/srv/irclogs.ubuntu.com/2024/08/12/#ubuntu-devel.txt

=== gurupras- is now known as guruprasad
=== tribaal_ is now known as tribaal
utkarsh2102hey, livecd-rootfs' autopkgtest is failing for s390x in Jammy because it can't open http://people.canonical.com/~ubuntu-archive/seeds/ubuntu.jammy/STRUCTURE!?!?!?!?09:23
utkarsh2102logs - https://autopkgtest.ubuntu.com/results/autopkgtest-jammy/jammy/s390x/l/livecd-rootfs/20240812_065114_ae836@/log.gz09:23
utkarsh2102any idea what's wrong? :/09:24
xnoxhmmm no ahasenack09:39
xnoxcc ubuntu-server / ahasenack https://bugs.launchpad.net/ubuntu/+source/multipath-tools/+bug/207659809:42
-ubottu:#ubuntu-devel- Launchpad bug 2076598 in multipath-tools (Ubuntu) "friendly-names by default" [Undecided, New]09:42
utkarsh2102xnox: ohaiiii!09:55
utkarsh2102long time, no see :)09:56
utkarsh2102also, xnox, ahasenack: Debian didn't want to do that, I had opened an MP and they were like no, not this please. :P09:56
Rhondautkarsh2102: Sometimes people change their minds on things.  I guess asking again after five years might be okay.  The bug also mentions something about that debian-installer seems to use it anyways (though haven't checked that or whether it works or not like zeha commented)10:14
utkarsh2102https://salsa.debian.org/linux-blocks-team/multipath-tools/-/merge_requests/4 -> this was the MR 3 years ago10:16
-ubottu:#ubuntu-devel- Merge 4 in linux-blocks-team/multipath-tools "Install friendly names multipath.conf by default" [Closed]10:16
RhondaOh.  Just noticed that zeha is also on the packaging team, so saying "Debian" didn't want to do that might not be completely true, it was one person of the packaging team, another of that team didn't object to it.10:17
RhondaSo sometimes it makes sense in such cases to contact that person directly and ask for support, or what their opinion is after the time.  And yes, only three years, which still is quite some time. :)10:18
RhondaAlso, hi - hope you made it home safely. :)10:20
utkarsh2102hiiii, yes, I did. Hope you did too? :)10:26
rbasak@pilot in11:10
=== ChanServ changed the topic of #ubuntu-devel to: Archive: open | Devel of Ubuntu (not support) | Build failures: http://qa.ubuntuwire.com/ftbfs/ | #ubuntu for support and discussion of Focal-Noble | Patch Pilots: rbasak
blucaHi rbasak, any chance you could help with sponsoring https://bugs.launchpad.net/ubuntu/+source/archlinux-keyring/+bug/2076416 please? Thanks!11:26
-ubottu:#ubuntu-devel- Launchpad bug 2076416 in archlinux-keyring (Ubuntu Noble) "[SRU] Upload latest archlinux-keyring from oracular to noble-proposed" [Undecided, Confirmed]11:26
=== cimvwrccjftwvvha is now known as pacjairummlhenxv
=== pacjairummlhenxv is now known as georgiag
rbasakbluca: o/ why isn't this and distribution-gpg-keys just part of one big source package?12:20
rbasakOne source package per outside distribution isn't going to scale for sponsors' time.12:20
blucathe latter is for RPM distros12:28
blucathey are just handled separately upstream12:28
blucajust like debian-keyring and ubuntu-keyring as separate12:29
rbasakI'd like to see explicit and deliberate consensus amongst Ubuntu developers that this is an appropriate architecture first please.12:29
rbasakI commented on both bugs.12:29
blucafortunately it's not one package per distro, the RPM folks are quite good at collating in the same project12:30
blucaso it's one for those, plus one each for debian, ubuntu and arch12:30
rbasakHow about a single trusted key for an upstream project that maintains dynamic lists?12:31
rbasakUsers would choose just to opt in to that, and then you wouldn't need to push SRUs repeatedly.12:31
rbasakGetting it from the "trusted" Ubuntu archive would add no value, since Ubuntu developers wouldn't be verifying anything anyway.12:31
blucaare you including the ubuntu keys in that? so, drop ubuntu-archive-keyring too?12:32
rbasakNo. Debian and Ubuntu are different for obvious reasons.12:32
