KatolaZ | oh shit still this bug in the repo job | 00:14 |
---|---|---|
KatolaZ | hold on, you have added compression-level=9 in gbp.conf... | 00:14 |
KatolaZ | mmmhhh | 00:14 |
LeePen | Does that need to go? | 00:16 |
KatolaZ | well, in theory no | 00:17 |
KatolaZ | trying to rebuild now | 00:24 |
KatolaZ | it's building | 00:26 |
KatolaZ | gotta go to bed | 00:26 |
KatolaZ | we will get there | 00:26 |
KatolaZ | :) | 00:26 |
KatolaZ | we are definitely closer | 00:26 |
KatolaZ | thanks for all your work LeePen | 00:27 |
KatolaZ | :) | 00:27 |
KatolaZ | very much appreciated | 00:27 |
LeePen | Good. Thanks. Did you take out the compression level? | 00:27 |
KatolaZ | nope | 00:30 |
KatolaZ | that shouldn't be a problem | 00:30 |
KatolaZ | I tried to remove the orig.tar.gz from the repo | 00:30 |
KatolaZ | so that it is re-added | 00:31 |
KatolaZ | this should solve all the problems with hashs | 00:31 |
KatolaZ | (or at least I hope so :)) | 00:31 |
KatolaZ | gotta go | 00:31 |
KatolaZ | cya | 00:31 |
KatolaZ | o/ | 00:31 |
LeePen | Bye. Thanks | 00:31 |
KatolaZ | LeePen: you here? | 10:32 |
LeePen | Morning! | 10:33 |
KatolaZ | morning! | 10:33 |
KatolaZ | just a question | 10:33 |
KatolaZ | did you use a pristine-tar in your branch? | 10:33 |
KatolaZ | (it doesn't look like that, tbh) | 10:34 |
LeePen | I didn't check anything in, but it may be there from before? | 10:34 |
LeePen | I know Centurion_dan doesn't like it | 10:34 |
LeePen | I see the orig.tar.gz hashes are still problematic. | 10:35 |
KatolaZ | yes | 10:35 |
KatolaZ | that's the issue apparently | 10:36 |
KatolaZ | it looks like the orig.tar.gz generated from that package is not the same as the one currently present in the archive | 10:36 |
KatolaZ | and dak doesn't like it | 10:36 |
KatolaZ | I will try to remove compression-level=9 | 10:36 |
Centurion_Dan | o/ | 10:37 |
KatolaZ | hi Centurion_Dan | 10:38 |
Centurion_Dan | hi. | 10:38 |
LeePen | OK. I just imported that from Centurion_Dan's work | 10:38 |
KatolaZ | maybe a pristine-tar was used before | 10:38 |
Centurion_Dan | hi LeePen | 10:38 |
KatolaZ | LeePen: what? | 10:38 |
KatolaZ | oh, the compression-level=9 | 10:38 |
LeePen | KatolaZ: the compression-level=9 | 10:38 |
KatolaZ | ok | 10:38 |
Centurion_Dan | LeePen, what package? | 10:38 |
KatolaZ | policykit-1 | 10:39 |
Centurion_Dan | hmm is it a new version? | 10:39 |
KatolaZ | nope | 10:40 |
KatolaZ | same | 10:40 |
Centurion_Dan | if it's a new upstream version then the compression-level isn't required as that was just dealing with buildhost OS transition which changed the default compression level. | 10:40 |
KatolaZ | Centurion_Dan: the hash on the orig.tar.gz is different | 10:41 |
KatolaZ | and it's the same upstream version | 10:41 |
Centurion_Dan | is the size of the orig.tar.gz bigger or smaller then that which is in the repo | 10:42 |
Centurion_Dan | if it's smaller then you need the "compression level = 9" otherwise not. | 10:43 |
KatolaZ | it's smaller | 10:44 |
KatolaZ | but compression-level=9 is there | 10:44 |
KatolaZ | ... | 10:44 |
Centurion_Dan | note it should be "compression level = 9" ie no hyphen. | 10:44 |
KatolaZ | are you sure? | 10:45 |
KatolaZ | there is no gbp option without hyphen... | 10:45 |
KatolaZ | Centurion_Dan: I re-checked | 10:47 |
KatolaZ | it's compression-level=9 | 10:47 |
KatolaZ | under [buildpackage] | 10:47 |
Centurion_Dan | no you are right... | 10:47 |
Centurion_Dan | sorry ... should read "no, you are right" :-] | 10:48 |
KatolaZ | :D | 10:48 |
KatolaZ | ;) | 10:48 |
Centurion_Dan | but drop that option if it's smaller then the repo - the new beowulf default uses compression-level = 6 iirc | 10:49 |
KatolaZ | let's try then | 10:49 |
Centurion_Dan | anyway it's too hot in my office and bed time so see you later... o/ | 10:51 |
KatolaZ | see you Centurion_Dan | 10:52 |
KatolaZ | o/ | 10:52 |
KatolaZ | let's try this shot then | 10:53 |
Centurion_Dan | should be at the meet tomorrow ;-/ | 10:55 |
Centurion_Dan | :-) | 10:55 |
Centurion_Dan | o/ | 10:55 |
KatolaZ | hope to be there as well | 10:57 |
KatolaZ | the timing is a bit inconvenient to me, until late March | 10:58 |
KatolaZ | LeePen: still failing | 11:28 |
KatolaZ | will have a look later | 11:29 |
KatolaZ | gotta stuff to deal with now | 11:29 |
KatolaZ | o/ | 11:29 |
KatolaZ | sorry | 11:29 |
LeePen | KatolaZ: OK thanks. | 11:30 |
KatolaZ | ok, found the problem with the orig.tar.gz | 15:29 |
KatolaZ | ffs | 15:30 |
KatolaZ | ok. so the problem is in the tar.gz | 15:40 |
KatolaZ | the one in debian has different uid/gid on the files | 15:40 |
KatolaZ | and different prefix | 15:40 |
KatolaZ | it looks like the easiest option is to provide a pristine-tar | 15:40 |
KatolaZ | will give it a try later | 15:40 |
KatolaZ | bbl | 15:40 |
KatolaZ | there are also different timestamps, for some reason | 15:42 |
KatolaZ | I guess the one created via git-archive does not preserve those permissions by default | 15:43 |
LeePen | KatolaZ: I see that. Seems bizarre. Where does the uid/gid 500 come from? | 17:54 |
KatolaZ | from the original tarball | 17:58 |
KatolaZ | :) | 17:58 |
KatolaZ | the debian one | 17:58 |
KatolaZ | it must have been uploaded outside the git workflow | 17:59 |
KatolaZ | so created and signed locally, and then queued with dbuild | 17:59 |
KatolaZ | I double-checked earlier | 17:59 |
KatolaZ | we'll need to find a way to hack around the way gbp creates the orig.tar.gz | 18:00 |
KatolaZ | I guess there must be a way to force some parameters | 18:00 |
KatolaZ | maybe directly from the gbp.conf | 18:00 |
KatolaZ | (but I could not find any so far) | 18:00 |
KatolaZ | (will have a look later) | 18:00 |
LeePen | Yes, I was looking at that now. It isn't an area I am particularly familiar with. | 18:00 |
KatolaZ | neither I am :P | 18:00 |
KatolaZ | but I am sure we will find a way | 18:01 |
LeePen | Maybe I am missing something, and ignore this if it isn't helpful, but could we remove the 500 uid/polkit prefix orig.tar.gz from the archive and install the new gbp generated one? | 18:18 |
golinux | Pad for this week's meet is here: https://pad.dyne.org/code/#/1/edit/iHY8VXF3rOimFyunkzbE1w/nzdxrotuhXC24jGR7Vdy-LoY/ | 18:30 |
KatolaZ | no LeePen we can't | 19:32 |
KatolaZ | because the dsc files of old packages will all be screwed | 19:32 |
LeePen | OK. I am AFK for a few hours now. Good luck! | 19:39 |
KatolaZ | ok | 19:42 |
KatolaZ | will report here | 19:43 |
KatolaZ | will be a bit late at the meeting | 21:28 |
rafalcpp | how is security on devuan, compared to debian? | 21:30 |
amesser | i won't join - not much to report either | 21:30 |
rafalcpp | eg delay with releasing security patches from debian? | 21:30 |
rafalcpp | patching our unique (not in debian) software goes well? etc | 21:30 |
KatolaZ | rafalcpp: define "goes well" | 21:31 |
rafalcpp | KatolaZ: releasing patched versions of software in timely manner | 21:32 |
KatolaZ | we haven't had any specific case so far | 21:33 |
KatolaZ | I mean with vulnerabilities in packages forked by Devuan | 21:33 |
KatolaZ | and the few cases have been dealt with immediately | 21:33 |
KatolaZ | so I guess the answer is "yes" | 21:33 |
LeePen | KatolaZ: I have been thinking about this whilst I was away: commit 64efeb492cf4fe5a494a44da0ee562adff693aeb drops pristine tar | 22:35 |
LeePen | The pristine-tar brance is still in the repo AFAICS. If we revert that commit that might be sufficent? | 22:36 |
KatolaZ | LeePen: | 22:36 |
KatolaZ | would it be possible to bump version to 0.106? | 22:37 |
KatolaZ | I mean, merging from upstream 0.106 (or whatever version is available after 0.105) | 22:37 |
LeePen | Maybe. I was focusing on 0.105-25 as it is what is in buster. | 22:41 |
LeePen | And fo we get security fixes for free | 22:43 |
LeePen | s/fo/so/ | 22:43 |
KatolaZ | it would be enough to have a 0.106 | 22:46 |
KatolaZ | or whatever is available which is not too different from 0.105 | 22:46 |
KatolaZ | and merges more or less fine | 22:46 |
LeePen | OK. I will look at that. Do you not want to reinstate pristine tar? | 22:47 |
KatolaZ | LeePen: 0.109 merges fine | 22:48 |
KatolaZ | onto unstable | 22:48 |
KatolaZ | shall we do it? | 22:50 |
LeePen | Yes, give it a whirl | 22:50 |
KatolaZ | ok | 22:50 |
KatolaZ | let's see | 22:50 |
KatolaZ | :D | 22:50 |
LeePen | There are a lot of quilt patches which might need refreshing | 22:51 |
KatolaZ | actually yes | 22:54 |
LeePen | I can look at them tomorrow. | 22:56 |
LeePen | Isn't it simpler to enable pristine-tar in gbp.conf? | 22:57 |
KatolaZ | nope | 22:57 |
KatolaZ | it won't work | 22:57 |
KatolaZ | because all the other releases have the same source | 22:57 |
KatolaZ | so we should indeed re-build also for jessie and ascii | 22:57 |
KatolaZ | but that would be a PITA, especially for jessie | 22:58 |
LeePen | But I think the jessie and ascii tarball is from pristine-tar? | 22:58 |
KatolaZ | dunno | 22:59 |
KatolaZ | they have the same source as debian | 22:59 |
LeePen | Give me a few minutes | 23:00 |
KatolaZ | let's give it a go with pristine-tar | 23:02 |
KatolaZ | LeePen: I will force a reset | 23:02 |
KatolaZ | issued a build | 23:04 |
KatolaZ | let's see | 23:04 |
KatolaZ | if it doesn't work, I guess we can try 0.109 | 23:04 |
LeePen | OK. I'll check back in a bit. | 23:08 |
KatolaZ | https://ci.devuan.org/job/policykit-1-binaries/ | 23:10 |
KatolaZ | it will require about 20 mins | 23:10 |
KatolaZ | fsmithred: you here? | 23:11 |
KatolaZ | please pull the latest live-sdk | 23:12 |
KatolaZ | I had removed all the nls (codepage) modules | 23:12 |
KatolaZ | they are in fact useless, unless you need to fiddle with a fat in early boot | 23:12 |
KatolaZ | :) | 23:12 |
KatolaZ | it should work now | 23:12 |
fsmithred | KatolaZ, yes, I'm here | 23:20 |
fsmithred | lol | 23:20 |
fsmithred | ok, I'll pull and rebuild | 23:20 |
KatolaZ | oki | 23:22 |
KatolaZ | let me know | 23:22 |
KatolaZ | LeePen: it looks like it worked | 23:44 |
KatolaZ | :) | 23:44 |
KatolaZ | copying the packages to beowulf | 23:44 |
KatolaZ | and then will go to sleep | 23:45 |
KatolaZ | LeePen: done | 23:47 |
KatolaZ | the packages are both in unstable and beowulf | 23:47 |
KatolaZ | good night | 23:47 |
KatolaZ | o/ | 23:47 |
LeePen | KatolaZ: great. Thanks for hanging in there. | 23:54 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!