Bug#796861: ITP: golang-github-d2g-dhcp4 -- DHCP packet creation library for Go

2015-08-24 Thread Potter, Tim (Cloud Services)
X-Debbugs-Cc: debian-devel@lists.debian.org, pkg-go-maintain...@lists.alioth.debian.org Package: wnpp Severity: wishlist Owner: Tim Potter * Package name: golang-github-d2g-dhcp4 Version : 0.0~git20150413 Upstream Author : Dan Goldsmith * URL : https://github.com/d2g/dh

Bug#796862: ITP: golang-github-d2g-dhcp4client -- DHCP client written in Go

2015-08-24 Thread Potter, Tim (Cloud Services)
X-Debbugs-Cc: debian-devel@lists.debian.org, pkg-go-maintain...@lists.alioth.debian.org Package: wnpp Severity: wishlist Owner: Tim Potter * Package name: golang-github-d2g-dhcp4client Version : 0.0~git20150520 Upstream Author : Dan Goldsmith * URL : https://github.com/

Bug#796859: ITP: golang-github-coreos-go-iptables -- Go bindings for iptables utility

2015-08-24 Thread Potter, Tim (Cloud Services)
X-Debbugs-Cc: debian-devel@lists.debian.org, pkg-go-maintain...@lists.alioth.debian.org Package: wnpp Severity: wishlist Owner: Tim Potter * Package name: golang-github-coreos-go-iptables Version : 0.0~git20150805 Upstream Author : Eugene Yakubovich * URL : https://gi

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-24 Thread Nikolaus Rath
On Aug 24 2015, Sebastian Ramacher wrote: > Hi > > On 2015-08-24 23:12:41, Niels Thykier wrote: >> * Up to 5 packages need to change section (see "Implementation- >>details" below) >>- See #796834, #796836, #796839, #796840, and #796842. > > What's the plan for python(3)-*-dbg packages th

Re: Minutes from the "32bit architectures in Debian"-bof

2015-08-24 Thread Russ Allbery
Andreas Barth writes: > - for i386, there is still sold new hardware with 32bit-only. Are > there open issues for i386 (apart from the 32bit-generic ones)? > Discussion that we need to get rid of it one day should be started. Can we fully support cross-grading to amd64 before we do that? My

Re: interested in (co-)maintaining midori

2015-08-24 Thread Sergio Durigan Junior
On Friday, August 14 2015, Andres Salomon wrote: >> Your work was done back in June, so if you prefer I can provide >> patches against your branch to implement/fix the issues I have been >> working on. It won't really matter much, I think: in the end, we'll >> have to use the "official" repository

Re: Minutes from the "32bit architectures in Debian"-bof

2015-08-24 Thread Thorsten Glaser
Andreas Barth ayous.org> writes: > - for i386, there is still sold new hardware with 32bit-only. Are > there open issues for i386 (apart from the 32bit-generic ones)? > Discussion that we need to get rid of it one day should be started. Eh, is this some sort of conspiracy to make Debian even

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Steve Langasek
On Mon, Aug 24, 2015 at 10:25:01PM +0200, Niels Thykier wrote: > > It is really so much difficult to make this in stages? > > For example: > > Stage 1. Make it a policy *recommendation*, with normal severity. > > Stage 2. Make it a policy "should", with important severity. > > Stage 3. Make it a r

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Chris Lamb
> Quoting Holger: "This is a lie" (pointing to a graph that was being > shown on the screen). The current figures we are handling right now > refer to a modified build environment (i.e. sid + the special > sources.list line from alioth). I do not intend to change anything until these changes have

Bug#796850: ITP: asl -- multiphysics simulation software

2015-08-24 Thread Ghislain Antony Vaillant
Package: wnpp Severity: wishlist Owner: Ghislain Antony Vaillant * Package name: asl Version : 0.1.6 Upstream Author : Avtech Scientific * URL : http://asl.org.il/ * License : AGPL-3 Programming Lang: C++ Description : multiphysics simulation software

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Santiago Vila
On Mon, Aug 24, 2015 at 10:25:01PM +0200, Niels Thykier wrote: > In your opinion, how much of the archive should be fixed before one can > start bumping the severity? I don't know, but I think we should have better statistics before deciding about that. Quoting Holger: "This is a lie" (pointing t

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Christoph Biedl
Santiago Vila wrote... > Making a great percentage of packages in the archive to be "suddenly" > buggy is unacceptable. Nobody would consider making failing r12y "serious" at the current state where 13 to 17 percent of the packages fail, depending on how you read the numbers. > We all want Debia

