/srv/irclogs.ubuntu.com/2008/06/17/#launchpad.txt

Ekusheyhow do i upload to the PPA? i can't find the option to do that :(00:40
cprovEkushey: https://help.launchpad.net/PPAQuickStart00:41
=== mwhudson__ is now known as mwhudson
Ekusheycprov, i checked that, but it didn't help. i activated my PPA earlier, but i can't see any option to upload.00:48
cprovEkushey: are you familiar with debian/ubuntu upload systems and the tools (`debuild` & `dput`) ?00:50
Ekusheycprov, no i'm not... do i need to do it from shell?00:51
cprovEkushey: yes, you have to install and configure the tools to build and upload a source package.00:52
Ekusheyoh!00:52
cprovEkushey: check the ubuntu-package-guide reference.00:53
Ekusheysorry cprov, i thought there will be an upload button somewhere00:53
Ekusheyalright, thanks00:53
cprovEkushey: np00:53
pooliethumper: ping?00:55
pooliethumper: re bug 239958, maybe the instructions should have a "help" link or somethnig which could give more detail00:56
ubottuLaunchpad bug 239958 in launchpad-bazaar "UnlockableTransport error when using lp: instead of bzr+ssh" [Medium,Incomplete] https://launchpad.net/bugs/23995800:56
pooliei'm not sure if it would really help00:56
=== salgado is now known as salgado-afk
thumperpoolie: yeah, not sure01:03
geniiHow can I change my ppa to Hardy from the current Intrepid ?01:13
cprovgenii: do you mean 'upload' to hardy  or just change the UI widget to render hardy sources.list entry ?01:15
geniicprov: Both would be informative, if possible01:16
cprovgenii: set the right distroseries in the debian/changelog entry (man dch) 01:17
geniicprov: I'm currently trying to update pdfedit from 0.3.2   to 0.4.1  but Intrepid has this already, would be for Hardy01:17
cprovgenii: to see a different sources.list entry, select a new series in the first dropdown box in your PPA page.01:18
cprovgenii: sorry, I don't understand exactly what you mean.01:19
geniicprov: 8.10 has version 0.4.1 (latest) of the application pdfedit, however it's only up to 0.3.2-something in general for 8.04 . So I already successfully built from source (i386) on my box here with checkinstall. 01:22
cprovgenii: okay, fine, but how is it related with PPAs ? Do you want to upload and build the intrepid source for hardy in your PPA ?01:23
geniicprov: Ideally to just upload the lates sources (0.4.1) but for Hardy. The confusion I'm having seems to be that by default it wants it to be Intrepid01:25
cprovgenii: yes, that's what is pointed by the last entry in the debian/changelog01:26
geniiOK, have git-buildpackage and examining the dch manpage now01:27
cprovgenii: lot s of options for you.01:27
geniicprov: I think I need a "Launchpad for Dummies" book :)01:27
cprovgenii: 1 )you can copy the source and binaries from intrepid to hardy in your PPA01:27
cprovgenii: 2. you can create a new source package version of the same source pointing to hardy 01:28
geniicprov: Number 2 looks most prudent01:29
cprovgenii: probably.01:30
geniicprov: There pre-exists here a Changelog01:35
cprovgenii: ?01:35
geniicprov: In reading the dch manpage it seems it examines the Changelog for naming which would be something like "PDF Editor 0.4.1" (likely with underscores added or so). But recommended naming for ppa seems to me would be along line of: PDFEditor_0.4.1-0ubuntu1~ppa101:41
cprovgenii: yes, that's the safest way to have a intrepid version rebuilt in hoary, because 0.4.1-0ubuntu1~ppa1 < 0.4.1-0ubuntu1, so your system would dist-upgrade fine.02:00
persiagenii: Be warned that if you are working towards something that will become a backport, the official backport will be 0.4.1-0ubuntu1~hardy1, which is less than that string.  You might want to use ~0ppa1 so that if there is later an official backport, users are upgraded to the official backport.02:03
geniiHm02:04
geniiSorry for lag, currently reading https://wiki.ubuntu.com/PackagingGuide/Howtos/PackagingFromScratchHelloDebhelper to get a grasp on how to do a diff from orig.tar.gz kind of thing. Building locally doesn't usually require all this etc02:06
geniiQuite dry reading I may add02:07
geniiWhats an acceptable substitution for a tilde in the packagename?03:05
geniieg: dpkg-source: error: source package name `pdfedit-0.4.1-0ubuntu1~ppa1' contains illegal character `~'03:06
jameshgenii: perhaps it is only after the "pdfedit" bit?03:07
jameshyou can definitely have a "~" in the version number03:07
