Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Theodore Ts'o
On Sat, May 11, 2024 at 04:09:23PM +0200, Simon Josefsson wrote: >The current approach of running autoreconf -fi is based on a >misunderstanding: autoreconf -fi is documented to not replace certain >files with newer versions: >https://lists.nongnu.org/archive/html/bug-gnulib/2024-04

Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Simon Josefsson
"Theodore Ts'o" writes: >> 1) Use upstream's PGP signed git-archive tarball. > > Here's how I do it in e2fsprogs which (a) makes the git-archive > tarball be bit-for-bit reproducible given a particular git commit ID, > and (b) minimizes the size of the tarball when stored using > pristine-tar: >

Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Russ Allbery
"Theodore Ts'o" writes: > The best solution to this is to try to promote people to put those > autoconf macros that they are manually maintaining that can't be > supplied in acinclude.m4, which is now included by default by autoconf > in addition to aclocal.m4. Or use a subdirectory named someth

Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Ansgar 🙀
Hi, On Sun, 2024-05-12 at 08:41 -0700, Russ Allbery wrote: > "Theodore Ts'o" writes: > > And yet, we seem to have given a pass for gnulib, probably because it > > would be too awkward to enforce that rule *everywhere*, so apparently > > we've turned a blind eye. > > No, there's an explicit exc

Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Russ Allbery
Ansgar 🙀 writes: > In ecosystems like NPM, Cargo, Golang, Python and so on pinning to > specific versions is also "explicitly intended to be used"; they just > sometimes don't include convenience copies directly as they have tooling > to download these (which is not allowed in Debian). Yeah, thi

Re: De-vendoring gnulib in Debian packages

2024-05-12 Thread Theodore Ts'o
On Sun, May 12, 2024 at 04:27:06PM +0200, Simon Josefsson wrote: > Going into detail, you use 'gzip -9n' but I use git-archive defaults > which is the same as -n aka --no-name. I agree adding -9 aka --best is > an improvement. Gnulib's maint.mk also add --rsyncable, would you agree > that this is

Bug#1071011: ITP: golang-gopkg-godo.v2 -- task runner and file watcher (library)

2024-05-12 Thread Francisco Vilmar Cardoso Ruviaro
Package: wnpp Severity: wishlist Owner: Francisco Vilmar Cardoso Ruviaro X-Debbugs-Cc: debian-devel@lists.debian.org, debian...@lists.debian.org, vil...@debian.org * Package name: golang-gopkg-godo.v2 Version : 2.0.9 Upstream Contact: Mario L. Gutierrez * URL : https