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-24 Thread Sebastian Ramacher
Hi On 2015-08-24 23:12:41, Niels Thykier wrote: > * Up to 5 packages need to change section (see "Implementation- >details" below) >- See #796834, #796836, #796839, #796840, and #796842. What's the plan for python(3)-*-dbg packages that include both Python extensions built for the python

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-24 Thread Niels Thykier
On 2015-08-24 23:28, Steve Langasek wrote: > Hi Niels, > > On Mon, Aug 24, 2015 at 11:12:41PM +0200, Niels Thykier wrote: >> [...] > > I wonder how this list was arrived at. Offhand, I see the libc6-dbg and > python3.5-dbg packages are both in section 'debug', both of which are part > of the bui

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Vincent Bernat
❦ 24 août 2015 22:30 +0100, Colin Tuckley  : >> We have pushed other archive-wide goals that were not shared by >> all upstreams. For example, we have enabled hardening build flags >> on almost all packages and for packages that don't obey to the >> appropriate flags, bugs with severity "importan

Re: [DDEB] Status on automatic debug packages (2015-08-24)

2015-08-24 Thread Steve Langasek
Hi Niels, On Mon, Aug 24, 2015 at 11:12:41PM +0200, Niels Thykier wrote: > * Up to 5 packages need to change section (see "Implementation- >details" below) >- See #796834, #796836, #796839, #796840, and #796842. > Implementation-details > == > > There are some deta

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Colin Tuckley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 24/08/15 22:02, Vincent Bernat wrote: > We have pushed other archive-wide goals that were not shared by > all upstreams. For example, we have enabled hardening build flags > on almost all packages and for packages that don't obey to the > appropr

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Russ Allbery
Niels Thykier writes: > On 2015-08-24 21:24, Santiago Vila wrote: >> We all want Debian to build reproducibly, but goals are achieved by >> submitting bugs, changing packages and making uploads, not by rising >> severities. > I agree in general that people should make an effort to improve the >

[DDEB] Status on automatic debug packages (2015-08-24)

2015-08-24 Thread Niels Thykier
Hi, Here is the "post-debconf" status on automatic debug packages ("ddebs"). The previous status from 2015-06-29 can be found in [0]. What is it? === * ddebs are Debian packages with the extension .deb that contain debugging symbols and are built implicitly. - A package foo_1.23.deb

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Colin Tuckley
On 24/08/15 21:42, Niels Thykier wrote: > Are you aware that 37 out of 40 of your packages can currently be build > reproducible in unstable using the patched toolchain (e.g. dpkg and > debhelper). This (I presume) is without you having done anything to > make them explicitly reproducible. Actua

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Vincent Bernat
❦ 24 août 2015 21:12 +0100, Colin Tuckley  : >> Well, I object strongly. > > Same here, in my view reproducibility is a 'nice to have' it should > *never* be forced on a package. > > We are in the business of packaging upstream software for > distribution. We should not make arbitrary changes to

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Niels Thykier
Hi, On 2015-08-24 22:06, Matthias Klose wrote: > [...] So what about identifying categories which should be fixed in any > case, and maybe which should have special rules for accelerated NMUs and such? Personally, I find that proposal quite interesting. > Categories would include: > > - runnin

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Niels Thykier
Hi, On 2015-08-24 22:12, Colin Tuckley wrote: > [...] > Same here, in my view reproducibility is a 'nice to have' it should > *never* be forced on a package. > > We are in the business of packaging upstream software for > distribution. We should not make arbitrary changes to upstream > software

Bug#796821: ITP: afl-cov -- monitor coverage from afl-fuzz test cases

2015-08-24 Thread Daniel Stender
Package: wnpp Severity: wishlist Owner: Daniel Stender * Package name: afl-cov Version : 0.3 Upstream Author : Michael Rash * URL : https://github.com/mrash/afl-cov * License : GPL-2 Programming Lang: Python Description : monitor coverage from afl-fuzz

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Niels Thykier
On 2015-08-24 21:24, Santiago Vila wrote: > [...] > Hi Santiago, > Making a great percentage of packages in the archive to be "suddenly" > buggy is unacceptable. > I can see where you are coming from. I have to admit that I am personally not too concerned with the severity change. Given it i

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Colin Tuckley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 24/08/15 20:24, Santiago Vila wrote: > Well, I object strongly. Same here, in my view reproducibility is a 'nice to have' it should *never* be forced on a package. We are in the business of packaging upstream software for distribution. We shoul