geniiPerhaps I just need to remove it for now03:08
jameshgenii: you generally want just the source package name in the debian/control file, and the version number in debian/changelog03:11
geniijamesh: The original source name didn't have the -0ubuntu1~ppa1 ending, but then dh_make groaned and I renamed it to fit. In the control file may be the issue?03:13
jameshgenii: in the usual case, you should leave the package names in debian/control as is03:14
jameshgenii: include your suffix in the version number for the most recent changelog entry03:15
jamesh(that is where the package version is picked up from)03:15
geniiOK. So If I have Package: namehere~ppa1  in control this reverts to same as source name?03:17
jameshwhy do you want ~ppa1 in the package name?03:20
jameshdon't you want that in the version number?03:20
geniijamesh: I'm trying to understand this.03:21
jameshgenii: if you want the package in your PPA to upgrade whatever is provided in Ubuntu, you should use the same package name, but a higher version number03:22
geniijamesh: I've managed to successfully locally compile this app for Hardy (pdfedit-0.4.1) from the source at Sourceforge. There seems to be an earlier Hardy version (0.3.2) in the repos already. I'm painfully trying to understand step by step how to do the dh_make, debuild, dput  process. The ppaquick start suggests to name packages with an ending of ~ppa#03:26
genii(as detailed here https://help.launchpad.net/PPAQuickStart )03:27
jameshgenii: it recommends that as a suffic on the version number03:28
jameshnot the package name03:28
geniiHmm03:28
jameshsuffix, even03:28
geniiSo version number is only in Changelog?03:29
jameshright.03:29
jameshyou can't actually produce a new version of a debian package without touching the changelog03:29
geniiOK I'm gonna go delving in there again03:31
jameshgenii: https://wiki.ubuntu.com/PackagingGuide/Recipes/PackageUpdate <- this might help you03:31
geniijamesh: I've been working a bit from https://wiki.ubuntu.com/PackagingGuide/Howtos/PackagingFromScratchHelloDebhelper but it seems to give conflicting info compared to the ppa page03:32
geniiIf not conflicting then at least confusing03:33
jameshgenii: if you are updating a package to a new version, you probably don't want to do your packaging from scratch03:33
jameshotherwise you're throwing away all the work others have done on it (as well as making a lot more work for yourself)03:34
geniijamesh: So if I just did something like dh_make in the original source code dir without doing the .orig  stuff likely would have worked?03:35
geniiIf nothing else I'm seeing how the debian/control   and so on functions anyhow :)03:36
jameshgenii: packaging from scratch is worth doing as a learning exercise, sure.03:41
jamesh[I should probably do it some day too ...]03:42
geniiHeh03:42
jameshbut if you want a usable package, it is better to try and update an older packaging03:42
jameshbesides: upgrading packages is a more common operation than packaging something from scratch03:43
geniijamesh: So in this case, getting the source for 0.3.2 then doing some diff for 0.4.1 ?03:45
jameshgenii: right.  If you have the deb-src lines in your sources.list, you should be able to do "apt-get source pdfedit"03:46
jameshdownload the newer tarball, and there is some command you can run to move the existing packaging over to it03:46
geniiI think I'm gonna need more Advils03:46
jameshThe Debian packaging howto is worth reading if you haven't already03:47
geniiI've been basically working off the packaging guide I mentioned earlier03:48
geniiI think what may be giving me grief is that the original sources are not debian to begin with (that I've been working with)03:49
geniiWhat eludes me is how something locally done like ./configure;make;sudo checkinstall  to end up with a deb package gets so convoluted when trying to get basically the same thing onto my PPA03:53
lifelessbecause checkinstall is fundamentally broken03:57
lifelessand it is giving you a very false idea of what packaging entails03:57
geniilifeless: Would the dh_make/debuild  method more educational to use when compiling sources if I wanted to get a better understanding ?04:00
genii(as well as dch I imagine)04:01
lifelessI recommend you use the MOTU teaching materials04:03
lifeless#ubuntu-motu is the IRC channel04:03