blucathe value is not in developers verifying, as it's unpractical to verify manually a list of keys, but it's in having a verified channel that doesn't require out-of-band transport - ie, the repository is signed, so if I trust the repository, I can trust the content too12:33
rbasakFrom the perspective of what's in the archive, anyway.12:33
rbasakI'm not bothered by what mkosi chooses to do - it's not the recommended way of creating Ubuntu images anyway (though of course it's Free Software and people are welcome to do what they like, including to experiment with other third party mechanisms)12:34
blucasorry I do not follow, why are they different? if you want to have a "single trusted key", then it follows that ubuntu and debian keyrings need to be dropped too in favour of that - otherwise it's 3 trusted keys?12:35
rbasakDebian and Ubuntu keyring packages can be updated at Debian and Ubuntu's pace. They are used extensively in Debian and Ubuntu's own infrastructure.12:35
blucamkosi is just one consumer of pacman, zypper and dnf - they are the actual consumers of these keyrings, and one can use them without any involvement of mkosi12:35
blucayou cannot update debian's keyring from ubuntu, only debian can do that12:37
blucait's not any different than the other two external keyrings12:37
rbasakit's in having a verified channel that doesn't require out-of-band transport> isn't mkosi useless without out-of-band transport to the external distribution's repositories anyway?12:38
blucano, the keyring is used to verify that12:39
rbasakAnyway I don't see what I can add in this conversation. It's not my sole decision or anything. Achieve consensus amongst Ubuntu developers, please.12:39
blucasorry I do not follow, what do you mean by "consensus among Ubuntu developers"?12:39
rbasakThat's how we make decisions here.12:39
blucasure, but my question is, what does that entails in practice?12:40
rbasakMaybe start with a thread on ubuntu-devel@ explaining what you're trying to achieve and why your proposed architecture is necessary.12:41
blucaI'm not comfortable with the "your proposed architecture" definition - these are just upstream packages as the relevant metadata shows, I didn't architect anything12:42
blucaall of these - debian-keyring, archlinux-keyring, distribution-gpg-keys - are already present and shipping in both Debian and Ubuntu12:43
blucathe latter is new in Oracular, the other 2 already ship in releases12:44
rbasakYou can update them via Debian if you like, and Ubuntu will autosync. But by depending on stable releases being continuously updated, your architecture is just a proposal, and Ubuntu (and any other distros) should be part of the decision if that's the architecture you're depending on.12:47
blucaI already updated them in Debian, as I am respectively the sponsor and maintainer of those12:52
blucaonce again, please refrain from using the "your architecture" definition, as it's not "mine" in any sense of the word, these are long-standing, independent and pre-existing upstream projects, and I am not part of any of them - thank you12:54
rbasakSorry, I thought it was "proposed" that you were objecting to. I meant you as in plural, including both you and upstream, since you are both upstream from Ubuntu's perspective. But I will disambiguate as you prefer.12:57
blucano problem, thank you13:00
=== Perflosopher1 is now known as Perflosopher
jbichaginggs: could you update the package for https://tracker.debian.org/pkg/mobile-broadband-provider-info ?15:07
ginggsjbicha: maybe, upstream switched build system, so packaging needs updating15:12
ginggsif it wasn't for that, it would uploaded a while back15:13
jbichaginggs: it looks like adding Build-Depends: meson is enough15:21
ginggsjbicha: thanks, i'll upload in a bit16:14
ahasenacksgmoore: hi, around still?17:42

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!