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Matthias Klose
On 08/23/2015 12:48 PM, Chris Lamb wrote: > Hi -devel, > > The reproducible-builds team are currently contributing patches with > "wishlist" severity. > > This is because it is not currently possible to build reproducible > packages within sid itself - we maintain a separate repository whilst > o

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Santiago Vila
On Sun, Aug 23, 2015 at 12:48:50PM +0200, Chris Lamb wrote: > The reproducible-builds team are currently contributing patches with > "wishlist" severity. > > This is because it is not currently possible to build reproducible > packages within sid itself - we maintain a separate repository whilst >

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Antonio Terceiro
On Sun, Aug 23, 2015 at 12:48:50PM +0200, Chris Lamb wrote: > Hi -devel, > > The reproducible-builds team are currently contributing patches with > "wishlist" severity. > > This is because it is not currently possible to build reproducible > packages within sid itself - we maintain a separate rep

Re: libstdc++ follow-up transitions

2015-08-24 Thread Matthias Klose
On 08/21/2015 01:12 PM, Simon McVittie wrote: > On 18/08/15 00:37, Steve Langasek wrote: >> On Mon, Aug 17, 2015 at 01:46:16PM +0100, Simon McVittie wrote: >>> Having done more rebuilds in Ubuntu, it would be great if you could >>> publish a complete list of the transitions you believe to be necess

Re: Testing excuse: introduces new bugs?

2015-08-24 Thread Nikolaus Rath
On Aug 22 2015, Steve Langasek wrote: > On Sat, Aug 22, 2015 at 09:54:10PM -0700, Nikolaus Rath wrote: >> Hello, > >> I'm struggling to understand the testing excuses for s3ql at >> https://qa.debian.org/excuses.php?package=s3ql. Among other things, it >> says: > >> * s3ql (source, amd64, i386, ar

Bits from Perl maintainers

2015-08-24 Thread Niko Tyni
[crossposting to -devel and -perl; M-F-T set to -devel] There's a Perl transition (#796345) expected in the next couple of months: Perl 5.22 packages have been in experimental since June, and the list of blockers is getting lower. The worst blocker is currently libapache2-mod-perl2, which needs up

Re: Raising the severity of reproduciblity issues to "important"

2015-08-24 Thread Olivier Berger
Hi. Chris Lamb writes: > Hi -devel, > > The reproducible-builds team are currently contributing patches with > "wishlist" severity. > > This is because it is not currently possible to build reproducible > packages within sid itself - we maintain a separate repository whilst > our changes to the

Re: Security concerns with minified javascript code

2015-08-24 Thread Thomas Goirand
On 08/24/2015 01:54 PM, Simon Josefsson wrote: > I believe the blog post below has relevance to Debian's stance on > including minified JavaScript in packages: > > https://zyan.scripts.mit.edu/blog/backdooring-js/ > > To me the problem suggests that it is important from a security and > accountab

Security concerns with minified javascript code

2015-08-24 Thread Simon Josefsson
I believe the blog post below has relevance to Debian's stance on including minified JavaScript in packages: https://zyan.scripts.mit.edu/blog/backdooring-js/ To me the problem suggests that it is important from a security and accountability perspective to 1) include the human-readable source cod

Re: Testing excuse: introduces new bugs?

2015-08-24 Thread Paul Wise
On Mon, Aug 24, 2015 at 11:32 AM, Paul Wise wrote: > On Mon, Aug 24, 2015 at 1:41 AM, Jakub Wilk wrote: > >> Is BTS version tracking documented in details anywhere? > > Some info is here: Some more here: https://wiki.debian.org/HowtoUseBTS#Version_tracking -- bye, pabs https://wiki.debian.org/

Re: Testing excuse: introduces new bugs?

2015-08-24 Thread Paul Wise
On Mon, Aug 24, 2015 at 1:41 AM, Jakub Wilk wrote: > Is BTS version tracking documented in details anywhere? Some info is here: https://wiki.debian.org/BugsVersionTracking -- bye, pabs https://wiki.debian.org/PaulWise

Re: Wrapper package of Linuxbrew for Debian

2015-08-24 Thread Gianfranco Costamagna
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi Debian Developers, due to no replies in the list might seem that nobody is worried about a brew like tool in Debian. If nobody has objections, I'll upload in new queue at the end of the package revision (there are still some issues to address).