lifelessthe team there are dedicated to teaching people about packaging as part of their tasks04:04
geniilifeless: Thanks. 04:05
geniilifeless: They've actually ben pretty helpful there04:33
genii*been04:33
persiaWe aim to please :)04:34
* genii slides persia a coffee04:36
geniiNeed to get back now to my usual channels :)04:36
=== persia_ is now known as persia
mptGooooooooooooooooooood morning Launchpadders!07:30
Hobbseeafternoon mpt!07:33
mptHey, I got here before midnight this time07:35
Hobbsee\o/07:41
=== RAOF_ is now known as RAOF
\shmoins11:21
\shgmb: ping :)11:22
\shgmb: you offered me some help regarding leonov and launchpad malone ;)11:22
gmb\sh: Sure! Just give me a few minutes; I'll ping you when I'm free.11:23
\shgmb: cool...if you are free :) please join #leonov , thx :)11:24
=== kiko is now known as kiko-afk
=== jt1 is now known as jtv
=== mrevell_ is now known as mrevell
=== salgado-afk is now known as salgado
=== mrevell_ is now known as mrevell
DauerbaustelleHey guys, got a question: Why does code.launchpad.net need so long for displaying new revisions in preview (code.launchpad.net/~mytool/mybranch) ?14:08
DauerbaustelleAlso known as "recent revisions"14:09
DauerbaustelleAnyone there?14:13
jameshDauerbaustelle: after you upload your changes via bzr+ssh or sftp, there are two processes that need to run14:14
jameshthe first does the equivalent of "bzr push" to transfer your changes to the publicly published area of the server (ensuring that it is a real bzr branch and that corrupt data isn't published)14:15
jameshthe second scans the data from the public location for use within Launchpad itself (e.g. for the code.launchpad.net pages)14:15
jameshthe delay should not be too long (usually just a few minutes), but can take longer if a lot of other data has also been pushed around the same time14:16
Dauerbaustelleoh, ok14:17
Dauerbaustelleis there a page where i can see new revisions after process #1?14:17
jameshhttp;//bazaar.launchpad.net/~user/project/branch/changes should reflect it14:19
jamesh(that'll be loggerhead running against the published version of your branch)14:19
jameshthis is the "browse revisions" link from the code.launchpad.net page14:19
DauerbaustelleOh14:20
Dauerbaustelleyeah, you're right14:20
Dauerbaustellethank you!14:20
=== EdwinGrub is now known as EdwinGrubbs
\shdear lp admins, what do I need to do to get a mailing list approved? :)14:52
=== salgado is now known as salgado-brb
=== salgado-brb is now known as salgado
=== kiko-afk is now known as kiko
=== _neversfelde is now known as neversfelde
=== thekorn_ is now known as thekorn
=== salgado is now known as salgado-lunch
=== matsubara is now known as matsubara-lunch
doctormoI'm trying to intergrate with launchpad for our loco website using the openid system18:34
doctormoIf I direct people to login to launchpad, how can I get them back onto our site? is there a redirect?18:35
doctormoDoes anyone frequent here?18:40
beunodoctormo, that's not how openid works18:47
beunopeople don't have to login into Launchpad18:48
beunodoctormo, http://en.wikipedia.org/wiki/OpenID#Logging_in18:48
doctormobeuno: People don't have to log into my website either, but if I know they are logged into launchpad I can identify them.18:51
doctormoThanks for the link btw18:54
beuno:)18:54
beunoI don't follow what you want/need then18:55
doctormobeuno: A website, run by a LoCo team, where the intity management is tied to launchpad. We don't really want people with users on the website that are not on launchpad.18:58
doctormoPerhaps I will just create a link to the logon openid and feed it the login.launchpad.net address18:58
beunodoctormo, well, if people are using their LP openid, then it means they have a LP account19:01
beunoso they should just login with their LP openid into your site19:01
beunoand you can avoid going through LP itself19:02
=== matsubara-lunch is now known as matsubara
doctormobeuno: that is the hope...19:14
schierbeckhi guys19:24
schierbeckis there any kind of authentication of revision committers as shown on the code pages, or do you simply match by the committer email address?19:24
schierbeckas far as i can see, only the pusher is authenticated19:25
schierbeckeh, the one pushing the revisions...19:25
* beuno bets on the "only matching email theory"19:26
* schierbeck agrees, but sees potential spoofing issues19:26
