| LeePen | Hi all. | 11:55 |
|---|---|---|
| LeePen | 2 related questions: Are the amprolla logs publically available? Does amprolla merge based on source pacakges or binary (I seem to remember Katolaz saying it was source, but I could be mistaken)? | 11:57 |
| Evilham | http://pkgmaster.devuan.org/amprolla.txt | 12:00 |
| LeePen | Evilham: Thanks. | 12:00 |
| Evilham | LeePen: https://git.devuan.org/devuan-infrastructure/amprolla3/merge_requests/2 | 12:01 |
| Evilham | That MR requires review and its the repo with the code | 12:02 |
| LeePen | Evilham: I am still trying to understand why we have some debian libpolkit pacakges polluting both beowulf and ceres. Does/should the fact that we have src:policykit-1 prevent amprolla merging any of Debian's packages even though the binary package names are different? | 12:15 |
| Evilham | Idk tbh, it requires a deep review of amprolla, but it is possible that it goes back to dak | 12:17 |
| LeePen | Yes maybe. I think I am going to have to roll up my sleeves and have a look. Something is clearly not working right at the moment. | 12:19 |
| rrq | LeePen: I think you're right, that merging is on per-package basis, and not per-source basis. It's done by amprolla. | 13:44 |
| LeePen | rrq: thanks that is helpful. Then I need to put some dummy pacakges in src:policykit-1 to block Debian's then. | 13:45 |
| rrq | yes, that'd work (I think) | 13:46 |
| LeePen | Thanks. | 13:47 |
| rrq | (I was chasing some other "skip debian package" list, but haven't found any. Overriding should be fine ) | 13:50 |
| ServiceRobot_ | greetings | 16:59 |
| LeePen | Hello. I have a couple of foxes for policykit. | 17:10 |
| LeePen | https://git.devuan.org/LeePen/policykit-1/commits/suites/unstable-proposed | 17:10 |
| LeePen | I would be grateful for review before I merge and build. | 17:11 |
| LeePen | Thanks | 17:11 |
| LeePen | s/foxes/fixes/ | 17:11 |
| LeePen | ! | 17:11 |
| gnu_srs | LeePen: I remember talking to KatolaZ about package merging some time ago. The merge is now package-based, but it should really be source-based ! | 17:11 |
| ServiceRobot_ | so I did a small writeup on the forum about better init support | 17:12 |
| gnu_srs | rrq: ^ | 17:13 |
| LeePen | gnu_srs: Thanks, that is helpful. That explains the leakage from debian which my proposed updates ^^ should fix. | 17:13 |
| LeePen | But, it would be more sense for it to be source based -- something else for the (long) todo list! | 17:14 |
| golinux | I have updated the live devuan.org website. Please have a look to make sure everything is OK. Thanks. | 17:18 |
| golinux | Just the index and community pages so far | 17:19 |
| LeePen | golinux: looks fine to me on a quick glance around. | 17:21 |
| golinux | Here's the link to ServiceRobot_ 's init post https://dev1galaxy.org/viewtopic.php?id=3055 | 17:21 |
| golinux | Added more links to dev channels as per jaromil's request | 17:22 |
| golinux | LeePen: ^^ Thanks for having a look | 17:23 |
| fsmithred | Good index. Where do I get it? Which image do I want? How to install it? Are all answered in the first half of the page. Where to get more help is soon after that and easy to find. | 17:24 |
| fsmithred | I gotta run. bbl. | 17:24 |
| golinux | Thanks. I am going to add the "Release Notes" to the top of the install list. I am shocked how few people actually read than | 17:26 |
| golinux | them | 17:26 |
| mason | How long does it tend to take for DSAs to be mirrored? | 21:09 |
| mason | I see DSA-4523-1 out yesterday but I don't see the Devuan equivalent yet. | 21:10 |
| fsmithred | what package is it for? | 21:16 |
| fsmithred | mason ^^^ | 21:17 |
| mason | fsmithred: Thunderbird in this case. Remote code execution, or the equivalent. | 21:21 |
| fsmithred | https://security-tracker.debian.org/tracker/source-package/thunderbird | 21:21 |
| fsmithred | it's fixed in all but jessie | 21:21 |
| mason | fsmithred: Mirror propagation issue then? I don't see it after an apt update. | 21:21 |
| fsmithred | amprolla does incremental update every two minutes | 21:21 |
| mason | Still seeing deb9u1 here | 21:22 |
| mason | on ascii | 21:22 |
| fsmithred | I do see it in ascii-security | 21:22 |
| fsmithred | yeah | 21:22 |
| mason | hrm, I have deb http://us.deb.devuan.org/merged ascii-security main non-free - I'm not sure why I'm not seeing it, then. | 21:22 |
| fsmithred | 1:60.9.0-1~deb9u1 500 | 21:30 |
| fsmithred | 500 http://deb.devuan.org/merged ascii-security/main amd64 Packages | 21:30 |
| fsmithred | it shouldn't matter, but maybe drop the us | 21:30 |
| fsmithred | I've got it on auto.mirror.devuan.org, too | 21:31 |
| mason | deb9u1 is pre-correction, isn't it? | 21:31 |
| fsmithred | not according to the debian-security page | 21:31 |
| mason | Hrm. | 21:31 |
| mason | From the DSA: For the stable distribution (buster), these problems have been fixed in | 21:32 |
| mason | version 1:60.9.0-1~deb10u1. | 21:32 |
| mason | But ASCII isn't Buster. Doh. | 21:32 |
| mason | My bad. | 21:32 |
| mason | Sorry for the noise. | 21:32 |
| fsmithred | lol, yeah 9 is stretch/ascii | 21:33 |
| fsmithred | we're in the twilight zone where buster is stable and beowulf is testing, even though they have the same package versions | 21:34 |
| golinux | I'm considering removing us as a mirror option from the website since we don't have a us mirror. | 21:44 |
| golinux | mason: ^^^ | 21:44 |
| golinux | Was actually going to post about that this afternoon. | 21:45 |
| mason | seems reasonable - but do we have any interesting in finding a US mirror? | 21:45 |
| golinux | We have discussed it. Some feelers have been thrown out but no takers afaik | 21:46 |
| mason | Where's the discussion happened? I'd love to know who's been approached. | 21:47 |
| golinux | It would have been at the Wednesday meet. But search the IRC logs, forum and ML for references. | 21:48 |
| mason | Alright. | 21:48 |
| golinux | I'll be continuing to clean up stuff like that on the website as soon as I have a bite to eat. | 21:49 |
Generated by irclog2html.py 2.17.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!