libera/#devuan-dev/ Wednesday, 2019-01-30

KatolaZoh shit still this bug in the repo job00:14
KatolaZhold on, you have added compression-level=9 in gbp.conf...00:14
KatolaZmmmhhh00:14
LeePenDoes that need to go?00:16
KatolaZwell, in theory no00:17
KatolaZtrying to rebuild now00:24
KatolaZit's building00:26
KatolaZgotta go to bed00:26
KatolaZwe will get there00:26
KatolaZ:)00:26
KatolaZwe are definitely closer00:26
KatolaZthanks for all your work LeePen00:27
KatolaZ:)00:27
KatolaZvery much appreciated00:27
LeePenGood. Thanks. Did you take out the compression level?00:27
KatolaZnope00:30
KatolaZthat shouldn't be a problem00:30
KatolaZI tried to remove the orig.tar.gz from the repo00:30
KatolaZso that it is re-added00:31
KatolaZthis should solve all the problems with hashs00:31
KatolaZ(or at least I hope so :))00:31
KatolaZgotta go00:31
KatolaZcya00:31
KatolaZo/00:31
LeePenBye. Thanks00:31
KatolaZLeePen: you here?10:32
LeePenMorning!10:33
KatolaZmorning!10:33
KatolaZjust a question10:33
KatolaZdid you use a pristine-tar in your branch?10:33
KatolaZ(it doesn't look like that, tbh)10:34
LeePenI didn't check anything in, but it may be there from before?10:34
LeePenI know Centurion_dan doesn't like it10:34
LeePenI see the orig.tar.gz hashes are still problematic.10:35
KatolaZyes10:35
KatolaZthat's the issue apparently10:36
KatolaZit looks like the orig.tar.gz generated from that package is not the same as the one currently present in  the archive10:36
KatolaZand dak doesn't like it10:36
KatolaZI will try to remove compression-level=910:36
Centurion_Dano/10:37
KatolaZhi Centurion_Dan10:38
Centurion_Danhi.10:38
LeePenOK. I just imported that from Centurion_Dan's work10:38
KatolaZmaybe a pristine-tar was used before10:38
Centurion_Danhi LeePen10:38
KatolaZLeePen: what?10:38
KatolaZoh, the compression-level=910:38
LeePenKatolaZ: the compression-level=910:38
KatolaZok10:38
Centurion_DanLeePen, what package?10:38
KatolaZpolicykit-110:39
Centurion_Danhmm is it a new version?10:39
KatolaZnope10:40
KatolaZsame10:40
Centurion_Danif it's a new upstream version then the compression-level isn't required as that was just dealing with buildhost OS transition which changed the default compression level.10:40
KatolaZCenturion_Dan: the hash on the orig.tar.gz is different10:41
KatolaZand it's the same upstream version10:41
Centurion_Danis the size of the orig.tar.gz bigger or smaller then that which is in the repo10:42
Centurion_Danif it's smaller then you need the "compression level = 9" otherwise not.10:43
KatolaZit's smaller10:44
KatolaZbut compression-level=9 is there10:44
KatolaZ...10:44
Centurion_Dannote it should be "compression level = 9" ie no hyphen.10:44
KatolaZare you sure?10:45
KatolaZthere is no gbp option without hyphen...10:45
KatolaZCenturion_Dan: I re-checked10:47
KatolaZit's compression-level=910:47
KatolaZunder [buildpackage]10:47
Centurion_Danno you are right...10:47
Centurion_Dansorry ... should read "no, you are right" :-]10:48
KatolaZ:D10:48
KatolaZ;)10:48
Centurion_Danbut drop that option if it's smaller then the repo - the new beowulf default uses compression-level = 6 iirc10:49
KatolaZlet's try then10:49
Centurion_Dananyway it's too hot in my office and bed time so see you later... o/10:51
KatolaZsee you Centurion_Dan10:52
KatolaZo/10:52
KatolaZlet's try this shot then10:53
Centurion_Danshould be at the meet tomorrow ;-/10:55
Centurion_Dan:-)10:55
Centurion_Dano/10:55
KatolaZhope to be there as well10:57
KatolaZthe timing is a bit inconvenient to me, until late March10:58
KatolaZLeePen: still failing11:28
KatolaZwill have a look later11:29
KatolaZgotta stuff to deal with now11:29
KatolaZo/11:29
KatolaZsorry11:29
LeePenKatolaZ: OK thanks.11:30
KatolaZok, found the problem with the orig.tar.gz15:29
KatolaZffs15:30
KatolaZok. so the problem is in the tar.gz15:40
KatolaZthe one in debian has different uid/gid on the files15:40
KatolaZand different prefix15:40
KatolaZit looks like the easiest option is to provide a pristine-tar15:40
KatolaZwill give it a try later15:40
KatolaZbbl15:40
KatolaZthere are also different timestamps, for some reason15:42
KatolaZI guess the one created via git-archive does not preserve those permissions by default15:43
LeePenKatolaZ: I see that. Seems bizarre. Where does the uid/gid 500 come from?17:54
KatolaZfrom the original tarball17:58
KatolaZ:)17:58
KatolaZthe debian one17:58
KatolaZit must have been uploaded outside the git workflow17:59
KatolaZso created and signed locally, and then queued with dbuild17:59
KatolaZI double-checked earlier17:59
KatolaZwe'll need to find a way to hack around the way gbp creates the orig.tar.gz18:00
KatolaZI guess there must be a way to force some parameters18:00
KatolaZmaybe directly from the gbp.conf18:00
KatolaZ(but I could not find any so far)18:00
KatolaZ(will have a look later)18:00
LeePenYes, I was looking at that now. It isn't an area I am particularly familiar with.18:00
KatolaZneither I am :P18:00
KatolaZbut I am sure we will find a way18:01
LeePenMaybe I am missing something, and ignore this if it isn't helpful, but could we remove the 500 uid/polkit prefix orig.tar.gz from the archive and install the new gbp generated one?18:18
golinuxPad for this week's meet is here: https://pad.dyne.org/code/#/1/edit/iHY8VXF3rOimFyunkzbE1w/nzdxrotuhXC24jGR7Vdy-LoY/18:30
KatolaZno LeePen we can't19:32
KatolaZbecause the dsc files of old packages will all be screwed19:32
LeePenOK. I am AFK for a few hours now. Good luck!19:39
KatolaZok19:42
KatolaZwill report here19:43
KatolaZwill be a bit late at the meeting21:28
rafalcpphow is security on devuan, compared to debian?21:30
amesseri won't join - not much to report either21:30
rafalcppeg delay with releasing security patches from debian?21:30
rafalcpppatching our unique (not in debian) software goes well? etc21:30
KatolaZrafalcpp: define "goes well"21:31
rafalcppKatolaZ: releasing patched versions of software in timely manner21:32
KatolaZwe haven't had any specific case so far21:33
KatolaZI mean with vulnerabilities in packages forked by Devuan21:33
KatolaZand the few cases have been dealt with immediately21:33
KatolaZso I guess the answer is "yes"21:33
LeePenKatolaZ: I have been thinking about this whilst I was away: commit 64efeb492cf4fe5a494a44da0ee562adff693aeb drops pristine tar22:35
LeePenThe pristine-tar brance is still in the repo AFAICS. If we revert that commit that might be sufficent?22:36
KatolaZLeePen:22:36
KatolaZwould it be possible to bump version to 0.106?22:37
KatolaZI mean, merging from upstream 0.106 (or whatever version is available after 0.105)22:37
LeePenMaybe. I was focusing on 0.105-25 as it is what is in buster.22:41
LeePenAnd fo we get security fixes for free22:43
LeePens/fo/so/22:43
KatolaZit would be enough to have a 0.10622:46
KatolaZor whatever is available which is not too different from 0.10522:46
KatolaZand merges more or less fine22:46
LeePenOK. I will look at that. Do you not want to reinstate pristine tar?22:47
KatolaZLeePen: 0.109 merges fine22:48
KatolaZonto unstable22:48
KatolaZshall we do it?22:50
LeePenYes, give it a whirl22:50
KatolaZok22:50
KatolaZlet's see22:50
KatolaZ:D22:50
LeePenThere are a lot of quilt patches which might need  refreshing22:51
KatolaZactually yes22:54
LeePenI can look at them tomorrow.22:56
LeePenIsn't it simpler to enable pristine-tar in gbp.conf?22:57
KatolaZnope22:57
KatolaZit won't work22:57
KatolaZbecause all the other releases have the same source22:57
KatolaZso we should indeed re-build also for jessie and ascii22:57
KatolaZbut that would be a PITA, especially for jessie22:58
LeePenBut I think the jessie and ascii tarball is from pristine-tar?22:58
KatolaZdunno22:59
KatolaZthey have the same source as debian22:59
LeePenGive me a few minutes23:00
KatolaZlet's give it a go with pristine-tar23:02
KatolaZLeePen: I will force a reset23:02
KatolaZissued a build23:04
KatolaZlet's see23:04
KatolaZif it doesn't work, I guess we can try 0.10923:04
LeePenOK. I'll check back in a bit.23:08
KatolaZhttps://ci.devuan.org/job/policykit-1-binaries/23:10
KatolaZit will require about 20 mins23:10
KatolaZfsmithred: you here?23:11
KatolaZplease pull the latest live-sdk23:12
KatolaZI had removed all the nls (codepage) modules23:12
KatolaZthey are in fact useless, unless you need to fiddle with a fat in early boot23:12
KatolaZ:)23:12
KatolaZit should work now23:12
fsmithredKatolaZ, yes, I'm here23:20
fsmithredlol23:20
fsmithredok, I'll pull and rebuild23:20
KatolaZoki23:22
KatolaZlet me know23:22
KatolaZLeePen: it looks like it worked23:44
KatolaZ:)23:44
KatolaZcopying the packages to beowulf23:44
KatolaZand then will go to sleep23:45
KatolaZLeePen: done23:47
KatolaZthe packages are both in unstable and beowulf23:47
KatolaZgood night23:47
KatolaZo/23:47
LeePenKatolaZ: great. Thanks for hanging in there.23:54

Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!