** Description changed:

  [Availability]
  - This package rust-hwlib is published to the PPA:
    https://launchpad.net/~nhutsko/+archive/ubuntu/hwcert, it'is NOT
    part of the universe. We have an exception to publish it directly to
    main, since this library will help the development of solutions that
    affect Canonical customers directly.  Please check with ~paelzer for
    more information.
  - The package rust-hwlib build for the architectures it is designed to
    work on.
  - It currently builds and works for architectures: amd64
  - Link to package:
    https://launchpad.net/~nhutsko/+archive/ubuntu/hwcert/+packages
  
  [Rationale]
  - This package rust-hwlib is part of the
    [hardware-api](https://github.com/canonical/hardware-api) project,
-   owned and developed by Canonical Certification team. It will be
-   used by Ubuntu pro-client to retrieve information about the machine
+   owned and developed by Canonical Hardware Certification team. It will
+   be used by Ubuntu pro-client to retrieve information about the machine
    and check its certification status.
  - The package rust-hwlib will generally be useful for a large number
    of users who use Ubuntu and want see what components have been
    tested and certified and for which Ubuntu releases
  - There is no other/better way to solve this that is already in main
    or should go universe->main instead of this.
  - The package rust-hwlib is required in Ubuntu main no later than
    April 2025 due to 25.04 release date, so users and Canonical
    customer can install it for the latest Ubuntu release
  
  [Security]
  - No CVEs/security issues in this software in the past
  
  - no `suid` or `sgid` binaries
  - no executables in `/sbin` and `/usr/sbin`
  - Package does not install services, timers or recurring jobs
  - Packages does not open privileged ports (ports < 1024).
  - Package does not expose any external endpoints
  - Packages does not contain extensions to security-sensitive software
  
  [Quality assurance - function/usage]
  - The package works well right after install
  
  [Quality assurance - maintenance]
  - The package is maintained well in Upstream and does not have too
    many, long-term & critical, open bugs
  - Upstream's bug tracker:
    https://github.com/canonical/hardware-api/issues
  - The package does not deal with exotic hardware we cannot support
  
  [Quality assurance - testing]
  - The package runs a test suite on build time, if it fails it makes
    the build fail, link to build log:
    
https://launchpad.net/~nhutsko/+archive/ubuntu/hwcert/+builds?build_text=&build_state=built
  
  - The package runs an autopkgtest, and is currently passing on
    amd64 architecture, link to test logs:
    * oracular: 
https://autopkgtest.ubuntu.com/results/autopkgtest-oracular-nhutsko-hwcert/
    * noble: 
https://autopkgtest.ubuntu.com/results/autopkgtest-noble-nhutsko-hwcert/
    * jammy: 
https://autopkgtest.ubuntu.com/results/autopkgtest-jammy-nhutsko-hwcert/
    * focal: 
https://autopkgtest.ubuntu.com/results/autopkgtest-focal-nhutsko-hwcert/
  
  - The package does have not failing autopkgtests right now
  
  [Quality assurance - packaging]
  - debian/watch is not present because it is a native package
  
  - debian/control defines a correct Maintainer field
  
  - Lintian overrides are not present
  - This package only has minor lintian pedantic warnings. The warning
    regarding Vendor-Sources-Rust header is expected, since it's
    required for Rust packages that use vendored dependencies.
  # lintian --pedantic rust-hwlib_0.0.1\~ppa2_source.changes
  W: rust-hwlib source: unknown-field Vendored-Sources-Rust
  P: rust-hwlib source: package-uses-old-debhelper-compat-version 12
  P: rust-hwlib source: uses-debhelper-compat-file [debian/compat]
  
  - This package does not rely on obsolete or about to be demoted
    packages.
  - This package has no python2 or GTK2 dependencies
  
  - The package will be installed by default, but does not ask debconf
    questions
  
  - Packaging and build is easy, link to debian/rules:
    
https://github.com/canonical/hardware-api/blob/main/client/hwlib/debian/rules
  
  [UI standards]
  - Application is not end-user facing
  
  [Dependencies]
  - No further depends or recommends dependencies that are not yet in
    main
  
  [Standards compliance]
  - This package correctly follows FHS and Debian Policy
  
  [Maintenance/Owner]
  - The owning team will be ~canonical-hw-cert and I have their
    acknowledgement for that commitment
  - The future owning team is already subscribed to the package
  
  - This does not use static builds
  
  - The Canonical Hardware Certification team (~canonical-hw-cert) is
    aware of the implications of vendored code and (as alerted by the
    security team) commits to provide updates and backports to the
    security team for any affected vendored code for the lifetime of the
    release (including ESM).
  
  - This package uses vendored rust code tracked in Cargo.lock as shipped,
    in the package (at /usr/share/cargo/registry/hwlib-0.0.1-ppa2/Cargo.lock),
    refreshing that code is outlined in debian/README.source
  
  - This package uses vendored rust code tracked in Cargo.lock in the
    repo: https://github.com/canonical/hardware-api/blob/main/Cargo.lock
  
  - This package is rust based and vendors all non language-runtime
    dependencies
  
  - The package has been built within the last 3 months in PPA
  - Build link on launchpad:
    https://launchpad.net/~nhutsko/+archive/ubuntu/hwcert/+packages
  
  [Background information]
  - The Package description explains the package well
  - Upstream Name is hwlib
  - Link to upstream project:
    https://github.com/canonical/hardware-api/tree/main/client/hwlib/

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2072561

Title:
  [MIR] rust-hwlib

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2072561/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to