Re: kernel-linux-*, generic build process
On Fri, 8 Feb 2002, Joey Hess wrote:
> Adam Heath wrote:
> > On Fri, 8 Feb 2002, Joey Hess wrote:
> >
> > > Whot? That's silly. Dpkg. Dpkg-source. Two different things, two very
> > > different sets of upgrade requirements.
> >
> > No, it's not. For real security, we must support source packages built on
> > unstable being extractable with tools in stable.
>
> Bah. For real security we must have a clearly documented procedure[1] of
> extracting debian source packages by hand. If dpkg-source v2 does not
> support this, then it is misdesigned. If it does, then there is no
> problem.
>
> Historical precident: The transition to the "new source format" was not
> delayed until a dpkg-source that could handle that format was in stable.
Well, a feature(one I really like) is that dpkg-source v2 can be passed -n.
This tells it to print out all the ordinary shell commands that it would run,
to unpack the source, without actually doing it.
Internally, it uses shell pipes, and uses very little, if any, temp files.
Also, it always make use of this feature. It inspects all files, builds up a
list of commands to run, and then at the very end, it runs them all. This
allows for better error checking, etc.
ps: I borrowed this idea from debhelper.
Reply to: