that doesn't create
other problems. So this might actually be the best solution.

(e.g. you could explicitly raise the trigger inside the configure event,
however that will trigger all applications that have an interest
in /usr/share/javascript/jsencrypt which is probably not desirable)
-- 
Brian May 


Re: Embedded systems and systemd

2014-12-01 Thread Roger Lynn
On 29/11/14 13:30, Vincent Bernat wrote:
>  ❦ 29 novembre 2014 12:41 GMT, Alastair McKinstry 
>  :
>> One concern I'd have is the lack of flexibility to produce a cut-down
>> system.  The option of "a dedicated init=/custom-program", but lack of
>> an ntpd, for example, because ntp has been absorbed into systemd's
>> orbit and other ntpd's bitrotted.
> 
> Unlikely to happen since systemd-timesyncd is not a full NTP daemon. It
> lacks ability to act as a server.

And it doesn't appear to regulate the system clock frequency, which
basically makes it an inaccurate dumb SNTP client which steps the clock when
it synchronises.

Roger


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/6e8vkb-j33@silverstone.rilynn.me.uk



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Noel Torres
On Sunday, 30 de November de 2014 18:05:54 Neil Williams escribió:
[...]
> Contribute code or stop wasting everyone's time on the mailing lists.

Contributing code is not the only way to contribute to Debian. At least to the 
Debian I love. Please come out of the developer shell. Translators, e.g. are a 
very important part of the project, even if they have not been give the same 
voting status as so-called "Debian Developers". Please stop THAT.
> 
> Nothing will change without someone doing the work - whatever the issue.

That is true. But no work can be done if nobody realizes that it needs to be 
done.

> If that isn't you, then do everyone a favour and stop posting to these
> endless threads.

True, these posts are becoming endless. If you read my posts on them, you'll 
notice I acknowledge for systemd being the default on Jessie. It was our TC 
decision and I can not do anything but acknowledge it. It does not matter if I 
like systemd or not. And it does not mater if systemd is buggy or not, fit for 
release or not.

But still there is place to decide a lot of other things about systemd. The GR 
did not resolve the issue of switching by default or not, to name one.

This is my contribution now, to try to raise issues in a calm manner. Exactly 
the same issues most of our users have and some of our maintainers seem to not 
address properly.

It has been expressed before: This is not only a discussion about technical 
issues.

Regards

er Envite


signature.asc
Description: This is a digitally signed message part.


Re: Embedded systems and systemd

2014-12-01 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 01, 2014 at 10:58:45PM +, Roger Lynn wrote:
> On 29/11/14 13:30, Vincent Bernat wrote:
> >  ❦ 29 novembre 2014 12:41 GMT, Alastair McKinstry 
> >  :
> >> One concern I'd have is the lack of flexibility to produce a cut-down
> >> system.  The option of "a dedicated init=/custom-program", but lack of
> >> an ntpd, for example, because ntp has been absorbed into systemd's
> >> orbit and other ntpd's bitrotted.
> > 
> > Unlikely to happen since systemd-timesyncd is not a full NTP daemon. It
> > lacks ability to act as a server.
Yes, one of the explicit design goals of timesyncd it to be a simple client,
without server functionality. The assumption is that if you need a full NTP
server, that are excelent choices available (ntpd and chronyd).

> And it doesn't appear to regulate the system clock frequency, which
> basically makes it an inaccurate dumb SNTP client which steps the clock when
> it synchronises.
Please see 
http://cgit.freedesktop.org/systemd/systemd/tree/src/timesync/timesyncd-manager.c?id=HEAD#n326
 (manager_adjust_clock). timesync will adjust clock frequency
unless the offset is too big.

Zbyszek


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141202021452.ga24...@in.waw.pl



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Paul Wise
On Tue, Dec 2, 2014 at 8:52 AM, Noel Torres wrote:

> Contributing code is not the only way to contribute to Debian. At least to the
> Debian I love. Please come out of the developer shell. Translators, e.g. are a
> very important part of the project, even if they have not been give the same
> voting status as so-called "Debian Developers". Please stop THAT.

