Upload good practices

[Sylvain Beucler <beuc@beuc.net>]

Hi,

I added a couple mementos at https://wiki.debian.org/LTS/Development about building and testing security uploads.
Let me know if this can be improved :)

Copy/paste:

- pbuilder usage:
# Init (note: jessie->jessie buggy https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=806377)
sudo pbuilder --create --basetgz /var/cache/pbuilder/base-jessie.tgz \
  --distribution jessie \
  --othermirror 'deb http://security.debian.org/ jessie/updates main contrib'
sudo pbuilder --update --basetgz /var/cache/pbuilder/base-jessie.tgz
# Rebuild source and binary packages from Jessie (in extracted source)
pdebuild --use-pdebuild-internal --buildresult .. -- --basetgz /var/cache/pbuilder/base-jessie.tgz
# Rebuild binary packages from Jessie
sudo pbuilder --build --basetgz /var/cache/pbuilder/base-jessie.tgz --debbuildopts '-sa' package+deb8u1.dsc
sudo pbuilder --build --basetgz /var/cache/pbuilder/base-jessie.tgz package+deb8u2.dsc

- testing:
# check for common packaging issues in last build
# from extracted source after build, jessie host (only check new errors)
lintian -i
# inspect source changes
debdiff package+deb8u3.dsc package+deb8u4.dsc
# inspect binary changes
debdiff --from deb8u3/*.deb --to deb8u4/*.deb
# test package upgrade
sudo piuparts -d jessie \
  --extra-repo='deb http://security.debian.org/ jessie/updates main contrib' \
  -l piuparts-package.log \
  -I :etc/buggy-dep \
  package+deb8u4_amd64.changes \
  | grep -P '(INFO|ERROR):'

Cheers!
Sylvain