1. Forum
  2. Usenet
  3. LINUX.DEBIAN.DEVEL

  • Re: bits from the release team: are you ready to skate yet?

    From Johannes Schauer Marin Rodrigues@21:1/5 to All on Thu Oct 13 14:30:01 2022
    Quoting Paul Gevers (2022-10-13 10:00:42)
    Please also consider supporting the nodoc build profile. We are aware
    that nodoc is regularly used in a non-reproducible way (as intended,
    but with this consequence), so checking for correctness of this
    profile may be a bit harder. Ideally, using the profile would just
    make documentation binaries virtually empty.

    No. Ideally, using the nodoc profile would make documentation binaries not be emitted at all. This then also makes checking for correctness a lot easier because then all binary packages built with the nodoc profile will be bit-by-bit identical if your source package builds reproducibly.

    This can be achieved by adding this to the binary package stanza in d/control:

    Package: foo-doc
    Architecture: all
    Build-Profiles: <!nodoc>

    Then, in d/rules you can surround code that creates the foo-doc package with a conditional like this one:

    ifneq (,$(filter foo-doc,$(shell dh_listpackages)))
    # do stuff needed to build foo-doc
    endif

    Using dh_listpackages you also automatically catch other cases in which foo-doc might not get built other than the nodoc build profile being active, for example for an arch:any-only build.

    Also, do not forget to add the build dependencies necessary to build foo-doc to Build-Depends-Indep instead of keeping them in Build-Depends if your foo-doc package is Architecture:all.

    Thanks!

