• proposed MBF: packages still using source format 1.0

    From Lucas Nussbaum@21:1/5 to All on Sun Mar 6 21:50:02 2022
    Hi,

    There are 629 packages in bookworm that use source format 1.0. That's 1.9% of bookworm packages.

    I think that we should reduce the number of packages using the 1.0 format, as (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to contribute to those packages.

    Looking at:
    - the patch system in use by those packages
    - for those with no patch system, whether they include changes to files
    outside debian/ in diff.gz
    - whether the packages are maintained in a VCS or not

    The breakdown in terms of packages count is:

    patch_system | direct_changes | vcs | count --------------+----------------+-----+-------
    dpatch | no | no | 3
    quilt | no | no | 26
    quilt | no | yes | 96
    none | no | no | 185
    none | no | yes | 78
    none | yes | no | 166
    none | yes | yes | 74

    I propose to file bugs for packages in all categories above, except for packages in the last category that are maintained in an active VCS repository, because those are the most likely to be be using a git workflow that makes it hard to use the 3.0 format (even if I don't fully understand the arguments against using single-debian-patch in that case).

    I created a table with all packages and information such as last maintainer upload and popcon installations at https://people.debian.org/~lucas/format1.0/packages.txt

    I propose to file bugs using the following template, and make them Severity: serious after a month (minimum).

    ------------------------------------------------------>8
    Subject: upgrade to 3.0 source format
    Severity: important
    Usertags: format1.0

    Dear maintainer,

    This package is among the few (1.9%) that still use source format 1.0 in bookworm. Please upgrade it to source format 3.0, as (1) this format has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices.

    Please note that this is also a sign that the packaging of this software
    could maybe benefit from a refresh. It might be a good opportunity to
    look at other aspects as well.

    This mass bug filing was discussed on debian-devel@:
    <url to this email>

    The severity of this bug will be upgraded to 'serious' after a month.

    Thanks

    Lucas
    ------------------------------------------------------>8

    dd-list follows (excluding the packages in the last category -- I will review them manually and then discuss them separately).

    Lucas



    "Steinar H. Gunderson" <sesse@debian.org>
    amoeba-data

    A Mennucc1 <mennucc1@debian.org>
    hp-ppd
    libprintsys
    xmorph

    Adam Majer <adamm@zombino.com>
    lpr

    Adam Sloboda <ja@disorder.sk>
    gkrellm-thinkbat
    gkrellm-xkb

    Adi Zaimi <adizaimi@users.sourceforge.net>
    gkrelltop

    Adrian Bunk <bunk@debian.org>
    gkrellmoon
    xserver-xorg-input-aiptek
    xserver-xorg-input-elographics
    xserver-xorg-input-mutouch
    xserver-xorg-video-neomagic
    xserver-xorg-video-r128
    xserver-xorg-video-savage
    xserver-xorg-video-siliconmotion
    xserver-xorg-video-sisusb
    xserver-xorg-video-tdfx

    Agustin Henze <tin@debian.org>
    binutils-arm-none-eabi (U)

    Alejandro Garrido Mota <garridomota@gmail.com>
    libdansguardian-perl

    Alexander Wirt <formorer@debian.org>
    grub-imageboot
    libdata-validate-domain-perl

    Alexander Zangerl <az@debian.org>
    intel2gas
    libcrypt-smbhash-perl
    libyaml-shell-perl

    Alf Gaida <agaida@siduction.org>
    lxqt-metapackages (U)

    Andrea Capriotti <capriott@debian.org>
    umview (U)
    vde2 (U)

    Andreas Barth <aba@ayous.org>
    mgetty

    Andreas Barth <aba@not.so.argh.org>
    debfoster (U)
    netpbm-free

    Andreas Boll <aboll@debian.org>
    mesa (U)
    pixman (U)

    Andreas Boll <andreas.boll.dev@gmail.com>
    mesa-demos (U)

    Andreas Bombe <aeb@debian.org>
    simh

    Andreas Rottmann <rotty@debian.org>
    chase

    Andres Salomon <dilinger@debian.org>
    gplaycli (U)
    msr-tools

    Andrzej Urbaniak <au742582@interia.pl>
    vonsh

    Anibal Monsalve Salazar <anibal@debian.org>
    xfsdump (U)

    Anton Zinoviev <zinoviev@debian.org>
    cbedic
    console-cyrillic
    fortunes-bg
    scalable-cyrfonts

    Ari Pollak <ari@debian.org>
    gav
    gav-themes

    Arnaud Quette <aquette@debian.org>
    powerman

    Atsushi KAMOSHIDA <kamop@debian.org>
    libjcode-pm-perl
    rcconf

    Ayatana Packagers <pkg-ayatana-devel@lists.alioth.debian.org>
    libunity

    Barry deFreese <bdefreese@debian.org>
    pixbros (U)

    Bartosz Fenski <fenio@debian.org>
    redet

    Bas Wijnen <wijnen@debian.org>
    z80asm

    Bastian Blank <waldi@debian.org>
    sysconfig (U)

    Bdale Garbee <bdale@gag.com>
    pforth

    Bernd Zeimetz <bzed@debian.org>
    gimp-plugin-registry (U)

    Brandon Barnes <winterknight@nerdshack.com>
    komi

    Brendan O'Dea <bod@debian.org>
    vile

    Breno Leitao <leitao@debian.org>
    fortunes-br

    Brian Nelson <pyro@debian.org>
    aspell-el

    Carsten Hey <carsten@debian.org>
    pal

    ChangZhuo Chen (陳昌倬) <czchen@debian.org>
    lxqt-metapackages (U)

    Chris Boyle <cmb@debian.org>
    aewm++-goodies
    crack-attack

    Chris Halls <halls@debian.org>
    python-ooolib (U)

    Chris Lawrence <lawrencc@debian.org>
    makexvpics

    Christoph Martin <martin@uni-mainz.de>
    crypt++el (U)

    Christophe Prud'homme <prudhomm@debian.org>
    madlib

    Chuan-kai Lin <cklin@debian.org>
    mdm

    ClamAV Team <pkg-clamav-devel@lists.alioth.debian.org>
    clamsmtp

    Colin Tuckley <colint@debian.org>
    cd-circleprint

    Craig Sanders <cas@taz.net.au>
    dlocate

    Cyril Bouthors <cyb@debian.org>
    libapache2-mod-log-slow
    libdevice-usb-pcsensor-hidtemper-perl
    pgreplay
    watchcatd (U)

    Cyril Bouthors <cyril.bouthors@isvtec.com>
    pgreplay (U)

    Cyril Bouthors <cyril@bouthors.org>
    libapache2-mod-log-slow (U)
    libdevice-usb-pcsensor-hidtemper-perl (U)
    pgreplay (U)
    watchcatd

    Cyril Brulebois <kibi@debian.org>
    debian-installer (U)
    libxxf86dga (U)
    xdm (U)
    xfonts-scalable (U)
    xorg-sgml-doctools (U)
    xserver-xorg-video-glide (U)
    xserver-xorg-video-ivtvdev (U)
    xtrans (U)

    Dale E. Martin <dale@the-martins.org>
    pccts

    Damien Raude-Morvan <drazzib@debian.org>
    libjlayer-java (U)

    Danai SAE-HAN (韓達耐) <danai@debian.org>
    latex-cjk-chinese-arphic (U)

    Daniel Kahn Gillmor <dkg@fifthhorseman.net>
    cereal

    David Given <dg@cowlark.com>
    ufiformat

    David Nusinow <dnusinow@debian.org>
    configure-debian
    xfonts-scalable (U)

    David Weinehall <tao@debian.org>
    cbmplugs
    lsmbox

    debfoster Maintainer Team <pkg-debfoster@teams.debian.net>
    debfoster

    Debian Acpi Team <pkg-acpi-devel@lists.alioth.debian.org>
    acpi

    Debian Cinnamon Team <debian-cinnamon@lists.debian.org>
    libtimezonemap

    Debian CLI Libraries Team <pkg-cli-libs-team@lists.alioth.debian.org>
    nini

    Debian Games Team <pkg-games-devel@lists.alioth.debian.org>
    desmume
    games-thumbnails
    geki3
    pixbros

    Debian GCC Maintainers <debian-gcc@lists.debian.org>
    mpclib3

    Debian GNUstep maintainers <pkg-gnustep-maintainers@lists.alioth.debian.org>
    etoile
    mpdcon.app
    poe.app
    renaissance

    Debian Install System Team <debian-boot@lists.debian.org>
    debian-installer

    Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
    libjlayer-java
    libjmac-java
    pentaho-reporting-flow-engine

    Debian LibreOffice Maintainers <debian-openoffice@lists.debian.org>
    hsqldb1.8.0

    Debian LibreOffice Team <debian-openoffice@lists.debian.org>
    python-ooolib

    Debian Mono Group <pkg-mono-group@lists.alioth.debian.org>
    cli-common

    Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
    lakai

    Debian OCaml Maintainers <debian-ocaml-maint@lists.debian.org>
    ocaml-getopt
    ocaml-magic
    ocaml-shout
    ocamlcreal

    Debian QA Group <packages@qa.debian.org>
    autoclass
    aylet
    blop
    catdvi
    citadel-client
    codegroup
    dds2tar
    ddtc
    dnprogs
    docbook-website
    fmtools
    fstrcmp
    fwanalog
    gcc-3.3
    glbsp
    gnupod-tools
    jgraph
    libapache2-mod-auth-plain
    libapache2-mod-authz-unixgroup
    libcitadel
    makepatch
    midge
    mrtg-ping-probe
    osspsa
    pdf2svg
    playmidi
    pngmeta
    poppassd
    pppconfig
    razor
    rio
    sanitizer
    svn-buildpackage
    transfermii
    uzbek-wordlist
    ygl

    Debian rsbackup maintainers <rsbackup-maint@lists.alioth.debian.org>
    rsbackup

    Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
    ruby-bsearch

    Debian S/390 Team <debian-s390@lists.debian.org>
    sysconfig

    Debian SSSD Team <pkg-sssd-devel@lists.alioth.debian.org>
    ding-libs

    Debian TeX maintainers <debian-tex-maint@lists.debian.org>
    latex-cjk-chinese-arphic
    lmodern

    Debian TTS team <tts-project@lists.alioth.debian.org>
    festlex-oald
    festlex-poslex
    festvox-don
    festvox-ellpc11k
    festvox-kallpc16k
    festvox-kallpc8k
    festvox-kdlpc16k
    festvox-kdlpc8k
    festvox-rablpc16k
    festvox-rablpc8k

    Debian Vim Maintainers <team+vim@tracker.debian.org>
    vim-scripts

    Debian VSquare Team <virtualsquare@cs.unibo.it>
    fuse-umfuse-ext2
    umview
    vde2

    Debian X Strike Force <debian-x@lists.debian.org>
    glslang
    glw
    libice
    libpciaccess
    libsm
    libx11
    libxau
    libxaw
    libxdmcp
    libxfixes
    libxfont
    libxi
    libxmu
    libxpm
    libxpresent
    libxrandr
    libxshmfence
    libxss
    libxt
    libxtst
    libxv
    libxvmc
    libxxf86dga
    libxxf86vm
    mesa
    mesa-demos
    pixman
    twm
    wayland
    weston
    x11-apps
    x11-session-utils
    x11-utils
    x11-xfs-utils
    x11-xkb-utils
    x11-xserver-utils
    xauth
    xcursor-themes
    xdm
    xfonts-100dpi
    xfonts-75dpi
    xfonts-base
    xfonts-scalable
    xfonts-utils
    xft
    xinit
    xkeyboard-config
    xorg
    xorg-docs
    xorg-server
    xorg-sgml-doctools
    xorgproto
    xserver-xorg-input-evdev
    xserver-xorg-input-joystick
    xserver-xorg-input-keyboard
    xserver-xorg-input-libinput
    xserver-xorg-input-mouse
    xserver-xorg-input-synaptics
    xserver-xorg-video-amdgpu
    xserver-xorg-video-ati
    xserver-xorg-video-cirrus
    xserver-xorg-video-dummy
    xserver-xorg-video-fbdev
    xserver-xorg-video-glide
    xserver-xorg-video-intel
    xserver-xorg-video-ivtvdev
    xserver-xorg-video-mga
    xserver-xorg-video-nouveau
    xserver-xorg-video-openchrome
    xserver-xorg-video-qxl
    xserver-xorg-video-vesa
    xserver-xorg-video-vmware
    xtrans
    xutils-dev

    Deepak Tripathi <apenguinlinux@gmail.com>
    libperlmenu-perl

    Dima Barsky <dima@debian.org>
    python-pam

    Dimitri Fontaine <dim@tapoueh.org>
    cl-log

    Dirk Eddelbuettel <edd@debian.org>
    acepack
    fasianoptions
    fassets
    fnonlinear
    foptions
    fregression
    funitroots
    gsl-ref-html
    gsl-ref-psdoc
    r-cran-minqa
    r-cran-mvnormtest
    r-cran-timedate

    Dmitry E. Oboukhov <unera@debian.org>
    famfamfam-flag
    libanyevent-serialize-perl
    libdatapager-perl
    libdbix-dr-perl
    libtree-multinode-perl
    uqm-content

    Don Armstrong <don@debian.org>
    libhtml-element-extended-perl
    libimage-base-bundle-perl
    libuser-perl

    Drake Diedrich <dld@debian.org>
    empire-hub

    Drew Parsons <dparsons@debian.org>
    gworldclock
    xserver-xorg-video-intel (U)

    Dylan Aïssi <daissi@debian.org>
    xserver-xorg-video-openchrome (U)

    Eduard Bloch <blade@debian.org>
    cpipe

    Emanuele Rocca <ema@debian.org>
    fortunes-it

    Emilio Pozuelo Monfort <pochu@debian.org>
    wayland (U)
    weston (U)

    Erik Schanze <eriks@debian.org>
    imgvtopgm

    Erik Vetters <evetters@gmail.com>
    libxml-rss-feed-perl

    Erinn Clark <erinn@double-helix.org>
    libromana-perligata-perl

    Eugene V. Lyubimkin <jackyf@debian.org>
    bindfs
    daptup
    libunibreak
    nlkt
    qprint
    randtype

    Evgeni Golov <evgeni@debian.org>
    desmume (U)

    Fabio Fantoni <fantonifabio@tiscali.it>
    libtimezonemap (U)

    Felipe Augusto van de Wiel (faw) <faw@debian.org>
    freetable
    linklint

    Filippo Giunchedi <filippo@debian.org>
    fuse-umfuse-ext2 (U)
    umview (U)
    vde2 (U)

    Florian Hinzmann <fh@debian.org>
    libxml-dumper-perl

    Florian Weimer <fw@deneb.enyo.de>
    debfoster (U)

    Francesco Namuri <francesco@namuri.it>
    dictconv

    Francesco Paolo Lovergine <frankie@debian.org>
    ebook-dev-alp

    Francisco Manuel Garcia Claramonte <francisco@debian.org>
    stardata-common

    Frank Habermann <lordlamer@lordlamer.de>
    prototypejs
    scriptaculous

    Frank Küster <frank@debian.org>
    lmodern (U)

    Frederic Peters <fpeters@debian.org>
    jdresolve

    Fredrik Hallenberg <hallon@debian.org>
    ascd
    ascdc
    asmail
    asmixer
    cdecl
    coolmail
    xcolors

    Free Ekanayaka <freee@debian.org>
    lakai (U)

    Gerrit Pape <pape@smarden.org>
    checkpw
    daemontools
    integrit
    ipsvd
    ucspi-proxy

    Giuseppe Sacco <eppesuig@debian.org>
    libpaper

    Gleydson Mazioli da Silva <gleydson@debian.org>
    focalinux

    Goswin von Brederlow <goswin-v-b@web.de>
    ifstat

    Guido Günther <agx@sigxcpu.org>
    xsettings-kde

    Guido Trotter <ultrotter@debian.org>
    fuse-umfuse-ext2 (U)
    umview (U)
    vde2 (U)

    Hakan Ardo <hakan@debian.org>
    ftpwatch
    gdb-avr
    libcompface
    picon-domains
    picon-misc
    picon-news
    picon-unknown
    picon-usenix
    picon-users
    picon-weather
    xfaces

    Heiko Stuebner <mmind@debian.org>
    abootimg

    Hilko Bengen <bengen@debian.org>
    libsendmail-pmilter-perl

    Hubert Chathi <uhoreg@debian.org>
    whalebuilder

    Héctor Orón Martínez <zumbi@debian.org>
    wayland (U)
    weston (U)

    Ian Campbell <ijc@debian.org>
    qcontrol
    sunxi-tools

    Ian Campbell <ijc@hellion.org.uk>
    xserver-xorg-video-ivtvdev (U)

    Ian Jackson <ian.jackson@eu.citrix.com>
    sympathy

    Ian Jackson <ijackson@chiark.greenend.org.uk>
    authbind
    chiark-tcl
    chiark-tcl-applet
    chiark-utils
    dgit
    its-playback-time
    sauce
    spigot
    sympathy (U)
    userv
    userv-utils (U)
    vacation (U)
    vm
    vtwm
    xfonts-traditional

    James Bromberger <jeb@debian.org>
    libdigest-whirlpool-perl
    libfile-chdir-perl

    James McCoy <jamessan@debian.org>
    vim-scripts (U)

    Jameson Graef Rollins <jrollins@finestructure.net>
    cereal (U)

    Javier Fernandez-Sanguino Pen~a <jfs@computer.org>
    binstats
    stardata-common (U)

    Javier Fernandez-Sanguino Peña <jfs@debian.org>
    compartment
    ifupdown-extra

    Javier Fernández-Sanguino Peña <jfs@computer.org>
    checksecurity

    Javier Fernández-Sanguino Peña <jfs@debian.org>
    netselect
    openuniverse
    samhain
    spellcast

    Jeff Breidenbach <jab@debian.org>
    mhonarc

    Joaquin de Andres <me@xcancerberox.com.ar>
    binutils-arm-none-eabi

    Joerg Jaspert <joerg@debian.org>
    gkrellm-reminder
    nstreams
    xbindkeys-config

    John Goerzen <jgoerzen@complete.org>
    glktermw
    libnbcompat

    John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
    mac-fdisk

    John Steele Scott <toojays@toojays.net>
    openoffice.org-en-au

    Jonas Genannt <jonas.genannt@capi2name.de>
    libalgorithm-dependency-perl
    libtemplate-plugin-cycle-perl
    libtemplate-plugin-utf8decode-perl

    Jonathan McDowell <noodles@earth.li>
    remote-tty

    Jose Parrella <bureado@debian.org>
    libbiblio-isis-perl
    libclass-csv-perl

    Josselin Mouette <joss@debian.org>
    regionset

    Juan Cespedes <cespedes@debian.org>
    linux86

    Juan Esteban Monsalve Tobon <esteban@v7w.com>
    libranlip

    Julian Gilbey <jdg@debian.org>
    lmodern (U)

    Juliane Holzt <debian@julijane.de>
    gwhois

    Julien Cristau <jcristau@debian.org>
    libxpresent (U)
    python-hglib

    Julien Danjou <acid@debian.org>
    tetrinetx

    Jörgen Hägg <jh@debian.org>
    libexpect-perl

    Keith Packard <keithp@keithp.com>
    binutils-arm-none-eabi (U)

    Kevin B. McCarty <kmccarty@debian.org>
    stardata-common (U)

    Kevin Coyner <kcoyner@debian.org>
    nmzmail

    Krystian Wlosek <tygrys@waw.pdi.net>
    zmakebas

    Kurt Roeckx <kurt@roeckx.be>
    libmad
    lice
    madplay

    LaMont Jones <lamont@debian.org>
    hpsockd

    Leo Costela <costela@debian.org>
    pidgin-awayonlock

    Lionel Elie Mamane <lmamane@debian.org>
    dvidvi
    ifrench-gut

    Loic Dachary (OuoU) <loic@debian.org>
    libtext-unaccent-perl

    Luca Bigliardi <shammash@artha.org>
    vde2 (U)

    Luca Bruno <lucab@debian.org>
    ipv6calc

    Luciano Bello <luciano@debian.org>
    dirdiff (U)

    Ludovic Claude <ludovic.claude@laposte.net>
    byacc-j

    Ludovic Drolez <ldrolez@debian.org>
    libio-dirent-perl
    lookup
    swish-e
    xjdic

    Ludovico Gardenghi <garden@debian.org>
    fuse-umfuse-ext2 (U)
    umview (U)
    vde2 (U)

    LXQt Packaging Team <pkg-lxqt-devel@lists.alioth.debian.org>
    lxqt-metapackages

    Maarten Lankhorst <maarten.lankhorst@ubuntu.com>
    mesa-demos (U)

    Manoj Srivastava <srivasta@debian.org>
    libgraphics-colornames-perl
    make-doc-non-dfsg

    Marc Haber <dispatch+sipcalc_contact@tracker.debian.org>
    sipcalc

    Marc Haber <mh+debian-packages@zugschlus.de>
    debfoster (U)

    Marc Singer <elf@debian.org>
    ixp4xx-microcode
    uphpmvault

    Marco d'Itri <md@linux.it>
    inn

    Marco Nenciarini <mnencia@debian.org>
    yaret

    Marco Presi (Zufus) <zufus@debian.org>
    ssh-askpass-fullscreen

    Margarita Manterola <marga@debian.org>
    libtimezonemap (U)

    Mario Lang <mlang@debian.org>
    crypt++el

    Mark Brown <broonie@debian.org>
    clc-intercal
    tua

    Markus Loeberbauer <Loeberbauer@ssw.jku.at>
    coco-cpp
    coco-cs
    coco-java

    Martin Zobel-Helas <zobel@debian.org>
    pfqueue

    Masayuki Hatta (mhatta) <mhatta@debian.org>
    gsfonts

    Mathieu Malaterre <malat@debian.org>
    gnomediaicons

    Matlink <matlink@matlink.fr>
    gplaycli

    Matt Kraai <kraai@debian.org>
    markdown

    Matt Palmer <mpalmer@debian.org>
    dns323-firmware-tools

    Matthew Danish <mrd@debian.org>
    cl-regex

    Matthew Grant <matt@mattgrant.net.nz>
    nomarch

    Matthew Vernon <matthew@debian.org>
    bible-kjv
    debroster
    electric-fence
    rsbackup (U)
    xbs

    Matthias Klose <doko@debian.org>
    mpclib3 (U)
    python-defaults
    python2.7
    python3-defaults
    shapetools
    shapetools-tutorial

    Matthias Schmitz <matthias@sigxcpu.org>
    liblog-dispatch-filerotate-perl

    Matthias Urlichs <smurf@debian.org>
    yapps2

    Mattia Dongili <malattia@debian.org>
    xserver-xorg-input-synaptics (U)

    maximilian attems <maks@debian.org>
    xserver-xorg-input-synaptics (U)
    xserver-xorg-video-intel (U)

    Maximiliano Curia <maxy@debian.org>
    libtimezonemap (U)

    Mehdi Dogguy <mehdi@debian.org>
    ocaml-getopt (U)
    ocamlcreal (U)

    Michael Ablassmeier <abi@debian.org>
    libaudio-scrobbler-perl
    libemail-foldertype-perl
    libmp4-info-perl
    libnet-finger-perl
    libnet-proxy-perl
    streamripper

    Michael C. Schultheiss <schultmc@debian.org>
    libmodem-vgetty-perl

    Michael Meskes <meskes@debian.org>
    acpi (U)
    avfs
    clamsmtp (U)
    hostname
    ips
    memstat
    watchdog

    Michael Stapelberg <stapelberg@debian.org>
    xserver-xorg-video-intel (U)

    Michael Tokarev <mjt@tls.msk.ru>
    tinycdb

    Michael Vogt <mvo@debian.org>
    vdk2

    Mike Furr <mfurr@debian.org>
    ocaml-getopt (U)
    ocamlcreal (U)

    Mike Gabriel <sunweaver@debian.org>
    weston (U)

    Mike Hommey <glandium@debian.org>
    vmfs-tools

    Mirco Bauer <meebey@debian.org>
    cli-common (U)
    nini (U)

    Miriam Ruiz <little_miry@yahoo.es>
    games-thumbnails (U)
    pixbros (U)

    Mohammed Sameer <debian@foolab.org>
    ascii2binary

    Murat Demirten <murat@debian.org>
    manpages-tr

    Nathan Scott <nathans@debian.org>
    xfsdump

    Neil Roeth <neil@debian.org>
    openjade
    opensp
    psgml

    Nelson A. de Oliveira <naoliv@debian.org>
    pngnq

    Nicolas Boullis <nboullis@debian.org>
    loadwatch

    Nobuhiro Iwamatsu <iwamatsu@debian.org>
    dv4l

    NOKUBI Takatsugu <knok@daionet.gr.jp>
    libtext-chasen-perl

    Norbert Preining <norbert@preining.info>
    libtimezonemap (U)
    lmodern (U)

    Norbert Preining <preining@debian.org>
    latex-cjk-chinese-arphic (U)

    Noël Köthe <noel@debian.org>
    postmark

    Ognyan Kulev <ogi@debian.org>
    gwaterfall

    Ola Lundqvist <opal@debian.org>
    cron-apt
    hp-search-mac
    opalmod
    wwwconfig-common

    Panu Kalliokoski <atehwa@sange.fi>
    stx2any

    Pascal Giard <pascal@debian.org>
    desmume (U)

    Paul Brossier <piem@debian.org>
    aconnectgui
    alsamixergui

    Paul Gevers <elbrus@debian.org>
    festlex-oald (U)
    festlex-poslex (U)
    festvox-don (U)
    festvox-ellpc11k (U)
    festvox-kallpc16k (U)
    festvox-kallpc8k (U)
    festvox-kdlpc16k (U)
    festvox-kdlpc8k (U)
    festvox-rablpc16k (U)
    festvox-rablpc8k (U)

    Paul Slootman <paul@debian.org>
    tmpreaper

    Paul van Tilburg <paulvt@debian.org>
    ruby-bsearch (U)
    vile (U)

    Peter Palfrader <weasel@debian.org>
    code2html
    tor

    Peter S Galbraith <psg@debian.org>
    imgsizer
    libtcd
    mh-book
    poster
    xtide-coastline

    Petter Reinholdtsen <pere@debian.org>
    isenkram
    ng-utils

    Phil Brooke <pjb@debian.org>
    fvwm1
    searchandrescue
    searchandrescue-data
    topal
    vacation

    Philippe Coval <rzr@gna.org>
    atitvout

    Piotr Ożarowski <piotr@debian.org>
    python-defaults (U)
    python3-defaults (U)

    Radovan Garabík <garabik@kassiopeia.juls.savba.sk>
    keyboards-rg

    Radu Spineanu <radu@debian.org>
    libropkg-perl

    Rene Engelhard <rene@debian.org>
    hsqldb1.8.0 (U)
    pentaho-reporting-flow-engine (U)
    python-ooolib (U)

    Rene Weber <rene_debmaint@public.e-mail.elvenlord.com>
    libimage-metadata-jpeg-perl
    mapivi

    Ricardo Mones <mones@debian.org>
    gkrellm-reminder (U)

    Riccardo Stagni <unriccio@email.it>
    gcx
    wmtemp

    Riku Voipio <riku.voipio@linaro.org>
    mutrace

    Rob Browning <rlb@defaultvalue.org>
    lockfile-progs

    Robert Collins <robertc@robertcollins.net>
    pandora-build

    Robert Lemmen <robertle@semistable.com>
    aft
    kelbt
    ragel
    tablix2

    Robert S. Edmonds <edmonds@debian.org>
    pcaputils

    Rod Whitby <rod@whitby.id.au>
    devio
    ixp4xx-microcode (U)

    Roderick Schertler <roderick@argon.org>
    mime-construct

    Roland Mas <lolando@debian.org>
    edict-el

    Romain Beauxis <toots@rastageeks.org>
    ocaml-magic (U)
    ocaml-shout (U)

    Ron Lee <ron@debian.org>
    bit-babbler
    dovecot-antispam
    gitpkg
    libogg
    opus
    opus-tools
    opusfile
    vpb-driver
    xf86-input-wacom

    Ross Burton <ross@debian.org>
    flvstreamer

    Runa Sandvik <runa.sandvik@gmail.com>
    dmitry
    icmptx

    Russell Coker <russell@coker.com.au>
    logtools
    postal

    Sam Hocevar (Debian packages) <sam+deb@zoy.org>
    beav
    geki3 (U)
    vdk2 (U)

    Samuel Mimram <smimram@debian.org>
    ocaml-magic (U)
    ocaml-shout (U)

    Santiago Sánchez Paz <sanchezpaz@gmail.com>
    dirdiff

    Sarah Connor <sarah.connor.uk@googlemail.com>
    libclass-pluggable-perl

    Sean Whitton <spwhitton@spwhitton.name>
    userv-utils

    Sebastian Dröge <slomo@debian.org>
    nini (U)

    Sebastian Harl <tokkee@debian.org>
    src2tex

    Shane Wegner <shane@debian.org>
    cachefilesd

    Simon Horman <horms@debian.org>
    fake
    vanessa-adt
    vanessa-logger
    vanessa-socket

    Simon Kelley <simon@thekelleys.org.uk>
    dhcp-helper
    dnsmasq

    Simon Tatham <anakin@pobox.com>
    chroma

    Stanislav Maslovski <stanislav.maslovski@gmail.com>
    cdde
    glurp

    Stefan Hornburg (Racke) <racke@linuxia.de>
    appconfig
    ciphersaber
    dbix-easy-perl
    debaux
    libtie-shadowhash-perl

    Stefan Sobernig <stefan.sobernig@wu-wien.ac.at>
    xotcl (U)

    Stefano Rivera <stefanor@debian.org>
    python3-defaults (U)

    Steinar H. Gunderson <sesse@debian.org>
    pkgsync

    Steve Greenland <stevegr@debian.org>
    jargon

    Steve Kowalik <stevenk@debian.org>
    xringd

    Steve McIntyre <93sam@debian.org>
    dvdtape
    netpbm-free (U)
    xmix

    Taku YASUI <tach@debian.org>
    libdata-javascript-anon-perl
    libfile-searchpath-perl
    libhtml-popuptreeselect-perl

    Takuo Kitame <kitame@debian.org>
    stone

    Takuo KITAME <kitame@debian.org>
    imaprowl

    TANIGUCHI Takaki <takaki@debian.org>
    ruby-bsearch (U)

    Tcl/Tk Debian Packagers <pkg-tcltk-devel@lists.alioth.debian.org>
    xotcl

    Thaddeus H. Black <thb@debian.org>
    debram

    Thomas Goirand <zigo@debian.org>
    sbox-dtc

    Thomas Lange <lange@debian.org>
    tcsh

    Thomas Preud'homme <thomas.preudhomme@arm.com>
    binutils-arm-none-eabi (U)

    Tim Cutts <timc@chiark.greenend.org.uk>
    tkcvs

    Timo Aaltonen <tjaalton@debian.org>
    ding-libs (U)
    glslang (U)
    gss-ntlmssp
    libxfont (U)
    xserver-xorg-input-libinput (U)
    xserver-xorg-video-amdgpu (U)

    Tollef Fog Heen <tfheen@debian.org>
    chrpath
    fortunes-bofh-excuses
    librt-extension-commandbymail-perl
    norwegian
    pam-tmpdir
    pkg-config
    yubikey-server-c

    Tommi Vainikainen <tvainika@debian.org>
    flex-old

    Tormod Volden <debian.tormod@gmail.com>
    xserver-xorg-video-mga (U)

    Torsten Landschoff <torsten@debian.org>
    gsfonts (U)
    gsfonts-other

    Torsten Werner <twerner@debian.org>
    asmix (U)
    libjlayer-java (U)
    libjmac-java (U)

    Troy Heber <troyh@debian.org>
    colplot
    judy

    TSUCHIYA Masatoshi <tsuchiya@namazu.org>
    jtex-base

    Uwe Hermann <uwe@debian.org>
    amideco
    aview
    avrp
    awardeco
    bfbtester
    cycfx2prog
    gmemusage
    longrun
    m16c-flash
    phnxdeco
    pixelize
    pscan

    Uwe Steinmann <steinm@debian.org>
    sgrep

    Varun Hiremath <varun@debian.org>
    asmix
    libjlayer-java (U)
    libjmac-java (U)

    Vern Sun <s5unty@gmail.com>
    cconv

    Vincent Cheng <vcheng@debian.org>
    xserver-xorg-video-intel (U)

    Willem van den Akker <wvdakker@wilsoft.nl>
    gtkterm

    Wookey <wookey@debian.org>
    dpkg-cross
    xbuilder

    Wouter Verhelst <wouter@debian.org>
    aspic
    logtool

    Xavier Lüthi <xluthi@debian.org>
    nrg2iso

    Yann Dirson <dirson@debian.org>
    dh-buildinfo
    funnelweb-doc

    Yaroslav Halchenko <debian@onerussian.com>
    gkrelltop (U)

    Yavor Doganov <yavor@gnu.org>
    etoile (U)
    mpdcon.app (U)
    poe.app (U)
    renaissance (U)

    Ying-Chun Liu (PaulLiu) <paulliu@debian.org>
    gimp-plugin-registry
    kawari8

    Zed Pobre <zed@debian.org>
    libebook-tools-perl
    libtext-aligner-perl
    libtext-table-perl

    Zhengpeng Hou <zhengpeng-hou@ubuntu.com>
    moblin-gtk-engine

    Ďoďo Ivanecký <dodo.sk@gmail.com>
    g2p-sk
    sylseg-sk

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to Lucas Nussbaum on Sun Mar 6 22:30:01 2022
    On Mar 06, Lucas Nussbaum <lucas@debian.org> wrote:

    I think that we should reduce the number of packages using the 1.0 format, as (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to contribute to those packages.
    inn is a bit peculiar. It uses a patch system, has no direct changes and
    is maintained in a VCS. But the build process is from a different age
    and quite arcane, and I remember that switching to 3.0 would have
    required significant work, so I see no compelling reason to do it.

    --
    ciao,
    Marco

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCYiUm4QAKCRDLPsM64d7X gdogAP9/2IvKt/i4V7Uiq2roXbSW481md//6fxxVaB/me3W00wEAup8PJyqoS1Gi C/84I5IHRubVv1hfwbij4M+LeY8SzwU=
    =1c2a
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Lucas Nussbaum on Sun Mar 6 22:30:01 2022
    Lucas Nussbaum <lucas@debian.org> writes:

    The breakdown in terms of packages count is:

    patch_system | direct_changes | vcs | count --------------+----------------+-----+-------
    dpatch | no | no | 3
    quilt | no | no | 26
    quilt | no | yes | 96
    none | no | no | 185
    none | no | yes | 78
    none | yes | no | 166
    none | yes | yes | 74

    I propose to file bugs for packages in all categories above, except for packages in the last category that are maintained in an active VCS repository, because those are the most likely to be be using a git
    workflow that makes it hard to use the 3.0 format (even if I don't fully understand the arguments against using single-debian-patch in that
    case).

    If you're going to omit the ones in the last category, I think you should
    also omit the ones in the none/no/yes category, since they may be packages
    that intermittantly have changes and are similarly using a VCS-based
    workflow that doesn't want to use the 3.0 format.

    A mass bug filing for the first three categories seems like the change
    with the biggest potential to benefit Debian, since it's a direct simplification of the number of ways packages are maintained in the
    archive. The packages without any patch system feel a bit less
    interesting.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Lucas Nussbaum on Sun Mar 6 23:30:01 2022
    Hi Lucas,

    thanks for doing this MBF!

    I agree with the other two replies and have another thing to add:

    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    I propose to file bugs using the following template, and make them Severity: serious after a month (minimum).

    ------------------------------------------------------>8
    Subject: upgrade to 3.0 source format
    Severity: important

    I think those severities are too high and that they will cause unneeded friction
    and frustration, also because (I think) they are not meeting the BTS criteria:

    serious:
    is a severe violation of Debian policy (roughly, it violates a "must" or
    "required" directive), or, in the package maintainer's or release manager's
    opinion, makes the package unsuitable for release.

    important:
    a bug which has a major effect on the usability of a package,
    without rendering it completely unusable to everyone.


    So I'd rather propose to file these bugs with severity 'normal' and then wait and then get policy updated, and then raise the severity further.

    To be frank: right now (or in a month) I'd just shake my head at severity 'serious', downgrade the bug and do something else. I totally agree it's
    a smell (for some packages, see other replies) but IMO definitly not seriously smelly :)

    IOW: It doesn't stink, it's just a tiny bit awkward and less than ideal.
    And that's neither important nor serious.

    Finally and again: thank you for doing this work!


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    "Climate change" is an euphenism. "Global warming" as well.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmIlNIMACgkQCRq4Vgaa qhznWQ/+OHb6GG7aEbIm4By1OTYYxPyax55lU1QPowq+AXtC8s/cEMsNe/vSjL6m /TE9MUjJs+1+zDdSDvCz0CYpA/vLngOa7Ru9c3XTwS/p26Ylclp1sXj6WynBUy59 9O0ukqlkpemdQ41r208bGj7jmYYfb4S/aafer73skHvawVY4WItYY5/VFzEi5k4m UWEdQhBEiZFtG7I/XG0eNKYhhhkdGEpwyUOWlbJEwC8jl0us636oFWTjAF6fNHWS u5xKPoOEBAMa7zbfDHaQce+O8HupIrI9oDzA8DhQcVQgXcq5vk6xCjZpbSwfkDxO wUxsnKnDhNsTHdhuvyzTAce4T0D32zjewJqWiyVQROe061pyez95RqihPRxqGxmf KNbszXK+9Ds5UwKKUXvl3U0gUqrmpaJkzsBo9hvp+hlf0jwnwBLxnLhrzPi5r1PX Y+3zeVzkmDC8eRXFhVbDLKyRt5aPNCn98qhslBGPAfGSuJXc8NMaFYcEvwCy3C+E pBtQQgLgLbNWs52+a5/TdbScyh8QpLYQ/MbHHMEQlT2hnKtYokQ/TkmKmAJx4naV v0DuHC6jepVKKg5TCM/zDtQlvzdFPie/lsuM9/Tv2B1jc8pZQ7Zwi
  • From Lucas Nussbaum@21:1/5 to Holger Levsen on Mon Mar 7 15:10:01 2022
    Hi,

    On 06/03/22 at 22:24 +0000, Holger Levsen wrote:
    So I'd rather propose to file these bugs with severity 'normal' and then wait and then get policy updated, and then raise the severity further.

    For reference, there's a debian-policy bug about deprecating 1.0 + dpatch/quilt: #850157 (no activity since 2018)

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Marco d'Itri on Mon Mar 7 15:00:01 2022
    On 06/03/22 at 22:25 +0100, Marco d'Itri wrote:
    On Mar 06, Lucas Nussbaum <lucas@debian.org> wrote:

    I think that we should reduce the number of packages using the 1.0 format, as
    (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to
    contribute to those packages.
    inn is a bit peculiar. It uses a patch system, has no direct changes and
    is maintained in a VCS. But the build process is from a different age
    and quite arcane, and I remember that switching to 3.0 would have
    required significant work, so I see no compelling reason to do it.

    So I looked into inn and it made me realize that there was a bug in my
    analysis of the current status. We have packages using format 1.0 with
    dpatch or quilt, but also with direct changes to files outside debian/
    not tracked in the patch system.

    So the correct breakdown is:
    patch_system | direct_changes | direct_changes_and_patch_system | vcs | count --------------+----------------+---------------------------------+-----+-------
    dpatch | N/A | no | no | 2
    dpatch | N/A | yes | no | 1
    quilt | N/A | no | no | 17
    quilt | N/A | no | yes | 34
    quilt | N/A | yes | no | 9
    quilt | N/A | yes | yes | 62
    none | no | N/A | no | 185
    none | no | N/A | yes | 78
    none | yes | N/A | no | 166
    none | yes | N/A | yes | 74

    I also updated https://people.debian.org/~lucas/format1.0/packages.txt

    And inn is in quilt / N/A / yes / yes: there are files added in extra/
    that are not tracked in a patch.

    I tried to port inn to 3.0 (quilt), and after adding a patch for those
    files using dpkg-source --commit, I could successfully build it. Do you remember more details about the problems you ran into?

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wouter Verhelst@21:1/5 to Lucas Nussbaum on Mon Mar 7 16:40:01 2022
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    Wouter Verhelst <wouter@debian.org>
    aspic
    logtool

    Yeah, no. These will be reduced to "wishlist" and probably tagged
    "wontfix".

    The packages work just fine, the source format is still supported, I
    have better things to do with my time?

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jeremy Bicha@21:1/5 to wouter@debian.org on Mon Mar 7 17:10:01 2022
    On Mon, Mar 7, 2022 at 10:36 AM Wouter Verhelst <wouter@debian.org> wrote:
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    Wouter Verhelst <wouter@debian.org>
    aspic
    logtool

    Yeah, no. These will be reduced to "wishlist" and probably tagged
    "wontfix".

    The packages work just fine, the source format is still supported, I
    have better things to do with my time?

    I guess you'd be ok with orphaning aspic to allow others to more
    easily modernize the packaging?
    https://bugs.debian.org/657083

    Thank you,
    Jeremy Bicha

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam Borowski@21:1/5 to Wouter Verhelst on Mon Mar 7 17:40:01 2022
    On Mon, Mar 07, 2022 at 05:35:43PM +0200, Wouter Verhelst wrote:
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    Wouter Verhelst <wouter@debian.org>
    aspic
    logtool

    Yeah, no. These will be reduced to "wishlist" and probably tagged
    "wontfix".

    Both of these packages have no patch system, so the whole work is:

    mkdir -p debian/source
    echo '3.0 (quilt)' >debian/source/format
    echo single-debian-patch >debian/source/options

    Less effort than typing an answer to the bug report.


    Meow!
    --
    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ 'Russkiy voyennyi korabl, idi nakhuy'
    ⢿⡄⠘⠷⠚⠋⠀
    ⠈⠳⣄⠀⠀⠀⠀

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adrian Bunk@21:1/5 to Lucas Nussbaum on Mon Mar 7 23:10:01 2022
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    ...
    I think that we should reduce the number of packages using the 1.0 format, as (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to contribute to those packages.
    ...

    You are not making a compelling case that these benefits clearly
    outweight the substantial costs.

    Such a MBF also:
    (1) causes a lot of extra work, and
    (2) causes a lot of breakage because such larger packaging changes
    are rarely done as careful as would be necessary

    When people are making invasive packaging changes like a dh compat bump
    or change the packaging due to such a MBF we often end up with bug
    reports like #1000229 where something broke due to that (empty binary
    packages are among the more typical breakages).

    Unless a compelling case is made that the benefits of a MBF clearly
    outweight these drawbacks, such MBFs usually have a negative benefit.

    lintian already warns or has info tags that should be upgraded to warning,
    and then there will be slow migrations usually happening when someone
    anyway does (and tests!) larger packaging changes.

    Ensuring that all relevant lintian tags are warnings would be the
    appropriate action (which is not yet true[1]), but there is no urgency
    on getting everything "fixed" immediately.

    cu
    Adrian

    [1] https://lintian.debian.org/tags/older-source-format

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Tue Mar 8 11:30:01 2022
    Hi,

    no need to file the suggested bug reports against

    Am Sun, Mar 06, 2022 at 09:25:45PM +0100 schrieb Lucas Nussbaum:
    pngmeta

    Fixed and adopted by Debian Phototools team.

    pngnq

    Fixed and adopted by Debian Phototools team.

    libimage-metadata-jpeg-perl

    Fixed and adopted by Debian Perl team.

    pixelize

    Fixed and adopted by Debian Phototools team.

    All smell removed from those packages (hopefully).

    src2tex

    I consider to move this to Debian TeX team and fix issues
    similarly.

    Kind regards

    Andreas.

    --
    http://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Tue Mar 8 11:40:01 2022
    Hi Adrian,

    Am Mon, Mar 07, 2022 at 11:42:42PM +0200 schrieb Adrian Bunk:
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    I think that we should reduce the number of packages using the 1.0 format, as
    (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to
    contribute to those packages.
    ...

    You are not making a compelling case that these benefits clearly
    outweight the substantial costs.

    I inspected / fixed four packages where I might be slightly interested.
    I agree that the benefits of only moving from source format 1.0 to 3.0
    (quilt) might be limited. However, those packages usually had other
    issues (bugs, lagging behind upstream, missing watch files, etc.) which
    were worth fixing. So raising some awareness about packages that are potentially not in good shape makes sense, IMHO.

    Such a MBF also:
    (1) causes a lot of extra work, and
    (2) causes a lot of breakage because such larger packaging changes
    are rarely done as careful as would be necessary

    When people are making invasive packaging changes like a dh compat bump
    or change the packaging due to such a MBF we often end up with bug
    reports like #1000229 where something broke due to that (empty binary packages are among the more typical breakages).

    Running debdiff after switching to dh / bumping compat should definitely
    be part of the procedure and should at least avoid this kind of bugs.

    Unless a compelling case is made that the benefits of a MBF clearly
    outweight these drawbacks, such MBFs usually have a negative benefit.

    Well, filing a bug is one thing. Discussing inside the bug report why
    changes are not wanted (may be even by tagging the bug wontfix) is
    another thing. Than we at least have some documentation about the
    issue. From my experience with the packages I've touched the only
    reason for source format 1.0 was that these are not actively maintained.
    Fixing the (not yet reported issue) was not a big deal (in contrast to
    other changes I considered in the interest of our users).

    lintian already warns or has info tags that should be upgraded to warning,

    I absolutely agree here.

    and then there will be slow migrations usually happening when someone
    anyway does (and tests!) larger packaging changes.

    This "someone anyway does larger packaging changes" did not seem very
    probable for the packages I've touched (see my other mail in this
    thread).

    Ensuring that all relevant lintian tags are warnings would be the
    appropriate action (which is not yet true[1]), but there is no urgency
    on getting everything "fixed" immediately.

    I agree that there is no real urgency for immediate action - but this
    seemed to be the case for other bugs on the packages I've touched the
    case as well.

    Kind regards

    Andreas.

    [1] https://lintian.debian.org/tags/older-source-format

    --
    http://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adrian Bunk@21:1/5 to Andreas Tille on Tue Mar 8 15:40:01 2022
    On Tue, Mar 08, 2022 at 11:39:04AM +0100, Andreas Tille wrote:
    Hi Adrian,

    Hi Andreas,

    Am Mon, Mar 07, 2022 at 11:42:42PM +0200 schrieb Adrian Bunk:
    ...
    lintian already warns or has info tags that should be upgraded to warning,

    I absolutely agree here.

    and then there will be slow migrations usually happening when someone anyway does (and tests!) larger packaging changes.

    This "someone anyway does larger packaging changes" did not seem very probable for the packages I've touched (see my other mail in this
    thread).

    Ensuring that all relevant lintian tags are warnings would be the appropriate action (which is not yet true[1]), but there is no urgency
    on getting everything "fixed" immediately.

    I agree that there is no real urgency for immediate action - but this
    seemed to be the case for other bugs on the packages I've touched the
    case as well.

    what time frame do you have in mind when you write "no real urgency"
    and "did not seem very probable"?

    For me a reasonable time frame for changes that are neither urgent nor
    supposed to create user-visible changes in the binary packages would be
    to ensure it is a lintian warning now, and then wait 10 years.

    Many maintainers touch their packages at least once per release cycle
    and also check lintian warnings, so many packages will get fixed within
    the next 1-2 years.

    Most packages will get a new maintainer or a new team member in an
    existing maintainance team within the next 10 years, and with the
    help of a lintian warning this is the natural time for doing such
    changes.

    Kind regards

    Andreas.
    ...

    cu
    Adrian

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Adrian Bunk on Tue Mar 8 16:50:02 2022
    On 08/03/22 at 16:11 +0200, Adrian Bunk wrote:
    On Tue, Mar 08, 2022 at 11:39:04AM +0100, Andreas Tille wrote:
    Hi Adrian,

    Hi Andreas,

    Am Mon, Mar 07, 2022 at 11:42:42PM +0200 schrieb Adrian Bunk:
    ...
    lintian already warns or has info tags that should be upgraded to warning,

    I absolutely agree here.

    and then there will be slow migrations usually happening when someone anyway does (and tests!) larger packaging changes.

    This "someone anyway does larger packaging changes" did not seem very probable for the packages I've touched (see my other mail in this
    thread).

    Ensuring that all relevant lintian tags are warnings would be the appropriate action (which is not yet true[1]), but there is no urgency
    on getting everything "fixed" immediately.

    I agree that there is no real urgency for immediate action - but this seemed to be the case for other bugs on the packages I've touched the
    case as well.

    what time frame do you have in mind when you write "no real urgency"
    and "did not seem very probable"?

    For me a reasonable time frame for changes that are neither urgent nor supposed to create user-visible changes in the binary packages would be
    to ensure it is a lintian warning now, and then wait 10 years.

    Many maintainers touch their packages at least once per release cycle
    and also check lintian warnings, so many packages will get fixed within
    the next 1-2 years.

    Most packages will get a new maintainer or a new team member in an
    existing maintainance team within the next 10 years, and with the
    help of a lintian warning this is the natural time for doing such
    changes.

    Hi,

    I believe that the arguments in favor of this MBF fall in three
    categories:

    1/ the arguments about using patches to track changes to upstream code.
    Among the ~600 packages in that potential MBF, there are still many that
    make changes to upstream code, which are not properly documented. I
    believe that it is widely accepted that seperate patches in
    debian/patches/ are the recommended way to manage changes to upstream code (good way to help with those changes getting reviewed, getting merged
    upstream, etc.)

    2/ the arguments about other advantages of the 3.0 (quilt) format: newer compression algorithms, multi-tarball support, debian/ dir in upstream
    code, etc. (but I agree that those arguments don't work well here,
    because the packages in question don't seem to need those improvements)

    3/ the arguments about standardization/simplication of packaging
    practices, that make it easier (1) for contributors to contribute to any package (think security support, NMUers, but also derivatives); (2) to
    develop tools that process all packages.


    You argue that it's fine to wait 10 years for a transition such as the
    switch to 3.0 (quilt). Actually, it has already been 11 years, since 3.0 (quilt) was introduced around 2011 (see https://trends.debian.net/#source-formats ).
    What we are talking about here is the "end game": there are less than 2%
    of packages in testing that are still using 1.0, and many of those look abandonned or of relatively low interest (see https://people.debian.org/~lucas/format1.0/packages.txt ).

    I'm pushing for it now because I believe that it is a good timeframe to
    finish that transition before the release of bookworm. Yes, it requires
    some effort, and some maintainers might make mistakes and introduce bugs
    in the process. However (1) if we start that work now, we still have
    plenty of time to uncover issues before the bookworm freeze; (2) if the maintainers use this opportunity to modernize the packaging, switch to
    the best current practices, and for example add tests to their packages,
    it also means less bugs in the future.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Tue Mar 8 17:20:01 2022
    Hi Adrian,

    Quoting Adrian Bunk (2022-03-07 22:42:42)
    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    ...
    I think that we should reduce the number of packages using the 1.0 format, as
    (1) format 3.0 has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices, lowering the bar for contributors to
    contribute to those packages.
    ...

    You are not making a compelling case that these benefits clearly
    outweight the substantial costs.

    Such a MBF also:
    (1) causes a lot of extra work, and
    (2) causes a lot of breakage because such larger packaging changes
    are rarely done as careful as would be necessary

    When people are making invasive packaging changes like a dh compat bump
    or change the packaging due to such a MBF we often end up with bug
    reports like #1000229 where something broke due to that (empty binary packages are among the more typical breakages).

    Unless a compelling case is made that the benefits of a MBF clearly outweight these drawbacks, such MBFs usually have a negative benefit.

    you are absolutely right! So what happens if we address both of these issues by:

    (1) providing a patch and thus remove "a lot of extra work" being necessary
    (2) show that the package produces bit-by-bit identical binary packages after
    the change compared to before by using reproducible builds and thus
    prevent "a lot of breakage"

    I did exactly that and rebuilt all the packages found by Lucas with the following changes:

    $ mkdir -p debian/source
    $ echo '3.0 (quilt)' >debian/source/format

    141 source packages produce bit-by-bit reproducible binary packages after applying this change:

    abootimg, acpi, amideco, asmix, aspell-el, avfs, aview, avrp, aylet,
    bfbtester, bindfs, cconv, cdde, cereal, citadel-client, cl-log, coco-cpp,
    cycfx2prog, daemontools, dbix-easy-perl, debaux, dictconv, ding-libs, dirdiff,
    dns323-firmware-tools, dv4l, famfamfam-flag, festlex-poslex,
    festvox-kallpc16k, festvox-kallpc8k, festvox-kdlpc16k, festvox-kdlpc8k,
    flvstreamer, fortunes-bofh-excuses, gav-themes, gcc-3.3, glbsp, glktermw,
    glslang, glurp, gnomediaicons, gtkterm, imaprowl, imgvtopgm, jdresolve,
    jtex-base, judy, kawari8, lakai, libalgorithm-dependency-perl,
    libanyevent-serialize-perl, libapache2-mod-log-slow, libaudio-scrobbler-perl,
    libbiblio-isis-perl, libcitadel, libclass-csv-perl, libclass-pluggable-perl,
    libcrypt-smbhash-perl, libdansguardian-perl, libdata-javascript-anon-perl,
    libdatapager-perl, libdata-validate-domain-perl, libdbix-dr-perl,
    libebook-tools-perl, libemail-foldertype-perl, libfile-searchpath-perl,
    libhtml-element-extended-perl, libhtml-popuptreeselect-perl,
    libimage-metadata-jpeg-perl, libjcode-pm-perl, libjlayer-java, libjmac-java,
    liblog-dispatch-filerotate-perl, libmodem-vgetty-perl, libmp4-info-perl,
    libnbcompat, libnet-finger-perl, libnet-proxy-perl, libropkg-perl,
    libtemplate-plugin-cycle-perl, libtemplate-plugin-utf8decode-perl,
    libtext-aligner-perl, libtext-table-perl, libtie-shadowhash-perl,
    libtimezonemap, libtree-multinode-perl, libunibreak, libuser-perl,
    libyaml-shell-perl, m16c-flash, manpages-tr, mapivi, midge, moblin-gtk-engine,
    mpclib3, ng-utils, nomarch, ocamlcreal, ocaml-getopt, ocaml-magic,
    ocaml-shout, osspsa, pandora-build, pcaputils, pdf2svg, pfqueue, phnxdeco,
    pidgin-awayonlock, pngmeta, pngnq, powerman, pscan, qprint, randtype, redet,
    ruby-bsearch, sbox-dtc, scriptaculous, sipcalc, speex, spirv-headers, src2tex,
    ssh-askpass-fullscreen, stx2any, sylseg-sk, tcsh, tor, ufiformat,
    uzbek-wordlist, vanessa-adt, vanessa-logger, watchdog, wayland, weston, xinit,
    xserver-xorg-video-nouveau, xserver-xorg-video-qxl, xsettings-kde,
    xtide-coastline, yaret, zmakebas

    Then for the remaining packages we apply these changes and rebuild again:

    $ mkdir -p debian/source
    $ echo '3.0 (quilt)' >debian/source/format
    $ echo single-debian-patch >debian/source/options

    An additional 223 source packages produce bit-by-bit reproducible binary packages after applying this change:

    4g8, aconnectgui, aft, alsamixergui, appconfig, ascdc, asmail, awardeco,
    baycomusb, beav, binstats, blop, catdvi, cbmplugs, cd-circleprint, chase,
    chrpath, ciphersaber, cl-regex, coco-cs, coco-java, code2html, codegroup,
    compartment, console-cyrillic, coolmail, cpipe, crack-attack, crypt++el, cvs,
    dbus-sharp-glib, debfoster, dictem, dist, dmitry, dnsmasq, docbook-website,
    dutch, dvdtape, edict-el, eldav, fake, fortunes-it, freebirth, freetable,
    freetds, funnelweb-doc, fuse-umfuse-ext2, fwanalog, g2p-sk, gkrellm-reminder,
    gkrellm-thinkbat, gkrellm-xkb, glw, gmemusage, gplaycli, gss-ntlmssp,
    gwaterfall, gworldclock, hsqldb1.8.0, ifrench-gut, imgsizer, impose+, inn,
    intel2gas, ipv6calc, its-playback-time, jargon, jgraph, kelbt, knews,
    libapache-gallery-perl, libdbd-sybase-perl,
    libdevice-usb-pcsensor-hidtemper-perl, libdmx, libexpect-perl,
    libfile-chdir-perl, libfontenc, libformula, libfs, libglu,
    libgraphics-colornames-perl, libgraphics-colorobject-perl, libice,
    libpciaccess, libperlmenu-perl, libpthread-stubs, libromana-perligata-perl,
    libsendmail-pmilter-perl, libsm, libtext-chasen-perl, libtext-unaccent-perl,
    libunity, libx11, libxau, libxaw, libxcb, libxcomposite, libxdmcp, libxext,
    libxfixes, libxfont, libxi, libxinerama, libxkbfile, libxml-dumper-perl,
    libxml-rss-feed-perl, libxmu, libxpm, libxpresent, libxrandr, libxrender,
    libxshmfence, libxss, libxt, libxv, libxvmc, libxxf86dga, libxxf86vm, lice,
    linklint, loadwatch, logtool, lsmbox, mailagent, make-dfsg, makepasswd,
    makepatch, makexvpics, markdown, mdm, mesa-demos, mhonarc, mrtg-ping-probe,
    msr-tools, mtree-netbsd, nini, nlkt, norwegian, nstreams,
    openoffice.org-en-au, opensp, openuniverse, pccts, pcre2, pgreplay, pixelize,
    pkg-config, pmw, postmark, prototypejs, proxsmtp, psgml, pytest-multihost,
    pytest-sourceorder, python-hglib, python-pam, qwo, regionset, rsbackup,
    sanitizer, searchandrescue, searchandrescue-data, sgrep, sreview, sunxi-tools,
    svgtune, tablix2, tetrinetx, tkcvs, tolua, transfermii, tua, tuxtype, twm,
    umview, urlview, vile, vm, watchcatd, wavesurfer, wily, wm-icons, wmtemp,
    xauth, xcb-proto, xcolors, xcursor-themes, xdm, xfaces, xft, xinput, xjdic,
    xkeyboard-config, xless, xmix, xorg-docs, xorgproto, xorg-server,
    xorg-sgml-doctools, xringd, xserver-xorg-input-aiptek,
    xserver-xorg-input-evdev, xserver-xorg-input-libinput,
    xserver-xorg-video-amdgpu, xserver-xorg-video-ati, xserver-xorg-video-cirrus,
    xserver-xorg-video-dummy, xserver-xorg-video-fbdev, xserver-xorg-video-intel,
    xserver-xorg-video-mga, xserver-xorg-video-neomagic,
    xserver-xorg-video-openchrome, xserver-xorg-video-r128,
    xserver-xorg-video-savage, xserver-xorg-video-siliconmotion,
    xserver-xorg-video-sisusb, xserver-xorg-video-tdfx, xserver-xorg-video-vesa,
    xserver-xorg-video-vmware, xtrans, yapps2, zfsnap

    So now we have 364 source packages for which we have a patch and for which we can show that this patch does not change the build output. Do you agree that with those two properties, the advantages of the 3.0 (quilt) format are sufficient such that the change shall be implemented at least for those 364?

    Thanks!

    cheers, josch
    --==============Y61137627237536310=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmInf/4ACgkQ8sulx4+9 g+EfExAAjoFI0465xzNWqpKRdVoFWDEBq2NY2UGOcei0Im8gaCHujBLwRAt9qnmS Z6NoM0i1hZcWIMQ11c6XCBHZugnLvY32TXJybxJ4V1kdM8ONXwipVexqeknv0sOo G3PV+u5CLjzxC8O9RJ5bCdRAjcDZVi5khFEVOuflrqGZ3/uUlm0nZqqzRwLBcOf9 U/eajpYpKFNqth5uKBmZr8ZPDD4LnCt3yAVpbZyYQUu8NUsZkBBuRUtILfxjpTJj LvvcZekie6lGftDEVdiAjc6vmeG5WrB8HGZF4Pl9LmZMAs6ViJuLckZIXz35QwCG Wwi09ysVP4dZoYFHfkR0UOx8ORV5Vx+ko3rZOVQgLWmKYBWYa1rEOxDS2CnV2Y2Q 8Fz27dZyjHxsmjFikUDX4DBvsfXaDpVfzN1nLKJzV5KaVRSRWRoIq2ZZdb2DrRzA EQ7XuVGigLJhgTcLbLipOq4TZp3hgVgJWSZzc44aYXz1NCQIXfiu0tpzlfg45GN8 pEU1A9L3KTuMxg6huY9oe/mvuUuE7jjQFai1UoTQ4/8ZUTCkgkpJo3HQYuc2iHZF xjxDtEyqtjsOmjcWPk/SP2mHKSqtMloXhc1OhMW/FCTbAXFXo5L2ZKeLZjEBnig7 J+flmtWojyUW8G0PAOmXhmy7S9BYV6M4pypLegkQhDS2pQ6Om4Q=
    =gyP6
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Tue Mar 8 17:40:01 2022
    Hi Adrian,

    Am Tue, Mar 08, 2022 at 04:11:02PM +0200 schrieb Adrian Bunk:

    I agree that there is no real urgency for immediate action - but this seemed to be the case for other bugs on the packages I've touched the
    case as well.

    what time frame do you have in mind when you write "no real urgency"
    and "did not seem very probable"?

    I try hard that all packages of the teams I'm involved strongly (Debian
    Med, Debian Blends, R pkg team and may be Debian Science but with a
    weaker focus from my side) get updated once per release cycle (just to
    get them build with latest toolchain and look at least once whether the
    watch file is reporting new versions correctly). I'm aware that this
    measure is not applied by all maintainers.

    For me a reasonable time frame for changes that are neither urgent nor supposed to create user-visible changes in the binary packages would be
    to ensure it is a lintian warning now, and then wait 10 years.

    Given that one release cycle might be a bit dense in all cases I'd
    consider two cycles (about 4 years) a sensible goal. I would call
    the term "real urgency" maximum half a year - thus I was choosing
    "no real urgency".

    Many maintainers touch their packages at least once per release cycle
    and also check lintian warnings, so many packages will get fixed within
    the next 1-2 years.

    So we seem to share the same measure. I think the packages Lucas was
    pointing to are in most cases not maintained by these "many maintainers"
    (wild guessing from what I was looking at).

    Most packages will get a new maintainer or a new team member in an
    existing maintainance team within the next 10 years, and with the
    help of a lintian warning this is the natural time for doing such
    changes.

    I think we can all agree upon bumping the lintian severity to
    warning.

    Kind regards

    Andreas.

    --
    http://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adrian Bunk@21:1/5 to Johannes Schauer Marin Rodrigues on Tue Mar 8 22:30:01 2022
    On Tue, Mar 08, 2022 at 05:10:44PM +0100, Johannes Schauer Marin Rodrigues wrote:
    ...
    So now we have 364 source packages for which we have a patch and for which we can show that this patch does not change the build output. Do you agree that with those two properties, the advantages of the 3.0 (quilt) format are sufficient such that the change shall be implemented at least for those 364?

    It sounds like a good idea to submit patches.

    Some might be tagged wontfix, e.g. the Debian X Strike Force has a
    workflow that would not work the same way with 3.0.

    Thanks!

    cheers, josch

    cu
    Adrian

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adrian Bunk@21:1/5 to Lucas Nussbaum on Tue Mar 8 23:10:01 2022
    On Tue, Mar 08, 2022 at 04:45:48PM +0100, Lucas Nussbaum wrote:
    ...
    1/ the arguments about using patches to track changes to upstream code.
    Among the ~600 packages in that potential MBF, there are still many that
    make changes to upstream code, which are not properly documented. I
    believe that it is widely accepted that seperate patches in
    debian/patches/ are the recommended way to manage changes to upstream code (good way to help with those changes getting reviewed, getting merged upstream, etc.)

    This is a reason *against* using RC bugs for forcing people to change it
    this year:

    The sane way to minimize the regression risk when NMUing such an RC bug
    would be to dump the diff into a patch without touching it.

    ...
    3/ the arguments about standardization/simplication of packaging
    practices, that make it easier (1) for contributors to contribute to any package (think security support, NMUers, but also derivatives);
    ...

    Actual work and actual breakage for the benefits of hypothetical
    contributors, that does not sound very convincing to me.

    I am doing QA/NMU/*stable uploads for a three digit number of packages
    I do not maintain every year, and this is not something I recall being
    a real problem.

    You argue that it's fine to wait 10 years for a transition such as the
    switch to 3.0 (quilt). Actually, it has already been 11 years, since
    3.0 (quilt) was introduced around 2011
    ...

    Time before an issue is a lintian warning doesn't count.

    If it isn't a problem for anyone and lintian does not warn,
    how would anyone even notice?

    What we are talking about here is the "end game": there are less than 2%
    of packages in testing that are still using 1.0,
    ...

    There are lies, damn lies, and statistics.
    600 (?) packages is a more realistic depiction than 2%.

    If done carefully how many hours of work do you estimate it would take
    for all 600 packages, including ones that might for some reason be hard
    to convert?

    If you want to force work upon many people in the project, the burden of
    proof is on you to show that the time is better spent on this than on
    other bookworm work that could be done instead.

    Lucas

    cu
    Adrian

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Russ Allbery on Wed Mar 9 01:40:01 2022
    Hello,

    On Sun 06 Mar 2022 at 01:28pm -08, Russ Allbery wrote:

    If you're going to omit the ones in the last category, I think you should also omit the ones in the none/no/yes category, since they may be packages that intermittantly have changes and are similarly using a VCS-based
    workflow that doesn't want to use the 3.0 format.

    Yes, indeed.

    Lucas, as I've had a lot to do with these git workflows and have
    probably done the most work documenting them, I can help with any
    specific follow-up questions you might have.

    A mass bug filing for the first three categories seems like the change
    with the biggest potential to benefit Debian, since it's a direct simplification of the number of ways packages are maintained in the
    archive. The packages without any patch system feel a bit less
    interesting.

    Very much agreed.

    --
    Sean Whitton

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Lucas Nussbaum on Wed Mar 9 01:40:01 2022
    Hello,

    On Tue 08 Mar 2022 at 04:45pm +01, Lucas Nussbaum wrote:

    1/ the arguments about using patches to track changes to upstream code.
    Among the ~600 packages in that potential MBF, there are still many that
    make changes to upstream code, which are not properly documented. I
    believe that it is widely accepted that seperate patches in
    debian/patches/ are the recommended way to manage changes to upstream code (good way to help with those changes getting reviewed, getting merged upstream, etc.)

    ... or a git workflow which has the changes represented as git commits,
    rather than files under d/patches.

    --
    Sean Whitton

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Johannes Schauer Marin Rodrigues on Wed Mar 9 13:10:01 2022
    On 08/03/22 at 17:10 +0100, Johannes Schauer Marin Rodrigues wrote:
    I did exactly that and rebuilt all the packages found by Lucas with the following changes:

    $ mkdir -p debian/source
    $ echo '3.0 (quilt)' >debian/source/format

    141 source packages produce bit-by-bit reproducible binary packages after applying this change:

    [..]

    An additional 223 source packages produce bit-by-bit reproducible binary packages after applying this change:

    Thanks a lot for this analysis.

    I went a bit further and investigated a few packages that are not
    in your list, just to provide examples of where issues could arise.

    There are 266 packages not in your lists.

    101 packages are native packages, and thus should probably be converted
    to 3.0 (native). However some use a patch system (examples: mgetty, libapache2-mod-auth-plain, vde2) or have a debian revision (example: vanessa-socket).

    Out of the 165 other packages, some fail to build (before the change),
    such as gsfonts. Others are known to be unreproducible (example:
    sofia-sip) and thus cannot be tested that way.

    Finally, some result in different binary packages due to a GCC issue
    that embeds the build path. If they are built in the same directory,
    they result in the same binary packages after migration to 3.0.
    (examples: mpclib3, libcompface, netselect, opus-tools)

    Other that the known conflict with git workflows, I did not find any case
    where migration would result in significant problems.

    Lucas

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE/t7ByzN7z1CfQ8IkORS1MvTfvpkFAmIoloIACgkQORS1MvTf vpn/jA//etR5o2g4KDNMgNDyqIJ6BoUIikDzpHV/MnRqi4DKe0+iLZ7d23i0dvc5 0dEUPqU/pBULcGB2jGW9Px7jiOMmEkA+YRPWdydOMkhU6BaO7JoFexc81+m0tvAx 6Iayfa+lblJepHeetHME+gQE4E0uFZ/1z5djDoHqrG6XYZe0AbmU86tsboirXVvF M5esioF/6ySo+UT8aiIO5aV5oErXQ/8xgxfG/tvAtAaxCHhEzsgrsMMt8XQHj4Zn gjpIEVXGdzcseyR33LJlPiQrLIZASs5xzqgMYK4LFo3cE4EbSbjDB2+z+EJJhZBi 4DNzoIEVxWbZmBawF8pkBY9FEX3kZOL5i4bB2XUXc4BvPhGKei0AU+RX3HqHoAQe dclkUW9Tvoz+WgN3cIVhyoxch8arae3tdJ+9SWogLbBxr+JwuzQaFgwBEy6v1k9O eSnf4Qzt1zryKhiN4gIYX4o12JnkcBt+rm3YOwGFUxl5PpN17+56ScS9u/40MoDd 21fmArkYLJwq8xJKKQBdiYJcaszcllD6bSUvOZc5OBPFnHuQbsyhBQ42MgzBBOyB YRa2c15JEUWi/MKda7S86h8MjyTqUGdIJApcX4AbATyJpvvXQ841O7llkQnR9slE rFYm5MiwdJ+QQvXkZdbLaPzIPgIWEOiHeRVxHpDcYYv6sGdWO/g=
    =hyDd
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Sean Whitton on Wed Mar 9 13:10:01 2022
    On 08/03/22 at 17:33 -0700, Sean Whitton wrote:
    Lucas, as I've had a lot to do with these git workflows and have
    probably done the most work documenting them, I can help with any
    specific follow-up questions you might have.

    Thanks!

    So the main question I think I have is:

    can we find a middleground where the git workflows don't require staying
    with 1.0? Even if that means switching to 3.0 (quilt) using the single-debian-patch approach?

    Also, how would that work with packages that combine direct changes to upstream, and quilt for Debian-created patches? Examples of such
    packages are:

    package | quilt patches -------------------------------+--------------
    xdm | 8
    xorg-server | 7
    xorg-server | 7
    libx11 | 6
    mesa | 4
    xorg-docs | 3
    xserver-xorg-video-ivtvdev | 2
    xserver-xorg-input-synaptics | 2

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Lucas Nussbaum on Wed Mar 9 17:00:01 2022
    Hello,

    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:

    On 08/03/22 at 17:33 -0700, Sean Whitton wrote:
    Lucas, as I've had a lot to do with these git workflows and have
    probably done the most work documenting them, I can help with any
    specific follow-up questions you might have.

    Thanks!

    So the main question I think I have is:

    can we find a middleground where the git workflows don't require staying
    with 1.0? Even if that means switching to 3.0 (quilt) using the single-debian-patch approach?

    dgit-maint-merge(7) works with single-debian-patch and that's what I
    use. But it is not clear to me that there are any advantages at all to
    that over 3.0 (quilt) with single-debian-patch? Anyway, the main case
    where I myself use 1.0 is the following shell alias:

    alias ...="sbuild --dpkg-source-opts='-Zgzip -z1 --format=1.0 -sn'"

    This is from dgit-user(7). It's the only reasonable way to say "just
    sbuild HEAD, please". One reason to continue to use 1.0 in the archive
    is to ensure that a way to say "just sbuild HEAD, please" continues to
    be supported, as it's very important to have.

    Ian has some cases where something that is representable in git is not representable using 3.0 (quilt) but is representable using 1.0. I don't
    have those cases to hand; Ian, could you summarise, please?

    Also, how would that work with packages that combine direct changes to upstream, and quilt for Debian-created patches?

    Could you expand? I didn't think this category was one of the ones Russ
    and I were talking about.

    --
    Sean Whitton

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to Sean Whitton on Wed Mar 9 18:10:01 2022
    Sean Whitton writes ("Re: proposed MBF: packages still using source format 1.0"):
    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:
    On 08/03/22 at 17:33 -0700, Sean Whitton wrote:
    Lucas, as I've had a lot to do with these git workflows and have
    probably done the most work documenting them, I can help with any
    specific follow-up questions you might have.

    Thanks!

    So the main question I think I have is:

    can we find a middleground where the git workflows don't require staying with 1.0? Even if that means switching to 3.0 (quilt) using the single-debian-patch approach?

    dgit-maint-merge(7) works with single-debian-patch and that's what I
    use. But it is not clear to me that there are any advantages at all to
    that over 3.0 (quilt) with single-debian-patch?

    The situation here is complicated.


    The tl;dr is that

    * there are several situations where 1.0-native is the best answer,
    * there are several situations where 1.0-with-diff is the best answer,

    The root cause of both of these situations is that 3.0, sadly,
    is not always better in every respect than 1.0.


    1. Why is 1.0-without-diff not always worse than 3.0 (native) ?

    1.0 native is sometimes better than 3.0 (native) because dpkg-source
    refuses to build a 3.0 native package with a Debian revision in its
    version number.

    This prohibition exists solely because of a doctrinal objection to native-format packages with Debian revisions. There is no technical
    reason why this restriction could not be lifted. I sometimes upload
    this way and I have never had anyone report problems[1] with it.

    IMO there is nothing wrong with native format packages with Debian
    revisions. They work just fine. For a small paockage, this is often
    a good choice, because it avoids dealing with patches at all.

    For anything but a small package, use of diffs is needed as a storage
    and distribution optimisation.


    2. Why is 1.0-with-diff not always worse than some 3.0 format ?

    1.0-with-diff has the following advantage over 3.0 (quilt):

    The extracted source tree does not contain a diff. The inclusion of
    the diff *inside* the source tree (which happens with "3.0 (quilt)"
    whether or not single-debian-patch is specified) causes all manner of
    problems: it means that only certain states of the extracted tree are
    valid.

    With 3.0 and single-debian-patch, modifying ordinary files can
    generate a tree which doesn't round-trip through dpkg-source --build
    and dpkg-source --extract: dpkg-source --build needs to "commit" the
    changes to the diff, amending the working tree.

    In other words, the working tree contains output files. This causes
    trouble if you want to represent the package in git. This is why dgit
    has all this quilt-fixup stuff. With 1.0-with-diff, no quilt fixup is
    needed.


    3. Why is 1.0-native not just as good as 3.0 (native) ?

    The only significant advantage of 3.0 (native) is that dpkg-source is
    willing to create and extract 3.0 packages using newer compression
    algorithms such as xz.

    There were no good reason why the additional compression algorithms
    were not supported in 1.0. ("3.0 (native)" does offer some minor
    metadata format advantages, so its existence is not entirely
    pointless.)

    If the restriction against native format with Debian revision were
    lifted, "3.0 (native)" would be as capable as 1.0-without-diff, and
    slightly superior. So in that case, "3.0 (native)" should probably
    replace all uses of 1.0-native.


    4. What disadvantages does 1.0-with-diff suffor from, compared to "3.0
    (quilt)" with single-debian-patch ?

    The main disadvantage is that there are changes to the source tree
    which are representable in "3.0 (quilt)" but which 1.0-with-diff does
    not support. (The precise details and the history are too compiex to
    go into.)

    I haven't checked recently, but this used to be enforced both on
    building and on extraction. So changing this is not so simple, since
    we shouldn't start distributing packages in a new source format (or
    variant) until the new extraction capability is very widely deployed.

    But, ultimately, it would probably be a good idea. Whether the to
    call resulting thing "1.0" or "3.0 (diff)" doesn't really seem very
    important.

    The important properties are that it should support at least every
    change that current diff(1) can represent.


    5. Why is native sometimes superior to any quilt or diff format

    We rely on diff(1) to represent changes to source trees and patch(1)
    to apply them. Not every change is representable by diff.

    diff/patch does improve, of course. That is not an unalloyed benefit,
    though, because it means that when diff/patch improve we can
    accidentally generate source packages that earlier versions can't
    extract - a compatibility hazard.

    Changes not representable by diff is what Sean is talking about here:

    Ian has some cases where something that is representable in git is not representable using 3.0 (quilt) but is representable using 1.0. I don't
    have those cases to hand; Ian, could you summarise, please?

    Currently, I think diff cannot represent changes to symlinks.
    git can store symlinks and represent their targets, and changes to
    their targets.


    Ian.

    [1] By "problems" I mean "some software did a wrong thing", not
    "I am offended by your breach of my notions of propriety".

    --
    Ian Jackson <ijackson@chiark.greenend.org.uk> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Sean Whitton on Wed Mar 9 17:20:01 2022
    On 09/03/22 at 08:52 -0700, Sean Whitton wrote:
    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:
    Also, how would that work with packages that combine direct changes to upstream, and quilt for Debian-created patches?

    Could you expand? I didn't think this category was one of the ones Russ
    and I were talking about.

    My limited understanding of the landscape of git workflows is that a
    workflow that is quite popular among packages still using the 1.0 format
    is the one used by the Debian X strike force. Julien Cristau described
    it as follows when I asked about it on IRC:

    < jcristau> [...] basically, for upstream patches we cherry-pick
    commits directly, and we use quilt for changes that aren't upstream

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to Debian Development on Wed Mar 9 18:30:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------eAriKbGk6LuMYikOweTZezoL
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMy85LzIyIDEwOjM4LCBJYW4gSmFja3NvbiB3cm90ZToNCj4gVGhpcyBwcm9oaWJpdGlv biBleGlzdHMgc29sZWx5IGJlY2F1c2Ugb2YgYSBkb2N0cmluYWwgb2JqZWN0aW9uIHRvDQo+ IG5hdGl2ZS1mb3JtYXQgcGFja2FnZXMgd2l0aCBEZWJpYW4gcmV2aXNpb25zLg0KDQpBcyBJ IHVuZGVyc3Rvb2QgaXQsIHRoZSBpZGVhIHdhcyB0aGF0IHlvdSBjb3VsZCBqdXN0IGluY3Jl bWVudCB0aGUgDQoiYWN0dWFsIiB2ZXJzaW9uIG51bWJlci4gSSdtIGZhaWxpbmcgdG8gc2Vl IHRoZSBhZHZhbnRhZ2Ugb2YgDQppbmNyZW1lbnRpbmcgImEiIHZzICJ6IiBpbiBzb21ldGhp bmcgbGlrZSB4Lnkuei1hLg0KDQpUaGVyZSdzIG5vdCByZWFsbHkgYSBkaXNhZHZhbnRhZ2Ug ZWl0aGVyLCBpZiBpdCBhbGwgd29ya3MgKHdoaWNoIHlvdSANCnNhaWQgaXQgZG9lcykuIEJ1 dCB0aGUgZG9jdHJpbmFsIGlzc3VlLCBJIHRoaW5rLCBpcyB0aGF0IGRlZmluaXRpb25hbGx5 IA0KYSBuYXRpdmUgcGFja2FnZSBoYXMgbm8gRGViaWFuIHJldmlzaW9uIChjb3JvbGxhcnk6 IGEgcGFja2FnZSB3aXRoIGEgDQpEZWJpYW4gcmV2aXNpb24gaXMgbm9uLW5hdGl2ZSkuDQoN CklmIHdlIHJldmlzZSB0aGF0IGRlZmluaXRpb24sIHRvIGFsbG93IERlYmlhbiByZXZpc2lv bnMgaW4gbmF0aXZlIA0KcGFja2FnZXMsIHRoZW4gd2hhdCBkaXN0aW5jdGlvbiBpcyBsZWZ0 IGJldHdlZW4gbmF0aXZlIGFuZCBub24tbmF0aXZlIA0KcGFja2FnZXM/DQoNCkNvdWxkIHdl IG9ubHkgaGF2ZSAiMy4wIChxdWlsdCkiIHRoZW4sIG5vICIzLjAgKG5hdGl2ZSkiPyBPciwg cHV0IA0KZGlmZmVyZW50bHksIGlmIHlvdSBoYWQgYSAibmF0aXZlIiBwYWNrYWdlIHRoYXQg aXMgdXNpbmcgYSBEZWJpYW4gDQpyZXZpc2lvbiBhbmQgd2UgYWxsb3cgdGhhdCwgd2hhdCBk aWZmZXJlbmNlIGlzIGxlZnQgYmV0d2VlbiAiMy4wIA0KKG5hdGl2ZSkiIGFuZCAiMy4wIChx dWlsdCkiPw0KDQpUbyBiZSBjbGVhcjogSSBnZW51aW5lbHkgZG9uJ3Qga25vdy4gSSdtIG5v dCBpbXBseWluZyB0aGF0IHRoZXJlIGlzbid0IGEgDQpyZW1haW5pbmcgZGlmZmVyZW5jZS4N Cg0KPiBJTU8gdGhlcmUgaXMgbm90aGluZyB3cm9uZyB3aXRoIG5hdGl2ZSBmb3JtYXQgcGFj a2FnZXMgd2l0aCBEZWJpYW4NCj4gcmV2aXNpb25zLiAgVGhleSB3b3JrIGp1c3QgZmluZS4g IEZvciBhIHNtYWxsIHBhb2NrYWdlLCB0aGlzIGlzIG9mdGVuDQo+IGEgZ29vZCBjaG9pY2Us IGJlY2F1c2UgaXQgYXZvaWRzIGRlYWxpbmcgd2l0aCBwYXRjaGVzIGF0IGFsbC4NCg0KSSBk b24ndCBmb2xsb3cgdGhlICJhdm9pZCBkZWFsaW5nIHdpdGggcGF0Y2hlcyBhdCBhbGwiIHBp ZWNlIGhlcmUuDQoNCi0tIA0KUmljaGFyZA0K

    --------------eAriKbGk6LuMYikOweTZezoL--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmIo4pAACgkQ+HlhmcBF hs51JBAApD0zRxbYpZfkgToPyrqlURuxcGo59tW3uo/4zsBoZW6fUzoLSAwfc2I4 /86Xqycfh7RmNWqnsR4dGwIfq9eBITRKwvkdsFaQcYM60D2kfZdbsbwt7GPpSymL 8ayP1ITfKZXV8dCK03PGZP9LpbbovAy45iBLU2RTaDxT1MFLtA+tXxraUJL8Bci7 uZLB/xlWJTc/RQi1IWpQZ17aJv0O2/iZQDX9kDhWjk0V3lSJ+x7ZxDxM7s/9VXPq eCVfJiMPUir63UjYYQb3JC9Xeboudv5XhX0Wb2YOnj5zDQrxRt5KBDHVdFw+N2sJ 2ojt/LKCDbxviWDuNNg0rP2kX1fbjNbzTZNa03CLb9EUGQNygNjLB9YiIC5OurB3 37RWt1V464IFszic76GuDk5Lv7kg6HZBXmxtWx6uULobrDCNRsEAQV2DQXdFpPHK nYYoiCHEVPkmcGL65kFe0ekYlQl2tdFBrGxHyc4tgOZXYThapHbrf0rs5/xmzuhV eLvVuBwzg9Ol5sbbTxvk/+C0lqXTbb77sXpNuFwasBOvWdCapdWWGq3e7mTsZQ8W VQWmTCec8jY5tDPRsRE5JliE/pacUYggkrXbqVtoV4j952okpo+fZAM1j7jjl3m4 1i9PdHGjwm3NwtE5CoW+sV5FTOmPGvmDdurJiPpJ2k0MkWfagso=
    =wcXq
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Richard Laager on Wed Mar 9 18:40:01 2022
    Richard Laager <rlaager@debian.org> writes:

    Could we only have "3.0 (quilt)" then, no "3.0 (native)"? Or, put differently, if you had a "native" package that is using a Debian
    revision and we allow that, what difference is left between "3.0
    (native)" and "3.0 (quilt)"?

