[kobold at debian.org: The future of Zope{2, 3} and Plone in Debian and Ubuntu]

[Brian Sutherland]

On Mon, Nov 23, 2009 at 08:55:01AM +0300, Rakotomandimby Mihamina wrote:
> 11/22/2009 05:12 PM, Brian Sutherland::
>> On Sat, Nov 21, 2009 at 10:51:36PM +0300, Rakotomandimby Mihamina wrote:
>>> 11/21/2009 09:11 PM, Jonas Meurer:
>>>>> Yes, I tried to get a working zope2.12 for Debian but I couldn't really get
>>>>> anything else than hacks. It seems upstream is trying hard to make
>>>>> impossible the packaging... :(
>>>> too bad :-(
>>>
>>> This should help to deb-package from buildout:
>>> http://bitbucket.org/tarek/z3crecipedebian
>>
>> This seems to be similar to option 2 Jonas mentioned, which he rightly
>> described as "real mess for security team".
>
> Yes, but on the other hand, a "package" is a "package": there is a strong wish from
> upstream to have all this bindle together without any support outside that configuration.
> 
> We should at least consider trying this, not officialy and see how it evolves.

This kind of package is great for people to have in local repositories
and a tool to create them is a good thing.

But, given the problems duplicated code in the official archive creates
for the security team, I don't think it's a particularly good solution
for the official archive.

>> It also seems to come without any documentation I can find, so my
>> comment is just a guess at what it actually does from reading the code.
>
> Yes, it's a quick and dirty piece of code given by Tarek Ziadé, we still have to clean it up.
> It's suppose to build a debian package from a buildout.

There are 2 features that would be great in a package like this:

    * When creating a new source package, maintain the manual changes in
      from previous one, including upstream code changes and whatever's in
      debian/.
    * Ability to not include certain dependencies, but rather depend on
      the system for them, i.e. depend on python-zope.event rather than
      including the zope.event egg.

BTW, there's also http://pypi.python.org/pypi/zc.sourcerelease/ which
creates a tarball from a buildout. However, I'm not sure of the quality
of the tarball it creates having never actually used it.

-- 
Brian Sutherland