Indeed, there are many ways to help Debian:

https://www.debian.org/intro/help

FYI, translators (and other contributors) always were eligible to
become Debian members and now we explicitly encourage them to do so:

https://www.debian.org/vote/2012/vote_002
https://www.debian.org/vote/2010/vote_002

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAKTje6GJJc4hadJ1_=fffozbk7njb5ctioq2qf0ezhlkkwd...@mail.gmail.com



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Enrico Weigelt, metux IT consult
On 27.11.2014 02:18, Josh Triplett wrote:

> gnome Depends: gnome-core, which Depends: gnome-user-share, which
> Depends: apache2-bin (or apache2.2-bin in stable, which is a
> transitional package depending on apache2-bin in unstable).

gnome depends on apache ?
seriously ?


cu
--
Enrico Weigelt,
metux IT consulting
+49-151-27565287


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/547d44b3.6030...@gr13.net



Re: Technical committee acting in gross violation of the Debian constitution

2014-12-01 Thread Paul Wise
On Tue, Dec 2, 2014 at 12:48 PM, Enrico Weigelt wrote:
> On 27.11.2014 02:18, Josh Triplett wrote:
>
>> gnome Depends: gnome-core, which Depends: gnome-user-share, which
>> Depends: apache2-bin (or apache2.2-bin in stable, which is a
>> transitional package depending on apache2-bin in unstable).
>
> gnome depends on apache ?

gnome-user-share uses apache2 to share files on the local network via WebDAV.

http://sources.debian.net/src/gnome-user-share/3.14.0-1/src/http.c/#L270
http://sources.debian.net/src/gnome-user-share/3.14.0-1/src/user_share-webdav.c/#L161
http://sources.debian.net/src/gnome-user-share/3.14.0-1/src/user_share-webdav.c/#L65

> seriously ?

Sharing files with other computers on the local network seems like
perfectly reasonable and useful feature to me. In the past I have done
it with the busybox httpd but the gnome-user-share implementation
seems to be much more user friendly.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAKTje6F--6Ym2bOyy+C0yGN+btimb8WezZaK=gmhburomqo...@mail.gmail.com



Re: Using USB serial device with a cdc-acm driver

2014-12-01 Thread Bob Proulx
Dmitriy Fitisov wrote:
> USB descriptors configured as a modem, so, when I connect it to Linux, 
> cdc-acm module is loaded.
> However, there is apparently some process which is watching modems, so on 
> connection
> I got some info on my device - on Ubuntu it is AT commands, for which I have 
> adapted firmware
> (seems ModemManager is running), but on Raspberry I cannot find out what 
> process attaches 
> to my "modem" and what it wants. 
> It sends a data similar to terminal control sequence. 

Possibly 'getty'?

> Where should I look at? I want to turn this process off.

Look in /var/log/syslog and hopefully something will be logged there.

Look in 'ps -ef' and see if anything is shown associated with the tty
device.

Bob


signature.asc
Description: Digital signature


Bug#771767: ITP: java-allocation-instrumenter -- A Java agent which causes a callback to be invoked on each memory allocation

2014-12-01 Thread Tim Potter
Package: wnpp
Severity: wishlist
Owner: Tim Potter 

* Package name: java-allocation-instrumenter
  Version : 2.1
  Upstream Author : Jeremy Manson
* URL : http://code.google.com/p/java-allocation-instrumenter/
* License : Apache-2.0
  Programming Lang: Java
  Description : A Java agent which causes a callback to be invoked on each 
memory allocation

The Allocation Instrumenter is a Java agent written using the 
java.lang.instrument API and ASM. Each allocation in your Java program 
is instrumented; a user-defined callback is invoked on each allocation.

Bytecode rewriting is used to invoke the callback at the site of each
allocation.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20141201121112.7.87701.reportbug@02ed91797728