    3.0 (quilt) always has two tarballs, one for the upstream source and one
    for the Debian packaging. 3.0 (native) has a single source tarball, which
    I think is the desired goal here.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Ian Jackson on Thu Mar 10 19:20:01 2022
    Ian Jackson wrote:

    1. Why is 1.0-without-diff not always worse than 3.0 (native) ?

    1.0 native is sometimes better than 3.0 (native) because dpkg-source
    refuses to build a 3.0 native package with a Debian revision in its
    version number.

    This prohibition exists solely because of a doctrinal objection to >native-format packages with Debian revisions. There is no technical
    reason why this restriction could not be lifted. I sometimes upload
    this way and I have never had anyone report problems[1] with it.

    IMO there is nothing wrong with native format packages with Debian
    revisions. They work just fine. For a small paockage, this is often
    a good choice, because it avoids dealing with patches at all.

    Why on earth *would* you mess around using Debian revisions on a
    native-format package, though? IMHO it's pointless and is just going
    to confuse people. Unless you can explain a good reason to need this,
    I'd argue strongly that the 3.0 native support is DTRT for the
    principle of least surprise if nothing else!

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com "We're the technical experts. We were hired so that management could
    ignore our recommendations and tell us how to do our jobs." -- Mike Andrews

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sam Hartman@21:1/5 to All on Thu Mar 10 20:10:01 2022
    "Steve" == Steve McIntyre <steve@einval.com> writes:

    Steve> Ian Jackson wrote:
    >>
    >> 1. Why is 1.0-without-diff not always worse than 3.0 (native) ?
    >>
    >> 1.0 native is sometimes better than 3.0 (native) because
    >> dpkg-source refuses to build a 3.0 native package with a Debian
    >> revision in its version number.
    >>
    >> This prohibition exists solely because of a doctrinal objection
    >> to native-format packages with Debian revisions. There is no
    >> technical reason why this restriction could not be lifted. I
    >> sometimes upload this way and I have never had anyone report
    >> problems[1] with it.
    >>
    >> IMO there is nothing wrong with native format packages with
    >> Debian revisions. They work just fine. For a small paockage,
    >> this is often a good choice, because it avoids dealing with
    >> patches at all.

    Steve> Why on earth *would* you mess around using Debian revisions
    Steve> on a native-format package, though?

    You're trying to produce packages from CI builds or other automation
    where you sometimes have native Debian revisions.

    * you are producing a package where you have distinct upstream and
    debian branches, and you cannot control the upstream version number.
    You want to do everything in git, and not have to deal with quilt
    patches.
    Say you don't even have any patches, but you sometimes do produce new
    revisions simply for changes to debian control files and the like.

    * You are trying to local (or downstream) builds of debian packages that
    do have debian revision numbers.
    You want to do everything in git because honestly dealing with dscs is
    a PITA and if you can avoid it you want to.
    You need to produce dscs to feed to sbuild, or mini-buildd or something.
    But you just want to do that easily from your git CI pipelines.

    My frustrations with the number of hours I've lost because of this
    doctrinal issue has caused me to come close to giving up on Debian more
    than once.
    Part of that is frustration around how the change was handled and how
    concerns and use cases where not considered and dismissed without consideration.
    But part of that is how I've had to hack around the isue in every
    downstream CI environment where I took Debian packages and modified
    them.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to All on Thu Mar 10 22:00:01 2022
    Hi,

    Based on the discussion, I propose the following:

    Let's split the 626 packages in bookworm that use source format 1.0 into
    three categories (1.1), (1.2), (2):
    (1) packages with are very unlikely to use a VCS-based workflow (not
    maintained by Debian X; not using a VCS; or referring to a broken VCS repository; or using a VCS but not having any direct changes outside
    patches)
    (1.1) Those in (1) that are key packages
    (1.2) Those in (1) that are not key packages
    (2) packages which might be using a VCS-based workflow

    https://udd.debian.org/cgi-bin/format10.cgi provides the list of
    packages for each category. The packages count is currently:
    (1.1): 53 packages
    (1.2): 424 packages
    (2): 149 packages

    Packages in (2) need a deeper analysis to understand how VCS-based
    workflows, or 3.0 (quilt), can be adapted to better support each other.
    So let's not do anything about them for now, and focus on (1.1) and
    (1.2).


    For packages in (1.1) and (1.2), I propose to file Severity: wishlist
    bugs using the following template:

    ------------------------------------------------------>8
    Subject: please consider upgrading to 3.0 source format
    Severity: wishlist
    Usertags: format1.0

    Dear maintainer,

    This package is among the few (1.9%) that still use source format 1.0 in bookworm. Please upgrade it to source format 3.0, as (1) this format has many advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices.

    Please note that this is also a sign that the packaging of this software
    could maybe benefit from a refresh. It might be a good opportunity to
    look at other aspects as well.

    This mass bug filing was discussed on debian-devel@: https://lists.debian.org/debian-devel/2022/03/msg00074.html

    Thanks

    Lucas
    ------------------------------------------------------>8

    Then, I propose that we do not discuss upgrading the severity for bugs in
    (1.2) before all packages in (1.1) are fixed (or there's a good reason
    not to fix the remaining ones). That way,
    1/ people motivated to do the work can do it using the normal NMU
    procedure (and use the bugs for coordination).
    2/ nobody is forced to do work packages until the packages that we
    absolutely need to fix are fixed.

    I will file bugs against the 53 packages in (1.1) soon as the number is reasonably low, and I don't think this is controversial (with wishlist severity). I will wait a few more days before filing the bugs for
    packages in (1.2).

    My main motivation for filing bugs against packages in (1.2) ASAP is
    that I hope that filing the bugs will trigger some maintainers to fix
    their packages, if they had not realized that their packages were still
    using 1.0.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Lucas Nussbaum on Thu Mar 10 22:10:02 2022
    On 10/03/22 at 21:49 +0100, Lucas Nussbaum wrote:
    https://udd.debian.org/cgi-bin/format10.cgi provides the list of
    packages for each category. The packages count is currently:
    (1.1): 53 packages
    (1.2): 424 packages
    (2): 149 packages

    Actually it's:
    (1.1): 60 packages
    (1.2): 431 packages
    (2): 135

    (There was a logic error in the queries)

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Adrian Bunk on Thu Mar 10 22:40:01 2022
    On 10/03/22 at 23:23 +0200, Adrian Bunk wrote:
    On Thu, Mar 10, 2022 at 09:49:50PM +0100, Lucas Nussbaum wrote:
    ...
    For packages in (1.1) and (1.2), I propose to file Severity: wishlist
    bugs using the following template:

    ------------------------------------------------------>8
    Subject: please consider upgrading to 3.0 source format
    Severity: wishlist
    Usertags: format1.0

    Dear maintainer,

    This package is among the few (1.9%) that still use source format 1.0 in bookworm. Please upgrade it to source format 3.0, as (1) this format has many
    advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2)
    this contributes to standardization of packaging practices.

    Please note that this is also a sign that the packaging of this software could maybe benefit from a refresh. It might be a good opportunity to
    look at other aspects as well.

    This mass bug filing was discussed on debian-devel@: https://lists.debian.org/debian-devel/2022/03/msg00074.html
    ...

    josch already has tested patches for more than half of the packages,
    starting by submitting bugs for these packages with these patches will
    avoid work for maintainers and result in faster fixing of the bugs.

    I just sent a followup to the relevant bugs (it's the "trivial fix"
    column on https://udd.debian.org/cgi-bin/format10.cgi )

    Thanks

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adrian Bunk@21:1/5 to Lucas Nussbaum on Thu Mar 10 23:00:02 2022
    On Thu, Mar 10, 2022 at 09:49:50PM +0100, Lucas Nussbaum wrote:
    ...
    For packages in (1.1) and (1.2), I propose to file Severity: wishlist
    bugs using the following template:

    ------------------------------------------------------>8
    Subject: please consider upgrading to 3.0 source format
    Severity: wishlist
    Usertags: format1.0

    Dear maintainer,

    This package is among the few (1.9%) that still use source format 1.0 in bookworm. Please upgrade it to source format 3.0, as (1) this format has many
    advantages, as documented in https://wiki.debian.org/Projects/DebSrc3.0 ; (2) this contributes to standardization of packaging practices.

    Please note that this is also a sign that the packaging of this software could maybe benefit from a refresh. It might be a good opportunity to
    look at other aspects as well.

    This mass bug filing was discussed on debian-devel@: https://lists.debian.org/debian-devel/2022/03/msg00074.html
    ...

    josch already has tested patches for more than half of the packages,
    starting by submitting bugs for these packages with these patches will
    avoid work for maintainers and result in faster fixing of the bugs.

    Lucas

    cu
    Adrian

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guillem Jover@21:1/5 to Steve McIntyre on Thu Mar 10 23:10:01 2022
    Hi!

    [ But, this one again… ]

    On Thu, 2022-03-10 at 18:17:15 +0000, Steve McIntyre wrote:
    Why on earth *would* you mess around using Debian revisions on a native-format package, though? IMHO it's pointless and is just going
    to confuse people. Unless you can explain a good reason to need this,
    I'd argue strongly that the 3.0 native support is DTRT for the
    principle of least surprise if nothing else!

    Yes. People complain about the Debian packaging toolchain being too
    complex or too confusing. This is one of such cases. As has been stated countless times, this subverts the semantics of both the source and
    version formats. At least we only have one case remaining, the even
    more senseless 1.0 non-native source with native version was turned
    into an error with dpkg 1.20.1. Recall that dpkg-source currently needs
    to use heuristics to decide whether to use an orig tarball + diff or not
    for format 1.0. :(

    We currently have 21 source packages in the archive with format 1.0
    native source and non-native version:

    $ grep-deb-sources -sPackage -FFormat '1.0' -a \
    -FVersion '-' -a --not -FFiles '.diff.'

    My impression is that _most_ of those are packaging mistakes. I just
    filed two new bugs on packages that have recently been (apparently) accidentally uploaded with such broken source tarballs (vde2: #1007087; etbemon: #1007088).

    <https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=dpkg-mismatch-source-vs-version-format;users=debian-dpkg@lists.debian.org>
    <https://lintian.debian.org/tags/malformed-debian-changelog-version>

    Then we are left with at most a literal (vocal) handful of maintainers potentially doing this on purpose. And the main reason we cannot have
    coherent, and understandable semantics here.

    I've also asked before why this attachment to subvert the source
    format, when the version could be modified to use some other character
    instead for the “revision”, such as ‘+’, but I don't recall ever getting any answer (not even a satisfactory one) to that.

    Thanks,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guillem Jover@21:1/5 to Sam Hartman on Thu Mar 10 23:40:01 2022
    On Thu, 2022-03-10 at 12:09:14 -0700, Sam Hartman wrote:
    You're trying to produce packages from CI builds or other automation
    where you sometimes have native Debian revisions.

    * you are producing a package where you have distinct upstream and
    debian branches, and you cannot control the upstream version number.
    You want to do everything in git, and not have to deal with quilt
    patches.
    Say you don't even have any patches, but you sometimes do produce new
    revisions simply for changes to debian control files and the like.

    As I mentioned last time around, it has never been made clear why a
    different “revision”-separator character cannot be used here. (Perhaps
    out of doctrine? :)

    * You are trying to local (or downstream) builds of debian packages that
    do have debian revision numbers.
    You want to do everything in git because honestly dealing with dscs is
    a PITA and if you can avoid it you want to.
    You need to produce dscs to feed to sbuild, or mini-buildd or something.
    But you just want to do that easily from your git CI pipelines.

    My frustrations with the number of hours I've lost because of this
    doctrinal issue has caused me to come close to giving up on Debian more
    than once.
    Part of that is frustration around how the change was handled and how concerns and use cases where not considered and dismissed without consideration.
    But part of that is how I've had to hack around the isue in every
    downstream CI environment where I took Debian packages and modified
    them.

    In this second scenario, you seem to be using .dsc in anger, when you
    don't really want to have to be using them at all. And when doing that
    you seem to have decided that using them in a way that makes our packaging stack more confusing, incoherent and error-prone is better, than say
    trying to get those other tools to avoid using the .dsc format at all.


    The other thing, is that people keep confusing the transport source
    format (.dsc, etc.), with the unpacked source. Of course it is not
    helped that dpkg-source seems to be conflating these, but this is not
    really the case. I've for example been pondering adding an extract
    mode where instead of generating a quilt .pc/ compatible directory it
    would instead generate a git repo. There's also the «3.0 (custom)»
    format, which exemplifies this detachment.

    But in any case, in your second scenario, if you are doing CI builds,
    and only want to be working with git, you could simply do something
    like this from your git checkout:

    $ dpkg-source --format="3.0 (git)" --build source-dir-4.0/

    regardless of the declared source format in the unpacked tree
    (including 1.0, 2.0 or any 3.0 format). For binary builds you could
    do:

    $ dpkg-buildpackage --source-option=--format="3.0 (git)" -us -uc

    Regards,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Lucas Nussbaum on Fri Mar 11 00:30:01 2022
    Hi Lucas,

    On Sun, Mar 06, 2022 at 09:25:45PM +0100, Lucas Nussbaum wrote:
    There are 629 packages in bookworm that use source format 1.0. That's 1.9% of bookworm packages.

    many thanks for filing these bugs and even more thanks for filing them with severity wishlist! I've just read one bug report of these, on a package I'm vaguely interested, and it felt really good to receive it: knowing/learning there
    are 1.9% of these packages and being prodded with wishlist, felt very reasonable,
    a suggestion given with pat(c)hes to learn and grow, yay. Thanks, again. :) !


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Only change is constant.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmIqiWwACgkQCRq4Vgaa qhwu4A//dFr84PDo7bDNFySAnxq0cX50RM/6i3DBhhzmTWiFH3xlBWMkz+Uj7xW6 ibPW1ZlhJe7vq78f/vOpd0ESNSem6jNIqpugBwIj/M1Zgu4Y/RvMEk548NZjqKhU sNIxCGMcjy0lqECpfg0FB7epUsNf2Dwpn7pFSj/eTx1BxxjukijM4GbCkn3fchyG oyRu1QiPWVikjydOZzbA3pPVAD6D+EehH6kYXJkGCEQ1ZWnphjJIxEbTyC1oijCy m/vka5yXVnKF9TvWcNIW+toNHrB7E30sCVcmV5DoEg78qEyhyEgtPCJLsIHky+Sf AvXsuEToXZr0gYje/TEoRdYJ8yTbp20YW0g5nz52xb6lIt1bzVmkLD4TZnNnwrLF hqPce/TcDk/TwdB54bFWAl/6PHsHQCuYQpN2ZsLYwsrOHQjNlqduyHTrJj/2lWi+ 8XaK2py8HsXS+VcUN7d0N/rWbDKQ8tLSn/HTG90MVbOQF9mUmRxUfJIcmNQb8Zc1 Y5e7/avqUk03aNhaQecC6RjMw6TT104sFfrQIso+lu6/gR0DgQZkpFnS3kWXVgNq JqCMwHXp4VMYBlvCZ66jx+z9g8SHdBZ8A6DgnULpy711a6B+zAT1G2OakFXfZ3gJ dNfjcGnsn73ccODfyyBBXF
  • From Sean Whitton@21:1/5 to Lucas Nussbaum on Sun Mar 13 23:00:01 2022
    Hello,

    On Wed 09 Mar 2022 at 05:15PM +01, Lucas Nussbaum wrote:

    On 09/03/22 at 08:52 -0700, Sean Whitton wrote:
    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:
    Also, how would that work with packages that combine direct changes to
    upstream, and quilt for Debian-created patches?

    Could you expand? I didn't think this category was one of the ones Russ
    and I were talking about.

    My limited understanding of the landscape of git workflows is that a
    workflow that is quite popular among packages still using the 1.0 format
    is the one used by the Debian X strike force. Julien Cristau described
    it as follows when I asked about it on IRC:

    < jcristau> [...] basically, for upstream patches we cherry-pick
    commits directly, and we use quilt for changes that aren't upstream

    Ah right, thank you. I wasn't really thinking of this case as being
    about git workflows. Are the repos patches-applied or
    patches-unapplied?

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmIuaQgZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQOyGD/9CEtXykGu7vXO8zkubfuK1 omcfZTWSRkJJ8yhyBM/V+vyrdsNNB4ePl9PhKcs9QsCRo1GLDYx0krLADyhG29tT fQOcxiltAJsb5wro0rakZdw6WEtzXAGvDD2KEvV2qtn2x0FAQgQa8UeoGhtGGnMa RcB5/+yIFKu5QSpf1k0N7rE8rdL8Cct7hswN1hZLrCzXdi0nEgvJoqGOmplbQzUO sWHZjFiI7M0uzWaHgSibO7HmIhv075BgpXOgNBriVLQq8anPgD3O0net0iVyOu5q DVx9XkIGCoae0S3MnqrNmTktT1KfdgcdlayPSHHK2jngr5pLDDu+VEyWZJLEughF nqrbyQrLROuEPozT04F+Phw4foeEXNHbe4FuvH5QRs2RYqKGAxTbQGGMjLctjvUW lwwO5Ry+Yw0+Yhjq4a21vyJ4/vQurlNxDsLS+FO+iZGn5N8T1altI4r5VHUOon7a +bzuFokSFm/g3DEtIUk5p4ObSTz1x8pIiR7JW7Hej6+TA4s2TTaVIQqz2lSBF7ny F7oquHdQvKaCIuJnVQtN3NBD9gujLFd231UZ09ffrweTIxBzWAAidNgiDZec5r8z W4IGawamEaVfAK42zXX5K0mx7fd3aSLbO1ADcsVTwg14FcCFUKD5rMlDgaU93k5a 0BDE6h7v8IwOQQx7rv92Gg==Wrmm
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us
  • From Sean Whitton@21:1/5 to Ian Jackson on Sun Mar 13 23:00:01 2022
    Hello Ian,

    Thank you for the summary, which helped refresh my memory.

