Re: RFC: Support for selective usage of (fake)root during package build (R³)

2017-11-11 Thread Adrian Bunk
On Sun, Nov 05, 2017 at 08:03:00AM +, Niels Thykier wrote:
>...
>  * Even if we could use a debhelper compat level to introduce R³, it
>would have neutered the adoption rate.  We got plenty of packages,
>where maintainers want to have their package backportable to stable,
>oldstable and even oldoldstable (not to mention various Ubuntu LTS
>releases).
>...

What adoption rate and in what timeframe are you aiming at?

The oldest non-deprecated debhelper compat level 9 became the 
recommended level in January 2012.

Despite lintian warning for all older compat levels and RC bugs for
some of the oldest compat levels (< 5), currently 26% of all debhelper
using packages still use older (deprecated) compat levels.

Based on this data, 75% of all packages using R³ in bullseye+2
(ETA: 2025) is the most optimistic adoption rate I can imagine
with opt-in plus lintian warning.

If you are aiming at a faster adoption rate, I'd suggest opt-in only for 
early adopters testing the new feature and then switching to opt-out:

"Rules-Requires-Root: no" is an opt-in only
into testing the new feature already today.

Packages can already opt-out with "Rules-Requires-Root: binary-targets" 
or "Rules-Requires-Root: ".

Remaining issues like the MakeMaker issue you mentioned get sorted out, 
ideally before buster.

A build of all currently reproducible packages with the second build 
defaulting to "Rules-Requires-Root: no" might be helpful for finding 
remaining problems.

At some later date (ideally shortly after the release of buster)
is flag day where "Rules-Requires-Root: no" becomes the default,
including RC bugs for all packages that have to opt out but do
not yet opt out.

Since dh compat < 9 is problematic for R³, it might make sense to find
a solution for dpkg to use the old default for older dh compat levels
if the number of actual problems caused by this is not small.

Twice per release cycle we have a flag day change with 300-500 RC bugs 
for a new gcc version (including some hard to resolve bugs), so assuming 
there are < 1k packages that have to be fixed with the trivial one-line 
opt-out change "Rules-Requires-Root: binary-targets" a flag day would
be doable.

> Thanks,
> ~Niels

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed



Bug#881412: ITP: modulator -- Java light shim library that wraps Java 9 APIs and expose them to recent JDKs

2017-11-11 Thread Miguel Landaeta
Package: wnpp
Severity: wishlist
Owner: Miguel Landaeta 

* Package name: modulator
  Version : 1.0
  Upstream Author : Charles Oliver Nutter 
* URL : https://github.com/headius/modulator
* License : Apache-2.0
  Programming Lang: Java
  Description : Java light shim library that wraps Java 9 APIs and exposes 
them to recent JDKs

 Modulator is just a very lightweight shim library that wraps
 Java 9 and previous reflection APIs to allow a uniform API
 into "module"-like behaviors on all recent JDKs.

Its main use case in Debian at the present time is as a JRuby
dependency and it will be maintained under Debian Java Team umbrella.
However, it could be useful to other projects that need to be built
and run with JDK9 and previous versions.

-- 
Miguel Landaeta, nomadium at debian.org
secure email with PGP 0x6E608B637D8967E9 available at http://miguel.cc/key.
"Faith means not wanting to know what is true." -- Nietzsche


signature.asc
Description: PGP signature


Re: RFC: Support for selective usage of (fake)root during package build (R³)

2017-11-11 Thread Holger Levsen
On Sat, Nov 11, 2017 at 01:04:09PM +0200, Adrian Bunk wrote:
> A build of all currently reproducible packages with the second build 
> defaulting to "Rules-Requires-Root: no" might be helpful for finding 
> remaining problems.
 
one day we (r-b) could do this, but for testing this, please use
"traditional" archive-wide rebuilds elsewhere...


-- 
cheers,
Holger


signature.asc
Description: PGP signature


Bug#881423: ITP: node-qw -- Quoted word literals

2017-11-11 Thread Suman
Package: wnpp
Severity: wishlist
Owner: suman 
X-Debbugs-CC: debian-devel@lists.debian.org

* Package name: node-qw
  Version : 1.0.1
  Upstream Author : Rebecca Turner  (http://re-becca.org/)
* URL : https://github.com/iarna/node-qw#readme
* License : ISC
  Programming Lang: JavaScript
  Description : Quoted word literals
Qw can be used to create quoted word literals
.
Node.js is an event-based server-side JavaScript engine.

Praveen agreed to sponser this package.

Bug#881424: RFP: ausweisapp2 -- online authentication using German identity document

2017-11-11 Thread W. Martin Borgert
Package: wnpp
Severity: wishlist
Owner: "W. Martin Borgert" 

* Package name: ausweisapp2
  Version : 1.12.4
  Upstream Author : Governikus GmbH & Co. KG
* URL : https://github.com/Governikus/AusweisApp2
* License : EUPL-1.2
  Programming Lang: C++
  Description : online authentication using German identity document

This application is needed to authenticate e.g. at online services using
a German identity document.

See here for details:

https://www.ausweisapp.bund.de/en/questions-and-answers/frequently-asked-questions/
https://en.wikipedia.org/wiki/European_Union_Public_Licence

It seems, that all dependencies are already in Debian. master does not
compile, but I did not investigate further after first error (‘class
QSslConfiguration’ has no member named ‘setSignatureAndHashAlgorithms’).



Re: Anyone using stretch/buster/sid on ARMv4t ?