beunoin fact, if you upload revisions with an email that's not in LP, it doesn't recognize it19:27
schierbeckthat sounds like a clear sign to me :)19:27
beunothat's true, although, I suppose you already trust the people you allow to upload to the branch19:27
schierbecktrue19:28
beunosounds like a bug that will get some discussion  :)19:28
schierbeckyou *could* however match by their gpg signature to be sure :)19:28
beuno*if* people sign their commits19:29
schierbeckthey probably would if it added any real benefit19:29
schierbeckcurrently, the semantics seem ill-defined19:29
beunoand, I'm not sure, but I think you can't really verify the signed commits, can you?19:29
schierbeckwell, undefined19:29
=== salgado-lunch is now known as salgado
schierbeckbeuno: you can19:29
beunoah, cool. I don't know why I thought that you couldn't currently19:30
schierbeckyou can verify the signature itself and compare the signature owner's name and email against the commit's19:30
beunonobody from codebrowse seems to be around  :/19:30
beunoit'll be a few hours before mwhudson wakes up, and I don't know who else works on it.  abentley maybe?19:31
schierbeckbeuno: i'm actually doing it in bzr-gtk, although it's disabled right now -- we still need to match the signed text against the revision to avoid spoofing19:31
schierbeckperhaps19:31
schierbecki'll add a bug for it19:32
beunocool, let me know what # so I can subscribe  :)19:32
abentleybeuno: I don't do lots on codebrowse, but I'm reasonably familiar with it.19:32
beunoabentley, do you happent to know if what schierbeck is saying is true?  It uses a simple email matching on the committer's email?19:33
abentleybeuno: I can't say offhand.  I would imagine the performance hit of doing so would be unpleasant.19:35
beunoabentley, ok, thanks. We'll see what comes out of the bug19:36
schierbeckbeuno, abentley: i've filed bug #24075619:36
beunoit does seem like a potential security problem19:36
ubottuLaunchpad bug 240756 in launchpad-bazaar "Authentication of revision committer" [Undecided,New] https://launchpad.net/bugs/24075619:36
abentleyschierbeck: Are you talking about the loggerhead-style view or launchpad-styled view?19:39
beunolp-style view which links to the user's page19:40
beunowhich is what would make it a LP security issue I suppose19:41
abentleybeuno: It would be a security issue if it allowed someone to do something with the permissions of that user.  I don't think that's the case.19:42
beunoabentley, right. Spoofing risk then. If I upload a revision of bzr as <aaron.bentley@canonical.com>, then LP will show it as you would have made that revision19:44
abentleybeuno: We also, for example, don't require authentication when commenting on bugs.19:44
beunoabentley, you do have to have a LP account to comment on bugs. And that user is attached to that comment. Not so for revisions19:45
beunobzr's nature will make this a tricky one19:45
beunobut gpg sounds like one solution19:45
abentleybeuno: The mail interface does not require a GPG signature for commenting.19:47
beunoah, then that's not so good either   :)19:47
cr3how can I have a ppa for multiple releases? must I create different branches and have the build release in the changelog?19:47
abentleySure it is.19:47
abentleyIt would be worse if we required every message to be GPG signed.  Would prevent lots of people from participating.19:47
beunoagreed. Make it optional, and clear that the specific revision hasn't been verified19:48
abentleySimilarly, many people don't bother signing their revisions.  But where they are signed, we ought to be able to verify the signature.19:48
schierbeckbeuno, abentley: i think the verification indeed should be optional -- i'm not sure how to do that in the ui, though19:50
abentleyschierbeck: One option is to specially mark verified revisions, like browsers specially mark SSL web sites.19:52
abentleyBut even if you have a signed revision, you don't know that the author is accurate, only that the committer really does claim that to be the author.19:53
schierbeckabentley: this is kind of what i've been working on in bzr-gtk19:53
schierbeckmy idea is that if the signature email matches the committer email, then we regard that revision as being signed by its committer, i.e. authenticated19:54
abentleybtw, I've looked at the code now, and I'm reasonably certain we're doing no testament verification.19:54