    On Wed 09 Mar 2022 at 04:38PM GMT, Ian Jackson wrote:

    1. Why is 1.0-without-diff not always worse than 3.0 (native) ?

    1.0 native is sometimes better than 3.0 (native) because dpkg-source
    refuses to build a 3.0 native package with a Debian revision in its
    version number.

    This prohibition exists solely because of a doctrinal objection to native-format packages with Debian revisions. There is no technical
    reason why this restriction could not be lifted. I sometimes upload
    this way and I have never had anyone report problems[1] with it.

    IMO there is nothing wrong with native format packages with Debian
    revisions. They work just fine. For a small paockage, this is often
    a good choice, because it avoids dealing with patches at all.

    For anything but a small package, use of diffs is needed as a storage
    and distribution optimisation.

    It it perhaps worth noting that this idea that native source package
    formats cannot have Debian revisions is an idea found in dpkg, not in
    Policy, which latter otherwise has quite a bit to say about native vs. non-native.

    Changes not representable by diff is what Sean is talking about here:

    Ian has some cases where something that is representable in git is not
    representable using 3.0 (quilt) but is representable using 1.0. I don't
    have those cases to hand; Ian, could you summarise, please?

    Currently, I think diff cannot represent changes to symlinks.
    git can store symlinks and represent their targets, and changes to
    their targets.

    So in this case 1.0-native is the only option. And it would be a
    downgrade to mess around with what git represents perfectly well just
    for the sake of an output format.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmIuaLoZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQCUED/96K4LAIkrPMKa2u7Z3rO9s tlCvCAnGh+qSc4QZOd/3/jHINO8iwujRAmtZlO65GC2IZVf44fZl1YG2mk5YLgTz 1N7Zx34dyGivlkp2LCteTOYQtqehO0T3w3VwR50VjRRLBxWpgJESkQg6xZ7nMPpg sC3alCTpH0EhoGWyHe9w0eHtACvob0B/9Ue3eTGtrksptjRu4VtQWz6Y3VUQRsCc K6tLAQDNAWtGuFVmkoL12MUeG/gD5nS2hq0+2Crs3NiLK3LD3Hym/U1jkFYTw93n MvnID/QrPhZNv8E4YrZNEOoZZgwNqEyvr1W5gY4O72ivjzYbb1RasmJJdpv6YZNO kBLy/bfKKK6G6FbzjjndsOWSe1akt2kSdMaoBCd61dT0kkGwU1C4hj6zvq8eWmHu Jz+PjbQz8FCfDRs91JSJvgLMWpWHGP2JSDTkSkAHiwhz6xRov+kXTvi0bGiwbJyK BArHbyPcg7XkuHc+DBFTQ1dU24LBG3R2dRNS3vRgSSvjwG0Q+YLR96/r3BqOpW/b Tq4oMuoA4vSu4GxxkZCDspetXnAVrA99AnmNUCsHJVH3PsfI+M8Jnxi57w78yVkM DGacvycUMgEoz8Q5TsTE1UsjWjFbsEcdYpw4nJIsrxznIeptUZ2Cx6Y0yBTO2fD5 ERyBgjnBRRdPwTRZXU7oEw=;r5
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usen
  • From Sam Hartman@21:1/5 to All on Mon Mar 14 03:00:01 2022
    "Guillem" == Guillem Jover <guillem@debian.org> writes:

    Guillem> On Thu, 2022-03-10 at 12:09:14 -0700, Sam Hartman wrote:
    >> You're trying to produce packages from CI builds or other
    >> automation where you sometimes have native Debian revisions.
    >>
    >> * you are producing a package where you have distinct upstream
    >> and debian branches, and you cannot control the upstream version
    >> number. You want to do everything in git, and not have to deal
    >> with quilt patches. Say you don't even have any patches, but you
    >> sometimes do produce new revisions simply for changes to debian
    >> control files and the like.

    Guillem> As I mentioned last time around, it has never been made
    Guillem> clear why a different “revision”-separator character cannot
    Guillem> be used here. (Perhaps out of doctrine? :)

    Often that works.
    It's kind of strange though to have to change revision characters
    depending on the releases.
    For example I've been in situations
    where releases were built from tarballs and were not native, but
    betas and other upstreams were built directly from git and thus were
    native.
    So some revisions had + as a revision character and some had dash.

    But also, let's imagine it were doctrin.
    Policy should decide that kind of doctrin not dpkg.

    >> * You are trying to local (or downstream) builds of debian
    >> packages that do have debian revision numbers. You want to do
    >> everything in git because honestly dealing with dscs is a PITA
    >> and if you can avoid it you want to. You need to produce dscs to
    >> feed to sbuild, or mini-buildd or something. But you just want
    >> to do that easily from your git CI pipelines.
    >>
    >> My frustrations with the number of hours I've lost because of
    >> this doctrinal issue has caused me to come close to giving up on
    >> Debian more than once. Part of that is frustration around how
    >> the change was handled and how concerns and use cases where not
    >> considered and dismissed without consideration. But part of that
    >> is how I've had to hack around the isue in every downstream CI
    >> environment where I took Debian packages and modified them.

    Guillem> In this second scenario, you seem to be using .dsc in
    Guillem> anger, when you don't really want to have to be using them
    Guillem> at all. And when doing that you seem to have decided that
    Guillem> using them in a way that makes our packaging stack more
    Guillem> confusing, incoherent and error-prone is better, than say
    Guillem> trying to get those other tools to avoid using the .dsc
    Guillem> format at all.


    And I'd be a lot less frustrated if the work to get these other tools
    not to need dscs and been done *before* the workflow that everyone was
    using at the time was broken by the dpkg maintainer.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Wookey on Mon Mar 14 15:00:01 2022
    On Mon, Mar 14, 2022 at 01:10:19PM +0000, Wookey wrote:
    You're trying to produce packages from CI builds or other automation
    where you sometimes have native Debian revisions.

    * you are producing a package where you have distinct upstream and
    debian branches, and you cannot control the upstream version number.

    Doesn't this make it 'not a native debian package'?

    yes, exactly, that's the problem.

    I thought the whole point of debian native packages was that there was
    no 'upstream' and it was only for debian so you _are_ in control of
    the source, the versioning and the releases?

    yes, that was the idea when native packages were introduced over
    20 ago, when there were hardly any Debian forks, and certainly no
    CI systems and other automated systems which 'constantly fork'.

    As soon as that stops
    being true then should one not shift to making it a standard
    'upstream+debian revision' non-native package?

    yes, we should convert all native packages in our archive,
    the idea of a native package has been obsoleted for long.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Humans despise their genitals so much they often use them as metaphors for humans they dislike.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmIvSI4ACgkQCRq4Vgaa qhyNmA/8DawrKd8wGFEfQ1cOiL/yrClJ5nSTYjw0CzMGRdt7x+ktS4J7ku4KK5St +cAs7hjrno0qP0xP2T0p6qyNGQ9kJrn+t2LbN0tyzfNOagdPUe/MPC4Avqo4qUhe nAN0vrkHpXQrF76BWj3ZD0T+JxhDVukqcdsX4cczVg2WLeE9QEaO/4mB829kfPsW pniGY2wSv2i/VQ6jHI8GAhh/R6VWwpDiiTCqdmECoI0jMYArPZRdBCO5N/e+LctS V8P8LP5AIVWsQjLMXfrhDDIVg7dAysRZMQFOzm781lxlkPf39bOaiPtHmIeqvYOC pqhkw6XqTIhjFnctRSSh4kveKszQaQTViFnsCBc/w9ROlIGFI5DH3dlT5UuRYn7V 9aZamoC/7W7cHxLn0UZ5jocJdZPuH8sek3disMNcv/PcRsMPCap20Vu/ZMuEEFnR N7+Ry7hWLJRQlbKxi3kINr0H5ASZUN9JoNLj7WWiZYaMAdp8rbJqwgd06Morh3We NP8sfS0qFT4kdW/7+oWQlZHpbejx9tUOTFpzwcHVAmmCmhofpAtpNiow6spDQLJ4 F3GohY1QFqOED+K2
  • From Wookey@21:1/5 to Sam Hartman on Mon Mar 14 14:20:01 2022
    On 2022-03-10 12:09 -0700, Sam Hartman wrote:
    "Steve" == Steve McIntyre <steve@einval.com> writes:

    Steve> Why on earth *would* you mess around using Debian revisions
    Steve> on a native-format package, though?

    You're trying to produce packages from CI builds or other automation
    where you sometimes have native Debian revisions.

    * you are producing a package where you have distinct upstream and
    debian branches, and you cannot control the upstream version number.

    Doesn't this make it 'not a native debian package'?

    I thought the whole point of debian native packages was that there was
    no 'upstream' and it was only for debian so you _are_ in control of
    the source, the versioning and the releases? As soon as that stops
    being true then should one not shift to making it a standard
    'upstream+debian revision' non-native package?

    Wookey
    --
    Principal hats: Debian, Wookware, ARM
    http://wookware.org/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEER4nvI8Pe/wVWh5yq+4YyUahvnkcFAmIvPrUACgkQ+4YyUahv nke6rhAAxwvkUUjbQFZjcFRhsd1zBkNDV8w0q/wGs375QxYhyd8V0vEFu71SYe9G w8g5qHimdlJb+T40Ab1EvfH1+O4ofJM46RVp/xsy0uKwQ4p8jF5XjWPPq/XB91eO Aojdd9vokneQ1Q3q3usGA4GVrO8n7mML8zxaKWKUwYsQRZPQ4XIqbc0vkPRzflKi nv37JhfG3WP2bs3eETLd7dcmUDR4v5ylN5oJKYiPdQmpT0fXr1NX4pDOwmzDCx2f hmbW8o10nhjEQ0hCKZ5LO6w3hkwmTWcfPcxKm+Z4JxTrQFsK59ecAOrD1Y/pSHSq BSZZMFlHzl2rRLPQzxbtSf5KX/gwjg8n0e8RRDNPHc6/wx5FBpOAkJXj7nhHDVhr Iq3QxLJiarzknY5utQ9V/Nmb14QENJdUtnX3piH5Ckgi/P9Y+DpzzWEWCTfCApqe zfuN82Gb4ShHF9ugoEd74TZNlDtlelH9TFLGilP5zevkmWy6IvuAKpmOTHhjWbCn GtAnaVwDYr4/wYDK77mAJEg54ewME2vPKL4leRWOenIyHmZLHX+HAKn8kzTpMutw 4ASRvqQHdYilhgVW5BzwyQYyz4HL80e0k6u6dDOPx+RpDxXl7RT6iYsE74hrm1RO Z2C+lakJ4iY9osrYDQ5D8piPnmWDXO7p9YUxoI+icKWu7D42Z9o=
    =GCUu
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Felix Lechner@21:1/5 to All on Mon Mar 14 17:40:01 2022
    Hi,

    I think we can all agree upon bumping the lintian severity to
    warning.

    I am not sure there is unanimous support. Instead, I would like to
    propose the following compromise (as I have before).

    1.0 native is sometimes better than 3.0 (native) because dpkg-source
    refuses to build a 3.0 native package with a Debian revision in its
    version number.

    1.0-with-diff has the following advantage over 3.0 (quilt):

    The extracted source tree does not contain a diff. The inclusion of
    the diff *inside* the source tree (which happens with "3.0 (quilt)"
    whether or not single-debian-patch is specified) causes all manner of problems: it means that only certain states of the extracted tree are
    valid.

    Ian and Guillem: How about we deprecate source format 1.0 in exchange
    for relaxing the version strings? In the new source format, nativeness
    is explicit [1] so the version acrobatics are no longer needed.

    yes, we should convert all native packages in our archive,
    the idea of a native package has been obsoleted for long.

    As someone who co-maintains several Debian-internal tools, I am not
    quite sure yet. Maybe let's take one step at a time? Thanks!

    Kind regards
    Felix Lechner

    [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953554#25

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Matthew Vernon on Tue Mar 15 10:40:01 2022
    On Tue, Mar 15, 2022 at 08:54:50AM +0000, Matthew Vernon wrote:
    It's probably unfashionable, but I think debian/patches is not a great
    way to manage changes, particularly if you're using a VCS for
    maintaining your packages. As others have pointed out in this thread,
    doing this means you end up essentially trying to version-control your patches twice - once in the source package, and once in the VCS.
    That's just a consequence of using two different storage formats for your packages: a Debian source package and a VCS. As long as both of them are widely used and incompatible, problems will exist in some form when using both.
    By e.g. merging all patches in the Debian source package into one big diff
    you are just breaking one of these two storage formats for that package, essentially mandating the usage of the other one (the VCS) for most of the developer operations with it.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmIwXoItFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 0wwQAIt000uIjAWhckOy2KXj6WD0ebaOPLvu9LzflC3U8YEy2/BFldD3J+VsTOdA agbdvoAEjc3aKESlrjQo/MbxS0Y5g0SKlQREYIHj+yukWQ3YhkdT6mXjxSUvJND/ dipI1h2rvnJPB9dglMaYikVyVmwJaDld8uHJh8zeTXF3zoW+2N0+TORUWLQIxz1G +t1rv2N+TDYenUmcnsaEMcETKgYITWOk/MfunyPpQTxuFaPrfUg0vvX/c9Mmw+Yr k7Tm/vamWQ67TG6fPDfGRm+2RCrElh206632ZCS2yVqaych3Jq0F/BGHQEYFtqL9 ppFUB8Kilb25avSqMnuUl57GaZN76PxstNwBufFE4LwY+HVPjQuTP0jerO1yrxpE /qDcrDW9wgGAF9fPaBYLAQiISXXkSMWa2tiuY6pz24H9BjsN3yVhWzEbfIN1QDKu tUt6pmyEbfyiOicPAUWnomupC9whZJBkCmhPlbZPSUTPoxKL5qwzTOXbZcGDnByJ hA276iTC7VS9bufXLPkqE+hVVm6VlYDGyFS2Rq2ItAjzSecgYx0tIlSzvXsU96QD 5iihJoq8jtii6c7AnSSySyzuufLJGh/1DfObcyCGA8g8Ag/77CWYmfyFfsrP3J5e el7KGR95a/4e4kyJObe8exNRyV8nMliJX7int/sNkRUr+tR4
    =5WMX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matthew Vernon@21:1/5 to All on Tue Mar 15 10:40:01 2022
    Hi,

    Lucas Nussbaum <lucas@debian.org> writes:

    [bit late to this thread; came here when I got some MBF bugs and saw
    "make them Severity: serious..." in the linked mail. I think in this
    case use of source format 1.0 isn't against policy, _shouldn't_ be
    against policy (or at least, not in all cases), and that de facto trying
    to change policy by filing serious bugs isn't quite the done thing.]

    1/ the arguments about using patches to track changes to upstream code.
    Among the ~600 packages in that potential MBF, there are still many that
    make changes to upstream code, which are not properly documented. I
    believe that it is widely accepted that seperate patches in
    debian/patches/ are the recommended way to manage changes to upstream code

    It's probably unfashionable, but I think debian/patches is not a great
    way to manage changes, particularly if you're using a VCS for
    maintaining your packages. As others have pointed out in this thread,
    doing this means you end up essentially trying to version-control your
    patches twice - once in the source package, and once in the VCS.

    For the avoidance of doubt, I'm not trying to tell anyone else how they
    should manage their packages, but (particularly when I've helped
    non-Debian folk needing to handle Debian packages) debian/patches is a
    source of confusion in packaging.

    Regards,

    Matthew

    --
    "At least you know where you are with Microsoft."
    "True. I just wish I'd brought a paddle."
    http://www.debian.org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to Ian Jackson on Tue Mar 15 11:40:01 2022
    Ian Jackson writes ("Re: proposed MBF: packages still using source format 1.0"):
    Sean Whitton writes ("Re: proposed MBF: packages still using source format 1.0"):
    [questions]
    ...

    The situation here is complicated.


    The tl;dr is that

    * there are several situations where 1.0-native is the best answer,
    * there are several situations where 1.0-with-diff is the best answer,

    The root cause of both of these situations is that 3.0, sadly,
    is not always better in every respect than 1.0.

    After I wrote that, there was a further excvhange where multiple
    people replied to me "why are you doing that" - some in very
    unpleasant tones of voice.

    Answers were given, including by a former DPL (whom you may observe
    is not someone I am on speaking terms with).

    But I see now that the MBF has gone ahead anyway.

    I spent some time trying to help by setting out the factual
    background, but it seems that Debian is not interested in facts. I
    don't know why I bother.

    Ian.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to Ian Jackson on Tue Mar 15 11:50:01 2022
    Ian Jackson writes ("Re: proposed MBF: packages still using source format 1.0"):
    But I see now that the MBF has gone ahead anyway.

    I spent some time trying to help by setting out the factual
    background, but it seems that Debian is not interested in facts. I
    don't know why I bother.

    For example, consider a package maintained by a sponsee of mine:

    Debian is not upstream, so it has a Debian revision. The package is
    maintained in git, and the source package is very small and it is not
    uploaded frequently. So we use a native source format. This means
    that we must use format 1.0 because dpkg hates 3.0 native with debian
    revision.

    My sponsee has responded to this but report by adding a
    debian/source/format to their package and asking me to upload. Of
    course, I cannot do so. I must instead ask my sponsee t revert the
    change.

    Ian.

    --
    Ian Jackson <ijackson@chiark.greenend.org.uk> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matthew Vernon@21:1/5 to Andrey Rahmatullin on Tue Mar 15 11:50:01 2022
    Andrey Rahmatullin <wrar@debian.org> writes:

    On Tue, Mar 15, 2022 at 08:54:50AM +0000, Matthew Vernon wrote:
    It's probably unfashionable, but I think debian/patches is not a great
    way to manage changes, particularly if you're using a VCS for
    maintaining your packages. As others have pointed out in this thread,
    doing this means you end up essentially trying to version-control your
    patches twice - once in the source package, and once in the VCS.
    That's just a consequence of using two different storage formats for your packages: a Debian source package and a VCS. As long as both of them are widely
    used and incompatible, problems will exist in some form when using both.
    By e.g. merging all patches in the Debian source package into one big diff you are just breaking one of these two storage formats for that package, essentially mandating the usage of the other one (the VCS) for most of the developer operations with it.

    I'm not sure that's entirely true; but even if it were, is that an
    entirely unreasonable position for a package maintainer (or team
    thereof) to take?

    Matthew

    --
    "At least you know where you are with Microsoft."
    "True. I just wish I'd brought a paddle."
    http://www.debian.org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Julien Cristau@21:1/5 to Sean Whitton on Tue Mar 15 12:00:01 2022
    On Sun, Mar 13, 2022 at 02:58:31PM -0700, Sean Whitton wrote:
    Hello,

    On Wed 09 Mar 2022 at 05:15PM +01, Lucas Nussbaum wrote:

    On 09/03/22 at 08:52 -0700, Sean Whitton wrote:
    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:
    Also, how would that work with packages that combine direct changes to >> > upstream, and quilt for Debian-created patches?

    Could you expand? I didn't think this category was one of the ones Russ >> and I were talking about.

    My limited understanding of the landscape of git workflows is that a workflow that is quite popular among packages still using the 1.0 format
    is the one used by the Debian X strike force. Julien Cristau described
    it as follows when I asked about it on IRC:

    < jcristau> [...] basically, for upstream patches we cherry-pick
    commits directly, and we use quilt for changes that aren't upstream

    Ah right, thank you. I wasn't really thinking of this case as being
    about git workflows. Are the repos patches-applied or
    patches-unapplied?

    The patches that we keep in quilt are not applied in the repo.
    (Obviously the cherry-picked patches are.)