    cheers, josch
    --==============x61359629841089423=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmNIApsACgkQ8sulx4+9 g+EI0Q/+OdgmdYIRI1GXQz71xR1tJKcdzj+ju1bjp2lkwGBdeBqAhqNymgl0KToW VVJKszioPya3cW+TQ/90aBDgD4jgMsBxDelPnrUbeY6BtAxW2m4FpEZAyjoSBN58 vK8Slg6fL/ArTDoLvaCKkiRaGXSncaEUQ6oC8BhwnLSMx7zFVfsd8JY7HHo3vFZc ZmWE9cXGq+bHeEvYxqKhf7VxVyjSL7TdgRgvs/CGcEUCjKGMW87yZLig9c6piyfU HqJF2UvayEye2sja6XJAD3qMILmnVxNZJtXsnIxocNgbDW+O2zMV5z8Ja1goMroF igjtRE+E+seJWCqI6vocKHaxqTszZF6I0bULssqw1S13QgIxnhU8ijJxvXcVfIDM NBXiXR9rbtK3PuKdJpIde3oXaLJWQ14C/BafxhKKiU3qb6Hg7SNoynVrecAYbhPI zstn7E2RYjZl2zW4HQcm2BRyuVPqPx/ijfZLfRkIYdYOKJRvniKbUMAPbHd75M3M FuUI+oUIkxWZnShxf9P3bZR0TGr2CNyvhWTFATVvDRFNbVscU+A9bTIqje+q5JIt /zf/7+MOXJmv69d/O6azSxm4prmTAp8j3Zv4Q11ojfQJY0s9DBJD/2KRKGy7Jrtq 8dBe0UYcYYAZqBrPEcBa3KeAVqNV6im9cbcviak6z54GdAvlRaE=
    =qj2M
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to All on Thu Oct 13 17:30:02 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------a59nmvyM5kD2cvZhd1mme72a
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgam9zY2gsDQoNCk9uIDEzLTEwLTIwMjIgMTQ6MjAsIEpvaGFubmVzIFNjaGF1ZXIgTWFy aW4gUm9kcmlndWVzIHdyb3RlOg0KPiBRdW90aW5nIFBhdWwgR2V2ZXJzICgyMDIyLTEwLTEz IDEwOjAwOjQyKQ0KPj4gUGxlYXNlIGFsc28gY29uc2lkZXIgc3VwcG9ydGluZyB0aGUgbm9k b2MgYnVpbGQgcHJvZmlsZS4gV2UgYXJlIGF3YXJlDQo+PiB0aGF0IG5vZG9jIGlzIHJlZ3Vs YXJseSB1c2VkIGluIGEgbm9uLXJlcHJvZHVjaWJsZSB3YXkgKGFzIGludGVuZGVkLA0KPj4g YnV0IHdpdGggdGhpcyBjb25zZXF1ZW5jZSksIHNvIGNoZWNraW5nIGZvciBjb3JyZWN0bmVz cyBvZiB0aGlzDQo+PiBwcm9maWxlIG1heSBiZSBhIGJpdCBoYXJkZXIuIElkZWFsbHksIHVz aW5nIHRoZSBwcm9maWxlIHdvdWxkIGp1c3QNCj4+IG1ha2UgZG9jdW1lbnRhdGlvbiBiaW5h cmllcyB2aXJ0dWFsbHkgZW1wdHkuDQo+IA0KPiBOby4gSWRlYWxseSwgdXNpbmcgdGhlIG5v ZG9jIHByb2ZpbGUgd291bGQgbWFrZSBkb2N1bWVudGF0aW9uIGJpbmFyaWVzIG5vdCBiZQ0K PiBlbWl0dGVkIGF0IGFsbC4gVGhpcyB0aGVuIGFsc28gbWFrZXMgY2hlY2tpbmcgZm9yIGNv cnJlY3RuZXNzIGEgbG90IGVhc2llcg0KPiBiZWNhdXNlIHRoZW4gYWxsIGJpbmFyeSBwYWNr YWdlcyBidWlsdCB3aXRoIHRoZSBub2RvYyBwcm9maWxlIHdpbGwgYmUNCj4gYml0LWJ5LWJp dCBpZGVudGljYWwgaWYgeW91ciBzb3VyY2UgcGFja2FnZSBidWlsZHMgcmVwcm9kdWNpYmx5 Lg0KDQpQb2xpY3kgWzFdIHNheXMgc29tZXRoaW5nIGVsc2U6DQoiIiINClRoaXMgb3B0aW9u IGRvZXMgbm90IGNoYW5nZSB0aGUgc2V0IG9mIGJpbmFyeSBwYWNrYWdlcyBnZW5lcmF0ZWQg YnkgdGhlIA0Kc291cmNlIHBhY2thZ2UsIGJ1dCBkb2N1bWVudGF0aW9uLW9ubHkgYmluYXJ5 IHBhY2thZ2VzIG1heSBiZSBuZWFybHkgDQplbXB0eSB3aGVuIGJ1aWx0IHdpdGggdGhpcyBv cHRpb24uDQoiIiINCkkgc3VnZ2VzdCB5b3UgdHJ5IGFuZCBnZXQgcG9saWN5IHVwZGF0ZWQu DQoNClsxXSANCmh0dHBzOi8vd3d3LmRlYmlhbi5vcmcvZG9jL2RlYmlhbi1wb2xpY3kvY2gt c291cmNlLmh0bWwjZGViaWFuLXJ1bGVzLWFuZC1kZWItYnVpbGQtb3B0aW9ucw0KDQpQYXVs
    DQo=

    --------------a59nmvyM5kD2cvZhd1mme72a--

    -----BEGIN PGP SIGNATURE-----

    wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmNILfAFAwAAAAAACgkQnFyZ6wW9dQpg IQf/YMVEXJBFM/FmAC75M8fMcASv3GNTitQdJFYX9k1seFgVkI4WcFlKbpkPjDqNvmj4vjeopkeM w+tDUJuvWjpywkj9j7bfg0QhHTRfatF1ObV7w31EDCWd7L+j2tItsq5kYDtLlrlju4xRc2Hcg/ev w1ZTy9E/8y998zIgfh8hluTTnCll4RiK1jD0b2yjyDgT8slzweY5gkq5fEiPmxJWiHIobjDE75Ra sm7/2C4RisSjjHKCFtPYG9nMSczKnCn0gl8DMh8WNYRnViGJSYW5mACdYloHwx/CQGsVabTXAbb9 sUMdMLAx5lPy/z9RkqAcPuCHSrp3rJP3AuoEw8/Dfg==
    =EuEj
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Thu Oct 13 17:40:02 2022
    Hi Paul,