schierbeckthe testament also needs to match, of course19:54
schierbeckabentley: yeah, that's our main issue with the verification code -- i'm not quite sure if there's an easy way to solve it19:55
schierbecki would be very interested if there was19:55
abentleyWhat's the problem?19:56
schierbeckabentley: well, i can get the cleartext from the signature, which is the testament, but i need to get a testament from the repository, too19:58
schierbeckcouldn't find anything in the docs, although it's been a while since i worked on it19:59
abentleyIt's not hard  to generate a testament.19:59
schierbeckabentley: please enlighten me :)19:59
abentleyfrom bzrlib import testament; testament.Testament.from_revision(repository, revision_id)20:00
schierbeckabentley: i feel a bit foolish now...20:01
abentleySorry.20:02
schierbecknot your fault20:02
abentleyYou'll want to invoke as_short_text, I believe.20:02
schierbeckok20:02
abentleyThe result of that should match the signed text.20:02
schierbecki think we just didn't make it for the release, and i lost focus20:03
schierbeckhmm, someone broke the seahorse integration bits in the meantime20:05
abentleyschierbeck: Only fair.  The seahorse integration bits broke lots of other things :-)20:07
schierbeckabentley: yup :)20:09
schierbeckguess it's karma20:09
=== fta_ is now known as fta
johanmwhudson: ping21:44
mwhudsonjohan: hi21:45
johanmwhudson: remember the vcs-import issue I mentioned two weeks ago?21:45
mwhudsonjohan: yes21:45
mwhudsoni fixed the bug, but we haven't had a roll out yet21:45
johanah, excellent21:45
johannot even on on edge or staging?21:45
mwhudsonthere is a rollout next weekend21:45
johan[or perhaps vcs-imports isn't running there]21:45
mwhudsonnext week, rather21:46
mwhudsonjohan: there is a staging, but for boring reasons it's hard to test there21:46
bdmurraygmb: I'm still seeing "couldn't connect to OpenOffice.org issue tracker" with some openoffice.org bugs21:46
mwhudsonthe staging environment doesn't have access to the existing production import 21:46
mwhudsonso it starts from the beginning again21:46
johanmwhudson: sure, I'll just wait until the next rollout then.21:47
mwhudsonjohan: i _can_ test it on staging, but it's a fiddle21:47
mwhudsonwe can also cherrypick the fix onto production21:47
mwhudsonbut yeah, waiting a week is the easiest approach if you're not in a hurry21:47
gmbbdmurray: Yeah, it looks like the Bugzilla XML interface has been disabled on the OO.o bugtracker, so we're not able to fetch any bugs.22:35
gmbI've contacted the admins to see what the situation is.22:35
bdmurraygmb: they have an rpc interface?22:36
gmbbdmurray: Nope. Even if they did, the basic Bugzilla XML-RPC interface doesn't actually provide what we need to pull bug statuses in.22:39
bdmurraygmb: oh, okay.  are they any rpc interfaces that you do use?  I'm curious about other bug tracking systems. 22:40
gmbbdmurray: Not at the moment. But we've done the work to enable working with Trac over an RPC interface (provided by a plugin on the Trac side) and I'm currently working on the same kind of functionality for Bugzilla (again provided by a plugin).22:41
gmbbdmurray: For most bugtrackers we either use XML (or CSV) exports.22:42
bdmurraygmb: I've heard about the plugins, thanks.22:42
bdmurrayI've been thinking of ways to make it easier to setup bug watches.22:43
gmbbdmurray: If you've got any ideas, I'm all ears :)22:49
bdmurraygmb: I'll keep that in mind. I've been playing with the debbugs SOAP interface recently and searching bug bodies for strings.22:51
=== mthaddon changed the topic of #launchpad to: Launchpad is going down in from 22:00 UTC until 03:00 UTC for hardy server upgrades | https://launchpad.net/ | Downtime on June 17, 18, and 19: http://tinyurl.com/5bgye5 | Next meeting, all welcome: Thu 19 June 2008, 1800UTC #launchpad-meeting | Help: https://help.launchpad.net | Questions and spam reports: https://answers.launchpad.net/launchpad | Channel logs: http://irclogs.ubuntu.com
gmbCool.22:58
=== salgado is now known as salgado-afk
YokoZarhmm launchpad ssl seems down23:14
YokoZarfor the launchpad librarian I mean23:14
mwhudsonYokoZar: the production machines are being upgraded to hardy23:14
YokoZarYeah, I figured it was part of that.  seemed odd that librarian was still up for a moment though23:15
=== barry is now known as barry-away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!