    Cheers,
    Julien

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rahmatullin@21:1/5 to Matthew Vernon on Tue Mar 15 12:00:02 2022
    On Tue, Mar 15, 2022 at 10:49:17AM +0000, Matthew Vernon wrote:
    It's probably unfashionable, but I think debian/patches is not a great
    way to manage changes, particularly if you're using a VCS for
    maintaining your packages. As others have pointed out in this thread,
    doing this means you end up essentially trying to version-control your
    patches twice - once in the source package, and once in the VCS.
    That's just a consequence of using two different storage formats for your packages: a Debian source package and a VCS. As long as both of them are widely
    used and incompatible, problems will exist in some form when using both.
    By e.g. merging all patches in the Debian source package into one big diff you are just breaking one of these two storage formats for that package, essentially mandating the usage of the other one (the VCS) for most of the developer operations with it.

    I'm not sure that's entirely true;
    Which of my statements?

    but even if it were, is that an entirely unreasonable position for a
    package maintainer (or team thereof) to take?
    Probably not? Just yet another case where you need to learn a specific
    workflow to modify or study a certain package, cannot use established documentation for that, and are required to use specific non-default tools
    for that.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmIwcW8tFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh pIMP/0z6WVrDFhuqLXKeyo0WGJn/w3gHGy250QTAAmIFZro6A4qatckxzBa/wgT2 pHp0WlbtPec9qWwcpdVNX0WyZAf67EVMokxWGdV5pRBnjCiOVEyyQTegzyk++Kjh BRe1KxuyzCu0Y6LrKRSWKh4Zo77fXg8DMn2fZCcLPqDRe/02QZ9ySy+Km5pzUIeR 5/P0dxWIsH23fg6l6rCbfTdWFqv2MegQgcXqgH5fLWwobshMhuiFk5Q3ZM2n/XN8 2TXrUf2HBEGm/ZuqDLziR8wRWPX12gtqtPAViqTN7n0BUANJrZaAUJBe+YwafoWa ForQDT9+WYxIkz+VbbfaV1asUYKP+LnEAthRQ59i02qKZsgb1ZDjaTUONpocSYyE CtJ2NfZJ1eN0d0B0FFCwj3DOTV6h3lasccK72YrtwklO7ckyGK0+gMXieHLj6L2Q gWigI+6AFZUu2SrnJ9zsBG558pGm2q5jn0hqLC1KC9bTMPrLVBpuljMsGI9SoKFr vLObgksv4Q0CkM8UNfrHZv6EdgRYTtdICYDI4iff+0iLlhczuIYaukWDGFsLd193 yGos4DcZ5k+kFyT0Srs/4bK2cNgkl2FnyYl59q9m/bIYkd/tM7QISV66si0p59cC vXL5fHvzhazVXHJY8E2ixtoogoqY2QE/sVDOSX/mmN5NST/2
    =4N1H
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matthew Vernon@21:1/5 to Andrey Rahmatullin on Tue Mar 15 12:30:01 2022
    Andrey Rahmatullin <wrar@debian.org> writes:

    On Tue, Mar 15, 2022 at 10:49:17AM +0000, Matthew Vernon wrote:

    but even if it were, is that an entirely unreasonable position for a
    package maintainer (or team thereof) to take?
    Probably not? Just yet another case where you need to learn a specific workflow to modify or study a certain package, cannot use established documentation for that, and are required to use specific non-default tools for that.

    In practice, for NMU purposes, one can essentially follow
    dgit-nmu-simple(7) regardless of what workflow the package maintainer is
    using (and that is one of its great benefits). In a large and diverse
    project such as Debian there are always going to be multiple approaches
    - and that's a strength in general, though there are costs and
    trade-offs (such as the barrier for entry to new maintainers).

    [but I fear we are drifting off topic]

    Matthew

    --
    "At least you know where you are with Microsoft."
    "True. I just wish I'd brought a paddle."
    http://www.debian.org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Felix Lechner@21:1/5 to ijackson@chiark.greenend.org.uk on Tue Mar 15 14:10:01 2022
    Hi,

    On Tue, Mar 15, 2022 at 3:46 AM Ian Jackson
    <ijackson@chiark.greenend.org.uk> wrote:

    Debian is not upstream, so it has a Debian revision. The package is maintained in git, and the source package is very small and it is not uploaded frequently. So we use a native source format. This means
    that we must use format 1.0 because dpkg hates 3.0 native with debian revision.

    I do not understand the word "must" in that sentence, nor do I agree
    with the word "hate".

    I'll reiterate my call for a compromise: Let's deprecate source format
    1.0 in exchange for relaxed version strings. It will streamline our
    tooling and reduce the cognitive load on new maintainers.

    Yes. People complain about the Debian packaging toolchain being too
    complex or too confusing. This is one of such cases. As has been stated countless times, this subverts the semantics of both the source and
    version formats. At least we only have one case remaining, the even
    more senseless 1.0 non-native source with native version was turned
    into an error with dpkg 1.20.1. Recall that dpkg-source currently needs
    to use heuristics to decide whether to use an orig tarball + diff or not
    for format 1.0. :(

    I'll buy both you, Ian and Guillem, a beer next time I see you. The
    dispute has been going on for too long. Or, is it a battle over the
    soul of Dpkg between the current maintainer and its inventor? For good
    measure, Lucas is invited, too.

    I think a negotiated peace is superior to yet another unhappy
    interaction with the Technical Committee. Why do we have to put them
    into such a difficult position every time?

    Kind regards,
    Felix Lechner

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to Lucas Nussbaum on Tue Mar 15 13:30:01 2022
    On Wed, Mar 09, 2022 at 01:08:59PM +0100, Lucas Nussbaum wrote:
    can we find a middleground where the git workflows don't require staying
    with 1.0? Even if that means switching to 3.0 (quilt) using the single-debian-patch approach?

    Well. There is a specific source format now for full git workflows:
    3.0 (gitarchive).

    It is implemented outside of dpkg in it's own package
    dpkg-source-gitarchive.

    Bastian

    --
    Those who hate and fight must stop themselves -- otherwise it is not stopped.
    -- Spock, "Day of the Dove", stardate unknown

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Adam Borowski@21:1/5 to Ian Jackson on Tue Mar 15 15:30:01 2022
    On Tue, Mar 15, 2022 at 10:46:10AM +0000, Ian Jackson wrote:
    Ian Jackson writes ("Re: proposed MBF: packages still using source format 1.0"):
    But I see now that the MBF has gone ahead anyway.

    For example, consider a package maintained by a sponsee of mine:

    Debian is not upstream, so it has a Debian revision. The package is maintained in git, and the source package is very small and it is not uploaded frequently. So we use a native source format. This means
    that we must use format 1.0 because dpkg hates 3.0 native with debian revision.

    So the package is really non-native; your beef here is with requiring a tarball. Your workaround is to [mis]use the native format.

    But even legitimely native packages do want a Debian revision sometimes.
    Eg. the natural versioning for valgrind-if-available would track
    corresponding valgrind versions. The 3.0 format restriction forbids
    that.

    So the bad thing is tying the internal format with version numbers.


    Meow!
    --
    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ 'Russkiy voyennyi korabl, idi nakhuy'
    ⢿⡄⠘⠷⠚⠋⠀
    ⠈⠳⣄⠀⠀⠀⠀

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to Lucas Nussbaum on Tue Mar 15 16:40:01 2022
    Lucas Nussbaum writes ("Re: proposed MBF: packages still using source format 1.0"):
    As explained in https://lists.debian.org/debian-devel/2022/03/msg00165.html
    I proceeded with the MBF for packages that match
    not (debian_x or (vcs and vcs_status != 'ERROR' and direct_changes))
    or, maybe easier to read:
    (not debian_x) and ((not vcs) or vcs_status == 'ERROR' or (not direct_changes))

    I did not file bugs for packages that are likely to use a VCS-based
    workflow (category (2) in the mail pointed above, or in https://udd.debian.org/cgi-bin/format10.cgi)

    At least the following packages of which I am the maintainer or
    sponsor were includined in the MBF, despite the fact that they are 1.0
    native packages with Debian revision:

    its-playback-time
    spigot
    vm
    vtwm
    chroma

    Clearly the it aakes no sense to have filed bugs saying "please switch
    to this other source format" when the other source format cannot
    represent the package.

    Additionally, there were a further 9 packages where I am the
    maintainer or uploader where the current version does not have a
    Debian revision. They could to be switched to "3.0 (native)" for the
    better compression support.

    However, given that I perceive that:
    - there is a campaign to abolish 1.0
    - there are important use cases where 1.0 is needed
    - the campaign to abolish 1.0 is being prosecuted anyway
    I have deliberately chosen to continue to upload even pure-native
    packages as 1.0, to try to slow this process down in the hope that the situation improves and/or people stop trying to forbid useful things.

    I maintain all my packages with dgit. I presume that the vcs status
    you are referring to is just that the Vcs-Git header is out of date
    since the closure of alioth, or perhaps that there isn't one.

    I hope thius clarifies.

    Ian.

    --
    Ian Jackson <ijackson@chiark.greenend.org.uk> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Ian Jackson on Tue Mar 15 16:20:01 2022
    On 15/03/22 at 10:36 +0000, Ian Jackson wrote:
    Answers were given, including by a former DPL (whom you may observe
    is not someone I am on speaking terms with).

    But I see now that the MBF has gone ahead anyway.

    I spent some time trying to help by setting out the factual
    background, but it seems that Debian is not interested in facts. I
    don't know why I bother.

    Hi Ian,

    As explained in https://lists.debian.org/debian-devel/2022/03/msg00165.html
    I proceeded with the MBF for packages that match
    not (debian_x or (vcs and vcs_status != 'ERROR' and direct_changes))
    or, maybe easier to read:
    (not debian_x) and ((not vcs) or vcs_status == 'ERROR' or (not direct_changes))

    I did not file bugs for packages that are likely to use a VCS-based
    workflow (category (2) in the mail pointed above, or in https://udd.debian.org/cgi-bin/format10.cgi)

    What the are the packages for which you are surprised that bugs were
    filed? I wonder which part of the criteria was too loose.

    Also, feel free to close those bugs with a short explaining message.
    I'll try to summarize the reasons for not migrating packages in a couple
    of months.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Laager@21:1/5 to All on Tue Mar 15 17:20:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------s0565uYT1U0aCGX944hGoOeS
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMy8xNS8yMiAxMDozNiwgSWFuIEphY2tzb24gd3JvdGU6DQo+IEx1Y2FzIE51c3NiYXVt IHdyaXRlcyAoIlJlOiBwcm9wb3NlZCBNQkY6IHBhY2thZ2VzIHN0aWxsIHVzaW5nIHNvdXJj ZSBmb3JtYXQgMS4wIik6DQo+PiBBcyBleHBsYWluZWQgaW4gaHR0cHM6Ly9saXN0cy5kZWJp YW4ub3JnL2RlYmlhbi1kZXZlbC8yMDIyLzAzL21zZzAwMTY1Lmh0bWwNCj4+IEkgcHJvY2Vl ZGVkIHdpdGggdGhlIE1CRiBmb3IgcGFja2FnZXMgdGhhdCBtYXRjaA0KPj4gbm90IChkZWJp YW5feCBvciAodmNzIGFuZCB2Y3Nfc3RhdHVzICE9ICdFUlJPUicgYW5kIGRpcmVjdF9jaGFu Z2VzKSkNCj4+IG9yLCBtYXliZSBlYXNpZXIgdG8gcmVhZDoNCj4+IChub3QgZGViaWFuX3gp IGFuZCAoKG5vdCB2Y3MpIG9yIHZjc19zdGF0dXMgPT0gJ0VSUk9SJyBvciAobm90IGRpcmVj dF9jaGFuZ2VzKSkNCj4+DQo+PiBJIGRpZCBub3QgZmlsZSBidWdzIGZvciBwYWNrYWdlcyB0 aGF0IGFyZSBsaWtlbHkgdG8gdXNlIGEgVkNTLWJhc2VkDQo+PiB3b3JrZmxvdyAoY2F0ZWdv cnkgKDIpIGluIHRoZSBtYWlsIHBvaW50ZWQgYWJvdmUsIG9yIGluDQo+PiBodHRwczovL3Vk ZC5kZWJpYW4ub3JnL2NnaS1iaW4vZm9ybWF0MTAuY2dpKQ0KPiANCj4gQXQgbGVhc3QgdGhl IGZvbGxvd2luZyBwYWNrYWdlcyBvZiB3aGljaCBJIGFtIHRoZSBtYWludGFpbmVyIG9yDQo+ IHNwb25zb3Igd2VyZSBpbmNsdWRpbmVkIGluIHRoZSBNQkYsIGRlc3BpdGUgdGhlIGZhY3Qg dGhhdCB0aGV5IGFyZSAxLjANCj4gbmF0aXZlIHBhY2thZ2VzIHdpdGggRGViaWFuIHJldmlz aW9uOg0KPiANCj4gICAgIGl0cy1wbGF5YmFjay10aW1lDQo+ICAgICBzcGlnb3QNCj4gICAg IHZtDQo+ICAgICB2dHdtDQo+ICAgICBjaHJvbWENCg0KSSBwaWNrZWQgb25lIG9mIHRoZXNl LCBzcGlnb3QsIGF0IHJhbmRvbS4NCg0KPiBDbGVhcmx5IHRoZSBpdCBhYWtlcyBubyBzZW5z ZSB0byBoYXZlIGZpbGVkIGJ1Z3Mgc2F5aW5nICJwbGVhc2Ugc3dpdGNoDQo+IHRvIHRoaXMg b3RoZXIgc291cmNlIGZvcm1hdCIgd2hlbiB0aGUgb3RoZXIgc291cmNlIGZvcm1hdCBjYW5u b3QNCj4gcmVwcmVzZW50IHRoZSBwYWNrYWdlLg0KDQpJIGRvbid0IHNlZSBhbnkgcmVhc29u IHRoYXQgMy4wIGNhbid0IHJlcHJlc2VudCB0aGUgc3BpZ290IHBhY2thZ2UuIEl0IA0KbG9v a3MgbGlrZSBhIHN0cmFpZ2h0Zm9yd2FyZCBwYWNrYWdlLiBJdCBzZWVtcyB0byBoYXZlIGFu IHVwc3RyZWFtOg0KDQpUaGUgdG9wIGNoYW5nZWxvZyBlbnRyeSBzYXlzICJNZXJnZSBmcm9t IHVwc3RyZWFtIi4NCg0KZGViaWFuL2NvbnRyb2wgcG9pbnRzIG1lIHRvOg0KaHR0cDovL3d3 dy5jaGlhcmsuZ3JlZW5lbmQub3JnLnVrL35zZ3RhdGhhbS9zcGlnb3QvDQoNClRoYXQgc2l0 ZSBoYXMgYSB0YXJiYWxsIGF2YWlsYWJsZS4gVGhlIERlYmlhbiBwYWNrYWdlIGlzIE5PVCB1 c2luZyB0aGF0IA0KYXMgaXRzIC5vcmlnLnRhci5nei4gSXQgZG9lc24ndCBoYXZlIGEgLm9y aWcudGFyLmd6LCBwcmVzdW1hYmx5IA0KaW5kaWNhdGluZyBpdCB3YXMgYnVpbHQgYnVpbHQg YXMgYSBuYXRpdmUgcGFja2FnZSAoZXZlbiB0aG91Z2ggaXQgaGFzIGEgDQpEZWJpYW4gcmV2 aXNpb24pLCB3aGljaCBpcyB0aGUgaXNzdWUgdW5kZXIgZGlzY3Vzc2lvbi4gVG8gYmUgaG9u ZXN0LCBoYWQgDQpJIHN0dW1ibGVkIGFjcm9zcyB0aGlzIHBhY2thZ2Ugb3V0c2lkZSBvZiB0 aGlzIGNvbnZlcnNhdGlvbiwgSSB3b3VsZCANCmhhdmUgYmVlbiBjb25mdXNlZCBieSB0aGlz Lg0KDQpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgRGViaWFuIHZhbHVlcyB0aGUgaWRlYSBv ZiB1c2luZyB0aGUgcHJpc3RpbmUgDQp1cHN0cmVhbSB0YXJiYWxsLiBHcmFudGVkLCBzb21l dGltZXMgdGhhdCBnb2FsIGhhcyB0byB5aWVsZCB0byBoaWdoZXIgDQpwcmlvcml0eSB0aGlu Z3MsIGxpa2UgREZTRyBjb21wbGlhbmNlLg0KDQpIb3cgZG8geW91IGZlZWwgYWJvdXQgdGhl IHByaXN0aW5lIHRhcmJhbGwgY29uY2VwdD8NCg0KLS0gDQpSaWNoYXJkDQo=

    --------------s0565uYT1U0aCGX944hGoOeS--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE1Ot9lOeOTujs4H+U+HlhmcBFhs4FAmIwu7EACgkQ+HlhmcBF hs7DUBAAlIjHwQafi1TaqabHLF7TwdG8bpXSX1D2d3N1enEMXiaY26CX5RCMKdm+ 2wJh6cwjTtoahU6iGbip5IEgZU9wV7tFx2uTuzsZTEzCdFJYvdg6ANlvL2bgiVQq xSOSF1hR9quRPPL9dqnlajCisyzvlcSmkn1MIpVc2K3/zOYsWHpQn1F8834mxcSJ D4UxI/3UFgnb+6umQVuHr5J4GibHemXXQd3JHTPVQmW0wvB43G/236Uj3Vbbdueu KyE6WOaU73Ht1vDcveMBz87hxPhlL3yV/f/jgHqoioVk4YoPpgXY5DfEExRqxTSo r67BEkQtnIIRwKBbQBT/9Gmfkuj6a10hJ5FGAfTcYQ04XyYyekFvx1hY0tL9L56h dqoLn2Hdu9XhT/qOh1u2khrG0xWjouVtPWBVL7B5Z3CA9yrM01KgJpSvza6bw8pg ntFO+jnlMaqezAzf0Xi3Z2kghg/HvTIuNEAcHZXP+qK6k+ME/wmODScW3GJUPLRf vMwZoz9M2oV6faQTtB+eSFe16bUNArXNw3x7h/dYLNvOw2IbY5bE+6MZRAzEOuXa BA/IcG44o3Me4nMkTV4AjFCqSolZv6ItuyqRxCHLXUVQsFEgyw9hU6qY5rY8GVv1 f3FToCc9q2UHZzeny/ajRB/XyMvBa5BNUoqJGSr/e4YsXAtIQtM=
    =cHiF
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Ian Jackson on Tue Mar 15 18:30:01 2022
    Hi,

    On 15/03/22 at 15:36 +0000, Ian Jackson wrote:
    At least the following packages of which I am the maintainer or
    sponsor were includined in the MBF, despite the fact that they are 1.0
    native packages with Debian revision:

    its-playback-time
    spigot
    vm
    vtwm
    chroma

    Clearly the it makes no sense to have filed bugs saying "please switch
    to this other source format" when the other source format cannot
    represent the package.

    Those five packages:
    - are indeed native packages with Debian revisions
    - are not maintained in a VCS (or the VCS is not advertized using
    Vcs-*).

    So there's no easy way to understand how the package differs from
    upstream (no patch serie, no VCS history). I don't think that it's
    something desirable.
    (if the packages had declared a VCS, they would have joined cachefilesd, userv-utils, and vde2 in the "native package with a Debian revision
    maintained in a VCS" category.)

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guillem Jover@21:1/5 to Ian Jackson on Tue Mar 15 18:40:01 2022
    Hi!

    On Tue, 2022-03-15 at 15:36:48 +0000, Ian Jackson wrote:
    However, given that I perceive that:
    - there is a campaign to abolish 1.0
    - there are important use cases where 1.0 is needed
    - the campaign to abolish 1.0 is being prosecuted anyway
    I have deliberately chosen to continue to upload even pure-native
    packages as 1.0, to try to slow this process down in the hope that the situation improves and/or people stop trying to forbid useful things.

    Ian, just to try to give some kind of reassurance. I'm not involved
    with this MBF in any way (neither suggested nor prompted it, etc.).
    While I'd like to see the practice of mismatched format vs version
    disappear, I also neither did nor have immediate plans to make that
    an error for 1.0 formats, as long as there are users at least in
    Debian, or there are no viable alternatives, because I consider 1.0
    confusing enough and not salvageable, that it makes less of a
    difference there. If there ever comes the time where it's feasible to
    error out on 1.0 on those conditions, I'd even be fine with a force
    option but only for 1.0 formats, because I really want to preserve
    2.0+ formats as clear as possible, and improve on those. I also have
    no plans to abolish building source format 1.0 in dpkg.

    Something I might want to see though (although I hold not much hope
    for) is a possible move away from the default behavior when no debian/source/format is present, as I think that gives bad defaults
    for newcomers or inexperienced users, and even there just emitting
    warnings tend to be ignored. Possible alternatives could be, either
    erroring out, or changing the default format depending on say a
    dpkg-compat level, or similar, I don't know, have not thought this
    through though. But explicitly marking sources as 1.0 (as has been
    warned for a long time now) would of course keep working as of right
    now.

    HTH,
    Guillem

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian Jackson@21:1/5 to Guillem Jover on Tue Mar 15 20:00:01 2022
    Guillem Jover writes ("Re: proposed MBF: packages still using source format 1.0"):
    Something I might want to see though (although I hold not much hope
    for) is a possible move away from the default behavior when no debian/source/format is present, as I think that gives bad defaults
    for newcomers or inexperienced users, and even there just emitting
    warnings tend to be ignored. Possible alternatives could be, either
    erroring out, or changing the default format depending on say a
    dpkg-compat level, or similar, I don't know, have not thought this
    through though. But explicitly marking sources as 1.0 (as has been
    warned for a long time now) would of course keep working as of right
    now.

    Thanks for the reassurances. (I have snipped much I didn't feel the
    need to comment on but, it was all welcome.)

    What you say above makes sense to me. I'm not sure what an
    appropriate timescale would be.

    Would you welcome implementation of a "3.0 (diff)" format which
    contained a tarball plus a single diff, arranged to be capable of
    representing every git tree object ? There would have to be some
    massaging, I guess, mostly because of symlinks. That would be
    pareto-better than 1.0-with-diff.

    Ian.

    --
    Ian Jackson <ijackson@chiark.greenend.org.uk> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stephen Kitt@21:1/5 to All on Tue Mar 15 22:00:01 2022
    On Mon, 14 Mar 2022 13:52:14 +0000, Holger Levsen <holger@layer-acht.org> wrote:
    On Mon, Mar 14, 2022 at 01:10:19PM +0000, Wookey wrote:
    You're trying to produce packages from CI builds or other automation where you sometimes have native Debian revisions.

    * you are producing a package where you have distinct upstream and
    debian branches, and you cannot control the upstream version number.


    Doesn't this make it 'not a native debian package'?

    yes, exactly, that's the problem.

    I thought the whole point of debian native packages was that there was
    no 'upstream' and it was only for debian so you _are_ in control of
    the source, the versioning and the releases?

    yes, that was the idea when native packages were introduced over
    20 ago, when there were hardly any Debian forks, and certainly no
    CI systems and other automated systems which 'constantly fork'.

    As soon as that stops
    being true then should one not shift to making it a standard 'upstream+debian revision' non-native package?

    yes, we should convert all native packages in our archive,
    the idea of a native package has been obsoleted for long.

    I think there are still some cases where it makes sense, e.g. for “meta-source” packages where the upstream is really another package (e.g. binutils-mingw-w64 and friends). Suffixes for downstreams work fine, see https://launchpad.net/ubuntu/+source/gdb-mingw-w64 for one instance.

    Regards,

    Stephen

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEnPVX/hPLkMoq7x0ggNMC9Yhtg5wFAmIw/SQACgkQgNMC9Yht g5y0VQ/9FACRkoIMBYTo7BimGdVNQujmdXgtvMPMIsI4GvmXpQpj+t+Hxg4KeNgW wov0sh0A6Za1j3ztuebFzubuKHzd2/9BEF/DEW0Toon2IrVntTe5b9HdiD8UyCo7 k+WCwh575OMzNJ7njKQlg04/Rv3cmeKu23F4hScePVTmG9Ux08xEPEioS+CpntmJ 5TlYur/+0xHCMjalJMBjfg1WF+8cH8WZ/4bOpqISFmPKR7pMlXtxcR2GLctdOgBh /OwJnhT/dw41zuX6hotmwO3emYMbijO8ZdkJjm/vLl6Q+ZmiRblLl8cLlBRLpJak iKlKRPZO/dlUFkQub6RNaPkgrcb8/XV9nEVsX7UwZsNrlkB+oaRUxtbT2t2rwbH+ Ud/bGYjVhPxw517/G5kopNV1Vo2fwAYCqxPkB5r2jNBDRSKz+0fN3R9bWsz8cgxC mkQu8A4Qf5J0UX8pWpAvbh1WfQdxOzdNjnTetJJUJsJ6TMGyj4DhJfBN6PvYIcez 3aRyp2hgOJgV1lBeQGd0geGTtA7lLN91uQIZ695T4n3fIjRha63JqVuviTd+lCYA qGWpqPvPnQIrjcNOlW3ZhxW7aPa4XqDUT4eS0cxeALmwJXrcw2sFuj99fC8/TDMN s2EteMiQ+BYDIjK0yMdMFZCLvCAQP3sq4kl/nmO1YQlB5qFqFC0=
    =U2y+
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thorsten Glaser@21:1/5 to All on Wed Mar 16 04:00:01 2022
    Lucas Nussbaum dixit:

    column on https://udd.debian.org/cgi-bin/format10.cgi )

    I’m apparently affected at least for cvs, but that package has
    another very interesting use case for format 1.0:

    Its .diff.gz file can *directly* be used as patch file in no less
    than *two* other packaging systems (BSD ports and OpenSuSE build‐
    service RPM), and I *do* use it there. It’s possible that other
    downstream consumers exist (I was talking a bit with someone from
    Gentoo but don’t recall whether anything came out of that).

    So, no, the cvs package will not be switching to 3.0 formats, in
    order to not break things for downstream users. (Similar cases
    exist where compression formats for the .deb binaries are set to
    specific values when they are reused; cvs, again, does that so
    dowstreams can take the Tₑχ/LᴬTᴇΧ-generated texinfo PDFs from
    that and skip the chore of porting texlive to the OS themselves.)

    bye,
    //mirabilos

    PS: Can that CGI output a dd-list? I’m unsure I found all…
    --
    Yes, I hate users and I want them to suffer.
    -- Marco d'Itri on gmane.linux.debian.devel.general

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tollef Fog Heen@21:1/5 to All on Sat Mar 19 08:30:01 2022
    ]] Matthew Vernon

    Andrey Rahmatullin <wrar@debian.org> writes:

    On Tue, Mar 15, 2022 at 08:54:50AM +0000, Matthew Vernon wrote:
    It's probably unfashionable, but I think debian/patches is not a great
    way to manage changes, particularly if you're using a VCS for
    maintaining your packages. As others have pointed out in this thread,
    doing this means you end up essentially trying to version-control your
    patches twice - once in the source package, and once in the VCS.
    That's just a consequence of using two different storage formats for your packages: a Debian source package and a VCS. As long as both of them are widely
    used and incompatible, problems will exist in some form when using both.
    By e.g. merging all patches in the Debian source package into one big diff you are just breaking one of these two storage formats for that package, essentially mandating the usage of the other one (the VCS) for most of the developer operations with it.

    I'm not sure that's entirely true; but even if it were, is that an
    entirely unreasonable position for a package maintainer (or team
    thereof) to take?

    My problem with it is that we're then saying that we're not shipping the
    source (as in, preferred form for modification). This might be ok, but
    then we should make sure that the «actual» source is available
    elsewhere, which means it needs to be somewhere we manage, and treat
    source packages as generated artifacts that can't be turned back into
    the actual source.

    --
    Tollef Fog Heen
    UNIX is user friendly, it's just picky about who its friends are

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matthew Vernon@21:1/5 to Bastian Blank on Mon Mar 21 10:30:01 2022
    Bastian Blank <waldi@debian.org> writes:

    On Wed, Mar 09, 2022 at 01:08:59PM +0100, Lucas Nussbaum wrote:
    can we find a middleground where the git workflows don't require staying
    with 1.0? Even if that means switching to 3.0 (quilt) using the
    single-debian-patch approach?

    Well. There is a specific source format now for full git workflows:
    3.0 (gitarchive).

    It is implemented outside of dpkg in it's own package
    dpkg-source-gitarchive.

    OOI, why is this not part of dpkg proper?

    Matthew

    --
    "At least you know where you are with Microsoft."
    "True. I just wish I'd brought a paddle."
    http://www.debian.org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Julien Cristau on Tue Mar 29 01:10:01 2022
    Hello,

    On Tue 15 Mar 2022 at 11:46AM +01, Julien Cristau wrote:

    On Sun, Mar 13, 2022 at 02:58:31PM -0700, Sean Whitton wrote:
    Hello,

    On Wed 09 Mar 2022 at 05:15PM +01, Lucas Nussbaum wrote:

    On 09/03/22 at 08:52 -0700, Sean Whitton wrote:
    On Wed 09 Mar 2022 at 01:08pm +01, Lucas Nussbaum wrote:
    Also, how would that work with packages that combine direct changes to >> >> > upstream, and quilt for Debian-created patches?

    Could you expand? I didn't think this category was one of the ones Russ >> >> and I were talking about.

    My limited understanding of the landscape of git workflows is that a
    workflow that is quite popular among packages still using the 1.0 format >> > is the one used by the Debian X strike force. Julien Cristau described
    it as follows when I asked about it on IRC:

    < jcristau> [...] basically, for upstream patches we cherry-pick
    commits directly, and we use quilt for changes that aren't upstream

    Ah right, thank you. I wasn't really thinking of this case as being
    about git workflows. Are the repos patches-applied or
    patches-unapplied?

    The patches that we keep in quilt are not applied in the repo.
    (Obviously the cherry-picked patches are.)

    Thanks. Is the rationale for this written down anywhere, may I ask?
    I'd like to read about the workflow.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmJCPpEZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQKdxEACr5Eqpk3M26yUE8l0VZ76g xTatoWYenF3lTuDn86kL547Hm8Co0rjwXi/Fnfkr1FSLSWr7/bV6dTA0kfo0d2xq UKbaobOl+OMoWp3xOVSe6bdrNATraZ4JOPABrrDGwx3nf2VJWc0m9VgYXMz7Eh36 LsjVINE2+O9aypt7ZuwxM+upUWrLoT7WQbbQnkJaMit1Cy5z2f76j1zD/MbOo3RF TuElJEyNW6kVg3i06/oXfDh+cPkk4UO0O0YIMZ8AU9/MqcjNkidcjdMjkLSgi8QL F+EhoNf9ysJ+XPiEFecgoguwM3/Tg0nslVRPq19RZ9J/XXVbqOiOuuX3NciR7mOL faKyVF9MNzNTjTjr8ufjUBEOQDFkGjJZkBws/Qs1A0YqHCPzOlwXNxLKS0VNc30+ mbV2m2lUw/k74gSte/OFLjOP/8oxRv5tPW4jDbTeY4EPiPzoO/BNAMCIWp9O9jsQ Kq7Vh0W7o+r42UyyG4VWLU1LOYMZD4rgCsPhJWFuXCKplEJT/nyMY5tNhgbYJRT/ RkmUFMsX2yHHFOSbMzO2PGTUWQAaj7WxUy7x4NBhiMYWlqUqISTdLvflgpdtsZec j3NZ05bF3W0AfIT7LfbZJyRVmKG1ThOPwyIYX0O1zXG6NmVM4/V/BkKbtVNMKWQM 5pfuypk4H6nkRmrgaeQjSg==7MiN
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us
  • From Sean Whitton@21:1/5 to Lucas Nussbaum on Tue Mar 29 01:10:01 2022
    Hello,

    On Tue 15 Mar 2022 at 06:26PM +01, Lucas Nussbaum wrote:

    On 15/03/22 at 15:36 +0000, Ian Jackson wrote:
    At least the following packages of which I am the maintainer or
    sponsor were includined in the MBF, despite the fact that they are 1.0
    native packages with Debian revision:

    its-playback-time
    spigot
    vm
    vtwm
    chroma

    Clearly the it makes no sense to have filed bugs saying "please switch
    to this other source format" when the other source format cannot
    represent the package.

    Those five packages:
    - are indeed native packages with Debian revisions
    - are not maintained in a VCS (or the VCS is not advertized using
    Vcs-*).

    So there's no easy way to understand how the package differs from
    upstream (no patch serie, no VCS history). I don't think that it's
    something desirable.
    (if the packages had declared a VCS, they would have joined cachefilesd, userv-utils, and vde2 in the "native package with a Debian revision maintained in a VCS" category.)

    They have detailed history on dgit-repos.
    E.g. <https://browse.dgit.debian.org/its-playback-time.git/>.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmJCPswZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQJUkD/431X7bU7fWOEHBInl0J6Os zYUazoT4TRng3idqY5jLUJoDj6qBxtHDZdDER4B1fRD8AH275sMyz7SIDTS8icBA GdjgQRbgzzG9yWQ4dXzv4fQW87uGBsEll85wn6WxvmJ5RQv7SfFIaF6vvRej7fbQ aenmyIEW3MI7uGhQj6pPgd5nO2xD+CT2iEiEcO8CZh14QZThtHhZSB7FvLCOZ0su aEs5KsLHmQyKNMUK4mwQ+k//PHRVMdKvoOt8uMAD9qQWTOBx10FNzmixy22dnomy heSETbp1IOqUEq3R+WiEr9LNPqgrmyZ8qxmFJymJA6WDZ5UCUZ6Lk/nRPGiOjYhG t8hp2Jz4qTR7rgb3MXQlPmiGzkMDjRcM+LgdP1et8emnPOeo+VxpKCeZnzYZGvGQ EZ+6q6F3zerrVRcPZbwmrHgH8cwZOtZ5drYaZvOOCL203MpQOb/4dnlkfHEBROYh 88+67nZQjL9L50Fg5xBhiESSjPI803LMQ0KsgoBfZc4c71eJ1JPURrR6IkQvzB3b PxTT4WmXcOTT/HBxq0PrvpDob3eyAhK8JxUTs/SxHTpJ1plCUuAQs+cJco+I9eWF gyWpp0dl0ogT1WvKVZAjM0oio/t2xExdHacylLS+MmeJ0fI0usKUzyk6qz2x2wYe n6dcj5Ucj+/oGaV86uLwlQ==CRUb
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us
  • From Lucas Nussbaum@21:1/5 to Sean Whitton on Tue Mar 29 09:20:01 2022
    On 28/03/22 at 16:03 -0700, Sean Whitton wrote:
    Hello,

    On Tue 15 Mar 2022 at 06:26PM +01, Lucas Nussbaum wrote:

    On 15/03/22 at 15:36 +0000, Ian Jackson wrote:
    At least the following packages of which I am the maintainer or
    sponsor were includined in the MBF, despite the fact that they are 1.0
    native packages with Debian revision:

    its-playback-time
    spigot
    vm
    vtwm
    chroma

    Clearly the it makes no sense to have filed bugs saying "please switch
    to this other source format" when the other source format cannot
    represent the package.

    Those five packages:
    - are indeed native packages with Debian revisions
    - are not maintained in a VCS (or the VCS is not advertized using
    Vcs-*).

    So there's no easy way to understand how the package differs from
    upstream (no patch serie, no VCS history). I don't think that it's something desirable.
    (if the packages had declared a VCS, they would have joined cachefilesd, userv-utils, and vde2 in the "native package with a Debian revision maintained in a VCS" category.)

    They have detailed history on dgit-repos.
    E.g. <https://browse.dgit.debian.org/its-playback-time.git/>.

    Yes, my point is that those packages don't have Vcs-* headers, so it's impossible to discover the above URL.

    Lucas

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEE/t7ByzN7z1CfQ8IkORS1MvTfvpkFAmJCrD4ACgkQORS1MvTf vpnsSA//SSOVyegWywNYVlZO4gCuKcSJpllZdOu/VUqvo2gQCv1MfrTpf/FImP+w 289hJD5996PSIlhfzj2ukh30OKdavLCp9y4hZAVJCjtEe2BzrhDAakrLn4VJ7Rkm DD9XmRnp/hhQi8k4ecn4fTvOqRShchhTWMaEgwRFHS+s5clWFYqO0iThU0uZwIlT y8JspkMCLA5E4ZPCbIg10+8G5eif3cPeKhcn4unvWNODdmvs3AhkBHk9G/RlmMhY xcgC06Fc7NGzu2E9xbEvpsZu6WyebRJ/V5FnSQZsClw8m1HRkdd0HMMVciBku9QK 83ZNvzSpyaoaQ+LSXWRg5gC7GlNh5lHjjeAWASe9XmYBP1WEnneDhXEsnanX1wuc ZkzUeHGfudeyzyKWKF2pq56kK8RvltaL4H2E0a0jZ706TfH8TMO3cYeS9cRXeJiT OtACzXTQsF3yocdL+ggEW2i1rgUAf95qedCuMJEOGZ6GsLAP42m71PiN37LVdK4b SZdLQtVUy9UcJ5KTHbZD9Yj0V6Vzim8i6T0VEPHgD4Sw+beeq8o63uqjI3i+wi75 bQkQ31gBAHx01FIWwHkYlnsjApV/inVXUNzP5JxSSctNqElgAUKUIw90su3wAhrm ANl19iUPbxq5Dqre6+QE/W3JU8BsLXllXm8KizXi1TBnNXHGYhM=
    =p9nd
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Sean Whitton@21:1/5 to Lucas Nussbaum on Wed Mar 30 03:10:01 2022
    Hello,

    On Tue 29 Mar 2022 at 08:50AM +02, Lucas Nussbaum wrote:

    On 28/03/22 at 16:03 -0700, Sean Whitton wrote:
    Hello,

    On Tue 15 Mar 2022 at 06:26PM +01, Lucas Nussbaum wrote:

    On 15/03/22 at 15:36 +0000, Ian Jackson wrote:
    At least the following packages of which I am the maintainer or
    sponsor were includined in the MBF, despite the fact that they are 1.0
    native packages with Debian revision:

    its-playback-time
    spigot
    vm
    vtwm
    chroma

    Clearly the it makes no sense to have filed bugs saying "please switch
    to this other source format" when the other source format cannot
    represent the package.

    Those five packages:
    - are indeed native packages with Debian revisions
    - are not maintained in a VCS (or the VCS is not advertized using
    Vcs-*).

    So there's no easy way to understand how the package differs from
    upstream (no patch serie, no VCS history). I don't think that it's
    something desirable.
    (if the packages had declared a VCS, they would have joined cachefilesd, >> > userv-utils, and vde2 in the "native package with a Debian revision
    maintained in a VCS" category.)

    They have detailed history on dgit-repos.
    E.g. <https://browse.dgit.debian.org/its-playback-time.git/>.

    Yes, my point is that those packages don't have Vcs-* headers, so it's impossible to discover the above URL.

    Right, sorry.

    They should have such Vcs-* headers added.

    --
    Sean Whitton

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJNBAEBCgA3FiEEm5FwB64DDjbk/CSLaVt65L8GYkAFAmJDrXMZHHNwd2hpdHRv bkBzcHdoaXR0b24ubmFtZQAKCRBpW3rkvwZiQHLoD/4nRMOL8STBSTh5Gk+cOIvI PHfQ2dmhOEw9TCkqREi0riNXwJO6xlw2VOGa8jJMePotUpe2qitDh/bcNs2fc+5K 4TsMBguBp1ZpwDhvLVIfuUAeymWceQSIy0Bsz4KLlcHrOXed6CexRQlpYM2G3lbC TjX+sPUanBwg3FHnfH1zsJq9NZWwLvV2MTQrHqIsvsdKILhza9Loygwk4ezxUblp h1Uc5YBsh0SA7PpeHIoUk97brewXROvL0VzKCMZKSFU4VLqWMD+g2NUz1TK099ga iOHwjjVFiGL66SELOed91zr7ljy/Z+HMRNBQ3JBmIuSyYS+QuzDFpwsVM7auWGCz 3I1KDp3vH+M97SA7VqWcnpPz66t3cMRpZ16BJ6Gig//zaFjEcSHTJTHQELznI4u0 k8awq7kwX5lFIkR0U4uG1xTC07+/CyCR2itGQ2tb7gqT54XsJPqOP8exiUtD71Pu E3TWsRkHTJc6L5Zg7XBMWZ/+8aA4IJ0MvMx0pOyK3szOP7jeaq60TuZiuB/5U75F FCsLFHdHCnrx7pyI9Px33UuHeaVi+GFcBhq9cYvvkncVDe9Vg9QokahZ3irdZ9Ao gtn+x7V/NkPIW7QrKESAM1eteZbFAxiKQWoRHCRavSDiB/BK5F/g1TB9KchxKdr/ +a7cjOs7JarzlukeQwatWw==dL8m
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Us