    Quoting Paul Gevers (2022-10-13 17:25:36)
    On 13-10-2022 14:20, Johannes Schauer Marin Rodrigues wrote:
    Quoting Paul Gevers (2022-10-13 10:00:42)
    Please also consider supporting the nodoc build profile. We are aware
    that nodoc is regularly used in a non-reproducible way (as intended,
    but with this consequence), so checking for correctness of this
    profile may be a bit harder. Ideally, using the profile would just
    make documentation binaries virtually empty.

    No. Ideally, using the nodoc profile would make documentation binaries not be
    emitted at all. This then also makes checking for correctness a lot easier because then all binary packages built with the nodoc profile will be bit-by-bit identical if your source package builds reproducibly.

    Policy [1] says something else:
    """
    This option does not change the set of binary packages generated by the source package, but documentation-only binary packages may be nearly
    empty when built with this option.
    """
    I suggest you try and get policy updated.

    [1] https://www.debian.org/doc/debian-policy/ch-source.html#debian-rules-and-deb-build-options

    hrm... maybe I misunderstand but I thought your initial mail talked about build profiles (aka DEB_BUILD_PROFILES) and not build options (aka DEB_BUILD_OPTIONS). The policy section you cite is about DEB_BUILD_OPTIONS and not about DEB_BUILD_PROFILES.

    As far as I know, build profiles are not documented in policy at all yet. The bug for that is https://bugs.debian.org/757760

    Am I missing something?

    Thanks!

