• Re: finally end single-person maintainership

    From Andreas Tille@21:1/5 to All on Sun Apr 7 16:10:01 2024
    Hi Wouter,

    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this mailinglist]

    OK, moving the discussion to debian-devel where it should belong.

    Debian packages need to be well maintained. In some cases, having
    multiple maintainers on a package improves the resulting quality of
    packages. But in some other cases, it does not; one example for this
    second case is my package "logtool", which I'm going to upload to fix #1066251 soon and for which by the simple act of doing that I will
    double the amount of uploads it's seen in the past five years (and the
    number of uploads in the past 10 can still be counted on the fingers of
    a single hand).

    This is not because it's not well maintained; it's because the package
    just *does not require* a lot of work to be kept up to date: upstream
    has not been active for over 20 years, but it still performs the job it
    was designed to do, as it was designed to, and I see no need to have it removed from the archive.

    What is your opinion about pushing logtool to Salsa?

    A second good example is my package "nbd".

    Which is maintained on Salsa which I personally consider nice.

    Similarly, the fact that a package has a "team" listed as its maintainer
    not in any wayimply that the team has more than zero members.

    ACK,

    If there are stupid barriers to helping people out by doing NMUs or
    taking over packages, then by all means let's break down those barriers.

    I was sometimes confronted with those barriers.

    But let's not try to "fix" a problem by introducing a rule that is, at
    best, affecting something only very weakly related to the problem that
    we are trying to solve.

    I would be happy to talk about rules that might help solving problems
    (as well as droping rules that are creating barriers).

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Sun Apr 7 16:50:02 2024
    Hi again,

    Am Sun, Apr 07, 2024 at 04:10:15PM +0200 schrieb Wouter Verhelst:

    What is your opinion about pushing logtool to Salsa?

    I did that as part of my latest upload :)

    https://salsa.debian.org/wouter/logtool

    Great.

    (I realize now that I forgot to add VCS headers... ah well, next time
    I'm sure)

    This happens. I was seeking Salsa before asking - if people do so
    they'll find it.

    And that's not good, and we should work on those.

    I just don't think that mandating team maintenance drops those barriers.

    Do you think that mandating Salsa is a sensible step in this direction?

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wouter Verhelst@21:1/5 to Andreas Tille on Sun Apr 7 16:20:01 2024
    On Sun, Apr 07, 2024 at 04:04:18PM +0200, Andreas Tille wrote:
    Hi Wouter,

    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this mailinglist]

    OK, moving the discussion to debian-devel where it should belong.

    Debian packages need to be well maintained. In some cases, having
    multiple maintainers on a package improves the resulting quality of packages. But in some other cases, it does not; one example for this
    second case is my package "logtool", which I'm going to upload to fix #1066251 soon and for which by the simple act of doing that I will
    double the amount of uploads it's seen in the past five years (and the number of uploads in the past 10 can still be counted on the fingers of
    a single hand).

    This is not because it's not well maintained; it's because the package
    just *does not require* a lot of work to be kept up to date: upstream
    has not been active for over 20 years, but it still performs the job it
    was designed to do, as it was designed to, and I see no need to have it removed from the archive.

    What is your opinion about pushing logtool to Salsa?

    I did that as part of my latest upload :)

    https://salsa.debian.org/wouter/logtool

    (I realize now that I forgot to add VCS headers... ah well, next time
    I'm sure)

    [...]
    If there are stupid barriers to helping people out by doing NMUs or
    taking over packages, then by all means let's break down those barriers.

    I was sometimes confronted with those barriers.

    And that's not good, and we should work on those.

    I just don't think that mandating team maintenance drops those barriers.

    --
    w@uter.{be,co.za}
    wouter@{grep.be,fosdem.org,debian.org}

    I will have a Tin-Actinium-Potassium mixture, thanks.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wookey@21:1/5 to Andreas Tille on Sun Apr 7 22:50:02 2024
    On 2024-04-07 16:04 +0200, Andreas Tille wrote:
    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this mailinglist]

    OK, moving the discussion to debian-devel where it should belong.

    Good plan.

    Debian packages need to be well maintained. In some cases, having
    multiple maintainers on a package improves the resulting quality of packages. But in some other cases, it does not;
    <snip example>

    I am all for reducing the barrier to doing NMUs. Let's look at
    that; it's ridiculous that we need to ask permission to help
    someone else with maintaining packages if it's clear that they can
    use it. Debian as a whole is a team, and we maintain the
    distribution together. So when I do an NMU for your stuff, I'm
    here to help. You should be happy when I'm offering to help; and
    that's even enshrined in the code of conduct:

    [...] offers for help should be seen in the context of our shared
    goal of improving Debian

    The fact that a package is listed as maintained by a person rather
    than a team does not mean the person is the only person who is
    responsible for that package. Debian as a whole is. And the
    release team is, in the context of deciding what happens with a
    package that has outstanding RC bugs. And the QA team is, when
    they run full-archive test rebuilds for new things. And our users
    are, when they file bugs.

    So I agree with everything Wouter said in this mail. I'm keen on
    changing the _culture_ to make it easier to just fix things.

    But Andreas seems to have taken this idea of 'we should make it easier
    to help people maintain packages', and conflated it with 'everyone has
    to use salsa' and 'everything should be team maintained'.

    I think that's a mistake, and I'm not a fan. Because so far as I can
    tell 'use salsa' actually means 'maintain your packages in git'. So
    far as I can see it is not possible to use our existing 'uscan, patch,
    sbuild, dupload' type workflows with Salsa. And that's why I'm not
    using it, and don't want to be made to use it.

    But I am _not_ against people helping me fix my stuff - I'm on the
    'just NMU my packages - I won't bite' list.

    As I said elsewhere:
    For me Salsa is just one more thing to deal with. It is useful if you
    need to share a package _before_ it is uploaded, but mostly it's just
    a load of extra stuff I didn't want or need (git, web-interfaces, certificates). And when I _do_ have to deal with it it takes a lot of
    extra time and effort I would prefer to have spent elsewhere.

    I have a workflow I am quite happy with (uscan, meld, quilt, sbuild,
    dupload). I've tried various fancy new things (salsa, git, dgit) but
    mostly I've found they got in the way (and delayed uploads/wasted
    time) rather than made my life easier, so I keep going back to the old
    way because it just works.

    I don't mind what other people do, but I worry that conversations like
    this seem to take the new thing as so self-evidently better that
    no-one can reasonably complain about them being made a
    requirement. Well, we don't all think it's better, and I wouldn't
    enjoy seeing 'packages must be in Salsa' made a requirement, for
    example.

    Dgit almost solves this problem but is backwards from my POV. It lets
    the git people pretend that they still use quilt and tarballs so the
    interface remains compatible (excellent). But it doesn't let the
    tarball people expose an interface to keep the git people happy (SFAIK
    - you can't do a dgit upload unless you have a git repo) which is a
    pity - I'd be fine doing doing 'dgit upload' instead of 'dupload' for compatibility purposes.

    If there are stupid barriers to helping people out by doing NMUs or
    taking over packages, then by all means let's break down those barriers.

    Right, but this is (or should be) quite separate from 'make everyone
    use git/salsa, i.e. stop them using the existing workflows'.

    If 'use salsa' means that when I do 'dupload' a copy ends up in salsa
    too, and when I do 'dget' it actually gets the dsc+tarball from salsa
    then that's fine. But if it means 'your package is a git repo, you
    have to use git to work with it', then no, I strongly object. I don't
    want to change all my workflows and tools.

    Perhaps there is some tool I am not aware of that can solve this
    problem? Like I say, dgit is so close, but exactly the opposite of
    what I need.

    But let's not try to "fix" a problem by introducing a rule that is, at best, affecting something only very weakly related to the problem that
    we are trying to solve.

    I would be happy to talk about rules that might help solving problems
    (as well as droping rules that are creating barriers).

    Me too. Please let us improve the culture around NMUs, collaboration and fixes without making people (OK, duffers like me) change all their tooling.

    I am all for more Matrix over IRC though - that's a genuine
    improvement (and they are easy to bridge).

    Wookey
    --
    Principal hats: Debian, Wookware, ARM
    http://wookware.org/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEER4nvI8Pe/wVWh5yq+4YyUahvnkcFAmYTBTUACgkQ+4YyUahv nkcY5A/9HGddHtvlK/DuBsT3OyMS0hJlpRmMcsmsnCDiTF2cimeHtHml9r4txYBa 9hViitOWOjliF7u1Xkl26TtyJfLtLAE23uvg81nNotYHriB1HR1rE4rEiH9BCN8D xC19fTzM6nKVbUDUwszUAqPMTySk1WtRVd0KnKgIGeeydLPkl8ZC2P8q9h6Z7qSM fIHfxvG0/Dlb5EoDgtYB8BWKcWswXVL5EG7SLYcNBq0serpjeeGM8PmL4wiJdZ2R q52zVGUH3w6eck9suentuYtQ/8SdOh158hZysBzO9HMcvGgld44+zLj9IRUT3aLd 7X33AufutULQOrt5CrbICTLE+8sEAhnQgbjW0uVc5GOBenixW2RJiVG3+gxO6M0I vPwpRDoLXZTEB95g2kRuiOe/Oh5Bj8l3/vS3JwTUaXn+so+eRN6hQ6pFe0je/Cw6 qhDbRrJ6p82PNi40P4bj/ge72hwJIi+zgdWMNAT2JclTGxM/qqG320WdgzKZrSqM JdAxHNTjyLVZLOtp5hHHJWmlhjb9cufUjmYxT0VUGtQtfxmykzjMqTzo0f/qjllu Rn6GUqMBL1sCgMU5/q0NeL3GTwBXjWQsrwrP1yUyzxoo9AanU2awSUgYEtzBlLq7 gyMQv9RVmLl+DuVBGxKjfElJaYrlLxAre58GovBN6be9wdjk7/w=
    =B9Ok
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to Wookey on Sun Apr 7 23:10:02 2024
    On Apr 07, Wookey <wookey@wookware.org> wrote:

    I think that's a mistake, and I'm not a fan. Because so far as I can
    tell 'use salsa' actually means 'maintain your packages in git'. So
    far as I can see it is not possible to use our existing 'uscan, patch, sbuild, dupload' type workflows with Salsa. And that's why I'm not
    using it, and don't want to be made to use it.
    I started using git quite late and spent really a lot of time trying to understand how it fit in my quilt workflow (I loved quilt), but in the
    end I figured out that it maps well to a patch unapplied gbp-like
    workflow:

    If no changes to the packaging are needed then it's just:

    uscan --rename
    gbp import-orig ../package_*.tar.xz
    dch -v $(cat VERSION)-1 'New upstream release.'
    git add debian/changelog
    git commit
    git tag ...
    dpkg-source --build .
    pbuilder build $(ls -1tr ../*.dsc | tail -1)
    dupload ...

    Check the rpki-client repository for an example.

    (Using gbp is not mandatory, but it allows to import with just one
    command the upstream tar archive or git tree reference.)

    And now having the full git history of my packages is invaluable when
    trying to understand what has changed and when.

    --
    ciao,
    Marco

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZhMK4gAKCRDLPsM64d7X gQKyAP45Ls3WGBfwWtJIJ/KBv2Rjjl+1ucNpQNv7LPtRY6h/OQD/cAk/vHuuWoqy mFDqGVrucnpJUkdBdJ5c3OdCpL2u9Ac=
    =9qXc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to Andreas Tille on Sun Apr 7 23:20:02 2024
    On Sun, Apr 07, 2024 at 04:04:18PM +0200, Andreas Tille wrote:
    Hi Wouter,

    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this mailinglist]

    OK, moving the discussion to debian-devel where it should belong.

    Debian packages need to be well maintained. In some cases, having
    multiple maintainers on a package improves the resulting quality of packages. But in some other cases, it does not; one example for this
    second case is my package "logtool", which I'm going to upload to fix #1066251 soon and for which by the simple act of doing that I will
    double the amount of uploads it's seen in the past five years (and the number of uploads in the past 10 can still be counted on the fingers of
    a single hand).

    This is not because it's not well maintained; it's because the package
    just *does not require* a lot of work to be kept up to date: upstream
    has not been active for over 20 years, but it still performs the job it
    was designed to do, as it was designed to, and I see no need to have it removed from the archive.

    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is just useless bureaucracy.

    Forcing people to waste time creating a salsa project, a git repository etc.
    to maintain what is effectively a debian/rules that can be summarised by "dh:" does not serve any purpose. 'git log' is just redundant with debian/changelog. If you want the source of a package, 'apt-get source' should suffice.

    Most of the actual packager work is not reflected in the source package. Testing that the package integrates well with the rest of Debian,
    replying to bug reports, communicating with upstream etc.
    The more we waste time with bureaucracy the less we have time for actual
    work.

    For some of my packages I have a tool that generates the debian directory
    from the upstream metadata, so all packages debian/ are similar looking. Storing the output of this tool in separate git repo for each packages would be
    a absolute waste of resources.

    Also on a large timescale, our infrastructure change. We move from one VCS to another, to one service to another etc. and then repository need to be moved. It takes time.

    I maintain a number of packages. Some are on Salsa, some are not, some are team maintained, some are not, some use dh, some use debhelper etc.
    This is a matter of efficiency, one size does not fit all.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEQgKOpASi6dgKxFMUjw58K0Ui44cFAmYTDBgACgkQjw58K0Ui 44eRNw//Su3pWxj43JfNZeUUv6UTUnmj8r+VdcfkDqTR+2QnW/qJ2QiRnHQTyUFO Qdm3hWlVoksjUAA6SZn4+/ItpZfbmQ99YnhqKQ84VILBw+1G01Gf7cMqDnhnW9g6 TjeyjNPjR4BJicT4vPybeWbZWyAgV/x7mrwJdj4nKsOFMjGdxpx40G+vj3oy/+IY y1DeUbm+RctSzOTtjeVcI6cfVXkt2KBgpxYL2drXumJ7zUdvWuA3UpqbDheM3/4w T6l9a/5EFQhr5Ut7SA30RNt+QAa8RP4KfbkVm/Nfoj3IBrZrJm1PDeDca1TDVFi4 8sqeI0v6W5KFteqGdKrTiZt2RKshVsph8lFFV+49G4gx5MkcFvoQ5MBSBQ7mwi8l rK+itnqXt+VgsI+OBtl7xi2Dal54iSc1ajdPpnA+U5EVSVXZ78MZY1JnxNLZp69V ryVHxDGQ6xeAQC34H5u+/+JcDpUAqHCv12dW3gKBTk8drIk17JNpLrehH8cCP2X5 4qQDjGmJgWdJCpyFFY3Cq6c67nYN5xGoUQ+5RIPjcesfNtkjH9StY5/F14Vp9AE3 0y9gZFamfZGUDrEoApTNsPQA3UqOsPdfN3ZTtOHsI014j9dve/SAP+AAzfdQlGys Bv20b23jeSUfsTzI/x4ztcyPS70RRQ2SOeym1d8psmK9kKVRz2Y=
    =LRr2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gioele Barabucci@21:1/5 to Bill Allombert on Sun Apr 7 23:40:01 2024
    On 07/04/24 23:11, Bill Allombert wrote:
    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is
    just useless bureaucracy.

    As a contributor, having a package on salsa is extremely useful, far
    from "useless".

    By clicking on "fork" (or running the equivalent CLI command) I get a
    copy of the package, with all its history, a Debian-specific CI, the
    ability to work on different features or bug fixes at the same time and independently from one another, the possibility to send a merge request,
    that can be annotate line-by-line by all other Debian contributors.

    A package with a repo on salsa is sending a clean message: go away, I
    don't want your contribution.

    Most of the actual packager work is not reflected in the source
    package. Testing that the package integrates well with the rest of
    Debian,

    That time is better invested writing autopkgtests and letting Salsa-CI
    and debci run the tests. Having autopkgtests also lowers the barrier to contribute because the contributors can now be more confident of the
    fact that their changes did not cause any issue.

    replying to bug reports,

    Not affected by having a repo on salsa.

    communicating with upstream etc.

    Upstream that in 99% of the cases uses a git repo.

    I maintain a number of packages. Some are on Salsa, some are not, some are team
    maintained, some are not, some use dh, some use debhelper etc.
    This is a matter of efficiency, one size does not fit all.

    The lack of a standardized sanctioned workflow is the main reason
    (together with unresponsive maintainers) why big cross-distro changes
    are nigh impossible to carry out. I would not classify it as a big
    advantage.

    Regards,

    --
    Gioele Barabucci

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Mon Apr 8 04:00:01 2024
    Hi,

    Quoting Wookey (2024-04-07 22:42:34)
    On 2024-04-07 16:04 +0200, Andreas Tille wrote:
    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this mailinglist]
    OK, moving the discussion to debian-devel where it should belong.
    Good plan.

    finally! Thank you!! <3

    My personal take on the general discussion: can we first agree on a non-mandatory packaging workflow before we talk about reducing strong package ownership? Or at least add a way for a package to declare the used workflow? I'm not feeling comfortable doing more than opening merge requests or sending patches via the BTS to any package (even if the package is in the low threshold nmu list) without this knowledge.

    The fact that a package is listed as maintained by a person rather than a team does not mean the person is the only person who is responsible for that package. Debian as a whole is. And the release team is, in the context of deciding what happens with a package that has outstanding RC bugs. And the QA team is, when they run full-archive test rebuilds for new things. And our users are, when they file bugs.

    So I agree with everything Wouter said in this mail. I'm keen on
    changing the _culture_ to make it easier to just fix things.

    But Andreas seems to have taken this idea of 'we should make it easier
    to help people maintain packages', and conflated it with 'everyone has
    to use salsa' and 'everything should be team maintained'.

    I think that's a mistake, and I'm not a fan. Because so far as I can
    tell 'use salsa' actually means 'maintain your packages in git'. So
    far as I can see it is not possible to use our existing 'uscan, patch, sbuild, dupload' type workflows with Salsa. And that's why I'm not
    using it, and don't want to be made to use it.

    But I am _not_ against people helping me fix my stuff - I'm on the
    'just NMU my packages - I won't bite' list.

    As I said elsewhere:
    For me Salsa is just one more thing to deal with. It is useful if you
    need to share a package _before_ it is uploaded, but mostly it's just
    a load of extra stuff I didn't want or need (git, web-interfaces, certificates). And when I _do_ have to deal with it it takes a lot of
    extra time and effort I would prefer to have spent elsewhere.

    I have a workflow I am quite happy with (uscan, meld, quilt, sbuild, dupload). I've tried various fancy new things (salsa, git, dgit) but
    mostly I've found they got in the way (and delayed uploads/wasted
    time) rather than made my life easier, so I keep going back to the old
    way because it just works.

    I don't mind what other people do, but I worry that conversations like
    this seem to take the new thing as so self-evidently better that
    no-one can reasonably complain about them being made a
    requirement. Well, we don't all think it's better, and I wouldn't
    enjoy seeing 'packages must be in Salsa' made a requirement, for
    example.

    Dgit almost solves this problem but is backwards from my POV. It lets
    the git people pretend that they still use quilt and tarballs so the interface remains compatible (excellent). But it doesn't let the
    tarball people expose an interface to keep the git people happy (SFAIK - you can't do a dgit upload unless you have a git repo) which is a pity - I'd be fine doing doing 'dgit upload' instead of 'dupload' for compatibility purposes.

    Personally, I cannot imagine myself maintaining my packages without them being in a VCS like git. I want to be able to "git log" a file to see which changes touched it. I want to be able to "git blame" a file to see which change modified a certain line. I want to "git revert" changes or "git rebase" local feature branches. Even without any contributors, I don't mind the overhead of using git for packaging as it helps *me* in the end.

    Then there is salsa... I have mixed feelings about it. On the one hand, it's this big beast with tons of javascript and apparently we are not even dog-fooding gitlab as packaged in Debian to overseves. I'd like our infrastructure to be based on the things we offer in our distro. And it's just so much javascript... I cannot open a build log in the browser without it just vanishing before my eyes with an error message in red at the top. My computer is slow (ARM Cortex A53) and this does not play well with it. I wish there was a way to interact with it from my terminal instead of having to click on buttons in a very slow web interface.

    On the other hand, salsa has enabled me to have confidence in what I upload as I haven't had before. I really like that I can "git push" my changes and then another computer can tell me whether autopkgtest, piuparts, reprotest and friends are happy. I could set all this up locally but due to the limitations of my machine I like that I can just trigger another computer to do this work for me while I use that time to work on other stuff. I like that salsa gives me a lot of confidence in my package actually not being half broken before I "dput" it into the archive. I also like to receive contributions through salsa which (in contrast to contributions via the BTS) will show me via a green icon that the change does not break something. In contrast to email communication on the BTS, merge requests and issues on salsa allow me to easily amend or change existing messages, automatically hide resolved conversations not only on my end but also for other people viewing a merge request, have in-line comments on a code diff which I know not only my own special e-mail client will display that way but will look the same for other people in their browser. I can click links to cross-referenced issues, receive automatic improvements from jelmer's janitor or manage several experiments that I have in multiple branches not just locally for me but publicly for everybody to see and comment upon and then others see those comments organized for each of these merge requests. Using just the BTS does not allow this level of collaboration. It doesn't integrate this tightly into the code itself and does not display the information that clearly.

    In summary, I understand people for whom having their packaging in git is "self-evidently better". I really struggle to see the benefits of the "uscan, meld, quilt, sbuild, dupload" workflow you describe over one that involves a local git repository. It just helps me so much to have things in git. I don't want to tell you that your approach is wrong. It clearly is working fine for you. But I have just too often thought "drats, I wish I now could look up what changed when in which file" that having everything in git is a no-brainer for me and maybe I was able to motivate you a bit to give git another try. It really revolutionized how I work with files on my computer, including Debian packaging. As for salsa: I understand the ups and downs I think. I like to use it but I've also cursed at it enough times to understand the dislike. But I think the benefits outweigh the costs for me, so I ended up using it. I'm not feeling entirely comfortable with making its use mandatory.

    Thanks!

    cheers, josch
    --==============t45443657331809115=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmYTTgcACgkQ8sulx4+9 g+EPzg/+LNnBAzCrHFqFJw53rdsL0cu/WLLmU8wZamMUJeTRbCYL+Jvf0ov4Pt49 0TaE5LvcsV9Fr9PCI2+XBzELM5O8YQM3pdkw2iWSPmhNH/UiLPrPq3KdnNReoTNR u+V/sm8mngTxIHYhxPLu7sQLb6rNZsnm7I0hloE8sRij5rYvV+huzBNj7Q1vhUzp /E9BYUjG6fByJu62ep+gpvYsi85iauwpp2WV68FWIWgJyFY+D2STRcICF8gdPfWi lcPUlYWwP1kFyahkOoJi7kBtwWq/SzAqUwP2jm1lajEc+JNZNaVNrRvmFVEXQAZB KfD9W8EOT6NfZ1O+ODfcYgYSpQ4kaHmzu3OHizgmtctONl3fWDQ9IrJ+gp6w20XN YjGwH+5WHd1DdMEKlITkERXsfwniWS4aU1Ohn+PBo6veTKxpuhbbaXMzQjHYmyW+ OInYPIR4Ox0CBuVfIbI8fBG3zU6/Skht9hIsG+xdINRzDAnCnS5vVxFpVHTkXD0o RpiGKC9Asrs900XyyzYymhI61XENUgYYaYtmPx6o57ZSbFvxBSG499kaRrrY3nKD hCA+yhcmZCBWmwGNdAXzJ5ln7ZmNTpI952zWS2dDXQ5daxYY5gb9VMT63FmeFD0e TjaqDFLC5GfzZck2IKXvkqztRDEficuumx3gO2mIen8Ljl8rtMU=
    =FLas
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Undef@21:1/5 to All on Mon Apr 8 08:00:02 2024
    --63d30c4ba3104090ac1814dffef1ca6c
    Content-Type: text/plain


    Then there is salsa... I have mixed feelings about it. On the one hand, it's this big beast with tons of javascript and apparently we are not even dog-fooding gitlab as packaged in Debian to overseves. I'd like our infrastructure to be based on the things we offer in our distro. And it's just
    so much javascript... I cannot open a build log in the browser without it just
    vanishing before my eyes with an error message in red at the top. My computer is slow (ARM Cortex A53) and this does not play well with it. I wish there was
    a way to interact with it from my terminal instead of having to click on buttons in a very slow web interface.

    We actually have `glab`[0] packaged in Debian Sid, Trixie and Bookworm-backports now, so there is a relatively easy to use way of accessing it from the CLI.

    [0] https://packages.debian.org/sid/glab
    --63d30c4ba3104090ac1814dffef1ca6c
    Content-Type: text/html
    Content-Transfer-Encoding: quoted-printable

    <!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div><br></div><blockquote type="cite" id="qt" style=""><div>Then there is salsa... I have mixed feelings about it. On the one hand,
    it's<br></div><div>this big beast with tons of javascript and apparently we are not even<br></div><div>dog-fooding gitlab as packaged in Debian to overseves. I'd like our<br></div><div>infrastructure to be based on the things we offer in our distro. And
    it's just<br></div><div>so much javascript...&nbsp; I cannot open a build log in the browser without it just<br></div><div>vanishing before my eyes with an error message in red at the top. My computer<br></div><div>is slow (ARM Cortex A53) and this does
    not play well with it. I wish there was<br></div><div>a way to interact with it from my terminal instead of having to click on<br></div><div>buttons in a very slow web interface.<br></div></blockquote><div><br></div><div>We actually have `glab`[0]
    packaged in Debian Sid, Trixie and Bookworm-backports now, so there is a relatively easy to use way of accessing it from the CLI.<br></div><div><br></div><div>[0]&nbsp;<a href="https://packages.debian.org/sid/glab">https://packages.debian.org/sid/glab</a>
    <br></div></body></html>
    --63d30c4ba3104090ac1814dffef1ca6c--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Steve McIntyre@21:1/5 to Bill Alombert on Mon Apr 8 12:30:01 2024
    Bill Alombert wrote:
    On Sun, Apr 07, 2024 at 04:04:18PM +0200, Andreas Tille wrote:
    Hi Wouter,

    Am Sun, Apr 07, 2024 at 03:31:43PM +0200 schrieb Wouter Verhelst:
    [Feel free to quote any part of this email which I wrote outside of this >> > mailinglist]

    OK, moving the discussion to debian-devel where it should belong.

    Debian packages need to be well maintained. In some cases, having
    multiple maintainers on a package improves the resulting quality of
    packages. But in some other cases, it does not; one example for this
    second case is my package "logtool", which I'm going to upload to fix
    #1066251 soon and for which by the simple act of doing that I will
    double the amount of uploads it's seen in the past five years (and the
    number of uploads in the past 10 can still be counted on the fingers of
    a single hand).

    This is not because it's not well maintained; it's because the package
    just *does not require* a lot of work to be kept up to date: upstream
    has not been active for over 20 years, but it still performs the job it
    was designed to do, as it was designed to, and I see no need to have it
    removed from the archive.

    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is
    just useless bureaucracy.

    So that's OK for *you* only in this case. Now consioder for the
    project as a whole. Every package that differs from the norm is more
    effort for anybody else to maintain/bugfix/NMU/whatever. We have a
    history of this (in so many ways), and it's a significant drain.
    Please consider the bigger picture.

    --
    Steve McIntyre, Cambridge, UK. steve@einval.com Can't keep my eyes from the circling sky,
    Tongue-tied & twisted, Just an earth-bound misfit, I...

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Wookey on Mon Apr 8 14:50:01 2024
    Hi,

    On 4/8/24 05:42, Wookey wrote:

    I don't mind what other people do, but I worry that conversations like
    this seem to take the new thing as so self-evidently better that
    no-one can reasonably complain about them being made a
    requirement. Well, we don't all think it's better, and I wouldn't
    enjoy seeing 'packages must be in Salsa' made a requirement, for
    example.

    What people seem to be missing is that the Debian archive *is* a version control system.

    Stacking another VCS on top of it leads to a lot of annoying artifacts,
    because there is no sensible metadata mapping between them -- what is
    metadata in Debian becomes data in git, and another metadata layer is
    added on top of that, and what is data in Debian must be run through a
    filter to make it accessible to git for efficient handling, so part of
    it gets converted to metadata.

    The result is... not ideal, because the resulting workflow is neither a
    Debian nor a git workflow, but a mix that requires users to be aware of
    the state of two systems at the same time. Testing a package requires me
    to commit everything into git first, so I have to remember to squash all
    these commits later.

    As long as there is no clear benefit, for example in a team maintained
    package where multiple team members regularly collaborate on pre-release
    states without uploading a Debian package in between, it mostly adds to
    my workload -- especially if no upload is made for a change, whoever
    does the upload will need to remember to review all of these changes. In
    the context of the xz debate, I'd expect this to increase, not decrease
    attack surface.

    The web interface presented by salsa also does not have the necessary data<->metadata filters to provide an actual insight into what is really happening in the repository.

    Because metadata is stored as data, building such filters would also be nontrivial. The existing gbp repositories pretty much all use a merge
    commit to integrate a new upstream version, but do not update
    debian/changelog in the same commit, so any tool analyzing this commit
    would see all the upstream changes for the new version as Debian
    specific changes against the old. Practically the only commits that are
    safe to analyze in this way are the tagged releases.

    What would make sense would be a git based format that is designed
    around the requirements for package maintenance, and where internal
    consistency can be enforced by upload hooks -- for example by storing
    metadata out-of-band in a separate branch.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Simon Richter on Mon Apr 8 15:00:01 2024
    On Mon, Apr 08, 2024 at 09:44:55PM +0900, Simon Richter wrote:
    I don't mind what other people do, but I worry that conversations like
    this seem to take the new thing as so self-evidently better that
    no-one can reasonably complain about them being made a
    requirement. Well, we don't all think it's better, and I wouldn't
    enjoy seeing 'packages must be in Salsa' made a requirement, for
    example.

    What people seem to be missing is that the Debian archive *is* a version control system.
    We are not missing it.

    Stacking another VCS on top of it leads to a lot of annoying artifacts, because there is no sensible metadata mapping between them -- what is metadata in Debian becomes data in git, and another metadata layer is added on top of that, and what is data in Debian must be run through a filter to make it accessible to git for efficient handling, so part of it gets converted to metadata.

    The result is... not ideal, because the resulting workflow is neither a Debian nor a git workflow, but a mix that requires users to be aware of the state of two systems at the same time.
    We know, and we are sad about this, but we see the benefits it brings so
    we tolerate the rough edges and data duplication and hope for a better
    future when the workflows are improved.
    Some of us make proposals for better workflows from time to time but this
    is Debian.

    Testing a package requires me to commit everything into git first, so I
    have to remember to squash all these commits later.\
    At least gbp doesn't require anything like this (unless your "testing"
    requires Salsa CI which is another story).

    What would make sense would be a git based format that is designed around
    the requirements for package maintenance, and where internal consistency can be enforced by upload hooks -- for example by storing metadata out-of-band
    in a separate branch.
    We know. It was rejected as Debian doesn't want to store random data as a
    part of a repo history because of DFSG, or something like that.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmYT6J0tFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh AdMQAIcoMjuvH/UHb0OUKjtOqXt3E4nomMv6KYahvRRoawo6ECoEcfY3M9WIPiQ5 zYC60TxWApXSLSqksBb5938FQz9b9GS0IwZ3w2S6d6YYUbI/MwkgP9HaR7VG4JZo sIKl2ePZxgQNJILtQa6c/V7tUAAedjxspSau1AXLXuiprCJk7onUKPrsaxOrJecP UPOfEsw2s5PC1ghoMOpRUGh1Tw18sU03TyY9U3C5yPDE5nnyG+uhIjx9bxUtgsQc wPLY1wrkz0O1WtmULbUsxoD7WA0sUEu91WQVAfm/UOQZPQ57ZzVi6L29YoMcdToW Ah+eXleuBoErmVWD3EiajHtoqFlrf5klIgMEnA8nb1lYT9DIuMRG6XkE0hgFCKJo wg3xxRNxfLinWnwxkOZCt6Tl2A+CCsguPuvNM1yN3Nhr4mI10AMnFJ9bhjE9VL7+ u5Ilo8+jjKrL+JYS4NW8cNNtCn2y+rFLlllSxogARC2cJsvsIkEBSZfUxlHBZQvf z8BNjmdnEkEsNWK7fTxSCJ+sJqc725t8t2BBKsVMKHhmAUg5poffRnZPJiNMrUbO VNKbSBctBY1b2Jx7RrWJVtJi/MaqOBBbmANaltZU0k19Jq7u1lGCwjcOBY5Qp7p/ 4d+1yzxsyAnVmW2Sd59FDoHoqKLbQQmOlinGx7s7/wEtw2b0
    =cmcr
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Julien Puydt on Mon Apr 8 16:10:01 2024
    Hi Julien,

    On 4/8/24 22:45, Julien Puydt wrote:

    I only use salsa's git. That begs two questions:
    - What do I miss by not using the web interface?
    - What does that web interface have that people don't like?

    It's a normal GitLab install. For anything that is a normal software
    project (like dpkg), you get all the features of a normal forge.

    But: forges do not map packaging workflows, so in practice you can only
    browse the source code.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Bill Allombert on Tue Apr 9 00:10:01 2024
    On Mon, 8 Apr 2024 at 22:49, Bill Allombert <ballombe@debian.org> wrote:

    Le Sun, Apr 07, 2024 at 11:37:47PM +0200, Gioele Barabucci a écrit :
    On 07/04/24 23:11, Bill Allombert wrote:
    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is
    just useless bureaucracy.

    As a contributor, having a package on salsa is extremely useful, far from "useless".

    By clicking on "fork" (or running the equivalent CLI command) I get a copy of the package, with all its history, a Debian-specific CI, the ability to work on different features or bug fixes at the same time and independently from one another, the possibility to send a merge request, that can be annotate line-by-line by all other Debian contributors.

    A package with a repo on salsa is sending a clean message: go away, I don't want your contribution.

    I suppose you meant _without_. The message is not "your contribution is
    not wanted" but rather "your contribution is not needed because there
    nothing to do".

    They are hundred of other packages where your contribution would
    make a difference.

    Simple packages need someone who is responsible and responsive for them
    in the long run and know there history much more than needing sporadic contributions.

    ...right up until the point where that "bus factor of 1" moves
    on/changes priorities/changes job/etc and the package is abandoned.
    Fortunately that never happens, though!

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Mon Apr 8 23:50:01 2024
    Le Sun, Apr 07, 2024 at 11:37:47PM +0200, Gioele Barabucci a crit :
    On 07/04/24 23:11, Bill Allombert wrote:
    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is
    just useless bureaucracy.

    As a contributor, having a package on salsa is extremely useful, far from "useless".

    By clicking on "fork" (or running the equivalent CLI command) I get a copy
    of the package, with all its history, a Debian-specific CI, the ability to work on different features or bug fixes at the same time and independently from one another, the possibility to send a merge request, that can be annotate line-by-line by all other Debian contributors.

    A package with a repo on salsa is sending a clean message: go away, I don't want your contribution.

    I suppose you meant _without_. The message is not "your contribution is
    not wanted" but rather "your contribution is not needed because there
    nothing to do".

    They are hundred of other packages where your contribution would
    make a difference.

    Simple packages need someone who is responsible and responsive for them
    in the long run and know there history much more than needing sporadic contributions.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Joerg Jaspert@21:1/5 to Luca Boccassi on Tue Apr 9 00:30:01 2024
    On 17194 March 1977, Luca Boccassi wrote:
    Simple packages need someone who is responsible and responsive for
    them
    in the long run and know there history much more than needing
    sporadic
    contributions.
    ...right up until the point where that "bus factor of 1" moves
    on/changes priorities/changes job/etc and the package is abandoned. Fortunately that never happens, though!

    And interestingly, this does NOT need required team maintainance. It
    does NOT need "package must be in git". It does NOT need "package must
    be on salsa".

    It "only" needs good procedures in taking over maintainership of
    abandoned packages. And hey, for clearly abandoned packages, we have
    that, and it works.


    The problem is with people who are *not* clearly gone. Who are around
    and block changes to "my package, my way, i ignore all outside wishes".
    Or who are around and work against project wishes, in some way. And no
    amount of "force a team on everyone" and no amount of "you must use
    salsa" will solve this problem. While creating problems elsewhere.

    --
    bye, Joerg

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Tue Apr 9 00:20:01 2024
    Quoting Bill Allombert (2024-04-08 23:49:05)
    Le Sun, Apr 07, 2024 at 11:37:47PM +0200, Gioele Barabucci a écrit :
    On 07/04/24 23:11, Bill Allombert wrote:
    What is your opinion about pushing logtool to Salsa?

    Not speaking for logtool obviously, but maintaining simple packages on salsa is
    just useless bureaucracy.

    As a contributor, having a package on salsa is extremely useful, far from "useless".

    By clicking on "fork" (or running the equivalent CLI command) I get a copy of the package, with all its history, a Debian-specific CI, the ability to work on different features or bug fixes at the same time and independently from one another, the possibility to send a merge request, that can be annotate line-by-line by all other Debian contributors.

    A package with a repo on salsa is sending a clean message: go away, I don't want your contribution.

    I suppose you meant _without_. The message is not "your contribution is
    not wanted" but rather "your contribution is not needed because there
    nothing to do".

    They are hundred of other packages where your contribution would
    make a difference.

    Simple packages need someone who is responsible and responsive for them
    in the long run and know there history much more than needing sporadic contributions.

    we need both. Domain specific knowledge is clearly very important and I'm not trying to argue against it. But doing packaging in a way such that it becomes easy for others to contribute is *also* every important. As the maintainer of a package with expert knowledge of it you might think that there is nothing to do but you while you are the expert for that package, you might not be the expert on topics like cross building, reproducible builds, multiarch, build profiles, merged-/usr, build hardening and many other topics which span the whole distribution. There are people who are heavily invested in these topics and who will want to touch very many packages to fix things. It should be made easy for them to make these contributions without them bit-rotting as a patch in the BTS for months or years. I'm not saying that *you* let these contributions bit-rot. This is meant as a general argument for making it easier to make large-scale changes to packages. Diversity in our packaging styles and strong package ownership sometimes work contrary to issues affecting very many packages across our distro.

    That you, as the expert on your specific package think that there is nothing to do, is not necessarily true in the larger scope of maintaining the distribution.

    Thanks!

    cheers, josch
    --==============P93763949918595008=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmYUbQ8ACgkQ8sulx4+9 g+HiFw/+KbDU60+M0O31O2SduDZinyLMnj3loABGmedq3esHJUd/hzYZwy91k4zM pqG9h6AjuuTq+wMbuNmXKmbaz08N9ZRch4UKpVQlkAxnBoHSo0zIetuAYpCTG456 7gx0dsqXNqruw5AkzezxwWZjHcDGdwyGvRak4D/eZT52jOBY9SzKBdpjBjgEZLYz 9hga2hHFbUHFmaOx4fQa+dE2m3PF7MIJwMm/c9z1olTNCTaK7L8BK5y+7JB7pTua NmGQuIGzcmB4TwcvTxDq29nolfhWXWrfe31rpPLXQZLwHQihCKTTTF7hhZLgKhq+ OBaHO9w/BJB4rgcJQ/t6wX6EzFM5sQC3naHF7u/85A3o+ZDgfUPxPIIbI9Cz7fh0 jS423WnUmwuA8lNkd/IS6SS8MCfXW1erCYJWhIXxesbceHJKbgC7R6M3us1Aw2tS vYVryEb3ieuJXNoOD3abuQLaegLgLYMspuE3ziuqEjDFSYBHV1GNBZfKKI/vFKh5 Mw6oJ16L58l8XE+SMncDebCXpB2p4rrHC4aUpk86tRh9fJCPKzIymzusRbfu37mL DeBIzNzmRWCk5B2M4D9s8g+9ugAP1WXkSkzWqu0jtfc3fDecX3EWYogjDSzgJvW7 +IXe+6NOhFxNy7+K/gTEdqgj6+vSgSyJJ8AuChPqF59Hbt8HTho=
    =coIg
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Joerg Jaspert on Tue Apr 9 01:20:01 2024
    On Mon, 8 Apr 2024 at 23:23, Joerg Jaspert <joerg@debian.org> wrote:

    On 17194 March 1977, Luca Boccassi wrote:
    Simple packages need someone who is responsible and responsive for
    them
    in the long run and know there history much more than needing
    sporadic
    contributions.
    ...right up until the point where that "bus factor of 1" moves
    on/changes priorities/changes job/etc and the package is abandoned. Fortunately that never happens, though!

    And interestingly, this does NOT need required team maintainance. It
    does NOT need "package must be in git". It does NOT need "package must
    be on salsa".

    True, they are not strictly needed - however, all of those things do
    make everything orders of magnitude easier and more streamlined for
    most contributors, especially new ones.

    It "only" needs good procedures in taking over maintainership of
    abandoned packages. And hey, for clearly abandoned packages, we have
    that, and it works.

    And yet abandoned packages are still a thing, and there is still an
    enormous amount of bureaucracy in the way.

    The problem is with people who are *not* clearly gone. Who are around
    and block changes to "my package, my way, i ignore all outside wishes".
    Or who are around and work against project wishes, in some way. And no
    amount of "force a team on everyone" and no amount of "you must use
    salsa" will solve this problem. While creating problems elsewhere.

    I don't know, it seems counter-intuitive to me to suggest that "team maintenance" and "my package, my way" are unrelated.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Tue Apr 9 16:10:01 2024
    Hi Julien,

    Am Mon, Apr 08, 2024 at 03:45:48PM +0200 schrieb Julien Puydt:

    I only use salsa's git. That begs two questions:
    - What do I miss by not using the web interface?

    If you are owner of a team repository you need to manage members. As
    far as I know this is only possible via web interface (I did not checked
    glab since I just learned in this thread about is existence.) This is sometimes a bit slow but acceptable for me since I need to deal with it
    once or twice a month.

    When intending to package something new I do not only fire up wnpp-check
    to look for some ITP bug but also seek on Salsa for some preliminary work
    done on this project without filing some ITP. I like this web search
    and in case you do some duplicated work you might miss it (see above
    for possible replacement by glab).

    For me Salsa CI is one of the greatest things we have. Its not "pure"
    Salsa but I'd say you are missing something if you are not using it.
    (Thanks a lot to those who are running Salsa CI!)

    - What does that web interface have that people don't like?

    I confirm that logs from Salsa CI are sometimes a bit slow but I'm not
    sure whom to blame about this. For me it does not cross the borderline
    to "not like it" - but in Johannes Schauer wrote in this thread that
    slow clients might fail to show log files at all.

    For me the two biggest argument for using Salsa consequently are:
    - It enables more than one person to work on one package effectively
    - I've met lots of potential young contributors who expect somehow a
    modern collaboration tool and we are risking that young blood
    moves to other distros if we do not use it consequently

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Wookey@21:1/5 to Simon Richter on Tue Apr 9 19:00:01 2024
    On 2024-04-08 21:44 +0900, Simon Richter wrote:

    Testing a package requires me to
    commit everything into git first, so I have to remember to squash all these commits later.

    Right - this was (one of the) main thing(s) that annoyed me enough to
    just go back to the non-git based workflow. I want to make changes and
    try them. I don't want to have to commit every damn time - it's not
    done yet - I'll commit it after I'm satisfied that it works. But I
    don't know that until I've made a whole set of changes and it builds.

    So now I've got a pile of changes which should really be separate
    commits and logically separate things often affect the same files, and
    even the same lines, so really I need to commit some chunks and not
    others and tidy it all up. Yes this makes a nice set of commits but
    it's _so_ much work in comparison to just editing the damn files, and
    then effectively doing one fat 'commit' when I dupload. Often
    something ends up stalled for weeks or months or years because I've
    got some chunks in the wrong places and sorting it out is painful, so
    I go do something else and lose all my state. You all know how that
    goes...

    Sometimes git is useful - I do use it quite intensively for things
    where it actually helps (complicated cave survey datasets with
    hundreds of entangled commits that need re-ordering). For the vast
    majority of my debian packaging it's just makework.

    I realise this (like my previous message) will result in a load of
    people telling me git _is_ better and I'm just doing it wrong, or
    should learn better tools. And they may even be right, (and I will
    probably learn some things from this thread), but I don't believe the
    goal we agree on (fixing other people's packages should be culturally
    accepted) _requires_ this change in tooling (which is a heavy cost for
    at least some of us).

    The point here is that 'requiring salsa' is actually code for 'no,
    you can't just use the tarball-based VCS any more - you have to use
    git'. Removing that interface is a very big deal - it has served
    quite well for 30 years. Yes it old-fashioned and crufty and
    (presumably) only a minority still use it as the primary interface,
    but any GR on this should acknowledge what we are requiring of people
    still using it, not just frame this as 'and add salsa'. It's more
    fundamental than that (or I am misunderstanding)..

    Also what do you git people do to replace uscan? Currently I go to my
    existing version, or a newly-acquired apt get or dget source. I do
    'uscan' and if there is a new upstream version I have a nice separate
    directly that is easy to dirdiff (then fixup any packaging and
    dupload). If there isn't I can move on.

    git world seems to make this way more complicated. I have to set up
    two different repos - one for salsa one for upstream, then pull them,
    maybe into different branches, and fight the diff config to let me
    dirdiff two different commits. And the upstream pull will always pull
    changes, not just only do it is there is an actual release (tag).

    None of that feels like an improvement over 'uscan'. One word for the
    standard process of updating to a new version. And if the patches
    still apply it's probably all done (I always do a meld review too to
    see what changed).

    And I do just prefer having two directories rather than multiple
    version on top of each other. My simple brain finds it a lot easier to
    keep track of a version directory to diff between, rather than finding
    the right runes to get git to give meld faked-up directories pointing
    at revisions or branches.

    If someone can make a tool so that this workflow still works, but a
    copy gets dumped into salsa, then I don't mind this new
    requirement. But otherwise it seems like a big imposition.

    I do understand the argument that lots of different workflows adds
    friction. But I'm just still using what used to be _the_ standard one
    (insofar as we ever had such a thing). Putting everything in salsa/git
    doesn't standardise workflows in itself. I think Ian/Sean identified 12 different git-based methods in their dgit review.

    Josch's suggestion that just recording the workflow in metadata would
    be useful is a good one. Then at least you know what other maintainers
    are doing. And dgit's approach of unifying the archive representation
    and the git representation is definitely progress in the right
    direction. I was very sad to find that it didn't help us 'tarball
    people' directly at all (except I guess to reduce exactly this
    pressure to stop doing it and use git).

    So why mandate salsa rather than make dgit more official? That lets
    the people that want to use git use it for everything - even the
    packages that were just uploaded as tarballs. And explicitly _doesn't_
    remove the archive VCS interface. And it supports all the git-based
    workflows. (someone should probably tell IWJ this conversation is
    occuring as he's taken a bit intererest in it, but no longer reads debian-devel). Does than not solve a good chunk of this 'make it easy
    to fix other packages using your standard tools' desire?

    Wookey
    --
    Principal hats: Debian, Wookware, ARM
    http://wookware.org/

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEER4nvI8Pe/wVWh5yq+4YyUahvnkcFAmYVciYACgkQ+4YyUahv nkcMBg/9GqtUi5j4Vzgt1slZNBIHcQ+isJPXSG/ZPYzT/5Ex7uL3pEkI3jQMxVwj eXLWllCiyXzE7Mgv6jlTahFWTPTYxu9NaN26J6kuhhzh2HJ98AFoI1jhK+Ks/OQQ yhpnwPC9RHlZLQK3pzC6yh3F+RYMk/LKwFCFU7NCFHSlOtnQu2nexo54P+QVSwAv JQ9tF8ri22rXJ/CEifz+pQxpPSrKY32Xe4U7B2wk5fLZE2Ob+OLoONByMdFTMlF0 4k1GsvDSgyE/BYkt7N4k+sm7IfY30KJvMMKoHIqSII0JRRnTt/APvT76C4mf5unk eVKKPdp9ri4DigsbFYoLAwFgtOJhht7g0odDwCGPMJnvl62Hw/bBSCX+Ypv1F5nT YdLijhH4V7XNHvpFNx16w3aY+vv4IZ6+SIUkNfCYdLzg6Q/hoK7IUbUH2TI+Az1R rvJQJhRsqOSgnpcGMsha+wSepgZ4+AMi9tKAp9rHwO7RGCbA1wu0up1UDiYyYy47 xp3YCy07VUas8fFIzRKvbcPGy09xqMxcz0jm3mVf6BWoXBvsc8qdswT9SCW+zoWF +TSWrXl9A9zWSc/XB/QAQ8q5tUse3L8JhH2n3O3wPE+A42RExWIyn3sNYdkVGbLj NVYfTwXjIzj0o/VX2e3ruOfopK/hUSIIy+JeB9lprKXpFeOwTgE=
    =U8q2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Johannes Schauer Marin Rodrigues on Tue Apr 9 20:10:01 2024
    On Tue, Apr 09, 2024 at 07:43:04PM +0200, Johannes Schauer Marin Rodrigues wrote:
    And I do just prefer having two directories rather than multiple
    version on top of each other. My simple brain finds it a lot easier to
    keep track of a version directory to diff between, rather than finding
    the right runes to get git to give meld faked-up directories pointing
    at revisions or branches.

    I found this paragraph really interesting because reading your other emails I was wondering "well but how else do you do it then??" :D Maybe this is just muscle memory? Your directories are just my git branches. Instead of "cd ../source-verX" I'd do "git switch verX". Personally, I find git branches superior to directories because the git commit messages in each branch allow me
    to describe what this feature-branch is doing much better than a directory name
    could. A stack of commits in a branch allows me to trace back what changes I did in what order when I worked on a feature. By pushing the branches to salsa,
    I enable collaboration on my work by doing not much more than running "git push
    --set-upstream origin myfeature".
    And of course git can emulate the other workflow using git-worktree.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmYVgtAtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh WcQQAJaaIsPt48bun09zP5srKfK9J5dOr53TrnuMeFKQFzkqpW3IyZnctVOHflcn i4Ra+mzMDdUf4yY+si5YGArV2u/YipcGG1fduLZEqOF6e/rHUIWdbQb1ch9hkM9p JjDAewJOpzGnexqIKghHPw3oMRgGWgDKPL5OtZSlYCdstS1eTaoFekQC4WTHE93X HX1Nd7Sm7Tt5BOO/NRcZOL7CgOyGsmmMe1HYRADDSRqAdSAhW64IB2+821M8R7c9 oAJ0/eI/V/QepW6LTdboGl3PgQciaiMw0o2poTINv6jNinmYjYZa5H4D2/znGKpz 6qzC/MUMtIinMomLK3BGM70eumcuz0VVfYQNbJrkV+ZqPFsZuDXOTsFssJWx+S2p kMXLwbEheX8FYM8ta6PCf2G+KbVlrRNRgv7voqXpoS0jxWV/pvVCLDkCaV5X0v1B XcsDma7tNqryzJU/JDwq82kxQ8Qz5TON2saNj8yCyzBgh4pO+mAOtldc0+NolnTf JxY7LxTA0UImv3YjXVJyKcthXS1SDfVq27fCspaQn2GWXzz4J2ckv+nq3utuCgXh Ui0MKNahm0tc6uPXqW3sc1nj13e3jjuQDxjjuFY8dTjFayzOjAZO2oZWC6qh9Nva MlpUNIysHAhiadYDo0nLsCmWohBdlLfVHi5XWfQD21MFF80m
    =VLgS
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Tue Apr 9 19:50:01 2024
    Hi Wookey and all,

    Quoting Wookey (2024-04-09 18:52:43)
    On 2024-04-08 21:44 +0900, Simon Richter wrote:
    Testing a package requires me to commit everything into git first, so I have to remember to squash all these commits later.
    Right - this was (one of the) main thing(s) that annoyed me enough to just go back to the non-git based workflow. I want to make changes and try them. I don't want to have to commit every damn time - it's not done yet - I'll commit it after I'm satisfied that it works. But I don't know that until I've made a whole set of changes and it builds.

    if what I want to do is more complicated, what I do is indeed to create a stack of commits which I squash in the end. I see this as a feature because it allows me to always go back to an earlier stage of my changes. If the code is complex I'm unable to keep in my head what I changed when and why. I use git commits to keep track of that as I work towards the final result. Because every meaningful change is in a git commit I can always go back to an earlier stage if it turns out I messed something up. Yes, running "git add ... && git commit" is overhead but I in my experience I waste more time with forgetting what file I changed how the last time I tested something than with running these git commands.

    So now I've got a pile of changes which should really be separate commits and logically separate things often affect the same files, and even the same lines, so really I need to commit some chunks and not others and tidy it all up. Yes this makes a nice set of commits but it's _so_ much work in comparison to just editing the damn files, and then effectively doing one fat 'commit' when I dupload. Often something ends up stalled for weeks or months or years because I've got some chunks in the wrong places and sorting it out is painful, so I go do something else and lose all my state. You all know how that goes...

    I manage these "piles of changes" in git branches and oftentimes, those branches end up as "merge requests" against another repo or my own repo. By doing it like that I not only allow others to see my work and potentially contribute as I'm working on it but I also keep a record of all the stuff I'm working on for future-me as I come back to work on a bug or feature. The extra data I am storing in git commit messages, that extra work, allows me to organize myself so it helps me even assuming that nobody else is contributing.

    I realise this (like my previous message) will result in a load of people telling me git _is_ better and I'm just doing it wrong, or should learn better tools. And they may even be right, (and I will probably learn some things from this thread), but I don't believe the goal we agree on (fixing other people's packages should be culturally accepted) _requires_ this change in tooling (which is a heavy cost for at least some of us).

    Personally, I think the project would be better off with more standardization of our workflows. The more different workflows we have, the harder it is to make archive-wide changes or for newcomers to learn the ropes. Speaking of newcomers: if I talk to my students, then for them, using git and workflows involving branches, tags and pull/merge requests is natural to them. So one can also argue the other way round and say: we deter younger contributors by not embracing the git workflow more.

    Sadly, there is probably no way to make everybody happy. I'd also not like to force you to switch your workflows. Of course ideally, I'd like to convince you that embracing git for packaging not only helps others but can also help you. :)

    Also what do you git people do to replace uscan? Currently I go to my existing version, or a newly-acquired apt get or dget source. I do 'uscan' and if there is a new upstream version I have a nice separate directly that is easy to dirdiff (then fixup any packaging and dupload). If there isn't I can move on.

    Personally, I run:

    $ uscan --verbose
    $ gbp import-orig ../source.orig.tar.gz

    And I do just prefer having two directories rather than multiple
    version on top of each other. My simple brain finds it a lot easier to
    keep track of a version directory to diff between, rather than finding
    the right runes to get git to give meld faked-up directories pointing
    at revisions or branches.

    I found this paragraph really interesting because reading your other emails I was wondering "well but how else do you do it then??" :D Maybe this is just muscle memory? Your directories are just my git branches. Instead of "cd ../source-verX" I'd do "git switch verX". Personally, I find git branches superior to directories because the git commit messages in each branch allow me to describe what this feature-branch is doing much better than a directory name could. A stack of commits in a branch allows me to trace back what changes I did in what order when I worked on a feature. By pushing the branches to salsa, I enable collaboration on my work by doing not much more than running "git push --set-upstream origin myfeature".

    I do understand the argument that lots of different workflows adds friction. But I'm just still using what used to be _the_ standard one (insofar as we ever had such a thing). Putting everything in salsa/git doesn't standardise workflows in itself. I think Ian/Sean identified 12 different git-based methods in their dgit review.

    Yes: https://wiki.debian.org/GitPackagingSurvey

    Josch's suggestion that just recording the workflow in metadata would be useful is a good one. Then at least you know what other maintainers are doing. And dgit's approach of unifying the archive representation and the git representation is definitely progress in the right direction. I was very sad to find that it didn't help us 'tarball people' directly at all (except I guess to reduce exactly this pressure to stop doing it and use git).

    So why mandate salsa rather than make dgit more official? That lets the people that want to use git use it for everything - even the packages that were just uploaded as tarballs. And explicitly _doesn't_ remove the archive VCS interface. And it supports all the git-based workflows. (someone should probably tell IWJ this conversation is occuring as he's taken a bit intererest in it, but no longer reads debian-devel). Does than not solve a good chunk of this 'make it easy to fix other packages using your standard tools' desire?

    Personally, I'd not like to *mandate* git or salsa or whatnot. What I'd personally like to see would be one standard documented default workflow. I think that'd already get us a long way into easier collaboration. It would not even need to be an instance of https://xkcd.com/927/ (Standards). Just pick one established workflow, deem it *the thing*, document it and call it a day. Personally I don't care which of the above 12 workflows is picked. I rather prefer to use the thing that everybody else is using than doing what I *hope* is familiar for others...

    Thanks!

    cheers, josch
    --==============w38000292112915931=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmYVfiUACgkQ8sulx4+9 g+Ft6A//Uuw8t8KgamGBbpPYaA0QptzBfEjadt8ZRfspOAZlpbwCUrbAbrgg/0jP sSq+gyuWLaY2JF02lzTkz9p5eJvmS9FNvTAs6DIf1SCXntaPr9lCNyD6uVeylhXl Bnag4Bg1OSADPZRFdP7T5z8apbTf2tlTWDhu4gx4RjXpN/OYHbUrp1efph/l8Fne ipxn4QmKNsPAewATHjgwxRL+mXodKOVn+QW0uhehDHZFa0vhkk77Puj0E9fd8lgg GJkwYmWvokgXHTIeB+3kDI+KsN6twkvFhlMSGZmDFFr6lfm8ElH/Vrh1E/e3tGGD OAVjm1vxMUZiGmMcKwxQuZI+cV5c86GAn58yt2RVApB0LHUZ7rDeo+JZ3P6S2yZZ +KrvcUwzaGlbED6c8D11XmmdBksi1yjMOMjYkudJPdrpuZc9iAXyvoDGQh+KBgac fIx+3CgnaJZ3X+dX+A96LIkyi2Ns+pNFp3yofJhLYNNd4kahLD4Mjjxw/B/xEr8x ZpFmGl8a8Rl+fScn30LnMxNAtY14GYf0XZYqHlwodLcOHPfnqUtb6ARYc7y9zBbF muCS79kIDs+DhVlYeZxxtvVTnq3Z+6S7NVZTTQirn6VgifIxQcqydqpjgeW0d9Qx JQFJdoqUxbBvi+IwWRnNivYHCSwr0JTAn245zTU6q95le9tiSuY=
    =KvYC
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Wookey on Tue Apr 9 20:10:02 2024
    On Tue, Apr 09, 2024 at 05:52:43PM +0100, Wookey wrote:
    Right - this was (one of the) main thing(s) that annoyed me enough to
    just go back to the non-git based workflow. I want to make changes and
    try them. I don't want to have to commit every damn time - it's not
    done yet - I'll commit it after I'm satisfied that it works. But I
    don't know that until I've made a whole set of changes and it builds.

    So now I've got a pile of changes which should really be separate
    commits and logically separate things often affect the same files, and
    even the same lines, so really I need to commit some chunks and not
    others and tidy it all up. Yes this makes a nice set of commits but
    it's _so_ much work in comparison to just editing the damn files, and
    then effectively doing one fat 'commit' when I dupload. Often
    something ends up stalled for weeks or months or years because I've
    got some chunks in the wrong places and sorting it out is painful, so
    I go do something else and lose all my state. You all know how that
    goes...
    Again, you don't need to commit anything to test it, so you can use
    whatever commit style is fine, including one fat commit before dupload.
    You may mean that doing this provides no benefit over not using git, which isn't really true.

    Also what do you git people do to replace uscan?
    gbp import-orig --uscan

    git world seems to make this way more complicated. I have to set up
    two different repos - one for salsa one for upstream, then pull them,
    maybe into different branches, and fight the diff config to let me
    dirdiff two different commits. And the upstream pull will always pull changes, not just only do it is there is an actual release (tag).
    You don't need to do that, you can't do that with upstreams that don't use
    git and some (probably all?) teams forbid that.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmYVglYtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh PtcP/1Mvb7JChLFCA+3/W14k3R2cPCQaSPEdjNbbRV5d/hjHkLZGgy7ggXHBOae0 Mr7z1yv8gkSNkC9tdywhA1ZVIOz7UOWbpiUZBRwyLvfLQDtcpL1/C6dtAzhkb8C4 aMNelnmBjIH4jRXFZkeuNgSb+DQJiwGV3JIR9r7tiZUCLzPKFtJJud6iIEjTyu34 SUJyCBhg68MpVcN3NQ9ZL5OlJLUxligGc2DZUMQ2pnamV3KKNvudO3Sh53h+cwDr TprBaJqrM2SGmvUu80SFJHk2rcPEWHebIPEmRfsD19abTRmOlrxA/syKMOi8lPV/ UoYyrjhcLrsYCncFgPDROmyB2J50jz2+3VdcmZodHsNzahpTf8oxjz3ilmp5YxHZ wSxv3pck31BdT2190whLXDyS+PWZQdxSgKGnCXJGG12DA9+/txcvfUDZdsVtjDpE XJAIX0O5X9wuwD7r65yn8ZLQSVJ86sA4LUKZmQSMPfyakK+o21h/BTnOMQUUCinI U5yTd0JHDSXVigqBfVIl8fuwGQ9EaSFxF4JCbVmx6ELYzXUhblleG5A2cPU82lkB xIlAWFlgcLAldikwAMcaYvhwj1IlRqre87Cs30Vwi3W4FMiK1/vfhObcYM+ngZVL F6pRR7rGIxtqpKqrDObRmd4O3cCgayV55n3vFdvRcaqBgyHl
    =hhju
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to Luca Boccassi on Tue Apr 9 20:50:01 2024
    On Mon, Apr 08, 2024 at 11:00:52PM +0100, Luca Boccassi wrote:
    ...right up until the point where that "bus factor of 1" moves
    on/changes priorities/changes job/etc and the package is abandoned. Fortunately that never happens, though!

    Having a repository on salsa or even "packaging team" does not prevent
    a lack of maintainer, so this is not relevant.
    Without a maintainer, no contribution will be merged in any case.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to All on Tue Apr 9 20:40:02 2024
    hi,

    just adding some random data points to this thread:

    - I love git.
    - I very much dislike git-buildpackage, too much magic. I try to avoid it
    where I can.
    - I like salsa. (though I think for many new contributors this is rather
    a barrier "why not use github" directly. Also salsa is Debian only,
    which also is a barrier for some.)
    - I love autopkgtests.
    - I hardly every look at the autopkgs logs on salsaci, cause I find
    them incomprehensible and the javascript "UX" makes me wanna chop wood.
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    The era of global warming has ended, the era of global boiling has arrived.
    The heat is unbearable, and the level of fossil fuel profits & climate inaction is unacceptable. Humanity has unleashed destruction. This must not inspire despair, but action." — UNSG @AntonioGuterres

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmYVit8ACgkQCRq4Vgaa qhyoNQ//e/GKzmaiZi75fImon5B9N0/NUuXbEvB0AuvEeaOANI8Z9FduW6SkZVOW Kz9qohkoHIFzuspaq3ZHQeJ9zykLiia31kq2F84G/mU8jehIqZc3nfqOlC2gpfIU 1zSvmd75jQf0WsMP1rgYlMyWDMPDB5BWERfs0viIi3V3W+0F8QzFft56F/+x8Myv dqnBLQ0Cs0+YqtG/AbaRrELvw6FOhbjOKHMbkmvO+ChMpZkF33t1saB5BN0wr4kg dB/Fj65TU8zNUwFOUMyhmEg0jH5i5szJhfzdKKYFGGZf+IoOdAoaV8OC1Hb5ITsq YFyes75G9n70cDQX08Ew+4K0y/+Z5eQCiqq5WvAD1GLMDh1DvVm2f1HD7q4XWMfU RUFOS9oWsHohNXygG475h+duhjMrQ
  • From Gioele Barabucci@21:1/5 to Wookey on Tue Apr 9 21:00:01 2024
    On 09/04/24 18:52, Wookey wrote:
    So why mandate salsa rather than make dgit more official?

    Independently from whether salsa should be mandated, "git", "salsa" and
    "dgit" are three different things and should not be used as replacement
    of one another.

    Asking maintainers "to use git" means: please push your changes, even
    those unreleased to a public git repository (salsa, github, codeberg,
    your own domain...), so other people can contribute 1) knowing that they
    are working against the same sources the maintainer has on their hard
    drive, and 2) using git-based workflows.

    dgit is both a Web interface to browse git repositories as wells as a
    system to access the Debian archive as if it were a git repository, so
    you can "dgit push" a branch and have the resulting binary uploaded to
    the archive. (Yes, I'm simplifying here, but that's the gist.)

    Salsa is a forge, i.e. a combination of a Web interface, a git server,
    and a set of integrated features. In comparison to dgit, salsa has, like
    most forges:

    * Merge requests: where people can suggest changes and discuss them with line-based comments (accessible via email, no need to use the Web interface)

    * Continuous integration pipelines: as soon as you push a commit,
    Salsa-CI will try to build a package, cross build it, test it against
    piuparts, lintian a bunch of other QA tools (kudos to the Salsa-CI
    developers).

    * Integrations with two dozen tools (irc, jenkins, mattermost, bugzilla,
    but funnily enough not BTS).

    * Project specific wikis, snippets, Docker images.

    * And with tag2upload salsa fulfills 50% of dgit functionality.

    Regards,

    --
    Gioele Barabucci

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jose-Luis Rivas@21:1/5 to Wookey on Tue Apr 9 20:30:01 2024
    On Tue Apr 9, 2024 at 1:52 PM -03, Wookey wrote:
    On 2024-04-08 21:44 +0900, Simon Richter wrote:

    Testing a package requires me to
    commit everything into git first, so I have to remember to squash all these commits later.

    Right - this was (one of the) main thing(s) that annoyed me enough to
    just go back to the non-git based workflow. I want to make changes and
    try them. I don't want to have to commit every damn time - it's not
    done yet - I'll commit it after I'm satisfied that it works. But I
    don't know that until I've made a whole set of changes and it builds.

    Use gbp-buildpackage --git-ignore-new. By default checks for uncommited,
    so you don't ship to Debian things that are not commited. If you use
    this flag, the burden of checking this lands on you.

    Yet, you can still use the regular workflow to build stuff, just dpkg-buildpackage -us -uc.

    So now I've got a pile of changes which should really be separate
    commits and logically separate things often affect the same files, and
    even the same lines, so really I need to commit some chunks and not
    others and tidy it all up. Yes this makes a nice set of commits but
    it's _so_ much work in comparison to just editing the damn files, and
    then effectively doing one fat 'commit' when I dupload. Often
    something ends up stalled for weeks or months or years because I've
    got some chunks in the wrong places and sorting it out is painful, so
    I go do something else and lose all my state. You all know how that
    goes...

    Use git commit -p, I tend to throw -v as well, so when I am writing the
    commit description I also get the diff of that commit. With -p you
    basically select by blocks what goes into your commit with simple y and
    n. You can also split blocks.

    If you prefer to just make a bunch of small commits and then combine
    them all into one big-fat commit, just use git rebase -i HEAD~N with N
    being how many commits you want to rebase.

    This will give you a file text where you decide which commits are
    squashed onto the top one, you can also re-arrange. After you save that
    file, it'll allow you to modify the commit.

    So you can do a bunch of git commit -m 'random' and with git rebase -i
    create a proper commit message from a bunch of commits.

    I realise this (like my previous message) will result in a load of
    people telling me git _is_ better and I'm just doing it wrong, or
    should learn better tools. And they may even be right, (and I will
    probably learn some things from this thread), but I don't believe the
    goal we agree on (fixing other people's packages should be culturally accepted) _requires_ this change in tooling (which is a heavy cost for
    at least some of us).

    Git is the default tooling in the whole open-source ecosystem. Maybe a
    poll would be good to know how much people actually is against using Git
    as default, after so many years with proper git tooling in Debian. I
    would not be surprised if the loud bunch in the mailing lists end-up
    being very very small.

    I understand is hard to have your workflows changed, but IMO it's been
    too many years that Git is the default VCS everywhere. There's no other workflow you need to change, if you use Git.

    The point here is that 'requiring salsa' is actually code for 'no,
    you can't just use the tarball-based VCS any more - you have to use
    git'. Removing that interface is a very big deal - it has served
    quite well for 30 years. Yes it old-fashioned and crufty and
    (presumably) only a minority still use it as the primary interface,
    but any GR on this should acknowledge what we are requiring of people
    still using it, not just frame this as 'and add salsa'. It's more
    fundamental than that (or I am misunderstanding)..

    This is untrue. All the git tooling depends on non-git tooling for the
    build. I actually have a setup for building everything on docker and
    does not use any git tooling, because that's just sugar-coating for the
    non-git tools.

    Also what do you git people do to replace uscan? Currently I go to my existing version, or a newly-acquired apt get or dget source. I do
    'uscan' and if there is a new upstream version I have a nice separate directly that is easy to dirdiff (then fixup any packaging and
    dupload). If there isn't I can move on.

    You can use uscan.

    git world seems to make this way more complicated. I have to set up
    two different repos - one for salsa one for upstream, then pull them,
    maybe into different branches, and fight the diff config to let me
    dirdiff two different commits. And the upstream pull will always pull changes, not just only do it is there is an actual release (tag).

    None of that feels like an improvement over 'uscan'. One word for the standard process of updating to a new version. And if the patches
    still apply it's probably all done (I always do a meld review too to
    see what changed).

    I see, you are confusing two things here. Having the source from Git vs
    using tarballs. And using Salsa does not requires you to have the source
    from a Git and not a tarball.

    If someone can make a tool so that this workflow still works, but a
    copy gets dumped into salsa, then I don't mind this new
    requirement. But otherwise it seems like a big imposition.

    You don't need more than to learn how to use git commit and git rebase,
    TBH. Having packages in Git doesn't means you have to use gbp-*.

    I do understand the argument that lots of different workflows adds
    friction. But I'm just still using what used to be _the_ standard one (insofar as we ever had such a thing). Putting everything in salsa/git doesn't standardise workflows in itself. I think Ian/Sean identified 12 different git-based methods in their dgit review.

    This is part of my workflow for actual builds: https://github.com/resnullius/deb-build-pkg/blob/master/deb-build-pkg https://github.com/resnullius/docker-deb-devel/blob/master/base/scripts/entrypoint.sh

    And it handles packages on Git. The first is just an interface for
    docker and the Docker entrypoint. The entrypoint is where the actual
    packaging happens and as you can see, they are the regular:
    dpkg-buildpackage, uscan, mk-build-deps.

    Josch's suggestion that just recording the workflow in metadata would
    be useful is a good one. Then at least you know what other maintainers
    are doing. And dgit's approach of unifying the archive representation
    and the git representation is definitely progress in the right
    direction. I was very sad to find that it didn't help us 'tarball
    people' directly at all (except I guess to reduce exactly this
    pressure to stop doing it and use git).

    So why mandate salsa rather than make dgit more official? That lets
    the people that want to use git use it for everything - even the
    packages that were just uploaded as tarballs. And explicitly _doesn't_
    remove the archive VCS interface. And it supports all the git-based workflows. (someone should probably tell IWJ this conversation is
    occuring as he's taken a bit intererest in it, but no longer reads debian-devel). Does than not solve a good chunk of this 'make it easy
    to fix other packages using your standard tools' desire?

    Salsa as default only means you have to make commits, not use any
    different tooling. Just git commit and git push, nothing else.

    Maybe there's a misunderstanding here where workflows need to change,
    but that's not true.

    There are workflows possible thanks to branches on Git, yes, but that
    does not mean you have to use them in order to use Git.

    Kind regards,
    Jose

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Scott Kitterman@21:1/5 to Holger Levsen on Tue Apr 9 21:20:01 2024
    On April 9, 2024 6:37:23 PM UTC, Holger Levsen <holger@layer-acht.org> wrote: >hi,

    just adding some random data points to this thread:

    - I love git.
    - I very much dislike git-buildpackage, too much magic. I try to avoid it
    where I can.
    - I like salsa. (though I think for many new contributors this is rather
    a barrier "why not use github" directly. Also salsa is Debian only,
    which also is a barrier for some.)
    - I love autopkgtests.
    - I hardly every look at the autopkgs logs on salsaci, cause I find
    them incomprehensible and the javascript "UX" makes me wanna chop wood.
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    Specifically to your last point, absolutely. Saying everyone must do a certain thing has an inverse that is we would rather you not contribute at all than do it without that thing. I would rather we make that list as short as possible.

    I have all my packages in git on salsa. Mostly I find it not that helpful to me, but I know others value it, so I do it (and for the occasional benefits it provides me). I think I would feel pretty strongly about not continuing to do so if someone told
    me I had to.

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to Andreas Tille on Wed Apr 10 22:40:02 2024
    On Tue, 09 Apr 2024 16:07:20 +0200, Andreas Tille wrote:

    Am Mon, Apr 08, 2024 at 03:45:48PM +0200 schrieb Julien Puydt:
    I only use salsa's git. That begs two questions:
    - What do I miss by not using the web interface?
    If you are owner of a team repository you need to manage members. As
    far as I know this is only possible via web interface (I did not checked
    glab since I just learned in this thread about is existence.)

    Managing team membership also works via the API, which is used by
    salsa(1) in devtools (also dpt-salsa(1) in pkg-perl-tools and
    probably other helpers).


    Cheers,
    gregor


    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmYW+EtfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYqgQ/+J0/KHsmhXk0WnqEh37CaxG+uMS2+F434iomyjXGKvHFQkc4aT4+jnuGA GoqnaCLUCl77NarDD4sQH6QokIOrkh+f2tsoGgC4h4TqhoK+U9F0CGXP1ylKFqsd jDgvtYdLUxSoerbZ+82tHqKgNBOef+CaeQ1jCZE10mtjbu7K6pJST0HSwlnZGs9O L3lXCfk8Fa+E0jY3o0oAG6xPXHbyw+TIWbsnQ5PaUYKdwYsYc97SmC5NojZuDo9I BSTywpdMBwxrVwggyBN6DWjnKZCZeTOeMpkiJ8ed/DhT9Xxoav81pX8i0b9FlTQb zw0Fcxt7msoaYmj/IgQ5hxkLHsyIHUedUa1JLQ3p0zBQApHMQhDwPlbZm4PLk7uW iZiU3ZRBI4djHjQO1Ko0LuQv0VFwg7xt/X8ogfYwoiJ5QDXHarqWb4EKVhRi7bPr I49FVmZ/cBNJOZnOR4sOmkWM9Cw8FXuOAcErRbcq6HDx1zf7v3NiJa4uXUoZW4de z5glVHYakknoQ2G2JfOOYQ7fBT77MWSXvM5X4Xb6s33Cn0/mluGcFDI+NvsSXy3K gVz4CeACEsB1aMFbULUB9Ntmz9Qn4qpaYM5emOaEvJUZgKQe0FpBRqxeV0ROMBwh Ux/HAgZmjwyCbUB/U0oijq83hwkuJPplr2carkoNpIzb2VXp/PM=
    =ivlc
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to Wookey on Wed Apr 10 22:50:01 2024
    On Tue, 09 Apr 2024 17:52:43 +0100, Wookey wrote:

    On 2024-04-08 21:44 +0900, Simon Richter wrote:
    Testing a package requires me to
    commit everything into git first, so I have to remember to squash all these commits later.
    Right - this was (one of the) main thing(s) that annoyed me enough to
    just go back to the non-git based workflow. I want to make changes and
    try them. I don't want to have to commit every damn time - it's not
    done yet - I'll commit it after I'm satisfied that it works.

    In my git workflow I never make a commit when I first want to try
    something out; specifically with git-buildpackage:

    % cat ~/.gbp.conf


    [buildpackage]

    export = WC


    ("WC" as in "working copy", i.e. the directory as it is right now).

    The point here is that 'requiring salsa' is actually code for 'no,
    you can't just use the tarball-based VCS any more - you have to use
    git'.

    Currently many people and teams still start from tarballs even when
    using git, via the pristine-tar tool and a pristine-tar branch.

    Josch's suggestion that just recording the workflow in metadata would
    be useful is a good one.

    Here I disagree because I remember that we (pkg-perl) had to put
    hundreds of README.source files into packages saying "This package
    uses quilt, quilt documentation is $over_there" because policy
    mandated it; and a few years later we removed them again after a
    policy change (or was it the switch to source format "3.0 (quilt)"?).
    So please no README.source with "This package used gbp with
    patches-unapplied and yadda yadda".


    Cheers,
    gregor


    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmYW+o9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaZsg/+NjghvhHUGQzVxAwN+muDjZJI44+iHt28+Fsnauty5mhMiePaU4FhLSBU 2rFUldSavka/pE525PWkXeTUUVSx9nvTtBXaCR2DFWFlaw5osR83MWBol4AH8bfA Y89j75POuS79uFUWeSFhFkYEXLbwYk8ELJx7exKWPGf4/NuDPyJ1qaek+i0AqZgM 7w8Pk+ec7CdTs5DHd/QXdS+OCpG6mGDtIBdLEkkdylBYTFV8RRyEbo/0fPEeF2O6 lSsd5a2t0QGP/bqWO0FDXzKiS/0FcraflfwbsURTRDCgYkKmnzzWELBaxwHT8mWw pNKXyJj6NSDkQ6Bx34PT3xoSjx4y2CjbyLQ1blZqIPMtOQedWh6HLSgmVolHpB1q br8Q/9rBN+ZaZXqXXeGQ1Fdkc5NDT4xXZXkrrj89jyU3L1Q9h4yVi5Pb/i1hjTlN GqzbkIuIypRg0I4G2+c3h8lttZ7rTBkiEDcArAkuW+SKTBOy2COnvhWzkIQtlYSV
    C1T3f6FY
  • From Andreas Tille@21:1/5 to All on Wed Apr 10 22:50:01 2024
    Hi Wookey,

    Am Tue, Apr 09, 2024 at 05:52:43PM +0100 schrieb Wookey:
    Right - this was (one of the) main thing(s) that annoyed me enough to
    just go back to the non-git based workflow.

    I started packaging with VCS in 2007i. Thanks to some Debian Med team
    members (mainly Charles Plessy) I was convinced to us SVN first and
    later I was moved to Git (yes, I *was* moved ;-) ). I'm extremely happy
    that I followed my team mates and could not imagine to move back.

    try them. I don't want to have to commit every damn time - it's not
    done yet - I'll commit it after I'm satisfied that it works. But I
    don't know that until I've made a whole set of changes and it builds.

    Seems like a matter of style. My team mates are accepting commits that
    are not perfect and fixed later in another commit. The great thing is
    that I get some proof whether my commits are working after pushing to
    Salsa thanks to Salsa CI.

    So now I've got a pile of changes which should really be separate
    commits and logically separate things often affect the same files, and
    even the same lines, so really I need to commit some chunks and not
    others and tidy it all up. Yes this makes a nice set of commits but
    it's _so_ much work in comparison to just editing the damn files, and
    then effectively doing one fat 'commit' when I dupload.

    I do not think everybody expects you to follow the gold standard if Git commits. If it makes you more productive nobody will blame you about
    some fat commits.

    Sometimes git is useful - I do use it quite intensively for things
    where it actually helps (complicated cave survey datasets with
    hundreds of entangled commits that need re-ordering). For the vast
    majority of my debian packaging it's just makework.

    It might be that your debian packaging is different to what I'm doing
    but I do not share this experience.

    I realise this (like my previous message) will result in a load of
    people telling me git _is_ better and I'm just doing it wrong, or
    should learn better tools. And they may even be right, (and I will
    probably learn some things from this thread), but I don't believe the
    goal we agree on (fixing other people's packages should be culturally accepted) _requires_ this change in tooling (which is a heavy cost for
    at least some of us).

    'Require' is probably the wrong word. I simply have heard from several potential young contributors that they feel blocked by the tooling and specifically not everything in Git. We simply have no idea what amount
    of new contributors we might scare away due to sticking to habits that
    feel old fashioned to those people.

    The point here is that 'requiring salsa' is actually code for 'no,
    you can't just use the tarball-based VCS any more - you have to use
    git'. Removing that interface is a very big deal - it has served
    quite well for 30 years. Yes it old-fashioned and crufty and
    (presumably) only a minority still use it as the primary interface,
    but any GR on this should acknowledge what we are requiring of people
    still using it, not just frame this as 'and add salsa'. It's more
    fundamental than that (or I am misunderstanding)..

    I'm using a workflow based on git-buildpackage with pristine-tar. This
    is a great wrapper for the tarball-based workflow.

    Also what do you git people do to replace uscan?

    Nothing. I'm using uscan. When I realised that I'm doing always the
    same for new upstream versions I wrote some semi-automated tool
    routine-update which calls uscan, cme, janitor tools and is possibly the
    reason why I was able to maintain the majority of packages of R pkg team
    alone. Sometimes I have 4-6 xterms open with running routine-update at
    the same time. Doing things semi-automated is dangerous to some extend
    - thus I consider Salsa CI a great second pair of eye-balls. Without
    this toolset I could not manage all this.

    Currently I go to my
    existing version, or a newly-acquired apt get or dget source. I do
    'uscan' and if there is a new upstream version I have a nice separate directly that is easy to dirdiff (then fixup any packaging and
    dupload). If there isn't I can move on.

    I usually keep copies of most of my packaging git repositories on my
    local disk. So my workflow is checking some list of packages that need
    an upgrade (we update such lists in some teams twice a day). Than I move
    to the local repository, run

    routine-update
    (works without interaction in about >80%, depending from the team)
    dput

    git world seems to make this way more complicated. I have to set up
    two different repos - one for salsa one for upstream,

    No. There are tag based workflows (as far as I know in openstack team)
    which I personally do not understand. I'm exclusively using tarball
    based workflow. When creating a new package starting with importing an upstream tarball as first commit in a fresh repository (as I've shown in several live packaging workshops for instance at DebConf23). I create a
    local repository and a script that moves this to Salsa.

    then pull them,
    maybe into different branches,

    git-buildpackage maintains two or three branches: The main packaging
    branch and an upstream branch. The pristine-tar branch is optional (but default in the teams I'm working in) and just keeps the needed
    metainformation to create a byte identical tarball as downloaded by
    upstream. Maintaining these are no-brainers and done automatically by git-buildpackage (wrapped by routine-update).

    and fight the diff config to let me
    dirdiff two different commits. And the upstream pull will always pull changes, not just only do it is there is an actual release (tag).

    I need to admit I do not understand what you mean since I never had
    to deal with those things.

    None of that feels like an improvement over 'uscan'. One word for the standard process of updating to a new version. And if the patches
    still apply it's probably all done (I always do a meld review too to
    see what changed).

    As I said routine-update is using `uscan` and checks whether patches
    apply cleanly. If not it stops and tells me I need to adjust patches.
    It also detects if there is just fuzz in patches, tells me to unfuzz
    this in some separate terminal and continues once I confirm this is
    done.

    And I do just prefer having two directories rather than multiple
    version on top of each other. My simple brain finds it a lot easier to
    keep track of a version directory to diff between, rather than finding
    the right runes to get git to give meld faked-up directories pointing
    at revisions or branches.

    That's probably a matter of taste. For me its definitely not
    outweighting the advantages I mentioned above.

    If someone can make a tool so that this workflow still works, but a
    copy gets dumped into salsa, then I don't mind this new
    requirement. But otherwise it seems like a big imposition.

    You can simply unpack your old and the new upstream tarball and do
    dirdiff as you want. Or am I missing something?

    I do understand the argument that lots of different workflows adds
    friction. But I'm just still using what used to be _the_ standard one (insofar as we ever had such a thing). Putting everything in salsa/git doesn't standardise workflows in itself. I think Ian/Sean identified 12 different git-based methods in their dgit review.

    I agree that different workflows are not helpful. We have DEP14[1]
    ... but we have no efficient processes to
    a) accept DEPs
    b) dedicate to accepted DEPs

    Josch's suggestion that just recording the workflow in metadata would
    be useful is a good one. Then at least you know what other maintainers
    are doing. And dgit's approach of unifying the archive representation
    and the git representation is definitely progress in the right
    direction. I was very sad to find that it didn't help us 'tarball
    people' directly at all (except I guess to reduce exactly this
    pressure to stop doing it and use git).

    I need to admit I'm not actively using dgit thus can't comment on this.
    But I consider myself a member of the group of 'tarball people'. I'm
    old enough to stick to conservative habits. The good thing of mentoring
    lots of newbies is that I learned a lot from them myself how to make
    my workflow way more efficient.

    So why mandate salsa rather than make dgit more official? That lets
    the people that want to use git use it for everything - even the
    packages that were just uploaded as tarballs. And explicitly _doesn't_
    remove the archive VCS interface. And it supports all the git-based workflows. (someone should probably tell IWJ this conversation is
    occuring as he's taken a bit intererest in it, but no longer reads debian-devel). Does than not solve a good chunk of this 'make it easy
    to fix other packages using your standard tools' desire?

    As I said I'm lacking the expertise to compare my Salsa -
    gbp-buildpackage - workflow to some workflow with dgit. Refusing some
    common hosting platform simply does not work for Debian wide changes
    (Janitor and potential other tools which might help in transitions), no
    Salsa CI and other things that are simply not possible for packages
    outside Salsa.

    As last remark I'd like to say again thank you to my team mates who
    convinced me in 2007 (according to team metrics) to start with some VCS
    based workflow which finally enabled me to become as productive as I am
    now (despite I was arguing probably for 2-3 years the very same way as
    you did above. ;-) ).

    Kind regards
    Andreas.

    [1] https://dep-team.pages.debian.net/deps/dep14/

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Wed Apr 10 23:20:01 2024
    Quoting Andreas Tille (2024-04-10 22:44:25)
    I do understand the argument that lots of different workflows adds friction. But I'm just still using what used to be _the_ standard one (insofar as we ever had such a thing). Putting everything in salsa/git doesn't standardise workflows in itself. I think Ian/Sean identified 12 different git-based methods in their dgit review.

    I agree that different workflows are not helpful. We have DEP14[1]
    ... but we have no efficient processes to
    a) accept DEPs
    b) dedicate to accepted DEPs

    or teach gbp about DEP14. See this git-buildpackage bug from *six* years ago:

    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829444 --==============Q97094697777941180=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmYXAcUACgkQ8sulx4+9 g+Hc1xAAl7fzCMtdgxzJQnW3H2s8Lcj7Zklu4ZE+4hVyQ30FaCNv0Y7m31FehxL4 uk2u9VjkqyfqaS2BukGM7xoHrH34BVcgICuV5GvtnN2wHtjHG9shuM9tvKPM/n0z EIiy0oBrkSrElljkiBZE8jNyYHKZhjvDlFgoYhTp0O8M/rzxeC7f1s6OhnclbiVX Xlhy1eIRqzJ1KbWVGp4uj6A509VL1AJ4bGTx9br09LoxyGa9mqhYGtKEcKtMzBeO Dwi8gwRVp65vrgGwD7SlloW3Wxb0RnaRuRlNxxP11XTdRuYHxmIYFTEtPSC2lSef HMikP2Ncdw/0SpOkH9mQIMgzNjqqfM7Uqzw9MCZb4ZyHWrKeRCAEYWuI1XCoaapH o075M4iorcg4hUIYGVlNuea8VmGEY47OmIVLmBD7F1Q5xixlf9L41mcxghYnUoEV waUIMwTv8+ToZyUSzqBSNFSnfMe6lNi0gdAeIqIFxxMVO/1tOxgTfeegDjCJ7Kaj 68sayRTatOdB8b/wgSqR7c1OnH9Z4HQoCC7n48KjELNiGBOiPxiMS6DLmX0/72il dK19DWaJsoFooq651kzSXE07phTETfAPsKzvBaoUldULpw6wpBmuf6AkmJMU9FT5 pC+Jj5ShOM3SgXd4vQ64Ayp79GUaW/uM1nIoRReqDgbnPpmaKsg=
    =4FZB
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bill Allombert@21:1/5 to All on Fri Apr 12 01:00:01 2024
    Le Tue, Apr 09, 2024 at 12:18:02AM +0200, Johannes Schauer Marin Rodrigues a crit :
    we need both. Domain specific knowledge is clearly very important and I'm not trying to argue against it. But doing packaging in a way such that it becomes easy for others to contribute is *also* every important. As the maintainer of a
    package with expert knowledge of it you might think that there is nothing to do
    but you while you are the expert for that package, you might not be the expert
    on topics like cross building, reproducible builds, multiarch, build profiles,
    merged-/usr, build hardening and many other topics which span the whole distribution. There are people who are heavily invested in these topics and who
    will want to touch very many packages to fix things. It should be made easy for
    them to make these contributions without them bit-rotting as a patch in the BTS
    for months or years. I'm not saying that *you* let these contributions bit-rot.
    This is meant as a general argument for making it easier to make large-scale changes to packages. Diversity in our packaging styles and strong package ownership sometimes work contrary to issues affecting very many packages across
    our distro.

    These contributions always need to be carefull reviewed before being
    accepted. As likely as not, they are either slightly incorrect or
    introducing subtle breakages in some case the submitter did not
    envision. This is where an expert maintainer is most needed. People
    heavily invested in some topic tend to forget the packages has other
    users, and often fix the symptom instead of fixing the problem.

    When a change leads to a RC bug a month or three after having be
    part of a package, fixing the problem falls on the maintainer and not
    on the change author. Even correct changes can trigger latent bugs
    in software.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonathan Dowland@21:1/5 to Holger Levsen on Fri Apr 12 11:00:01 2024
    On Tue Apr 9, 2024 at 7:37 PM BST, Holger Levsen wrote:
    - I love git.
    - I very much dislike git-buildpackage, too much magic. I try to avoid it
    where I can.
    - I like salsa. (though I think for many new contributors this is rather
    a barrier "why not use github" directly. Also salsa is Debian only,
    which also is a barrier for some.)
    - I love autopkgtests.
    - I hardly every look at the autopkgs logs on salsaci, cause I find
    them incomprehensible and the javascript "UX" makes me wanna chop wood.
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    I agree with everything you say here!

    Wrt git-buildpackage, I'd like to add that personally, I respect the gbp authors and maintainers and it's a very useful tool to bring together
    some complex workflows and in particular successfully move a lot of
    people over from svn-buildpackage.

    I do however agree that there's too much magic. Some of that is
    inherited from the Debian-specific tooling it sits on top of: I also
    think there's too much magic and/or complexity in debuild and dpkg-buildpackage.


    --
    Please do not CC me for listmail.

    👱🏻 Jonathan Dowland
    jmtd@debian.org
    🔗 https://jmtd.net

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mike Gabriel@21:1/5 to Holger Levsen on Fri Apr 12 11:30:01 2024
    Hi all, hi Holger,

    On Di 09 Apr 2024 18:37:23 UTC, Holger Levsen wrote:

    hi,

    just adding some random data points to this thread:

    - I love git.
    - I very much dislike git-buildpackage, too much magic. I try to avoid it
    where I can.
    - I like salsa. (though I think for many new contributors this is rather
    a barrier "why not use github" directly. Also salsa is Debian only,
    which also is a barrier for some.)
    - I love autopkgtests.
    - I hardly every look at the autopkgs logs on salsaci, cause I find
    them incomprehensible and the javascript "UX" makes me wanna chop wood.
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    Very well summarized, fully agreeing with the above, esp. the part
    about single-person maintainership (let's simply keep it and, at the
    same time, encourage people to work in teams).

    Also regarding gbp, my packaging workflow does not require it (debian/-folder-only in Git). Being enforced to use some other pkg'ing
    style would reduce my fun and end up with less productivity, I fear.
    The gbp workflow has its pros, but for me it is a too complex overhead
    without much gain to the end result (the uploaded package).

    Debian is about freedom, so let's apply that to free choice of the
    tooling to be usable.

    light+love,
    Mike

    --

    DAS-NETZWERKTEAM
    c\o Technik- und Ökologiezentrum Eckernförde
    Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
    mobile: +49 (1520) 1976 148
    landline: +49 (4351) 850 8940

    GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31
    mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Jonathan Dowland on Fri Apr 12 13:20:01 2024
    On Fri, Apr 12, 2024 at 09:53:29AM +0100, Jonathan Dowland wrote:
    On Tue Apr 9, 2024 at 7:37 PM BST, Holger Levsen wrote:
    [...]
    I agree with everything you say here!

    :)

    Wrt git-buildpackage, I'd like to add that personally, I respect the gbp authors and maintainers and it's a very useful tool to bring together
    some complex workflows and in particular successfully move a lot of
    people over from svn-buildpackage.

    absolutly.

    I do however agree that there's too much magic. Some of that is
    inherited from the Debian-specific tooling it sits on top of: I also
    think there's too much magic and/or complexity in debuild and dpkg-buildpackage.

    absolutly.

    Thanks for these additions!


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    “I'll tell you what freedom is to me.... No fear.” (Nina Simone)

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmYZGGsACgkQCRq4Vgaa qhyBBg//cZUulSzW/bMC0C8fJ1snAwROZbGB9klV9knxargEGbKAR6o+KecEsaOD kqD4shMlN2IqfkLGx8koLHUmX659ibxQNQhizl9DtInyUElhkUrRXqmv4H59o2oY PNJcYVoFrnwm8YDR+IjwBmYDllnc+4oq6u/fr5EkSqHf96tK9UgK6ryyaVJ0O06T F62QcCtH8Qp7UdZipJ/UhkaCZ28j8MHHkiafn7VgD6xfYgkawsRe72A3gTW3z3cq TPCDigjTi9AyXWMeMNQKUa7rpcO5Bu9XDWr06cNr+Hkohax152td3nxe3+Ac+muX bQPOPZlIDY1jTwNRwX3g/+KyuJsZAN/TTVGfvdwZYBvMsGWVljmPeMNdbjSdSC8S vdCe58R8kAEtJx1ioJjga1VjEp4u+YzoiPS8TRl7L4Wmv/cLQ9LUqBcVlSEe3M27 WieM+Rm4vgtOHF5p+DU4EGh7HeSkOB4q0+Umiqu0hZhj3MmhbmkUgQUvpNLEoyb8 aJF6b4rFLHNuHbGqdhEO5wCrs5/bmwAUBZfQJornskARs1hpUaJDzox4IQEHtbDt 2O6WYus62P/lsIcssmKDRSZEppjWkvAt6E/vlAqNzFxr
  • From Marc Haber@21:1/5 to All on Fri Apr 12 15:10:01 2024
    On Tue, 9 Apr 2024 20:51:45 +0200, Gioele Barabucci <gioele@svario.it>
    wrote:
    Asking maintainers "to use git" means: please push your changes, even
    those unreleased to a public git repository (salsa, github, codeberg,
    your own domain...), so other people can contribute 1) knowing that they
    are working against the same sources the maintainer has on their hard
    drive, and 2) using git-based workflows.

    To have this actually work, I'd like to have published best-practice
    things such like "branches with a 'wip-' prefix can have their history rewritten any time" so that I can use git rebase --autosquash
    --interactive to fix my commit errors even on branches that I have
    already pushed without feeling bad for doing so.

    dgit is both a Web interface to browse git repositories as wells as a
    system to access the Debian archive as if it were a git repository, so
    you can "dgit push" a branch and have the resulting binary uploaded to
    the archive. (Yes, I'm simplifying here, but that's the gist.)

    It is also not well documented for a beginner. I think that the dgit
    docs are fine for someone who is already familiar with the tool and
    has been using it for some time, but I have tried to read myself into
    dgit multiple times and utterly failed with that.

    Salsa is a forge, i.e. a combination of a Web interface, a git server,
    and a set of integrated features. In comparison to dgit, salsa has, like
    most forges:

    * Merge requests: where people can suggest changes and discuss them with >line-based comments (accessible via email, no need to use the Web interface)

    * Continuous integration pipelines: as soon as you push a commit,
    Salsa-CI will try to build a package, cross build it, test it against >piuparts, lintian a bunch of other QA tools (kudos to the Salsa-CI >developers).

    * Integrations with two dozen tools (irc, jenkins, mattermost, bugzilla,
    but funnily enough not BTS).

    * Project specific wikis, snippets, Docker images.

    * And with tag2upload salsa fulfills 50% of dgit functionality.

    And, a web interface which make the learning curve a lot less steep.

    Greetings
    Marc
    --
    ---------------------------------------------------------------------------- Marc Haber | " Questions are the | Mailadresse im Header Rhein-Neckar, DE | Beginning of Wisdom " |
    Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 6224 1600402

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marc Haber@21:1/5 to holger@layer-acht.org on Fri Apr 12 15:00:01 2024
    On Tue, 9 Apr 2024 18:37:23 +0000, Holger Levsen
    <holger@layer-acht.org> wrote:
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership.

    Agreed.

    Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    Agreed. It is too easy for three singel maintainers to form a pro
    forma team where everyone works on their packages and not on the
    others'. You cannot enforce team work.

    Greetings
    Marc
    --
    ---------------------------------------------------------------------------- Marc Haber | " Questions are the | Mailadresse im Header Rhein-Neckar, DE | Beginning of Wisdom " |
    Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 6224 1600402

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marc Haber@21:1/5 to mike.gabriel@das-netzwerkteam.de on Fri Apr 12 15:10:01 2024
    On Fri, 12 Apr 2024 09:26:10 +0000, Mike Gabriel <mike.gabriel@das-netzwerkteam.de> wrote:
    Also regarding gbp, my packaging workflow does not require it >(debian/-folder-only in Git). Being enforced to use some other pkg'ing
    style would reduce my fun and end up with less productivity, I fear.
    The gbp workflow has its pros, but for me it is a too complex overhead >without much gain to the end result (the uploaded package).

    The debian/-only layout was quite common in the svn days and back then
    we had adequate tooling to support that but those tools have rotted
    away, it feels unnatural to me, and, frankly, exim's debian/-only
    layout (that I introduced myself fifteen^wtwenty years ago) is the
    main reason why I am a mostly inactive member on the exim team since I
    still don't know any more how to properly build the package.

    Greetings
    Marc
    --
    ---------------------------------------------------------------------------- Marc Haber | " Questions are the | Mailadresse im Header Rhein-Neckar, DE | Beginning of Wisdom " |
    Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 6224 1600402

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gioele Barabucci@21:1/5 to Marc Haber on Fri Apr 12 15:20:01 2024
    On 12/04/24 15:00, Marc Haber wrote:
    On Fri, 12 Apr 2024 09:26:10 +0000, Mike Gabriel <mike.gabriel@das-netzwerkteam.de> wrote:
    Also regarding gbp, my packaging workflow does not require it
    (debian/-folder-only in Git). Being enforced to use some other pkg'ing
    style would reduce my fun and end up with less productivity, I fear.
    The gbp workflow has its pros, but for me it is a too complex overhead
    without much gain to the end result (the uploaded package).

    The debian/-only layout was quite common in the svn days and back then
    we had adequate tooling to support that but those tools have rotted
    away, it feels unnatural to me, and, frankly, exim's debian/-only
    layout (that I introduced myself fifteen^wtwenty years ago) is the
    main reason why I am a mostly inactive member on the exim team since I
    still don't know any more how to properly build the package.

    This is not an endorsement of debian/-only repos, but building
    debian/-only packages using gbp is not hard:

    $ git clone https://salsa.debian.org/exim-team/exim4.git
    $ cd exim4
    $ cat <<EOF > debian/gbp.conf
    [DEFAULT]
    export-dir = ../
    overlay = True
    debian_branch = master
    EOF
    $ origtargz
    $ gbp buildpackage --git-ignore-new --git-no-create-orig

    (This is more a praise of gbp rather than a defense of debian/-only repos.)

    --
    Gioele Barabucci

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marc Haber@21:1/5 to All on Fri Apr 12 17:20:01 2024
    On Wed, 10 Apr 2024 22:44:25 +0200, Andreas Tille <andreas@an3as.eu>
    wrote:
    'Require' is probably the wrong word. I simply have heard from several >potential young contributors that they feel blocked by the tooling and >specifically not everything in Git.

    That does not only apply to young contributors. I am an old fart and I
    still shy back from packages where I need to familiarize myself with
    an uncommon packaging toolchain.

    then pull them,
    maybe into different branches,

    git-buildpackage maintains two or three branches: The main packaging
    branch and an upstream branch. The pristine-tar branch is optional (but >default in the teams I'm working in)

    And not (any more?) default in the tools, thus easily forgotten.

    Greetings
    MArc
    --
    ---------------------------------------------------------------------------- Marc Haber | " Questions are the | Mailadresse im Header Rhein-Neckar, DE | Beginning of Wisdom " |
    Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 6224 1600402

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to All on Fri Apr 12 18:20:02 2024
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------fQz8svKBm3sm0qPPLzpgrKYc
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGksDQoNCk9uIDEzLjA0LjI0IDAwOjE5LCBNYXJjIEhhYmVyIHdyb3RlOg0KDQo+PiAnUmVx dWlyZScgaXMgcHJvYmFibHkgdGhlIHdyb25nIHdvcmQuICBJIHNpbXBseSBoYXZlIGhlYXJk IGZyb20gc2V2ZXJhbA0KPj4gcG90ZW50aWFsIHlvdW5nIGNvbnRyaWJ1dG9ycyB0aGF0IHRo ZXkgZmVlbCBibG9ja2VkIGJ5IHRoZSB0b29saW5nIGFuZA0KPj4gc3BlY2lmaWNhbGx5IG5v dCBldmVyeXRoaW5nIGluIEdpdC4NCg0KPiBUaGF0IGRvZXMgbm90IG9ubHkgYXBwbHkgdG8g eW91bmcgY29udHJpYnV0b3JzLiBJIGFtIGFuIG9sZCBmYXJ0IGFuZCBJDQo+IHN0aWxsIHNo eSBiYWNrIGZyb20gcGFja2FnZXMgd2hlcmUgSSBuZWVkIHRvIGZhbWlsaWFyaXplIG15c2Vs ZiB3aXRoDQo+IGFuIHVuY29tbW9uIHBhY2thZ2luZyB0b29sY2hhaW4uDQoNCldlIGNhbm5v dCBoZWxwIHBlb3BsZSB3aG8gd2FudCBEZWJpYW4gcGFja2FnaW5nIHRvIHdvcmsgbGlrZSBH aXQsIA0KYmVjYXVzZSBHaXQgaXMgbm90IGEgcGFja2FnaW5nIHRvb2wsIGFuZCBuZWl0aGVy IGFyZSB0aGUgZm9yZ2VzLg0KDQpXZSdyZSBub3QgZXZlbiBkb2luZyBhbnlvbmUgYSBmYXZv dXIgYnkgaW50cm9kdWNpbmcgdGhlIGdpdCBiYXNlZCANCndvcmtmbG93cyBmaXJzdCwgYmVj YXVzZSBhYm91dCBoYWxmIG9mIHRoZSB0ZWNobmlxdWVzIHBlb3BsZSBrbm93IGZyb20gDQpn aXQgd2lsbCBjb25mbGljdCB3aXRoIHNvbWV0aGluZyBnaXQtYnVpbGRwYWNrYWdlIG9yIGRn aXQgZG9lcywgYW5kIA0Kd2l0aG91dCBhIG1lbnRhbCBtb2RlbCBvZiBob3cgRGViaWFuIHBh Y2thZ2luZyBpcyBzdXBwb3NlZCB0byB3b3JrIA0Kc3RhbmRhbG9uZSwgdGhleSBoYXZlIG5v IGNoYW5jZSBvZiBzb2x2aW5nIGV2ZW4gdGhlIHNpbXBsZXN0IHByb2JsZW0uDQoNCkZvciBl eGFtcGxlLCBhbnkgcmVwb3NpdG9yeSB0aGF0IGRvZXMgbm90IGxpc3QgZGViaWFuL2ZpbGVz IGFuZCANCmRlYmlhbi8qLnN1YnN0dmFycyBpbiB0aGUgZ2l0aWdub3JlIHdpbGwgZmFpbCB0 byBidWlsZCB0d2ljZSBpbiBhIHJvdywgDQpiZWNhdXNlIHRoZXNlIGZpbGVzIGFyZSBjcmVh dGVkIGFuZCBhcmUgc3Vic2VxdWVudGx5IHVudHJhY2tlZC4gT25seSANCkRlYmlhbiBwYWNr YWdpbmcga25vd2xlZGdlIGNhbiB0ZWxsIHlvdSB0aGF0IHRoZXNlIHNob3VsZCBuZXZlciBi ZSANCmNoZWNrZWQgaW4gYW5kIGNhbiBiZSBpZ25vcmVkIC0tIG9yIHdlIG1ha2UgcGVvcGxl IHJlbGlhbnQgb24gYSBtYWdpYyANCnRvb2wgdG8gc2V0IGl0IHVwIHByb3Blcmx5IGZvciB0 aGVtLg0KDQpPbmNlIHBlb3BsZSBhcmUgZmFtaWxpYXIgd2l0aCBob3cgRGViaWFuIHBhY2th Z2luZyB3b3Jrcywgd2UgY2FuIA0KaW50cm9kdWNlIHRoZSBnaXQgaW50ZXJmYWNlcyBvbiB0 b3AuIEJlZm9yZSB0aGF0LCBnaXQgaXMgbW9yZSBvZiBhIA0KaGluZHJhbmNlIHRoYW4gYSBi ZW5lZml0IHRvIG5ldyBjb250cmlidXRvcnMsIHByZWNpc2VseSBiZWNhdXNlIGl0IGxvb2tz IA0KZmFtaWxpYXIsIGJ1dCB0aGUga25vd2xlZGdlIGlzIG5vdCB0cmFuc2ZlcmFibGUuDQoN CiAgICBTaW1vbg0K

    --------------fQz8svKBm3sm0qPPLzpgrKYc--

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEEtjuqOJSXmNjSiX3Tfr04e7CZCBEFAmYZXmYACgkQfr04e7CZ CBEErwf+PrXvHC2P0gkqFVoKDPsmu1LC57HEBuY0bFitOM4v4YaldVsmhARZpQju G+y74yhfglmRiU+jXneysRUImbiyFVjP7f078s/SVB9mB3Bg2fRrkMb5PPiIWTcu Yff4Pm16W+YrrrnpayhSxz0OOwyHsecuMQnI0xhGDZ9cHRRtObhgKcv9Q4ZuiVLX WUc+cqyoGuwOWIuX5IHkLsfwWVRvkFhLwjBWXyKaCAmZ7Em+SmPlAaPoXzypxGUs B9mDXiwM8pX8QOqS7VP9WQaug89HUpJ0T8DxdvzVy1oCAoDxCJdRpFR0lJgyzVmP vr4LNLYjCrFjdpYCPLiLk0vW9FIEVA==
    =7B0/
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Simon Richter on Fri Apr 12 19:30:01 2024
    On Fri, 12 Apr 2024 at 17:17, Simon Richter <sjr@debian.org> wrote:

    Hi,

    On 13.04.24 00:19, Marc Haber wrote:

    'Require' is probably the wrong word. I simply have heard from several
    potential young contributors that they feel blocked by the tooling and
    specifically not everything in Git.

    That does not only apply to young contributors. I am an old fart and I still shy back from packages where I need to familiarize myself with
    an uncommon packaging toolchain.

    We cannot help people who want Debian packaging to work like Git,
    because Git is not a packaging tool, and neither are the forges.

    We're not even doing anyone a favour by introducing the git based
    workflows first, because about half of the techniques people know from
    git will conflict with something git-buildpackage or dgit does, and
    without a mental model of how Debian packaging is supposed to work standalone, they have no chance of solving even the simplest problem.

    For example, any repository that does not list debian/files and debian/*.substvars in the gitignore will fail to build twice in a row, because these files are created and are subsequently untracked. Only
    Debian packaging knowledge can tell you that these should never be
    checked in and can be ignored -- or we make people reliant on a magic
    tool to set it up properly for them.

    Once people are familiar with how Debian packaging works, we can
    introduce the git interfaces on top. Before that, git is more of a
    hindrance than a benefit to new contributors, precisely because it looks familiar, but the knowledge is not transferable.

    New contributors won't start in a vacuum, most will start contributing
    first to existing projects on Salsa, which are already set up and
    configured to do what is needed, if it is needed. Git is the bare
    minimum these days, and has been for years. Salsa is the best thing
    that has happened to Debian the past decade, and the Salsa team will
    forever have my gratitude for the great job they have done and
    continue to do.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Bastian Blank@21:1/5 to Holger Levsen on Fri Apr 12 22:00:01 2024
    On Tue, Apr 09, 2024 at 06:37:23PM +0000, Holger Levsen wrote:
    - I very much dislike git-buildpackage, too much magic. I try to avoid it
    where I can.

    We still like those VCS-in-VCS workflows over everything else. Those debian/patches, where you need to call something special and can't just
    re-use upstreams CI tests. And which conflict outside of git with the
    next upstream version.

    I just stopped that and use git alone.

    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    What would that even mean? What is a team anyway?

    Bastian

    --
    Beam me up, Scotty, there's no intelligent life down here!

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Sat Apr 13 10:10:01 2024
    Am Sat, Apr 13, 2024 at 01:16:37AM +0900 schrieb Simon Richter:

    For example, any repository that does not list debian/files and debian/*.substvars in the gitignore will fail to build twice in a row, because these files are created and are subsequently untracked.

    Sorry, no. We should teach people to build in a chroot which does
    not leave this stuff inside local debian/ dir.

    Once people are familiar with how Debian packaging works, we can introduce the git interfaces on top. Before that, git is more of a hindrance than a benefit to new contributors, precisely because it looks familiar, but the knowledge is not transferable.

    From my mentoring work I can confirm this sequence is not necessary for everyone. You might have different experience, but I would not subscribe
    this as a general rule.

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Andreas Tille on Sat Apr 13 10:40:02 2024
    On Sat, Apr 13, 2024 at 10:08:07AM +0200, Andreas Tille wrote:
    For example, any repository that does not list debian/files and debian/*.substvars in the gitignore will fail to build twice in a row, because these files are created and are subsequently untracked.

    Sorry, no. We should teach people to build in a chroot which does
    not leave this stuff inside local debian/ dir.
    I was afraid that's what "or we make people reliant on a magic tool to set
    it up properly for them" means.
    (technically, the way to not touch the workdir at all is gbp's
    --export-dir, which *is* a magic mode of a magic tool in the world where neither are parts of the default workflow but at the same time it's so
    much better than not doing this)

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmYaQ6stFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh cecQAJRuCzito0GzgwRTSJ+fZZu7CZuyqjezaVPSZbkgA5oO2AKkOhXTip1Hr10W HtNxa6cBpsrKKgTI6LWJn4aBcP5tMzWkVrpnhD749CH4F/luxVxW6wi0S4EQzhWE 2fVDxidtb0QAWOdT5T5ozMmOqrOtT8Ecx/3NgEm3kspituhqJcV+jP0qmAlAUafT n71BAe9W8rjLLBwwJGkmwLkur52UyWm37oILYCEdJu/YUms4sVN0UVDV0Isa1Eu8 Z8qtDktON2Im3nx8F+htNBF08lNtLsGYgIW2elIoj1rSGSRAMjrhvotDh8Wasp+k 26Dq4ebc9TRCo6MXjyBFjpcQcNTHLRty8p7xtwypRkgyUn7OHJX4hENGSj8qw/qu i1Dkh2Ztjy19Vn+Z3iyEBOX7H/IVImDFKXyuQb0yAxtGcolRGwhQyjegwP+UjrGJ haTaiD4k8aivbkxF6303g1legmt8mIKLwoQ5lrihM67TC+uSFD9ehPSIkC5eVORO VowK7rf8UNAG5yN79uPcr0ZdLiD99ntMghgOAHe+U/RbCL5gLbS1CCuprJJhid2C aWSgZmaNRpGE7XLeNSK7reEI26RUInF8FwG7xFZ3Kn+FDFDHtPE2HN5YSVNx5Iq2 yMg9+18UdMgpoZnbN2eDPn5EPUClC5uu+iRGrw3MFm2XUa3e
    =Qz19
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Nilesh Patra@21:1/5 to Andreas Tille on Sat Apr 13 10:40:02 2024
    On Sat, Apr 13, 2024 at 10:08:07AM +0200, Andreas Tille wrote:
    Am Sat, Apr 13, 2024 at 01:16:37AM +0900 schrieb Simon Richter:

    For example, any repository that does not list debian/files and debian/*.substvars in the gitignore will fail to build twice in a row, because these files are created and are subsequently untracked.

    Sorry, no. We should teach people to build in a chroot which does
    not leave this stuff inside local debian/ dir.

    True. Or add relevant files and stash (which is what I do for non-chroot builds).

    Once people are familiar with how Debian packaging works, we can introduce the git interfaces on top. Before that, git is more of a hindrance than a benefit to new contributors, precisely because it looks familiar, but the knowledge is not transferable.

    From my mentoring work I can confirm this sequence is not necessary for everyone. You might have different experience, but I would not subscribe this as a general rule.

    To add in more perspective to it -- I started contributing to debian in 2019. I don't think I would have the motivation to contribute further had it not been for a git based workflow and salsa. In the sense that it'd have made it an uphill journey for me to know how to send patches. Git was something I was familiar with so I did not have to spend time struggling with basic things.

    Like Andreas, I have mentored many new comers too, advocated them to be DMs/DDs and I never found any of them complaining about git workflow so what is quoted above is not true as a general rule.

    People who did debian packaging without git for a long time and then had to switch/use a git based workflow might find it a little counter-intuitive which also stems from the fact that people generally resist change. But the same is not necessarily true for new contributors.

    On Sat, Apr 13, 2024 at 01:16:37AM +0900, Simon Richter wrote:
    We're not even doing anyone a favour by introducing the git based workflows first, because about half of the techniques people know from git will conflict with something git-buildpackage or dgit does, and without a mental model of how Debian packaging is supposed to work standalone, they have no chance of solving even the simplest problem.

    I did not have a solid understanding of how debian packaging works standalone, and had only very little idea about most of the things when I started -- it only
    gets better with time.
    But I believe I did solve at least some simple problems to qualify for
    becoming a DD :-)

    Best,
    Nilesh

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQSglbZu4JAkvuai8HIqJ5BL1yQ+2gUCZhpEMAAKCRAqJ5BL1yQ+ 2t+7AP94Jdmv1dqYzsfmOkWZQAFvw6Gb9GhqAgeVYoayJRB76gEA5MNSoUGTpM7z 5+U/5UmBXks2AewUBKfS76i+gx+1tQM=
    =Z4Nx
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvo Tomaselli@21:1/5 to All on Sat Apr 13 11:20:01 2024
    New contributors won't start in a vacuum, most will start contributing
    first to existing projects on Salsa

    Or maybe they start with an ITP+RFS… was that an informed statement or a supposition?

    --
    Salvo Tomaselli

    "Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
    -- Galileo Galilei

    https://ltworf.codeberg.page/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Salvo Tomaselli on Sat Apr 13 12:20:01 2024
    On Sat, 13 Apr 2024 at 10:11, Salvo Tomaselli <tiposchi@tiscali.it> wrote:

    New contributors won't start in a vacuum, most will start contributing first to existing projects on Salsa

    Or maybe they start with an ITP+RFS… was that an informed statement or a supposition?

    It is my experience in receiving patches from non-project members. It
    is also my experience that every such contributor I talked to rated
    the ITP/RFS and other mail-based bug reporting on a range from
    hilarious (in a bad way, as in: "it's 202x and you still do that?
    seriously?") to infuriatingly frustrating and confusing.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to Mike Gabriel on Sun Apr 14 02:00:01 2024
    On Fri, 12 Apr 2024 09:26:10 +0000, Mike Gabriel wrote:

    Debian is about freedom, so let's apply that to free choice of the tooling
    to be usable.

    I disagree. "Freedom" is about Free Software, so-called freedom in
    packaging has high costs as people (who look at more than their
    "own" favourite packages) need to known and learn a plethora of
    packaging helper and styles and modes etc. This causes energy drains
    and slows down the whole project. Let's please stop this.


    Cheers,
    gregor

    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmYbGrxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgaf2Q/+KCLQ4jJrnTk31txF6Iod8BzLp/+zooT1XcUqMohjExtzzX/vmZhY5vhU whiX1XLs6IxWdECDPrAEKFAj0YlADLi6DGzsc1le/ot+W7yX/vsxMiHeVsWGnMgo K2Qvmp7GqyBJmCnnyZk3oylHEejRGQ1/US0RjKZBozXFGHQmbaQME64iwdX4uUGI xcpRPVjAlj85htz0ClOuQcpQt5ahuU1ReTNwZNk2NKkHovpWJYVOfI2cuDcug+/r Yp0NfBbLFKHrPT7HcHLdBXaHFarVka2cEBX3CGmZ8csSlz12ix7FYhyJCj6lSDjL tO5cL5apDNCirRqXX3eA6ugtd+8KIIUaDyYXw8sxGUz1zziHXca9EeTYwe9o6l1w S3IuazXtasFzvAs3nJkLWXeZUyHUA31AjRcSZBcE5GD3CRhQl9Syz7cp4mOj9IEF el186NjPGSZIJME5PGVfai4AqqgVuy31XlHaMCm+sC0VXoPGCFwV1U0wml7D4p7K 85nBHZ76a3JT6V9zTYkw2FC906pC7TwdAt8/D4c7sAd6oAN/Fu52oBaZqvofz51x dmv8OHKDPgDhyHpF/CSK/82dFhQELRK2wdC81w7c881LuA3ScbvdtXfm9tO9HGUi NFFOS+7UUbOGRlUAL9qmPbMqQl7BiO8cv7OUW/8OXZwvJCyodZA=
    =hGw9
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Sun Apr 14 10:50:01 2024
    Am Fri, Apr 12, 2024 at 09:36:25PM +0200 schrieb Bastian Blank:
    - I also think disallowing single-person maintainership would be very unwise,
    though I agree team maintenance in general is probably better than
    single-person maintainership. Still disallowing single-person maintainership
    doesnt make a team and motivation lost is often motivation lost forever.

    What would that even mean? What is a team anyway?

    It means you motivate others to do the work you might not be able to do
    by helping them in the first place.

    I gave other answers in several talks page[1].

    Kind regards
    Andreas.

    [1] https://people.debian.org/~tille/talks/

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Matthias Urlichs@21:1/5 to All on Sun Apr 14 15:50:01 2024
    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------10F0ZkK8rlsZk2D6iD5Ie0US
    Content-Type: multipart/alternative;
    boundary="------------8wGUasN0FLD3HYLOtw84dEUL"

    --------------8wGUasN0FLD3HYLOtw84dEUL
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    T24gMTIuMDQuMjQgMDA6NTIsIEJpbGwgQWxsb21iZXJ0IHdyb3RlOg0KPiBUaGVzZSBjb250 cmlidXRpb25zIGFsd2F5cyBuZWVkIHRvIGJlIGNhcmVmdWxsIHJldmlld2VkIGJlZm9yZSBi ZWluZw0KPiBhY2NlcHRlZC4gQXMgbGlrZWx5IGFzIG5vdCwgdGhleSBhcmUgZWl0aGVyIHNs aWdodGx5IGluY29ycmVjdCBvcg0KPiBpbnRyb2R1Y2luZyBzdWJ0bGUgYnJlYWthZ2VzIGlu IHNvbWUgY2FzZSB0aGUgc3VibWl0dGVyIGRpZCBub3QNCj4gZW52aXNpb24uIFRoaXMgaXMg d2hlcmUgYW4gZXhwZXJ0IG1haW50YWluZXIgaXMgbW9zdCBuZWVkZWQuDQoNCldlbGwgdGhh dCdzIHlvdXIgdGFrZS4NCg0KTXkgdGFrZSBpcyB0aGF0IHdoZW4gY29udHJpYnV0aW9ucyB0 byBwYWNrYWdpbmcgImFsd2F5cyIgbmVlZCBhIGNhcmVmdWwgDQpyZXZpZXcsIHRoYXQncyBu b3TCoCB2aXJ0dWUsIHRoYXQncyBhIHN5bXB0b20gb2YgdW5kZXJseWluZyBzdHJ1Y3R1cmFs IA0KcHJvYmxlbXMgd2l0aCBwYWNrYWdlIG1hbmFnZW1lbnQuDQoNCldlIHNob3VsZCBzdHJp dmUgdG8gZml4IHRoZSByb290IGNhdXNlIGluc3RlYWQgb2YgcmVxdWlyaW5nIG1haW50YWlu ZXJzIA0KdG8gYmUgcGFja2FnaW5nIGV4cGVydHMuIFRoYXQgZG9lc24ndCBzY2FsZS4NCg0K LS0gDQotLSByZWdhcmRzDQotLSANCi0tIE1hdHRoaWFzIFVybGljaHMNCg0K --------------8wGUasN0FLD3HYLOtw84dEUL
    Content-Type: text/html; charset=UTF-8
    Content-Transfer-Encoding: quoted-printable

    <!DOCTYPE html>
    <html>
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    </head>
    <body>
    <div class="moz-cite-prefix">On 12.04.24 00:52, Bill Allombert
    wrote:<br>
    </div>
    <blockquote type="cite"
    cite="mid:ZhhpuyZStHDjfBkm@master.debian.org">
    <pre>These contributions always need to be carefull reviewed before being accepted. As likely as not, they are either slightly incorrect or
    introducing subtle breakages in some case the submitter did not
    envision. This is where an expert maintainer is most needed. </pre>
    </blockquote>
    <p>Well that's your take.</p>
    <p>My take is that when contributions to packaging "always" need a
    careful review, that's not  virtue, that's a symptom of underlying
    structural problems with package management.</p>
    <p>We should strive to fix the root cause instead of requiring
    maintainers to be packaging experts. That doesn't scale.</p>
    <pre class="moz-signature" cols="72">--
    -- regards
    --
    -- Matthias Urlichs</pre>
    </body>
    </html>

    --------------8wGUasN0FLD3HYLOtw84dEUL--

    --------------10F0ZkK8rlsZk2D6iD5Ie0US--

    -----BEGIN PGP SIGNATURE-----

    wsF5BAABCAAjFiEEr9eXgvO67AILKKGfcs+OXiW0wpMFAmYb0zUFAwAAAAAACgkQcs+OXiW0wpN3 BQ/9Hsf2qD/0Dsxeyw9eAdY5cKMWZSpzkiuOtw8yu5pky5yEKfM5fAVEmcEs/RObo/1R4NVLp8tC hW+/+71kKQW/EwKMenJnzUny2w83f4psFegDmFMwj9lJHRL4iTrWPpAEk5y7/gDZlf7AgzeLb997 xYgVb1JUqQSjsimMQQ4kgzV4iHl1YK9rIczJquFC6eCaQXHVdh7JcQsGmQM2TPeGqq2aZTXRE6/P JihEpA6MH8Ad62Uvo07dbBBYh1GoBH9GB20kSgyyssMuNpSai+jglqBYiArAw0Fx3vtk+ldVYgDG ZDdoagHmjedzxM8IgThv2E3kB3x6k4U8+gbwW/gI4iExy0IpOeA9IFWyw1q1q3araaAS1QOtZS3B L21iz+ucjmSwSw4n9t2MUXo64PnX/KwUIPjh5fdIATgaF6v14S36uWSMIuFm/ELAlWvWtezT9Jrn U02xWI4nItpBRNovdEcbDIW3AYCPx/nbbq6rVhuGwmJJrZOHCBDnPGR41btmFTW6ZYKepnnr0m07 s84M+jB664Uz7c93cmFX0mWr/sTLrloqeNY+FfgywQjmcOhT0NqgIWp5/0cffa4P+HTNkIop+RDR jxRP/r1j1UscTkwueLx+H1Y17u5lANNQm+yirMJQNmBcXT9hmpVr2fM0hI06vvDhqejzy/wf2dD6 6pE=
    =wRaH
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
  • From Scott Kitterman@21:1/5 to Bernd Zeimetz on Mon May 20 22:50:01 2024
    On May 20, 2024 7:54:46 PM UTC, Bernd Zeimetz <bernd@bzed.de> wrote:
    Hi,

    On Sun, 2024-04-07 at 16:44 +0200, Andreas Tille wrote:

    Do you think that mandating Salsa is a sensible step in this
    direction?


    Absolutely.

    Also I think requiring a common git layout and the usage of recent
    versions of dh should be required. Using merge requests instead of
    sending patches should be recommended, or at least we could have a
    service that creates and maintains merge requests based on patches
    found in bug reports.

    All these things should make it much more easy for other people or
    automated tools to send merge requests or keep maintaining a package in
    case the original maintainer becomes MIA.


    Mandating a specific git layout is a big jump from not requiring a VCS at all. Do you really think we should remove packages from Debian which don't conform to a specific layout (in my mind, that's the implication of mandating it)?

    Scott K

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Bernd Zeimetz on Tue May 21 03:10:01 2024
    Hi,

    On 5/21/24 07:43, Bernd Zeimetz wrote:

    Also its a gitlab instance. There are all kinds of documentation,
    tutorials, videos and software for/about gitlab, including lots of
    beginner friendly options. There is a whole ecosystem around gitlab, it
    does not depend on a few (two?) developers.

    The ecosystem, however, does not support our workflows, and adapting it
    to do that is even more effort than maintaining our own tools. We would
    not even save effort in onboarding, because we'd still need to explain
    the Debian specific aspects, only we would now also need to explain
    which parts of the git workflow we can keep and which parts don't work
    for us.

    The workflows of GitHub (more deployment focused) and GitLab (more
    development focused) are already different enough that I have seen organizations struggle after making the wrong choice.

    git-buildpackage is not a good mapping of packages to git, but the best
    you can do without modifying git itself. Actually using it requires more
    than beginner-level knowledge of git and suspension of any previously
    held convictions that every single commit should be buildable (because
    gbp likes to generate ones that aren't).

    A better approach would not treat Debian metadata as git data. Even the
    most vocal advocate of switching everything to Salsa writes in his MR
    that the changelog should not be touched in a commit, because it creates conflicts, and instead a manual step will need to be performed later.

    At the very least, GitLab integration would allow me to automate such a
    simple thing as changelog handling in a more comfortable way than
    displaying instructions how to download the conflicting branch into
    local git, resolve the conflicts manually, and force-push the branch to
    solve the problem.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Simon Richter on Tue May 21 03:50:01 2024
    On Tue, 21 May 2024 at 02:08, Simon Richter <sjr@debian.org> wrote:

    Hi,

    On 5/21/24 07:43, Bernd Zeimetz wrote:

    Also its a gitlab instance. There are all kinds of documentation, tutorials, videos and software for/about gitlab, including lots of
    beginner friendly options. There is a whole ecosystem around gitlab, it does not depend on a few (two?) developers.

    The ecosystem, however, does not support our workflows, and adapting it
    to do that is even more effort than maintaining our own tools. We would
    not even save effort in onboarding, because we'd still need to explain
    the Debian specific aspects, only we would now also need to explain
    which parts of the git workflow we can keep and which parts don't work
    for us.

    That's a problem of our workflows, which are horrible. The solution is
    not to double down on them. Simply due to demographics, the number of
    people who can actually stomach them, let alone maintain them, is only
    ever going to shrink.

    The workflows of GitHub (more deployment focused) and GitLab (more development focused) are already different enough that I have seen organizations struggle after making the wrong choice.

    Most large organizations and most distributions have additional
    tooling on top of git to perform certain tasks, that's really not a
    problem nor surprising, because it's still git and everyone
    understands it. Going from git push to gbp push when importing new
    releases is really not that disruptive.

    git-buildpackage is not a good mapping of packages to git, but the best
    you can do without modifying git itself. Actually using it requires more
    than beginner-level knowledge of git and suspension of any previously
    held convictions that every single commit should be buildable (because
    gbp likes to generate ones that aren't).

    Only when importing new releases, so not really an issue. "Every
    commit builds" is a good aspiration but it is incredibly rare that it
    is 100% the case with no exception ever at any point in the history of
    a repo.

    A better approach would not treat Debian metadata as git data. Even the
    most vocal advocate of switching everything to Salsa writes in his MR
    that the changelog should not be touched in a commit, because it creates conflicts, and instead a manual step will need to be performed later.

    At the very least, GitLab integration would allow me to automate such a simple thing as changelog handling in a more comfortable way than
    displaying instructions how to download the conflicting branch into
    local git, resolve the conflicts manually, and force-push the branch to
    solve the problem.

    gbp dch --commit --release

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?T3R0byBLZWvDpGzDpGluZW4=?@21:1/5 to All on Tue May 21 04:20:01 2024
    Hi Simon!

    A better approach would not treat Debian metadata as git data. Even the most vocal advocate of switching everything to Salsa writes in his MR
    that the changelog should not be touched in a commit, because it creates conflicts, and instead a manual step will need to be performed later.

    Not exactly, I said it is unnecessary work and doing it will just
    cause more work.

    Exact quote: "These commits have intentionally no debian/changelog
    updates as it causes every single rebase or cherry-pick of a commit to
    always have a merge conflict. It is much better to have all commits
    as-is, and then right before upload just run gbp-dch --auto to
    automatically generate the changelog."

    Thus better not to inject debian/changelog changes in every single
    patch and instead..

    At the very least, GitLab integration would allow me to automate such a simple thing as changelog handling in a more comfortable way than displaying instructions how to download the conflicting branch into
    local git, resolve the conflicts manually, and force-push the branch to solve the problem.

    gbp dch --commit --release

    ..just let automation handle it, like Luca and many others already
    know. Personally I prefer the variant `gbp dch --verbose --auto
    --release` but essentially it does the same thing.

    Anyway, thanks Simon for doing a review on https://salsa.debian.org/debbugs-team/debbugs/-/merge_requests/19, at
    least I know you have tried using Salsa and are speaking from a point
    of some experience when criticising it (unlike apparently many
    others).

    Back on-topic of single-person maintainership - has anyone made a list
    of which packages have only *one* maintainer/git committer and are in
    the set of top-1000 or top-5000 Debian packages? We should perhaps ask
    those people why they don't have co-maintainership, and why they
    resist sharing the development work. Debbugs is one example - it has
    multiple open MRs and patches in the bug tracker but somehow the sole
    active maintainer does not see value in granting more people commit permissions. If we learn how these maintainers think, perhaps we can
    come up with a model to facilitate having more co-maintenance that can
    apply to the exact cases where co-maintenance is missing.

    - Otto

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Simon Richter on Tue May 21 04:30:01 2024
    Simon Richter <sjr@debian.org> writes:

    A better approach would not treat Debian metadata as git data. Even the
    most vocal advocate of switching everything to Salsa writes in his MR
    that the changelog should not be touched in a commit, because it creates conflicts, and instead a manual step will need to be performed later.

    This is not a Debian-specific problem and has nothing to do with any
    special properties of our workflows or differences between packaging and
    other software maintenance tasks. It's a common issue faced by everyone
    who has ever maintained a software package in Git and wanted to publish a change log.

    There are oodles of tools and workflows to handle this problem, ranging
    from writing the change log based on the Git commits when you're making
    the release to accumulating fragments of release notes in separate files
    and using a tool to merge them. dch's approach of using the Git commit messages is one of the standard solutions, one that will be familiar to
    many people who have faced this same problem in other contexts.

    The hard part with these sorts of problems is agreeing on the tool and
    workflow to use to solve it, something Debian struggles with more than
    most software projects because we lack a decision-making body that can say things like "we're going to use scriv" and make it stick. But that isn't because packaging is a special problem unsuited to Git. Git has a rich ecosystem with many effective solutions to problems of this sort. It's
    because we've chosen a governance model that intentionally makes central decision-making and therefore consistency and coordination difficult, in exchange for other perceived benefits.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Luca Boccassi on Tue May 21 04:20:01 2024
    Hi,

    On 5/21/24 10:43, Luca Boccassi wrote:

    The ecosystem, however, does not support our workflows, and adapting it
    to do that is even more effort than maintaining our own tools. [...]

    That's a problem of our workflows, which are horrible. The solution is
    not to double down on them.

    Our workflows are largely influenced by what we do here: we maintain
    packages. This is different from "developing software", or "operating infrastructure."

    If we can improve the workflows, then I'm all for it. What does not
    work, however, is to replace them with workflows from a different task.

    All we are doing here is providing a mapping of the packaging workflow
    onto a git software development workflow. It still remains a packaging workflow, because the *goal* of the workflow is the completion of
    packaging tasks.

    Providing an implementation layer does not change the goal layer, and
    GitLab does not provide any tools on the goal layer.

    If we had buttons in GitLab "import new upstream release" or "show
    issues affecting the stable release branch", I would consider that as
    support for a packaging workflow. As it is now, GitLab only supports the workflows that the implementation layer below the goal layer typically
    uses, including workflows that break the upper layer.

    At the very least, GitLab integration would allow me to automate such a
    simple thing as changelog handling in a more comfortable way than
    displaying instructions how to download the conflicting branch into
    local git, resolve the conflicts manually, and force-push the branch to
    solve the problem.

    gbp dch --commit --release

    Where is that button in GitLab?

    That's my point: GitLab is a step *back* from the commandline tools for
    git integration.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Bernd Zeimetz on Tue May 21 09:00:01 2024
    On Tue, May 21, 2024 at 12:32:52AM +0200, Bernd Zeimetz wrote:
    All these things should make it much more easy for other people or automated tools to send merge requests or keep maintaining a
    package in
    case the original maintainer becomes MIA.


    Mandating a specific git layout is a big jump from not requiring a
    VCS at all. 

    yes, its a big jump, but we are in 2024 and a modern workflow should be expected from a modern distribution.
    People will resign.

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmZMRXwtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 3LYP/jlH2dRYQmrnFP1863xqHnDt4U03ChAbtTTQ97WkgAQ3ETCdbJeGd27UDWZm oCO0IbDvTCHERAZKH+yEcpxPR3LT/Up/PnwUFZnWv8dW2phoy7b8EfiDXlfptRXq +XLvXtrsmcSRT1gC2d/PCBFXCIpyM+nOzRUJrNxOA6o4T7LnUSxPy13ONGEHog1C F+FSRLZL8xxxXQpsKnnlgoNApK8GrrILHk317NfYP2rK/E0HBijA5idVqqqacrpr 6NkzwypX1fIXt9LAWxLiouPASO4Ld0YeWHh0AmPPR83+7baacHuKCGowK1UUPfUq s3XVfKM8UcEKozc9U4tOsejpCZlj3lBi+at8CWx5M3vOb9zXvPcsUS/du/uTbnvE c6Ecsvnzjp06Q+vSJiHm5D7PksoTjmfQA5b5P5WFxVYzUQKkgG2dKFLtQRJxVo0f sHZ6ALHQIj1Igu/KE6fhudnlxKTNIy5zcTS+BIjQGdJwL7fbGE/6RkMZLFdr2eHv gil/56OnYfsQSYyLvtUL5Scz1aHhSITjdXVfjYOYuKWa8cYhE9OrLkxONbUEgQHZ V0kqf2nQNtQazYAZ2nhi3nw9yrIGO5rm7cXgEJL39J4eXlV2jiLTr+BbVK03Szkj LzPNR0DoiLPgNT3fj2nRsd0KjQNwozdZ/RZ9RS5WK2r35DWt
    =H6nn
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Philip Hands@21:1/5 to Bernd Zeimetz on Tue May 21 12:10:02 2024
    Bernd Zeimetz <bernd@bzed.de> writes:

    On Mon, 2024-05-20 at 20:47 +0000, Scott Kitterman wrote:

    All these things should make it much more easy for other people or
    automated tools to send merge requests or keep maintaining a
    package in
    case the original maintainer becomes MIA.


    Mandating a specific git layout is a big jump from not requiring a
    VCS at all. 

    yes, its a big jump, but we are in 2024 and a modern workflow should be expected from a modern distribution.

    Attempts at top-down imposition of new methods on Debian strike me as
    being unlikely to induce joy in anyone involved.

    After all, We're a self-selecting group of people who are prone to
    repeatedly walking the road less travelled.

    Do we even have a consensus on which layout is "best"?

    DEP-14 exists, but that is still candidate status, and even if it were accepted, it has a section "When to not follow the above recommendations"

    I suspect that there's a decent chunk of developers who generally just
    follow the status quo of every package they work on, without fuss.

    I rather like dgit for reducing the extent I have to think about this
    sort of thing, but I note that at least one person in this thread seems
    vexed by it, so we cannot even agree on the merits of that, apparently.

    Could it be that we mostly hear from the people at the extremities of
    opinion on issues like this? If so, I don't see how we're going to
    establish a consensus, and without that it's not going to be easy (or worthwhile) to pick a layout, nor to try and impose that on others.

    For anyone with an opinion, I'd suggest that you should try to make sure
    that DEP-14 reflects your opinion, and then work on getting people to
    adopt the use of DEP-14 and/or get DEP-14 accepted.

    That way, you'll be able to work towards consistency without having a
    massive and pointless fight, that will be sure to harden some people's
    opinion against you, making your wished-for outcome that much less
    likely.

    Cheers, Phil.

    P.S. I don't really give a damn about this issue, and am happy to use
    DEP-14 in general, or follow the current state of a particular package.
    If DEP-14 were to change radically, I'd be willing to switch to new recommendations, so if you care, please make it better if you can.
    --
    Philip Hands -- https://hands.com/~phil

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE3/FBWs4yJ/zyBwfW0EujoAEl1cAFAmZMcggACgkQ0EujoAEl 1cBx6hAAr8JSc3wmfEMnwKxAbBpQNUxkhMXSozIGmluMHXerg0uTfdDWxvEkss5H 454uHD1UrnPhT+Ymbj9N4clL+WN0ndqG45jMsBqWfKtYxcaZiNddwMcH3/caFkvG 3TccoQISBPuHHcbiAYSrPDfgGbZ56m6mXNkWievtF+NcNKf/jTZJa/8SiwzsF69J Fpu5GMU+6TfJel6FsWqtrgVPcAqO5icGzeIHqwzd/psdsemoMQU96HKEObjZ3pYp 1uVUvsUWigAHdrnMVr33gZMYxOTGrQyN8+fLSO4K3xxAZ09fDhHyNs9DM7Jrfpi7 DXht/kC8ixX0X8omqB87OvkptEFDdiD18W1ccLobTNoGs4yc6C6IQi9qc/fpNTgU qrtuFt/L2+sqSU93z4YcIHwHjV544XFL0/gBY2T1/Qk4rs4JfA+VwGy+LSy5Gzqo 4+N7CZo4ppTU6/JzP5Wqje88guckc6kmHLyr3Q7OykggJlOj9mAmiqWkyC4KlXeB Nbe+2z6hoG6K5JWCd2jc8k68BhQJhM8mrTJNTMUXW3kymowdRv7lI8enI54etbtZ iMm9XJMkZM3ZL+K3tWXxqFSredYcKcTAa5zhdZ1cfBrnbIo2pYwjBdNCCcL4zGct 10Iltd8aHIFMOaQz47WgwLjKD06ogzzDxOlTZNYwsdXCGpUx1s0=kN7o
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gatewa
  • From Luca Boccassi@21:1/5 to Simon Richter on Tue May 21 12:20:01 2024
    On Tue, 21 May 2024 at 03:16, Simon Richter <sjr@debian.org> wrote:

    Hi,

    On 5/21/24 10:43, Luca Boccassi wrote:

    The ecosystem, however, does not support our workflows, and adapting it
    to do that is even more effort than maintaining our own tools. [...]

    That's a problem of our workflows, which are horrible. The solution is
    not to double down on them.

    Our workflows are largely influenced by what we do here: we maintain packages. This is different from "developing software", or "operating infrastructure."

    Not really, our workflows are mainly influenced by whatever was
    available in the late 90s and has just kept chugging along on life
    support - hence FTP uploads, GPG signing tarballs, sending commands
    via emails. There are plenty of ways to maintain packages that do not
    involve any of that - see SUSE's OBS, etc.

    If we can improve the workflows, then I'm all for it. What does not
    work, however, is to replace them with workflows from a different task.

    All we are doing here is providing a mapping of the packaging workflow
    onto a git software development workflow. It still remains a packaging workflow, because the *goal* of the workflow is the completion of
    packaging tasks.

    Providing an implementation layer does not change the goal layer, and
    GitLab does not provide any tools on the goal layer.

    If we had buttons in GitLab "import new upstream release" or "show
    issues affecting the stable release branch", I would consider that as
    support for a packaging workflow. As it is now, GitLab only supports the workflows that the implementation layer below the goal layer typically
    uses, including workflows that break the upper layer.

    There's factually no need for any of that. As per
    https://trends.debian.net/ most packages today are on Salsa despite
    the lack of these buttons. The goal is to have an actual source code
    management system that allows forking, branching, rebasing, merging,
    navigating history, running integration tests. The fact that at some
    point one has to interact with crufty old ftp servers and dusty
    tarballs is not really relevant. Having a pipeline stage at the end of
    salsa-ci that does an upload for you would be a nice improvement, but
    it's by no means necessary to use Salsa effectively and productively,
    as the vast majority of cases are already showing in reality.

    At the very least, GitLab integration would allow me to automate such a
    simple thing as changelog handling in a more comfortable way than
    displaying instructions how to download the conflicting branch into
    local git, resolve the conflicts manually, and force-push the branch to
    solve the problem.

    gbp dch --commit --release

    Where is that button in GitLab?

    If that is needed, why isn't there a button on the ftp server instead of dput?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon McVittie@21:1/5 to All on Tue May 21 12:20:01 2024
    On Mon, 20 May 2024 at 19:10:00 -0700, Otto Keklinen wrote:
    Exact quote: "These commits have intentionally no debian/changelog
    updates as it causes every single rebase or cherry-pick of a commit to
    always have a merge conflict. It is much better to have all commits
    as-is, and then right before upload just run gbp-dch --auto to
    automatically generate the changelog."

    This is not unique to Debian packaging: upstream projects that maintain
    a GNU-style ChangeLog and/or NEWS file have the same problem, for the
    same reasons.

    In the projects where I'm an upstream maintainer, we've generally solved
    this by having the detailed ChangeLog either auto-generated from `git log`
    at release time or not existing at all, and writing a more user-facing
    summary of changes into the NEWS file periodically during development (generally pushed directly by a maintainer rather than going via a merge request, because adding text to NEWS hopefully can't cause regressions),
    and in particular ensuring NEWS is up-to-date as part of the release
    procedure (a maintainer/release manager responsibility).

    Using `gbp dch` to maintain debian/changelog is analogous to that
    technique - the version auto-generated from `git log` acts as a first
    draft, and if a contributor wants to adjust the wording used in debian/changelog to be less about fine-grained technical details and
    more user-facing, they can use `gbp dch` to summarize all changes up
    to now, make the desired adjustments, `git commit -m 'Update changelog'`
    and push. Next time the changelog needs to be updated, `gbp dch` will
    start from just after the most recent change that touched
    debian/changelog.

    smcv

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Philip Hands on Tue May 21 13:00:01 2024
    On Tue, May 21, 2024 at 12:05:59PM +0200, Philip Hands wrote:
    All these things should make it much more easy for other people or
    automated tools to send merge requests or keep maintaining a
    package in
    case the original maintainer becomes MIA.


    Mandating a specific git layout is a big jump from not requiring a
    VCS at all. 

    yes, its a big jump, but we are in 2024 and a modern workflow should be expected from a modern distribution.

    Attempts at top-down imposition of new methods on Debian strike me as
    being unlikely to induce joy in anyone involved.

    After all, We're a self-selecting group of people who are prone to
    repeatedly walking the road less travelled.

    Do we even have a consensus on which layout is "best"?
    Definitely no.
    Also all of them are bad in some way, which is expected when you wrap incompatible workflows.

    For anyone with an opinion, I'd suggest that you should try to make sure
    that DEP-14 reflects your opinion, and then work on getting people to
    adopt the use of DEP-14 and/or get DEP-14 accepted.
    How do you envision this for people who are against storing upstream
    sources in the repo? Having two mutually exclusive options in DEP-14?


    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmZMfUctFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh 3W4P/iThzW/Rq6RXfRal/ny8WCWX1AfCBOwqVBiD0tpoUFdtRTCv4C4kELarT0TS AvkaGNxPvoxXbkGThGCZoylRRsL4Rk3Isu/aXV2glPi664X+oMQ/DJX1N6A2dXb/ op+zjRiI9/m7A5m9NuvJQzKwfxe0N1OI622tTpiDk3Fq1Buee3MF3kUX30m3/9dF fuDOpGF1bNo9qgZQ/Fv0H2ML59qlPXN+ugjHpQpW08fnhiY5JjjhSjD0e57oVGk3 C6h8uXDAqg6e7BIdLNhyPrHX/IN9jL2LqKM3TYS9lJPb1cXcDgdCx/e30rlnIRS3 v2a27mxrUQpa8bFN7jBnMgQDUMyt4uktPXIIFMgQEfKOOX3wCsvO/anqODh8wf8f eHy+nNxMKqIhH3IMgOpKM3p6RroUdl+utK8rbFhypdA/nAobDywRpRrII85Q2x0K 4clvP6Hb/nKB5PqQ7xpMz1EmIcSVFPK/3CtWasG7B2oHxA5yoFmUnNnJTku5Ot9D p+xnnx47wtTr4QGrGf90TDC/INxLjdoBEmCFJJqqUl1j75y692MMQhU3/hW8faVY 64kFijB4H7QMqUFt6jdpvPJ/sj6unB7M3NIIF43DybqMgQUsXIBGN6iv9lUQ3js9 AeVXle+mIHotBl0T3ozbxRK/bmdg6O8QdCki20plHTUPszw7
    =9KvW
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvo Tomaselli@21:1/5 to All on Tue May 21 16:00:01 2024
    Do you think that mandating Salsa is a sensible step in this direction?

    No. It would increase my workload for all the stuff where I am also upstream.


    --
    Salvo Tomaselli

    "Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
    -- Galileo Galilei

    https://ltworf.codeberg.page/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Rivera@21:1/5 to All on Tue May 21 16:40:01 2024
    Hi Philip (2024.05.21_10:05:59_+0000)
    Attempts at top-down imposition of new methods on Debian strike me as
    being unlikely to induce joy in anyone involved.

    Yeah, that doesn't fly in community projects like Debian at all.

    However, there is a gap between getting a DEP approved and getting the
    rest of the project to fully embrace it. That's something that takes
    some leadership in the project. DPLs are in a great position to help
    drive these changes forward.

    I suspect that there's a decent chunk of developers who generally just
    follow the status quo of every package they work on, without fuss.

    Yeah, probably most.

    I rather like dgit for reducing the extent I have to think about this
    sort of thing, but I note that at least one person in this thread seems
    vexed by it, so we cannot even agree on the merits of that, apparently.

    On the other hand, dgit is only useful if you have a certain view of the
    world, that hasn't aligned with how I've done Debian packaging. I mean,
    an entirely git-centric view where you let go of trying to maintain your
    patch stack. So, I've only very briefly played with it. I imagine many
    in the project have similarly little experience using it.

    The tricky thing with tools like this is that you need to invest a lot
    of time using the tool to really get a feel for what it's good / bad at.
    You probably need to use it to maintain a complex package, for a while.

    Stefano

    --
    Stefano Rivera
    http://tumbleweed.org.za/
    +1 415 683 3272

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Stefano Rivera on Tue May 21 18:30:01 2024
    Stefano Rivera <stefanor@debian.org> writes:

    On the other hand, dgit is only useful if you have a certain view of the world, that hasn't aligned with how I've done Debian packaging. I mean,
    an entirely git-centric view where you let go of trying to maintain your patch stack.

    dgit has no problems with you maintaining your patch stack, at least as I understand that statement. I personally use the dgit-maint-debrebase(7) workflow, which is a fancy way of maintaining your patch stack using an equivalent of git rebase, since I love git rebase and use it all the time.
    But I used the dgit-maint-gbp(7) workflow, which is basically just the
    normal git-buildpackage workflow, for years and still use it for some of
    my packages and it works fine.

    Maybe you mean something different by this than I think you meant.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvo Tomaselli@21:1/5 to All on Wed May 22 00:32:32 2024
    Copy: andreas@an3as.eu (Andreas Tille)

    Could you explain that? I do similar things (just that not everything
    of it is published for $reasons), and I can't see how its increasing my workload as git and CIs are doing these things for me.

    So I'm always curious on why workloads increase just by maintining a
    package on salsa.

    It doesn't increase because of salsa. It increases because instead of being maintained on once place it goes in 2 places, where I still have to maintain both (by myself, mostly).

    I normally run "make deb-pkg" which creates a .orig.tar.gz, signs it, then
    puts the debian/ directory somewhere suitable and builds it with dpkg- buildpackage.

    If the debian/ directory is on salsa, but the rest of the project is somewhere else, then this no longer works, I have to tag in 2 different places, I have 2 different repositories to push to and so on.

    And what's the advantage? When an nmu happens the person doing it normally doesn't bother to push to salsa anyway. At most I get a patch in the
    bugreport, or I have to diff the packages and import the diff.

    So, extra complications for no actual advantage, from my experience.

    --
    Salvo Tomaselli

    "Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
    -- Galileo Galilei

    https://ltworf.codeberg.page/
    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCAAdFiEEQnSLnnbYmXmeH74Us6fPDIAYhs8FAmZNIQAACgkQs6fPDIAY hs9brBAAk2+y/ZidvRKwltjEJd3P9nWmAc6VwvFrdllfOudxDAWZVcKZ8d914Q1W rjDw07StskyQhDH9stwskyXVie8G5kLPEB6v6R/ftWuNix3HPnefFY8CDVOLMeH8 w/Ey1OxHOeciccBY3WNceiY3fwzRtEd3irJ+XG7RcUQZ8E7Qqy2LqL8YcoqxXyrh OQ744fYTEb60co7FJEzo8rhRN+k/5mzbm0E9aXGrutIa9UKxG7GFAyz4kYH4TGNc /USzIKtQ3MF//tSfZSs4l9GjTIQTQKFTeRRbVH7iW2MNMhh+Kkioj7dAvWtgkzfL +wEo2tO/FJOY9xbjdluRnkEl5oCbH5QabD8C/WUkL+9iCk5hWbyIVuPKW1OAjT66 TliYHiyLFzHv7g7rs1KrUDt99hnpatX5a+PbbKCzkj/F99voMYd0KOWT8aD7A6bQ YYQe2PzWRbFwrm/iAisnY96t7En2qaa8IfevR2pR8aLuE/WOpgVtf2/6i2CikRhg GAcBwrusuQCk7TcuHrQfhqHjhLYMtCe9FgOxPUkrs+RMZyfwVZ+vMjutWksTcyA6 nRiRv47yIyInNSwViOoYNBzPd0L3cz/A3ZDbzKF0lECFf3sW22zD1AuanrDlor4c RxTZfOIk7OB/xGo1ZG1oOwUcGI3subV7qILyBzqDt+IYcv8cG+s=
    =Fypd
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Salvo Tomaselli@21:1/5 to All on Wed May 22 00:30:01 2024
    I would rather see a small but very stable base distribution, with the
    option to add features on top.

    Doesn't this conflict with debian being universal?


    --
    Salvo Tomaselli

    "Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
    -- Galileo Galilei

    https://ltworf.codeberg.page/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Russ Allbery@21:1/5 to Salvo Tomaselli on Wed May 22 01:50:01 2024
    Salvo Tomaselli <tiposchi@tiscali.it> writes:

    If the debian/ directory is on salsa, but the rest of the project is somewhere else, then this no longer works, I have to tag in 2 different places, I have 2 different repositories to push to and so on.

    For what it's worth, what I do for the packages for which I'm also
    upstream is that I just add Salsa as another remote and, after I upload
    a new version of the Debian package, I push to Salsa as well (yes,
    including all the upstream branches; why not, the Debian branches are
    based on that anyway, so it's not much more space). One of these days
    I'll get CI set up properly, and then it will be worthwhile to push to
    Salsa *before* I upload the package and let it do some additional
    checking.

    It's still an additional step, and I still sometimes forget to do it, but
    after some one-time setup, it's a fairly trivial amount of work.

    It's more work to accept a merge request on Salsa and update the
    repositories appropriately, since there are two repositories in play, but
    in that case I'm getting a contribution out of it that I might not have
    gotten otherwise, so to me that seems worth it.

    I used to try to keep the debian directory in a separate repository or try
    to keep the Debian Git branches in a separate repository, and all of that
    was just annoying and tedious and didn't feel like it accomplished much.
    Just pushing the same branches everywhere is easy and seems to accomplish
    the same thing.

    --
    Russ Allbery (rra@debian.org) <https://www.eyrie.org/~eagle/>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Russ Allbery on Wed May 22 01:50:01 2024
    On Wed, 22 May 2024 at 00:40, Russ Allbery <rra@debian.org> wrote:

    Salvo Tomaselli <tiposchi@tiscali.it> writes:

    If the debian/ directory is on salsa, but the rest of the project is somewhere else, then this no longer works, I have to tag in 2 different places, I have 2 different repositories to push to and so on.

    For what it's worth, what I do for the packages for which I'm also
    upstream is that I just add Salsa as another remote and, after I upload
    a new version of the Debian package, I push to Salsa as well (yes,
    including all the upstream branches; why not, the Debian branches are
    based on that anyway, so it's not much more space). One of these days
    I'll get CI set up properly, and then it will be worthwhile to push to
    Salsa *before* I upload the package and let it do some additional
    checking.

    It's still an additional step, and I still sometimes forget to do it, but after some one-time setup, it's a fairly trivial amount of work.

    It's more work to accept a merge request on Salsa and update the
    repositories appropriately, since there are two repositories in play, but
    in that case I'm getting a contribution out of it that I might not have gotten otherwise, so to me that seems worth it.

    I used to try to keep the debian directory in a separate repository or try
    to keep the Debian Git branches in a separate repository, and all of that
    was just annoying and tedious and didn't feel like it accomplished much.
    Just pushing the same branches everywhere is easy and seems to accomplish
    the same thing.

    Yeah I am doing the same, and gradually switching all my packages that
    used to have a separate upstream/downstream history to a single merged
    tree. This can be done post-facto with some one-time git rocket
    surgery, doesn't have to be the case from day one. It's a huge
    improvement, and with gpp patch-queue I can just cherry-pick upstream
    commits directly, with no hassle whatsoever. It works really nicely,
    and gbp supports it just fine as a workflow, even while still checking
    in upstream release tarballs in pristine-tar.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Johannes Schauer Marin Rodrigues@21:1/5 to All on Wed May 22 07:00:01 2024
    Quoting Bernd Zeimetz (2024-05-21 00:54:07)
    On Wed, 2024-04-10 at 23:16 +0200, Johannes Schauer Marin Rodrigues
    wrote:
    Quoting Andreas Tille (2024-04-10 22:44:25)
    I do understand the argument that lots of different workflows
    adds
    friction. But I'm just still using what used to be _the_ standard
    one
    (insofar as we ever had such a thing). Putting everything in
    salsa/git
    doesn't standardise workflows in itself. I think Ian/Sean
    identified 12
    different git-based methods in their dgit review.

    I agree that different workflows are not helpful.  We have DEP14[1]
    ... but we have no efficient processes to
      a) accept DEPs
      b) dedicate to accepted DEPs

    or teach gbp about DEP14. See this git-buildpackage bug from *six*
    years ago:

    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=829444

    DEP14 is a candidate, I can't see that there was any consensus to accept it. Just because there is a DEP there is no need to implement it without having any consensus on it.

    the current gbp defaults were also implemented without any consensus on them, so in that regard, embracing DEP14 would not make the situation worse.

    What is improved by DEP14 is that in contrast to the current gbp defaults, it is backed up by a write-up of advice, best-practices and recommendations. We should have more of these write-ups for the things we do. This would also make it easier for new contributors to get into Debian.

    Thanks!

    cheers, josch
    --==============549245067940933836=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmZNeZgACgkQ8sulx4+9 g+FK5xAArdRx7uV3X2BLalh62WHErLc7piDij/Dbf7K61hTzWpF1N3BgOFYcaGZK rXnp6UDDUiU5UkcHRpsgbeWjE4Ih2hJKwpmC0q/oth2PIvpRQzoHRXfZlHcHoQoY XEJ3kzvUhK8nuYFCmg8yTtvtJnDtp29Y+WhX9yzQ+QGUM0MCFs0jCCqr9bRAEV5g VhPmH84TpgZm1ssEtkgoV+OK0E4Mx4x63MlFUTG+WS29cq50cw7Vl8PXBCa3XJ/s yWJiI/uICKZt3py5ERWPr2jG4tdTNUOHcoGRVOBXIPa3Jea3taqoEPwEzdU6SNu0 mgdvVsvIXJAPQxjtRjIThm4gEjsHn7gQLWMah+gLBWoXVOT9ByQJ9cg2kzAmrOId lVsgKLsEMXrLXKKmsrvKUAK2OyKJxY7kUk7GdGrbS8loWzVDlP/ehtVBWR2bYyg1 hjp7AyzHxMJ4drJA7VDAMkx8sCqC3h1AIEuqQ5kLt5QJH538+nAnrs+PWbKyS+WF 3f7ZfAGE1uPUTgD/oesTXs3kmL6oyBJpugYxEy+kSKmUR8Td+exSXL4X7bGGm33e CSb7+4YNT5C4E3xrkTuynBVgTHQJo0f8oBeqYCu5UsBuAdBV1VcgqSrpluYAWmsG zV/+56NWdJiv9uBmbuxgjexJPvpgUWUd96EUv2S/JzQJSlSM4EY=
    =5+N2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Wed May 22 07:20:01 2024
    Am Wed, May 22, 2024 at 12:32:32AM +0200 schrieb Salvo Tomaselli:

    And what's the advantage? When an nmu happens the person doing it normally doesn't bother to push to salsa anyway. At most I get a patch in the bugreport, or I have to diff the packages and import the diff.

    IMHO this is a hen-egg-problem: If NMUer could expect packages beeing on
    Salsa we could require the NMUer to add at least a MR. I personally
    would prefer permissions to push even to the default branch and tag accordingly. The current situation of not having some default VCS at
    some default place makes injecting NMUs into the VCS impossible and it
    does not help to blame NMUers about this.

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Wed May 22 07:40:01 2024
    Hi Stefano,

    Am Tue, May 21, 2024 at 02:36:47PM +0000 schrieb Stefano Rivera:
    Hi Philip (2024.05.21_10:05:59_+0000)
    Attempts at top-down imposition of new methods on Debian strike me as
    being unlikely to induce joy in anyone involved.

    Yeah, that doesn't fly in community projects like Debian at all.

    ACK.

    However, there is a gap between getting a DEP approved and getting the
    rest of the project to fully embrace it. That's something that takes
    some leadership in the project. DPLs are in a great position to help
    drive these changes forward.

    I confirm I see myself in the "help to get something happening"
    position. I'm fully aware that we can't push anything top-down. I see
    a big step forward in permitting some progress in the first place since
    I assume we have quite some volunteers who would implement this progress
    which is just not permitted by some rules we have.

    (My current challenge is to even find out what is broken first as
    I'm currently learning in the lintian case.)

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Salvo Tomaselli on Wed May 22 07:50:01 2024
    On Wed, May 22, 2024 at 12:32:32AM +0200, Salvo Tomaselli wrote:
    And what's the advantage? When an nmu happens the person doing it normally doesn't bother to push to salsa anyway.
    Yes, because it's unfortunately too expensive to:
    - make sure the repo exists and is uptodate
    - somehow find out what workflow does the repo imply
    - if it's an unfamiliar one then somehow learn it
    - check if there are no commits on top of the previous upload and if there
    are any then how to merge them with the NMU changes
    - check that your commit builds correctly
    at least when doing more than one NMU per week or whatever.
    The nmudiff(1) interface is standardized, one command does everything, you
    are still required to use it, and you need to remember that MRs don't give notifications so you have an additional reason to use it, and importing a nmudiff should be easy for the maintainer.

    At most I get a patch in the
    bugreport, or I have to diff the packages and import the diff.
    Sending the nmudiff to the bugreport is mandatory per the devref NMU
    procedure (though of course that procedure itself is not a policy and not everyone follows it).

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmZNhWYtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh ts0P/Ax3nAwXowHjDrqgpzpDJK2nJ70WCqYXaWLxa7ucaxZP5K1Y5xtK+DQO69PB EQhS55tbeDomB7N1IRa364wmCh+iP66uFP1lojy8Cn/AJ4tAM+i3svMBYACZ7FuN 2a0bfgewwMwQZEiwmT3b+lEbD/axBszzFbwmjZb+T9HzHsA/VlP5g9jAHeSyrhjp Yzr/w4MXh6PQDLwcJJXtr3P/CzmgYzcU/ogYrZhVndm0EctqF4VEg1sbZiKfH6Xa Q+YjZMIpSHlS6PZqwZYvvIShQLeGUIzE6I0+OSF3EgcDPejV1vTHBqJ0L5WAqRiM CgzeYSKLy123edz/kiO/8m6DfxsmP1RTZPCa36bwzvR69SkrPBxELvcxkZrqNRJ6 z7eNVcaftFvgkEwwSXNHzFWkmaEyDUnJ5SFmHU6rGynL9F7nSL9VQfjW6OSxWi0y YBJls6pmPwCrFCOWlG/qp01nptCH49F84lHmUviubok0pjLRudkKCpzC1Eo4dgso tyBfKXwMEBeP3rGvtgH3aL9tyI3u+xUGUEaf5aEdtEZq3nmL3JfTWlMGQySUiNtr 2BgFjiuHoBCIaenwBfjCW5QsZi2MQyEyaDhLHIv0G1Uldk7Qq+hzLjs7ucWiniA6 0W3nHFmjtJ3beexwd0Gv2rvdadzjYL/zWur6Bba/AmK+42v+
    =+AJb
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Andreas Tille on Wed May 22 11:30:02 2024
    On Wed, May 22, 2024 at 07:18:04AM +0200, Andreas Tille wrote:
    IMHO this is a hen-egg-problem: If NMUer could expect packages beeing on Salsa we could require the NMUer to add at least a MR.

    those are two things:

    - mandating salsa (for git)
    - mandating to have MRs enabled on salsa for that project.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    Very hard to relate to those who think the first three years of the pandemic were bad because they couldn’t go to bars for a while, as opposed to because 25 million people died, 400 million were disabled, and many more continue to
    be unable to access public space.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmZNuZQACgkQCRq4Vgaa qhyWXxAAh3rJr03VEmJXRXgSKDV58c0eNGzvu32sj7lQupQW07CzOPHqrmkzVKP4 vFMklo17nlb9uQ9x3ON4aLJ1rSD38L+i+3WbcnspZsLJErp9hdLaf8y3SRj+/WU4 tvDAJOW5uGinvxxAFLdAPMtw3VLkDiTPbr9Eqnzu8o/+5ljNi5XnIU8DwiK99hGf wSLGrvAL1QmdK4wadcYY1G7maPbRwBQecLQfSVROHmwQsMyWkZWxEFxC0X5sfLMA Rwv1D0DbSMWyyubj0I/j3OHJmW6gOSNRDTZxiJFVD0WemaC/HmTkhf6oivhI7ff0 Bsoidef3U/XNWoPEbcppzwNf/0lgmPNUeKwdHSlwki4HwFUUu9dlHkd3zV4KOuXW lgQJKmhGa3Te5ei2MFjTtZb8QZiBqTMhU4M1pK4Pl
  • From Bill Allombert@21:1/5 to Bernd Zeimetz on Wed May 22 13:40:01 2024
    On Tue, May 21, 2024 at 12:59:52AM +0200, Bernd Zeimetz wrote:
    On Thu, 2024-04-11 at 22:52 +0000, Bill Allombert wrote:

    When a change leads to a RC bug a month or three after having be
    part of a package, fixing the problem falls on the maintainer and not
    on the change author. Even correct changes can trigger latent bugs
    in software.

    Yet another reason why using Salsa and its CI *and having autopkg-
    tests* is so important - contributors can test their changes before
    even asking to merge them.

    You can run autopkgtests locally, you do not need Salsa for that.

    And yes, its up to the 'expert' maintainer
    of the package to ensure there are proper tests in place. Because even
    that expert is a human only and we all make mistakes.

    Indiscriminate use of Salsa CI is not free, there is a cost in hardware, in electricity
    and in carbon emission, that we cannot completely ignore.

    In any case, it is not realistic to expect tests to detect all kind of bugs, alas.

    Cheers,
    --
    Bill. <ballombe@debian.org>

    Imagine a large red swirl here.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Bill Allombert on Wed May 22 14:30:01 2024
    Hi,

    On 5/22/24 20:34, Bill Allombert wrote:

    You can run autopkgtests locally, you do not need Salsa for that.

    Also, Debian runs autopkgtests on all packages that provide them, and
    makes passing them on all supported architectures a requirement for
    testing migration.

    It could be argued that testing migration is a CI process.

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Bill Allombert on Wed May 22 14:30:01 2024
    On Wed, 22 May 2024 at 12:35, Bill Allombert <ballombe@debian.org> wrote:

    On Tue, May 21, 2024 at 12:59:52AM +0200, Bernd Zeimetz wrote:
    On Thu, 2024-04-11 at 22:52 +0000, Bill Allombert wrote:

    When a change leads to a RC bug a month or three after having be
    part of a package, fixing the problem falls on the maintainer and not
    on the change author. Even correct changes can trigger latent bugs
    in software.

    Yet another reason why using Salsa and its CI *and having autopkg-
    tests* is so important - contributors can test their changes before
    even asking to merge them.

    You can run autopkgtests locally, you do not need Salsa for that.

    It can, but it's really a massive pain. git push and go make a cup of
    tea is so much nicer.
    Nowadays I run locally only when debugging complex issues, otherwise
    it's all delegated to Salsa.

    And yes, its up to the 'expert' maintainer
    of the package to ensure there are proper tests in place. Because even
    that expert is a human only and we all make mistakes.

    Indiscriminate use of Salsa CI is not free, there is a cost in hardware, in electricity
    and in carbon emission, that we cannot completely ignore.

    In any case, it is not realistic to expect tests to detect all kind of bugs, alas.

    The cost of running those same builds and tests locally is pushed onto
    the developer though, and their electricity bill. By using Salsa, the
    cost is pushed to the project and our sponsors - which seems the right
    thing to me.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to Bernd Zeimetz on Wed May 22 21:40:01 2024
    On Wed, May 22, 2024 at 09:11:16PM +0200, Bernd Zeimetz wrote:
    You can run autopkgtests locally, you do not need Salsa for that.

    Also, Debian runs autopkgtests on all packages that provide them, and
    makes passing them on all supported architectures a requirement for testing migration.

    Uploading to check autopkgtests is an absolute waste of ressources. I
    really hope nobody uploads a package without running the tests
    somewhere else.


    It could be argued that testing migration is a CI process.


    Its a CI process at a way too late stage.
    Also, uploading to test a merge request is not the right thing to do.
    If the archive is a VCS then uploading an untested package to experimental
    to run tools is pushing a commit to run CI.
    *shrug*

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmZOSCotFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh OfIP/0hC6a42p+oTHVhjyLJq97pksdcMmX/gAcOSDwFszb6F6D2vNnF8octkZFdE WPzshMx28Va9pi0vaT4W300oH+Ir6Zcga3zm5c3a2VtWiJayWPkqhkWxVAJUwpGG Jz7M98KT82m/AN4dDnvF38rpkGy4F5Bh50SAYHhKMPQ1bLDU/LFTQ4ElUGO0+T7E +Nd0gRNjQGrf2FBaK/RzkYWk442pYf97rAHkM1gLdcN4mf40Pq2ihw8+41LSwXBt xh7WcB+6rtr2tRo1o5nJyJgyDLJSJI7nA6DnaWvmbM8XT8nYuaewT3q9rKj+ovso uVp1ffTcnLVAIeLgX7lVzB7If4RRVVP0m6nrvhqPUtT2GLppAQXdzVrjjwYQXF+G xw4ED89NjHpNOpcpBgG1apZvUotsd3kxmxNSAFbdEZ3WaQyNnSpIczzdUWrInh5/ ksjF45oFgOsJCmvEbftl0bD3gc+aNkyBV+msUdMWEvUCVX1Tmu/fw+Pqh6IH2fIl efEbZ9uutrJURe5+Nplxgvsx2vVYMdu0imI43CCBncn4h5OBpyeFbN1BqQTrx+KZ fYlxz3py1F/18iuglT8gboiQht17mn951lgGVZ0XtBxZUFdhpjJsmsCcwP1ybH4u tAG8qKzHyaN2J/3bjDy5Kh3K0JcjIlA+QXK/NB/h1h05gyD4
    =UdDR
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Richter@21:1/5 to Andrey Rakhmatullin on Thu May 23 04:10:01 2024
    Hi,

    On 5/23/24 04:32, Andrey Rakhmatullin wrote:

    It could be argued that testing migration is a CI process. >> Its a CI process at a way too late stage.
    Also, uploading to test a merge request is not the right thing to do.

    If the archive is a VCS then uploading an untested package to experimental
    to run tools is pushing a commit to run CI.
    *shrug*

    Yes, but unironically: experimental is a side branch, unstable is a MR,
    and testing is the main branch.

    It is entirely valid to be dissatisfied with the turnaround time of the existing CI, but what we're seeing here is the creation of a parallel
    structure with as-of-yet unclear scope.

    Can we define the scope as "quick-turnaround unofficial validation",
    because that's the niche that is currently underserved?

    Simon

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Simon Richter on Thu May 23 13:10:01 2024
    On Thu, 23 May 2024 at 03:01, Simon Richter <sjr@debian.org> wrote:

    Hi,

    On 5/23/24 04:32, Andrey Rakhmatullin wrote:

    It could be argued that testing migration is a CI process. >> Its a CI process at a way too late stage.
    Also, uploading to test a merge request is not the right thing to do.

    If the archive is a VCS then uploading an untested package to experimental to run tools is pushing a commit to run CI.
    *shrug*

    Yes, but unironically: experimental is a side branch, unstable is a MR,
    and testing is the main branch.

    It is entirely valid to be dissatisfied with the turnaround time of the existing CI, but what we're seeing here is the creation of a parallel structure with as-of-yet unclear scope.

    Can we define the scope as "quick-turnaround unofficial validation",
    because that's the niche that is currently underserved?

    The main problem is not turnaround (it's terrible ofc), it's that a
    broken upload to unstable affects _everybody_, while a CI run on Salsa
    is private and doesn't get in the way of other developers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)