November 2004 - crux-devel

[clc-devel] Email format in Pkgfile
by Daniel Mueller 04 Mar '05

04 Mar '05

Hi guys, I'm thinking of changing the email address in our Pkgfiles to a more 'web-friendly' format: Joe User (joe at mail dot net) >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> # $Id: Pkgfile,v 1.1 2004/10/11 20:38:08 jaeger Exp $ # Description: A general purpose cryptographic library based on GnuPG # URL: http://directory.fsf.org/security/libgcrypt.html # Maintainer: Matt Housh (jaeger at morpheus dot net) # Depends on: libgpg-error name=libgcrypt version=1.2.0 [..] <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< I've realized that a simple search query by google prints out our email addresses :-( I prefer spam[1] refrigerated. What do you guys think? bye, danm [1] http://www.spam.com/sp.htm -- Daniel Mueller Berlin, Germany (OpenPGP: 1024D/E4F4383A)

2 3

[clc-devel] ports in contrib depending on ports in unmaintained
by Jukka Heino 16 Feb '05

16 Feb '05

Hi, When building every single port in contrib I noticed that some of them depend on packages that either don't exist or are unmaintained. In my opinion contrib shouldn't depend on having unmaintained available. I usually even disable unmaintained completely on my systems so some ports in contrib fail because of this. - bmp depends on libglade (unmaintained) - electricsheep depends on xscreensaver (unmaintained) - gal depends on libgnomeprintui and libgnomeui (unmaintained) - madwifi depends on linux (doesn't exist) - nicotine depends on pygtk (unmaintained) - obconf depends on libglade and startup-notification (unmaintained) - ogle depends on libglade (unmaintained) - rox-clib depends on libgtop (unmaintained) - rox-lib depends on pygtk (unmaintained) - rss-glx depends on xscreensaver (unmaintained) - spamassassin depends on p5-html-parser (doesn't exist) - xautolock depends on xfree86 (should be x11) - xblast depends on xfree86 (should be x11) - xsoldier depends on xfree86 (should be x11) So in my opinion maintained ports shouldn't depend on unmaintained or non-existant ports. The current situation is of course understandable, since most of the GNOME stuff isn't maintained anymore. But in general I propose we move towards a uniformly maintained contrib with no dependencies on other collections than base, opt and contrib itself. Regards, // Jukka

4 4

[clc-devel] CRUX mascot?
by Simone Rota 10 Dec '04

10 Dec '04

Hi there, I know this isn't exactly a top priority, but what about having our own mascot? I was thinking of a moose* such as (merely for giving an idea): http://www.varlock.com/images/moose01.jpg or http://www.varlock.com/images/moose02.jpg but in SVG format and painted with a style close to the gimp's wilber: http://www.varlock.com/images/wilber.png I have a couple of friends that are very good artists and would be happy (I hope!) to contribute. What do you think about the idea? Regards, Simone * I've heard they live in Sweden, even if I didn't see any in Stockholm Center :) -- Simone Rota WEB : http://www.varlock.com Bergamo, Italy MAIL: sip(a)varlock.com

6 12

[clc-devel] The question of maintainer protocol
by Nick Steeves 07 Dec '04

07 Dec '04

Hi, Recently I've had quite a time trying to figure out how a CLC member should submit fixes to another maintainer. Documentation on CLC's CVS conduct is conspicuously missing. We should write, or reference a document of procedural guidelines. I would appreciate if everyone would comment on Ticket #38. Thanks, Nick

3 4

[clc-devel] Software licenses
by Jukka Heino 22 Nov '04

22 Nov '04

Hi, Now that Simone Rota has committed his datastudio port into contrib, I began to wonder if CLC has some sort of policy on what software licenses should be allowed in contrib. At least one user was concerned that he might accidentally install software which would require a commercial license for the purpose he's using it for. I, for one, would find something like a "License" field in Pkgfiles useful so that with a quick glance one could see under which terms the software is released (GPL, BSD...). What do others think? Regards, // Jukka

6 5

[clc-devel] RFC: Commit message guideline
by Johannes Winkelmann 20 Nov '04

20 Nov '04

Hi, You might have seen the discussion on labeling security related updates; Jürgen and I have also create a CVSTrac report which looks for the word 'security' in the commit message and lists those [1]. I'd like to suggest the following format for such changes: [security] <portname>: <text> <url> url should point to the advisory or vulnerability decription. Example: "[security] gdk-pixbuf: security update http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:095" This way, they should be easy to spot in the timeline and reliable to find using our report. How does this sound? We might also do something similar if we have to do a binary incompatible change inbetween releases, but I guess we can discuss this later. Kind regards, Johannes 1 http://clc.morpheus.net:6999/clc/rptview?rn=11 -- Johannes Winkelmann mailto:jw@tks6.net Bern, Switzerland http://jw.tks6.net

1 0

[clc-devel] Re: Check-in [703]: fam
by Daniel Mueller 19 Nov '04

19 Nov '04

Hi Nick, thank you for updating the port. Yes, I think that's the proper way to do things. To conclude your rule --> If you know that the maintainer is currently on vacation or you've made an very important security update continue and tag it immediately. This rule is written nowhere, but I think it's a good idea ;-) Again, thank you. danm -- Daniel Mueller Berlin, Germany (OpenPGP: 1024D/E4F4383A) On Thu, 18 Nov 2004 04:34:57 -0700 Nick Steeves wrote: > Hi Daniel, > > Debian updated their patch to v6. I commited a change accordingly, > and am awaiting your approval, via tagging it for CONTRIB-2_0. Is > this the standard protocol within CLC? > > Cheers, > Nick > >

1 0

[clc-devel] Script to find redundant dependencies
by Johannes Winkelmann 19 Nov '04

19 Nov '04

Hi, I finally found a moment to finish my script to find redundant dependencies, that is such which are listed by a direct dependency of a package, like: A lists B and C, B lists C In this case, A doesn't have to list C, so the listing of 'C' is redundant. I've done some tests with ports from contrib and it seems to work fine so far, but I'd still advise you to manually double check whether what it says is true (e.g. by doing a 'prt-get depends' before and after removing the packages listed as redundant). You can find it at http://jw.tks6.net/files/crux/findredundantdeps Kind regards, Johannes P.S.: yeah, the name sucks -- Johannes Winkelmann mailto:jw@tks6.net Bern, Switzerland http://jw.tks6.net

2 1

[clc-devel] Re: contrib preparation scripts
by Jay Dolan 19 Nov '04

19 Nov '04

--- Johannes Winkelmann <jw(a)tks6.net> wrote: > Hi Jay, > > I've been pretty busy lately and didn't manage to > join IRC yesterday. So > I'll just guess and send you my scripts to prepare a > big repository of > ports (PrepRep). I commented out certain lines from > preprep.conf, since > I guess they're not all the same right now (jue > moved his repo), and one > of them was a local one to simulate clashes between > ports. > > I guess it might be a good idea to start from > scratch, and I guess > python or perl would be the weapon of choice as we > already discussed at > CRUXCon. Since bash scripts are usually rather > verbose and not too clear > to understand what's going on, here a summary of > what I'd expect it do > do: > > 1. sync a list of repositories to an input directory > - note if a repo can't be synced > 2. Create a list of ports 'contribports' > 2. Find duplicates in 'contribports', and where they > appear > -> send notifications to the crux-contrib mailing > list > -> remove those from 'contribports' > 3. create a list of ports in base and opt > ('coreports') > 4. remove 'coreports' from 'contribports' > // 'contribports' contains now a list of ports > which can be updated in > // the main collection > 5. if a list of 'contribports' which have been > synced the last time is > available, compare the two lists > - note which ports are new, and which one have > gone > 6. update the ports listed in 'contribports' from > the input directory to > the output directory > - create a list of ports that were synced in this > run (to be used the > next time (5.) is called > 7. Mark the ports which are not maintained anymore > (from 6.) as > '# Maintainer: UNMAINTAINED' > 9. Create a new httpup REPO file > (maybe run portspage from vektori) > A. Send a report to the contrib-admin or > crux-contrib, containing: > a) new ports > b) ports newly unmaintained > c) repos that couldn't be synced (from 1.) > B. Send a notification to maintainers who have > conflicting ports > C. Send a notification to maintainers of > repositories which couldn't be > synced (from 1.) > > This is just from the top of my head, so consider > this just a > description what I was trying (or wanting) to do. > Finally, it would be > great if the script would run hourly, but it would > really be a PITA if > people would get notifications hourly; so there > needs to be some kind of > management when the people where notified. > > Reading through this, it seems that this is quite an > interesting task, > but definitely challenging. Actually I'd really like > to do some coding > on this as well, but probably not before mid > december :-/. Maybe you > could ask Matt to set up a CVS (or Subversion) > repository for that. > > Feel free to ask if I don't make any sense! > > So much for now, > Kind regards, Johannes I miss you already. I took my own stab at this (considering that you forgot to actually attach your scripts ;)), and ended up settling on bash :/ The more I thought about it, the more it seemed appropriate. Tools like find and fgrep can be used for just about all of the complicated parts of this task. So take a look at prtsync in my httpup repository, if you will. It works well, is less than 80 lines, and does almost all of what you mentioned in your last mail. I think it would be fine to run just nightly. The ugliest part is actually the call to sendmail. Sweet dreams, I'm spent.. ===== Jay Dolan Software Engineer, Systems Analyst Windmill Cycles, Inc. 508.999.4000 __________________________________ Do you Yahoo!? The all-new My Yahoo! - Get yours free! http://my.yahoo.com

1 0