    cheers, josch
    --==============G47101907668796180=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmNIL3UACgkQ8sulx4+9 g+HorxAAuJovhgZip0uSxnKvntYJHp+UBNSwwjAGfnOjFwywF3pLznbh/AjarTlL E86aQydGukwi7mqNgnniJCzbRAzoDGYdfXJztabTp7WBIkVmaKD9kL30BBOkSDwp fCi0LCPnJxZxLEmBSzvVZmAl/AeuuCWrZEywtBEVXXrvHJnUfHCT6C3sMIWatZBF gKpoX4leyOmRSU+14pCOepjfUjDtbYy4mhwSU4FKZ17SMSW0+0+MlMOJ6PWETEC0 LhThmRKXj9XUx1HhYIs+lGeJnE6Ygh0rEg13f32hPk7nxmhLzEGROuGdv3Kt0mkN kfqHleZlQxaUXwOsyNCypUou6axRpmtek0Mv96pqKSIjJphqkaeBY60kv2h7aCZN gJhoTP2MWDYgB3Qo1aKZMVQvKJnVV8sSVgrRJJ3UKjcR5j2j6h01+AoGGwoSHqfI KpCCWb6niuxj6gWUZ07cZ3zhapvroxpG2GkV34NxS1mhXQQ9vFv8uxEBL8cXcS2E 7MIEyI7gI9dU0GxKX5G+IgrsmdYSmpSu8/WIsfT10dfPfWUH+C+QALiQSUbeQCoZ okeTKnuo3X+SUJJUFSfm6i6aVpjFwf9jaJihGcvTB6aISdZ9H1VxEidZ6Qleyd5i fq0MK/b1//5dA5wKIIRNOxDVPaDNky4wKiYB8KedtkLce9eywWw=
    =q014
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to All on Thu Oct 13 18:00:01 2022
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------vQY0dKP1JSIesGGjxqn2CXGc
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGksDQoNCk9uIDEzLTEwLTIwMjIgMTc6MzIsIEpvaGFubmVzIFNjaGF1ZXIgTWFyaW4gUm9k cmlndWVzIHdyb3RlOg0KPiBocm0uLi4gbWF5YmUgSSBtaXN1bmRlcnN0YW5kIGJ1dCBJIHRo b3VnaHQgeW91ciBpbml0aWFsIG1haWwgdGFsa2VkIGFib3V0IGJ1aWxkDQo+IHByb2ZpbGVz IChha2EgREVCX0JVSUxEX1BST0ZJTEVTKSBhbmQgbm90IGJ1aWxkIG9wdGlvbnMgKGFrYQ0K PiBERUJfQlVJTERfT1BUSU9OUykuIFRoZSBwb2xpY3kgc2VjdGlvbiB5b3UgY2l0ZSBpcyBh Ym91dCBERUJfQlVJTERfT1BUSU9OUyBhbmQNCj4gbm90IGFib3V0IERFQl9CVUlMRF9QUk9G SUxFUy4NCj4gDQo+IEFzIGZhciBhcyBJIGtub3csIGJ1aWxkIHByb2ZpbGVzIGFyZSBub3Qg ZG9jdW1lbnRlZCBpbiBwb2xpY3kgYXQgYWxsIHlldC4gVGhlDQo+IGJ1ZyBmb3IgdGhhdCBp cyBodHRwczovL2J1Z3MuZGViaWFuLm9yZy83NTc3NjANCj4gDQo+IEFtIEkgbWlzc2luZyBz b21ldGhpbmc/DQoNCk9rLCBtYXliZSBJIG1peGVkIHRoaW5ncyB1cCBhIGJpdC4gSW4gdGhl IGVuZCwgd2hhdCBtYXR0ZXJzIGZvciB0aGUgDQpSZWxlYXNlIFRlYW0gaXMgdGhhdCB3ZSAo cG90ZW50aWFsbHk7IGluIHRoZSBmdXR1cmUpIHdhbnQgdG8gKnVzZSogDQo8IW5vZG9jPiBk ZWNsYXJlZCBCdWlsZC1EZXBlbmRlbmNpZXMgdG8gZmlndXJlIG91dCB3aGF0IHdlIGNvbnNp ZGVyIGtleSANCnBhY2thZ2VzLiBCdWlsZGluZyBkb2N1bWVudGF0aW9uIGlzIGltcG9ydGFu dCwgYnV0IGlmIHdlIGNhbiBjaG9vc2UgDQpiZXR3ZWVuIG5vdCBidWlsZGluZyBkb2N1bWVu dGF0aW9uIGFuZCBub3QgYnVpbGRpbmcgYXQgYWxsLCB3ZSBwcmVmZXIgDQp0aGUgZm9ybWVy IChleGNlcHRpb25zIGV4aXN0LCBhcyBhbHdheXMpLg0KDQpQYXVsDQo=

    --------------vQY0dKP1JSIesGGjxqn2CXGc--

    -----BEGIN PGP SIGNATURE-----

    wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmNIM5IFAwAAAAAACgkQnFyZ6wW9dQrw tggAk/Sn+epNU7THD0sJtAgRvldj0Hcf/2d2Dh41gASY7R+oOsPFIcWIbEJDx+LB6NlrlZMBdYWM qzc2JwEXLInCv4Cb0WHqPl7OhoTiLddHnqQJTvKuG6nVQAwzSAX7NPSB/zWyU9cqyuKd6aCdU6FX 4FnPWeq8qkwUF5lpQFBop4NQgMhUuEBBO+ZjTJurHs2w7Zkg19QZOHVp7otvAdsgq3RrT1kI6tAA 94gGlMMNoniHHD40ks7qRZthqHRVvOvkLUB0+EL07g6KloIB9O3LVc6ykfC0b6XLFT31KdXA+VHi cLOhpaHnZ5PSBJ4kl4rcG53IAJ7kD4Lk436pUcBfoA==
    =IHhl
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)