Re: Run Debian packaging tasks remotely with debusine.debian.net

2024-03-09 Thread Martin Dosch

Dear Colin,

thank you for this project, it looks very interesting. Would you also 
support running ratt there? For some packages ratt often fails on my 
local machines due to RAM constraints.


Best regards,
Martin


signature.asc
Description: PGP signature


Bug#1065727: ITP: nwg-hello -- GTK3-based greeter for the greetd daemon

2024-03-09 Thread Maytham Alsudany
Package: wnpp
Severity: wishlist
Owner: Maytham Alsudany 
X-Debbugs-Cc: debian-devel@lists.debian.org

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

* Package name: nwg-hello
  Version : 0.1.7
  Upstream Contact: https://github.com/nwg-piotr/nwg-hello/issues
* URL : https://github.com/nwg-piotr/nwg-hello
* License : Expat
  Programming Lang: Python
  Description : GTK3-based greeter for the greetd daemon

 This program is a part of the nwg-shell project.
 .
 Nwg-hello is a GTK3-based greeter for the greetd daemon, written in Python. It
 is meant to work under a Wayland compositor, like sway or Hyprland.
 .
 Features:
   - Multi-monitor support with gtk-layer-shell;
   - multi-language support;
   - background & style customization with css;
   - automatic selection of the last used session and user;
   - support for setting environment variables.

Another option for greetd, and a great addition to Debian to encourage
users to switch to Wayland compositors like sway.

-BEGIN PGP SIGNATURE-
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=5tIY
-END PGP SIGNATURE-



Bug#1028557: general: The Debian Social Contract is enforced extrajudicially but wording is missing

2024-03-09 Thread debbug . 1028557
Package: general
Followup-For: Bug #1028557
X-Debbugs-Cc: debbug.1028...@sideload.33mail.com

Why do you say enforcement is necessarily bound to the judicial system
of a state?

Rules can be written and enforced entirely without a state-backed
authority. Consider a scenario as simple as a bar having rules and
then bouncing a rule-breaking customer. Or more formally, a university
campus has their own rules. If you break the rules they have an
arbitration process where you can address a panel of your peers and
argue your case. The school argues their case, and the panel of peers
decides the outcome. That process happens entirely without any
lawyers, judges, or state actors involved.

The Debian Project is staffed and those people have powers¹. E.g. the
“technical committee” can:

  4. Overrule a Developer (requires a 3:1 majority).

 The Technical Committee may ask a Developer to take a particular
 technical course of action even if the Developer does not wish
 to; this requires a 3:1 majority. For example, the Committee may
 determine that a complaint made by the submitter of a bug is
 justified and that the submitter's proposed solution should be
 implemented.

It’s a bit vague though in terms of the actions and penalties. But I
guess it’s implied that a project can be removed from the Debian
system. The procedures are described here:

  https://www.debian.org/devel/tech-ctte

** Still a bug **

I agree there is a bug here. The Debian Social Contract does not refer
to the Debian Constitution as the enforcement mechanism, and the
Debian Constitution does not claim jurisdiction over enforcement of
the Debian Social Contract. It seems a bit sloppy that the Debian
Constitution only says statements may be made about the social
contract in paragraph 4.1.5.2. Some verbiage needs to be added to both
docs to establish enforcability.

(footnotes)

① https://www.debian.org/devel/constitution



Re: Run Debian packaging tasks remotely with debusine.debian.net

2024-03-09 Thread Stefano Rivera
Hi Martin (2024.03.09_11:43:54_+)
> thank you for this project, it looks very interesting. Would you also
> support running ratt there? For some packages ratt often fails on my local
> machines due to RAM constraints.

We are building out the pieces that will lead to being able to
reimplement ratt within Debusine.

Running ratt as a single debusine job wouldn't make as much sense as
running a single build for each changed reverse dependency.

We just landed support for sbuild's --extra-package= argument [0], which
is the building block needed for ratt-style builds. I intend to script
something to schedule all the builds for a new reverse dependency, soon.
I have reverse-dependencies I want to test.

[0]: https://salsa.debian.org/freexian-team/debusine/-/issues/320

Stefano

-- 
Stefano Rivera
  http://tumbleweed.org.za/
  +1 415 683 3272



Re: Bug#1065669: ITP: raven -- A lightweight http file upload service used for penetration testing and incident response.

2024-03-09 Thread Peter Pentchev
On Sat, Mar 09, 2024 at 01:12:06PM +0100, Salvo Tomaselli wrote:
> 
> In data venerdì 8 marzo 2024 18:08:11 CET, aquilamac...@riseup.net ha scritto:
> > Package: wnpp
> > X-Debbugs-Cc: debian-devel@lists.debian.org
> > Owner: Aquila Macedo Costa 
> > Severity: wishlist
> > 
> > * Package name: raven
> >   Version : 1.0.1
> >   Upstream Contact: Tristram
> > * URL : https://github.com/gh0x0st/raven
> > * License : MIT
> >   Programming Lang: Python3
> >   Description : A lightweight http file upload service used for
> > penetration testing and incident response.
> > 
> > This package contains a Python tool that extends the capabilities of the
> > http.server Python module by offering a self-contained file upload web
> > server.
> > While the common practice is to use python3 -m http.server 80 to serve
> > files
> > for remote client downloads, Raven addresses the need for a similar
> > solution
> > when you need the ability to receive files from remote clients. This
> > becomes
> > especially valuable in scenarios such as penetration testing and
> > incident
> > response procedures when protocols such as SMB may not be a viable
> > option.
> > 
> > I'm writing to submit an Intention to Package (ITP) for raven
> > under the pkg-security team's umbrella.
> 
> What's the problem with 
> 
> nc -lp 80 > file
> 
> ?
> 
> Does this provide some sort of browser interface?

To start with, raven seems to allow uploading more than one file :)
The description on the project homepage lists several features such as
access control, organizing the uploaded files into subdirectories, etc.

G'luck,
Peter

-- 
Peter Pentchev  r...@ringlet.net r...@debian.org p...@storpool.com
PGP key:http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13


signature.asc
Description: PGP signature


Bug#1065734: ITP: gtkgreet -- GTK based greeter for greetd

2024-03-09 Thread Maytham Alsudany
Package: wnpp
Severity: wishlist
Owner: Maytham Alsudany 
X-Debbugs-Cc: debian-devel@lists.debian.org

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

* Package name: gtkgreet
  Version : 0.8
  Upstream Contact: Kenny Levinsen <~kennylevinsen/greetd-de...@lists.sr.ht>
* URL : https://git.sr.ht/~kennylevinsen/gtkgreet
* License : GPL-3+
  Programming Lang: C
  Description : GTK based greeter for greetd

 gtkgreet is a GTK based greeter for greetd, to be run under cage or similar.
 .
 See https://man.sr.ht/~kennylevinsen/greetd for usage information.

Would be a nice addition to Debian, giving users another greeter for use
with greetd.

-BEGIN PGP SIGNATURE-
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=nVjM
-END PGP SIGNATURE-



Bug#1065749: ITP: flask-debugtoolbar -- Debugging toolbar overlay information for Flask applications

2024-03-09 Thread Carsten Schoenert
Package: wnpp
Severity: wishlist
Owner: Carsten Schoenert 
X-Debbugs-Cc: debian-devel@lists.debian.org

* Package name: flask-debugtoolbar
  Version : 0.14.1
  Upstream Contact: Pallets 
* URL : https://github.com/pallets-eco/flask-debugtoolbar
* License : BSD-3-clause
  Programming Lang: Python, JS
  Description : Debugging toolbar overlay information for Flask applications

 Flask is a micro web framework for Python based on Werkzeug, Jinja 2 and good
 intentions.
 .
 This python3 package adds a toolbar overlay to Flask applications containing
 useful information for debugging.

This package is the equivalent of python-django-debug-toolbar but for
Flask.

I intend to maintain this packge within the DPT.



Bug#1065803: ITP: lomiri-system-settings-security-privacy -- Security and privacy settings plugin for Lomiri system settings

2024-03-09 Thread Mike Gabriel
Package: wnpp
Severity: wishlist
Owner: Mike Gabriel 
X-Debbugs-Cc: debian-devel@lists.debian.org

* Package name: lomiri-system-settings-security-privacy
  Version : 1.0.2
  Upstream Contact: UBports Developers https://gitlab.com/ubports/development/core/lomiri-system-settings-security-privacy
* License : GPL-3
  Programming Lang: C++ / QML
  Description : Security and privacy settings plugin for Lomiri system 
settings

 Lomiri-system-settings is the System Settings application used in Lomiri
 desktop environment. it's designed for phones, tablets and convergent
 devices.
 .
 This plugin provides the security and privacy settings plugin to
 lomiri-system-settings.
 . 
 This package will be maintained under the umbrella of the Debian UBports
 Packaging Team.



Bug#1065812: ITP: paramspider -- Mining parameters from dark corners of Web Archives

2024-03-09 Thread aquilamacedo
Package: wnpp
X-Debbugs-Cc: debian-devel@lists.debian.org
Owner: Aquila Macedo Costa 
Severity: wishlist

* Package name: paramspider
  Version : 1.0.1
  Upstream Contact: Devansh Batham 
* URL : https://github.com/devanshbatham/ParamSpider
* License : MIT
  Programming Lang: Python3
  Description : Mining parameters from dark corners of Web Archives

paramspider allows you to fetch URLs related to any domain or a list
of domains from Wayback Archives. It filters out "boring" URLs, allowing
you to focus on the ones that matter the most.

I'm writing to submit an Intention to Package (ITP) for paramspider
under the pkg-security team's umbrella.