2017-11-11 Thread Andreas Henriksson
Hello,

On Tue, Nov 07, 2017 at 11:10:27PM +0200, Adrian Bunk wrote:
[...]
> This whole "so many packages are broken on armel" narrative
> is actually mostly FUD, and you are suggesting mitigations
> for a nonexisting problem.
> 
> The only major package where armel is the only release architecture 
> where it can no longer be built is Node.js, and not having the Node.js 
> ecosysyem on armel has already been sorted out for stretch.
> 
> Every time the topic of armel-specific major problems comes up people 
> are either not nameing any specific problems, or they mention problems 
> that were fixed long ago.
[...]

Please fix #848190

kthxbye



Bug#881441: ITP: libaws-signature4-perl -- module to create a version4 signature for Amazon Web Services

2017-11-11 Thread Florian Schlichting
Package: wnpp
Owner: Florian Schlichting 
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org, debian-p...@lists.debian.org

* Package name: libaws-signature4-perl
  Version : 1.02
  Upstream Author : Lincoln Stein 
* URL : https://metacpan.org/release/AWS-Signature4
* License : Artistic-2.0 or GPL-1+
  Programming Lang: Perl
  Description : module to create a version4 signature for Amazon Web 
Services

AWS::Signature4 implements Amazon Web Service's Signature version 4
(http://docs.aws.amazon.com/general/latest/gr/signature-version-4.html).
It integrates with modules such as VM::EC2 or Amazon::SQS::Simple.

The package will be maintained under the umbrella of the Debian Perl Group.

--
Generated with the help of dpt-gen-itp(1) from pkg-perl-tools.



Re: Anyone using stretch/buster/sid on ARMv4t ?

2017-11-11 Thread Adrian Bunk
On Sat, Nov 11, 2017 at 09:03:04PM +0100, Andreas Henriksson wrote:
> Hello,
> 
> On Tue, Nov 07, 2017 at 11:10:27PM +0200, Adrian Bunk wrote:
> [...]
> > This whole "so many packages are broken on armel" narrative
> > is actually mostly FUD, and you are suggesting mitigations
> > for a nonexisting problem.
> > 
> > The only major package where armel is the only release architecture 
> > where it can no longer be built is Node.js, and not having the Node.js 
> > ecosysyem on armel has already been sorted out for stretch.
> > 
> > Every time the topic of armel-specific major problems comes up people 
> > are either not nameing any specific problems, or they mention problems 
> > that were fixed long ago.
> [...]
> 
> Please fix #848190

You are asking the wrong person since mozjs24 will not be in buster (#879576).

Please ask the porters who have committed themselves
for armhf and armel in stretch to support you on that.

GNOME in buster currently uses mozjs52, and I did fix
mozjs52 on armel 2 months ago.

> kthxbye

cu
Adrian

-- 

   "Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
   "Only a promise," Lao Er said.
   Pearl S. Buck - Dragon Seed



Bug#881466: ITP: nekojishi -- Interactive visual novel with furries and Taiwanese cultures

2017-11-11 Thread 魏銘廷
Package: wnpp
Severity: wishlist
Owner: Yao Wei (魏銘廷) 

* Package name: nekojishi
  Version : 1.01
  Upstream Author : NekojishiTW 
* URL : https://nekojishi.tw/
* License : Proprietary (Non-commercial)
  Programming Lang: Python
  Description : Interactive visual novel game with furries and Taiwanese 
cultures

=== Detailed descriptions below ===

致家有大貓團隊:我想要將家有大貓 (SFW) 上傳到 Debian 套件庫,其實是個人
私心。身為獸友跟 Debian contributor,我想要找到一個交集點讓我能夠做點什
麼。不過因為 Debian 對授權要求比較嚴格,根據團隊網站,我會建議採納
「創用CC 姓名標示-非商業性」這個授權條款,再加上原住民族智慧創作保護條
例(若有需要),並將授權條款全文放置在遊戲檔案的壓縮檔裡面。若有疑慮,
可以詢問我。

我將會做的事情會包括把原本的 .rpa 檔案透過 unrpa 解壓縮,去除編譯過的檔
案以及不需要的 library (基於 Debian Policy 要求),放進 .deb 裡面,之
後再上傳到 Debian 審核。若審核有通過,將來 Debian 以及包含 Ubuntu 在內
的 Linux 發行版將可以使用 `apt install nekojishi` 下載到家有大貓了。

To Nekojishi team: As a furry fan and Debian contributor, I would like
to find intersection to both of these, and do something together.
However, the license of the game isn't pretty clear.  I would suggest
adopting Creative Commons Attribution-NonCommercial license, amending
with "Indigenous Culture Intellectural Property Protection Act" if
necessary, and put the text file into the .zip archive.  Also, you
probably need to declare if the .zip is distributable.

What I am going to do is to use unrpa to unarchive the files, removing
the unnecessary compiled files, lirbaries and fonts (per Debian Policy
§4.13 Convenience copies of code, we need to strip them and use Debian
provided files).  And upload to Debian for review.  If the review passed
we can download Nekojishi using `apt install nekojishi` in any Debian
and its derivatives including Ubuntu.

===

This is a crowdfunded visual novel game influxing furry culture and
Taiwanese religious and indigenous cultures.  The SFW version is chosen
to package. (and I am wondering if NSFW thing is not a good thing in
Debian.)
The game is free to download, but I am unsure about redistributability.
In this email I am also asking the authors if they can adopt Creative
Commons with non-commercial license (as stated in their website).

If that's a good idea, I would like to maintain the package under Debian
Games Team.

Yao Wei


signature.asc
Description: PGP signature