From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on starla X-Spam-Level: X-Spam-Status: No, score=-0.9 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id B32181F44D for ; Wed, 24 Apr 2024 13:57:12 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rzd7M-0007XB-0X; Wed, 24 Apr 2024 09:57:00 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rzd7J-0007Wj-Hq for bug-gnulib@gnu.org; Wed, 24 Apr 2024 09:56:58 -0400 Received: from uggla.sjd.se ([2001:9b1:8633::107]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rzd7C-0004LO-Mz for bug-gnulib@gnu.org; Wed, 24 Apr 2024 09:56:57 -0400 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:In-Reply-To :Date:References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding :Content-ID:Content-Description; bh=yvn2EEe7azVPVlS3iXm8T+j7LWwt5dT1WYlkAtHc+yE=; t=1713967004; x=1715176604; b=SyT0TOVfMaSMkJlgjhT4H5Z4m6RtJ3qF2uRgKKot3DqDlsydOkit5Id2/7Kv4rIFXPcDe9DnkkM yWHIKMjMICA==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID: In-Reply-To:Date:References:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=yvn2EEe7azVPVlS3iXm8T+j7LWwt5dT1WYlkAtHc+yE=; t=1713967004; x=1715176604; b=pEEEGpxHqgNknq1U1QLs5qk2GfPmmj7ZCPVNLruhL0Yz2Fqmo/rQJgUB1t51Qp0wdHqKwUuTjtL +vnrID764OLcdFU1wjp+ipOPICVFtxEnpuUZ09LPevAmsvvAF1liV/Eli3syIBW4mLgvt8O2uZYJY xS1/NKsoK58//g8vu4tHku8a593tU3pPRpddRY5rCUNINufd4HECSPBkNuDJgUi+zGKd9IKVF2R9k nyO/PGUVKowwrQIJDqLm+ntoJH7yc2KE7Z6oIaQT0LCQxmYpkXqMBZu/MekF8vstXjmVX825QBpn4 u3IGh/5vV+bRmpDUP+L9zPCFjVgIstJqinFsZ3MHquijKTKcw1clfBELRL5C3yS+iwIyb6iBn9Kvq Qi5CYjaH5xzC0tvUCGgRVA/xvQuLUzcxM1Z20BgHyhUBHPd5ue4iEGdv8CJHWVvsA/fBAUCnZ; Received: from [2001:9b1:41ac:ff00:823f:5dff:fe09:16ac] (port=41978 helo=kaka) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1rzd73-005LTD-4t; Wed, 24 Apr 2024 13:56:41 +0000 To: Reuben Thomas Cc: Bruno Haible , bug-gnulib Subject: Re: Gnulib in Debian References: <346536552.tGq8MHzOUc@nimes> <8477763.soENF2aIni@nimes> OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt X-Hashcash: 1:23:240424:bug-gnulib@gnu.org::TcoQJgciikrtt2fc:05k0K X-Hashcash: 1:23:240424:bruno@clisp.org::WaWxZMRAUV4iZbNn:0Euoc X-Hashcash: 1:23:240424:rrt@sc3d.org::0PFBBE3g+zK6KHkf:1qBHy Date: Wed, 24 Apr 2024 15:56:57 +0200 In-Reply-To: (Reuben Thomas's message of "Wed, 24 Apr 2024 13:26:47 +0200") Message-ID: <8734radfti.fsf@kaka.sjd.se> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: pass client-ip=2001:9b1:8633::107; envelope-from=simon@josefsson.org; helo=uggla.sjd.se X-Spam_score_int: -39 X-Spam_score: -4.0 X-Spam_bar: ---- X-Spam_report: (-4.0 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: bug-gnulib@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Gnulib discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-to: Simon Josefsson From: Simon Josefsson via Gnulib discussion list Errors-To: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org Sender: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Reuben Thomas writes: > TLDR: FTP Master rejected my libpaper package because it contains gnulib > source files. I pointed out that other Debian packages for which I am > upstream do exactly this and have been accepted, and that it is the > standard way to use gnulib. A few senior Debian Developers said they did > not consider this use of gnulib to be against Debian policy. But FTP > Master's stance appears to be that they will not let any new packages into > the archive that contain gnulib sources (or in general, vendored > sources=E2=80=94they don't have anything against gnulib in particular!). = I also > argued that building against Debian's version of gnulib would risk > introducing bugs (I have found that updating gnulib in my projects can ma= ke > previously-working code fail). The last aspect should be solved: the latest gnulib in Debian contains a git bundle of gnulib, so you can Build-Depends on gnulib and via GNULIB_REVISION pick out exactly the gnulib git revision that libpaper needs. This avoids including gnulib files in the tarball that is uploaded to Debian, and there is no risk that you will get gnulib code from a different git commit. It requires an added 'Build-Depends: git' in libpaper, though, which is unfortunate but I don't see how to avoid it. I should write a post to debian-devel describing this pattern on how to use gnulib in Debian packages, but you can infer everything from the links given in my blog post [1] and the latest upload of libntlm into Debian. /Simon [1] https://blog.josefsson.org/2024/04/13/reproducible-and-minimal-source-o= nly-tarballs/ [2] https://salsa.debian.org/auth-team/libntlm/-/tree/master/debian --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCZikPqhQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFolSdAQC0JsV8MU2t1FaHzV+Sudb29WWe2VUp 70IjGTx2ZyId5AEA/uMHLxts5IxjoHW8yGFKg/T8kEodZ+X4BYDmyNPLDQo= =vRaJ -----END PGP SIGNATURE----- --=-=-=--