[Pkg-iscsi-maintainers] dh(1)-based packaging pushed to unstable, signed my old git tags

Christian Seiler christian at iwakd.de
Sat May 2 23:31:35 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Ritesh,

just so you know: I've now pushed 3 things to git:

1. I've signed my old git tags.

Since the commits they reference remained the same, you should be able
to just fetch them (git fetch --tags), but just as a heads-up in case
git doesn't like it and you have to force-fetch the tags.

2. I've re-added the gbp.conf you added previously (I had removed it
during the Jessie freeze because the release team would never have
accepted that change), with the additional setting of meta = True in the
[dch] section - that makes Closes: #xxx work properly.

and finally:

On 04/24/2015 04:12 PM, Ritesh Raj Sarraf wrote:
> On Thursday 23 April 2015 05:19 PM, Christian Seiler wrote:
>> - switch to dh(1) instead of manual calls for dh_*, and override 
>> where necessary
>> 
>> This should make the rules file quite a bit easier, and
>> immediately fix #777602 (dh_installinit call deprecated). Also,
>> future improvements to debhelper will automatically be picked
>> up.
>> 
> 
> Yes. We should transition to the newer tools.

3. I've completely rewritten debian/rules to use dh(1) instead of manual
calls to dh_*. Also, I'm now using debian/*.install instead of manual
calls to install in the rules file. This simplifies things quite a bit,
since one now doesn't have to check if we are building against an arch
that supports udebs or not (debhelper does that for us).

I've compared the generated binary packages from the version in Jessie
and my changes with dh(1) on amd64 using the debbindiff tool from the
reproducible build people. Since I'm not really running a reproducible
build toolchain, timestamps and build ids change all over the place, but
otherwise (except for postinst where dh_installinit's generated version
is slightly different but has the same effect, see #777602) everything
is completely identical.

Therefore, I'm sure that my packaging changes don't affect the generated
package.


If you have any comments / objections to my changes to debian/rules,
please tell me.

The next things I'll do are going to be:

 - While playing around with the build, I've noticed that upstream's
   Makefiles don't properly respect external build-flags in a sufficient
   manner. I've seen that you have already patched some parts to make
   hardening work better, but it's not complete. I'll try to fix the
   Makefiles so that all build flags are properly respected.

 - Do the other stuff I mentioned in my original email (systemd,
   umounting logic, but triaging, etc.)

Christian

PS: I found Bug #784092 while switching to dh(1), you might want to take
a look at that. It's fixed with the current changes in git, but as I
mentioned in that bug, it might be a good idea to do a jessie-pu.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=RwZp
-----END PGP SIGNATURE-----



More information about the Pkg-iscsi-maintainers mailing list