Bug#506251: [RFS] amule-adunanza for Debian
* Luca Falavigna [Wed, 17 Dec 2008 00:22:47 +0100]:
> Hello Adeodato,
Hello, Luca, sorry for the late reply.
> You're aMule Debian maintainer, so your opinion is important.
> Fastweb is an important italian ISP which implements a kind of network
> based on a NAT technology: every customer is part of Fastweb huge WAN
> and Internet contents are proxied. amule-adunanza project [1] is meant
> to help Fastweb users to use Kademlia network allowing clients to be
> reached inside Fastweb's NAT, traditional aMule is not able to do so.
> Adunanza is a "merge" of aMule, it uses the same aMule code,
> implementing Adunanza changes on top of it, new stable versions happen
> when new aMule version come out.
> I packaged a first version of amule-adunanza [2] and opened a ITP for it
> [3], it is mainly based on existing aMule package in Debian, since code
> and packaging is almost the same, the only major change is lack of
> amuleweb, it hasn't been tested by Adunanza developers and they
> suggested to not ship it for now.
> Just for the records, it has been made available in Ubuntu recently [4].
The only thing that comes to mind is that we don't like code duplication
in Debian much. That is, we like code to live in exactly one source
package. For this to work here, amule would have to provide an amule-src
package, and get amule-adunanza to build-depend on it, applying its diff
on top of it. (This way, if a security problem happens in amule, a
simple automatic binNMU is enough to get it fixed in amule-adunanza.)
I'm not sure, however, if it's worth the effort. After all we are
talking only of two packages (and foreseeably none more), and I don't
think there have been any security uploads of amule in the past.
Another option would be to include the adunanza diff in the amule
package itself, but I'm not very keen on that either.
Let's CC the security team, to see if they insist that we duplicate this
codebase, or can live with it.
> I'd like to ask you if you could have some spare time to review it and
> eventually sponsor it for me.
I'm afraid I don't have time at the moment to sponsor this package. I'm
sorry. Good luck with finding another sponsor.
> [1]http://sourceforge.net/projects/amule-adunanza/
> [2]http://mentors.debian.net/debian/pool/main/a/amule-adunanza/amule-adunanza_3.14b3+2.2.2-1.dsc
> [3]http://bugs.debian.org/506251
> [4]https://launchpad.net/ubuntu/+source/amule-adunanza
> Thank you in advance and regards,
P.S.: I CCed the ITP bug so that there is record of this conversation,
I hope you're okay with that.
--
Adeodato Simó dato at net.com.org.es
Debian Developer adeodato at debian.org
Listening to: Justin Nozuka - If I Gave You My Life
Reply to: