Bug#930595: RFS: uacme/1.0.15-2 [ITP]
On Tue, Jun 18, 2019 at 10:39:06AM +0800, Paul Wise wrote:
You might want to sign these tarballs:
https://wiki.debian.org/Creating%20signed%20GitHub%20releases
You may also want to sign all git tags and commits:
https://mikegerwitz.com/papers/git-horror-story
All my git tags and releases are already signed: they show as "Verified"
on github:
https://github.com/ndilieto/uacme/tags
The tarball is also signed with the same key in the dsc file
https://mentors.debian.net/debian/pool/main/u/uacme/uacme_1.0.16-1.dsc
Personally I would delete these from upstream git. I would also delete
generated autotools files (configure, Makefile.in, aclocal.m4 etc). I
would also delete any files that are copied into the source tree by
autotools (build-aux, INSTALL etc).
I will definitely not delete configure, Makefile.in and their friends
from the upstream releases because other systems than debian also use
uacme and I want to preserve, as is customary, the ability to do
'./configure && make install'.
In addition build-aux/git-version-gen and build-aux/m4/* are not
generated. If I deleted them autotools would not be able to regenerate
the configure script anymore.
As an example, uacme is now being packaged for OpenWRT:
https://github.com/openwrt/packages/pull/9150 and there they don't want
to regenerate configure and the manuals. All they care is that it gets
built. We might disagree with their approach but then again they could
disagree with debian's. So I am being pragmatic and trying to support
both. I think in the end what matters for debian is that everything is
regenerated from source cleanly, which is the case.
I think what you are doing now is fine but not optimal (need deletions).
Ok. Note I did a new release yesterday to satisfy a request by OpenWRT
devs to check for libcurl HTTPS support and I also took the chance to
eliminate AC_REVISION from configure.ac, which is redundant and produced
some warnings at build time when building outside of the git tree:
https://mentors.debian.net/debian/pool/main/u/uacme/uacme_1.0.16-1.dsc
Is anyone willing to sponsor it then?
Reply to: