Hello,

I need someone from the Python packaging team to review the packaging of cocotb

The package can be found on Git: https://salsa.debian.org/electronics-team/cocotb

I am particularly puzzled by the files layout of cocotb, for example
compiled libs are under: /usr/lib/python3/dist-packages/cocotb/libs/
and data files (makefiles mostly) are under: /usr/lib/python3/dist-packages/cocotb/share/

The package has the following lintian issues:
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotb.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbfli_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbutils.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_aldec.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_ius.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_nvc.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_aldec.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_ghdl.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_icarus.vpl]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_ius.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_vcs.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_verilator.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libembed.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libgpi.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libgpilog.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libpygpilog.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/simulator.cpython-312-x86_64-linux-gnu.so]
I: python3-cocotb: hardening-no-fortify-functions [usr/lib/python3/dist-packages/cocotb/libs/libcocotb.so]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:12]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:13]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:5]
P: python3-cocotb: repeated-path-segment lib [usr/lib/python3/dist-packages/cocotb/share/lib/]

Regards,

--
‎أحمد المحمودي (Ahmed El-Mahmoudy)
Digital design engineer
GPG KeyIDs: 4096R/A7EF5671 2048R/EDDDA1B7
GPG Fingerprints:
6E2E E4BB 72E2 F417 D066 6ABF 7B30 B496 A7EF 5761
8206 A196 2084 7E6D 0DF8 B176 BC19 6A94 EDDD A1B7

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEEggahliCEfm0N+LF2vBlqlO3dobcFAmal1bUACgkQvBlqlO3d obd5/Qf+OU/Cqxss9bS1x6k6Q/laf6DcCYVN7FxO0Sth7jL+SDt+ccsIEZNnwMp1 lhdTrN/wsgRFPWJpL7PhdkMhOx2wWAFn7OAbG27Ja6NbXMWItAIOczzfcW6OD21N FKY2vCtQMz0/TcE/pnXay8d6p5aPAT1YzvwlKkyQfLzXDyFBi38KJ+9OnMRxyBo3 CP3jYgpeGJ+nXMW+8dMPKa1TtRFXfoHqOjQVB0hH57r5chrFM2WCPrB/y9rgWYjH AbBFNP8w5eih2kENEtHwbCseZpZH1L4nTptBqQs8CfdQA74sHlySwUdyNBA/Tewt RnKfil9CdTkJnC/1EbZVVgIRfqjc9w==
=IQMD
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

مرحبًا أحمد

I was not able to fix the hardening-no-bindnow errors by adding the
usual hardening=+bindnow to the DEB_BUILD_MAINT_OPTIONS in d/rules.

However I saw some other things that I think should be fixed before you
upload. I have created a PR here:

https://salsa.debian.org/electronics-team/cocotb/-/merge_requests/1

debian/copyright | 10 ++++------
debian/lintian-overrides | 2 ++
debian/source/lintian-overrides | 3 +++
3 files changed, 9 insertions(+), 6 deletions(-)

Otherwise I think the package is good to upload. Maybe the other
warnings can be fixed later.

Best regards,

Agathe.

2024-07-28 07:23 CEST, أحمد المحمودي:

Hello,

I need someone from the Python packaging team to review the packaging of cocotb

The package can be found on Git: https://salsa.debian.org/electronics-team/cocotb

I am particularly puzzled by the files layout of cocotb, for example
compiled libs are under: /usr/lib/python3/dist-packages/cocotb/libs/
and data files (makefiles mostly) are under: /usr/lib/python3/dist-packages/cocotb/share/

The package has the following lintian issues:
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotb.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbfli_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbutils.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_aldec.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_ius.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvhpi_nvc.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_aldec.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_ghdl.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_icarus.vpl]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_ius.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_modelsim.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_vcs.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libcocotbvpi_verilator.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libembed.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libgpi.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libgpilog.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/libs/libpygpilog.so]
I: python3-cocotb: hardening-no-bindnow [usr/lib/python3/dist-packages/cocotb/simulator.cpython-312-x86_64-linux-gnu.so]
I: python3-cocotb: hardening-no-fortify-functions [usr/lib/python3/dist-packages/cocotb/libs/libcocotb.so]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:12]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:13]
I: cocotb source: uses-python-distutils [cocotb_build_libs.py:5]
P: python3-cocotb: repeated-path-segment lib [usr/lib/python3/dist-packages/cocotb/share/lib/]

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)