[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#816683: marked as done (RFS: cloudabi-utils/0.8-1 [ITP])

Your message dated Mon, 25 Jul 2016 04:31:38 +0000
with message-id <E1bRXYI-00037k-UE@quantz.debian.org>
and subject line closing RFS: cloudabi-utils/0.8-1 [ITP]
has caused the Debian Bug report #816683,
regarding RFS: cloudabi-utils/0.8-1 [ITP]
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
816683: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816683
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "cloudabi-utils"
 Package name    : cloudabi-utils
 Version         : 0.8-1
 Upstream Author : Ed Schouten <ed@nuxi.nl>
 URL             : https://nuxi.nl/
 License         : 2-clause BSD license
 Section         : misc

It builds those binary packages:
 cloudabi-utils - Utilities for spawning CloudABI processes
 libcloudabi-dev - Native ports of CloudABI functions (development files)
 libcloudabi0 - Native ports of CloudABI functions (shared library)

To access further information about this package, please visit the following URL:
 http://mentors.debian.net/package/cloudabi-utils

Alternatively, one can download the package with dget using this command:
 dget -x http://mentors.debian.net/debian/pool/main/c/cloudabi-utils/cloudabi-utils_0.8-1.dsc

----- End of boilerplate ;-) -----

To summarize, cloudabi-utils is a package that provides a utility called
cloudabi-run that you can use to start CloudABI programs. CloudABI is a secure
POSIX-like runtime built around the concept of capability-based security.

In order to make the startup process secure, cloudabi-run cannot start the
requested program directly. It first has to jump through a tiny 'proxy' program
called cloudabi-reexec to ensure it has already entered CloudABI's sandbox.
cloudabi-reexec itself is a CloudABI program. This tool has to be built with a
cross compiler for CloudABI and linked against CloudABI's C library. All of
these components are fully BSD and MIT licensed:

- Toolchain: Clang, LLVM, LLD, Binutils
- C runtime library: LLVM's compiler-rt
- C library: https://github.com/NuxiNL/cloudlibc
- cloudabi-reexec: https://github.com/NuxiNL/cloudabi-ports/blob/master/packages/cloudabi-reexec/cloudabi-reexec.c

Now the problem is as follows: I don't think it's realistic that we'll be able
to build cloudabi-reexec as part of this Debian package. I don't have any
intent on including packages for CloudABI's C library in Debian, for example.
For this reason I've including a precompiled binary. The README explicitly
states where this binary came from. A package that I wrote for FreeBSD also
uses these precompiled binaries:

https://www.freshports.org/sysutils/cloudabi-utils

My question is, is this all right according to Debian's project guidelines? If
not, is there anything I can do to address this?

Thanks,
 Ed Schouten

--- End Message ---
--- Begin Message --- 
Package cloudabi-utils has been removed from mentors.

--- End Message ---
Reply to: