X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=developers-reference.git;a=blobdiff_plain;f=pkgs.dbk;h=8e64063dff62c02225baec398d5063458b15ea15;hp=be92f98bf7ad41eb35d6356c844eadaf7443d4f5;hb=4819156f55cae430ac5d952f2b2a2b6b6df2aab7;hpb=d29e265025706f0a590a033db78d18b0d8313120 diff --git a/pkgs.dbk b/pkgs.dbk index be92f98..8e64063 100644 --- a/pkgs.dbk +++ b/pkgs.dbk @@ -231,11 +231,11 @@ accompanied by another file that contains the changes made by Debian For the native packages, the source package includes a Debian source control file (.dsc) and the source tarball -(.tar.{gz,bz2,lzma}). A source package of a non-native package +(.tar.{gz,bz2,xz}). A source package of a non-native package includes a Debian source control file, the original source tarball -(.orig.tar.{gz,bz2,lzma}) and the Debian changes +(.orig.tar.{gz,bz2,xz}) and the Debian changes (.diff.gz for the source format “1.0” or -.debian.tar.{gz,bz2,lzma} for the source format “3.0 (quilt)”). +.debian.tar.{gz,bz2,xz} for the source format “3.0 (quilt)”). With source format “1.0”, whether a package is native or not was determined @@ -268,7 +268,7 @@ the archive. Please notice that, in non-native packages, permissions on files that are not -present in the *.orig.tar.{gz,bz2,lzma} will not be preserved, as diff does not store file +present in the *.orig.tar.{gz,bz2,xz} will not be preserved, as diff does not store file permissions in the patch. However when using source format “3.0 (quilt)”, permissions of files inside the debian directory are preserved since they are stored in a tar archive. @@ -311,8 +311,9 @@ point release. To ensure that your upload will be accepted, you should discuss the changes -with the stable release team before you upload. For that, send a mail to -the &email-debian-release; mailing list, including the patch you want to +with the stable release team before you upload. For that, file a bug against +the release.debian.org pseudo-package +using reportbug, including the patch you want to apply to the package version currently in stable. Always be verbose and detailed in your changelog entries for uploads to the stable distribution. @@ -428,7 +429,8 @@ When the specified waiting time is over, the package is moved into the regular incoming directory for processing. This is done through automatic uploading to &ftp-upload-host; in upload-directory -DELAYED/[012345678]-day. 0-day is uploaded +DELAYED/X-day +(X between 0 and 15). 0-day is uploaded multiple times per day to &ftp-upload-host;. @@ -470,11 +472,11 @@ not support delayed uploads. The Debian archive maintainers are responsible for handling package uploads. For the most part, uploads are automatically handled on a daily basis by the -archive maintenance tools, katie. Specifically, updates to -existing packages to the unstable distribution are handled -automatically. In other cases, notably new packages, placing the uploaded -package into the distribution is handled manually. When uploads are handled -manually, the change to the archive may take up to a month to occur. Please +archive maintenance tools, dak process-upload. Specifically, +updates to existing packages to the unstable distribution are +handled automatically. In other cases, notably new packages, placing the +uploaded package into the distribution is handled manually. When uploads are +handled manually, the change to the archive may take some time to occur. Please be patient. @@ -841,14 +843,22 @@ fixing them themselves, sending security advisories, and maintaining When you become aware of a security-related bug in a Debian package, whether or not you are the maintainer, collect pertinent information about the problem, -and promptly contact the security team at -&email-security-team; as soon as possible. DO NOT UPLOAD any packages for stable -without contacting the team. Useful information includes, for example: +and promptly contact the security team, preferably by filing a ticket in +their Request Tracker. +See . +Alternatively you may email &email-security-team;. +DO NOT UPLOAD any packages for +stable without contacting the team. Useful information +includes, for example: +Whether or not the bug is already public. + + + + Which versions of the package are known to be affected by the bug. Check each version that is present in a supported Debian release, as well as testing and unstable. @@ -1163,7 +1173,7 @@ version, you may upload without upstream source (dpkg-buildpackage Be sure to use the exact same -*.orig.tar.{gz,bz2,lzma} as used in the +*.orig.tar.{gz,bz2,xz} as used in the normal archive, otherwise it is not possible to move the security fix into the main archives later. @@ -1238,7 +1248,7 @@ chapter gives guidelines on what to do in these cases. Moving packages Sometimes a package will change its section. For instance, a package from the -`non-free' section might be GPL'd in a later version, in which case the package +non-free section might be GPL'd in a later version, in which case the package should be moved to `main' or `contrib'. See the Debian Policy Manual for guidelines on what section a package belongs in. @@ -1249,7 +1259,7 @@ control information to place the package in the desired section, and re-upload the package (see the Debian Policy Manual for details). You must ensure that you include the -.orig.tar.{gz,bz2,lzma} in your upload (even if you are not uploading +.orig.tar.{gz,bz2,xz} in your upload (even if you are not uploading a new upstream version), or it will not appear in the new section together with the rest of the package. If your new section is valid, it will be moved automatically. If it does not, then contact the ftpmasters in order to @@ -1269,7 +1279,7 @@ described in . If for some reason you want to completely remove a package (say, if it is an old compatibility library which is no longer required), you need to file a bug -against ftp.debian.org asking that the package be removed; +against &ftp-debian-org; asking that the package be removed; as all bugs, this bug should normally have normal severity. The bug title should be in the form RM: package [architecture list] -- @@ -1280,7 +1290,7 @@ short summary of the reason for the removal request. if the removal request only applies to some architectures, not all. Note that the reportbug will create a title conforming to these rules when you use it to report a bug against the -ftp.debian.org pseudo-package. +&ftp-debian-org; pseudo-package. @@ -1299,15 +1309,18 @@ distribution. Packages are not removed from testing directly. Rather, they will be removed automatically after the package has been removed from unstable and no package in -testing depends on it. +testing depends on it. (Removals from +testing are possible though by filing a removal bug report +against the &release-debian-org; +pseudo-package. See the section .) There is one exception when an explicit removal request is not necessary: If a -(source or binary) package is an orphan, it will be removed semi-automatically. -For a binary-package, this means if there is no longer any source package -producing this binary package; if the binary package is just no longer produced -on some architectures, a removal request is still necessary. For a -source-package, this means that all binary packages it refers to have been +(source or binary) package is no longer built from source, it will be removed +semi-automatically. For a binary-package, this means if there is no longer any +source package producing this binary package; if the binary package is just no +longer produced on some architectures, a removal request is still necessary. For +a source-package, this means that all binary packages it refers to have been taken over by another source package. @@ -1385,7 +1398,7 @@ Policy Manual for details). Please note that you should only add a Provides relation if all packages depending on the obsolete package name continue to work after the renaming. Once you've uploaded the package and the package -has moved into the archive, file a bug against ftp.debian.org +has moved into the archive, file a bug against &ftp-debian-org; asking to remove the package with the obsolete name (see ). Do not forget to properly reassign the package's bugs at the same time. @@ -1863,6 +1876,35 @@ role="package">ftp.debian.org. +
+Marking non-free packages as auto-buildable + +By default packages from the non-free section are not built by the autobuilder +network (mostly because the license of the packages could disapprove). +To enable a package to be build you need to perform the following +steps: + + + + +Check whether it is legally allowed and technically possible +to auto-build the package; + + + + +Add XS-Autobuild: yes into the header part +of debian/control; + + + + +Send an email to &email-nonfree-release; and explain why the +package can legitimately and technically be auto-built. + + + +
@@ -1916,11 +1958,11 @@ maintainer by other means (private email, IRC). If the maintainer is usually active and responsive, have you tried to contact -him? In general it should be considered preferable that a maintainer takes care -of an issue himself and that he is given the chance to review and correct your -patch, because he can be expected to be more aware of potential issues which an -NMUer might miss. It is often a better use of everyone's time if the maintainer -is given an opportunity to upload a fix on their own. +them? In general it should be considered preferable that maintainers take care +of an issue themselves and that they are given the chance to review and +correct your patch, because they can be expected to be more aware of potential +issues which an NMUer might miss. It is often a better use of everyone's time +if the maintainer is given an opportunity to upload a fix on their own. @@ -1933,9 +1975,9 @@ might be helpful. While preparing the patch, you should better be aware of any package-specific -practices that the maintainer might be using. Taking them into account reduces -the burden of getting your changes integrated back in the normal package -workflow and thus increases the possibilities that that will happen. A good +practices that the maintainer might be using. Taking them into account +reduces the burden of integrating your changes into the normal package +workflow and thus increases the chances that integration will happen. A good place where to look for for possible package-specific practices is debian/README.source. @@ -2024,7 +2066,7 @@ if the current version is 1.5, then an NMU would get version 1.5+nmu1. -If the package is a not a native package, you should add a minor version number +If the package is not a native package, you should add a minor version number to the Debian revision part of the version number (the portion after the last hyphen). This extra number must start at 1. For example, if the current version is 1.5-2, then an NMU would get @@ -2082,7 +2124,7 @@ allows the developer doing the NMU to perform all the necessary tasks at the same time. For instance, instead of telling the maintainer that you will upload the updated package in 7 days, you should upload the package to -DELAYED/7 and tell the maintainer that he has 7 days to +DELAYED/7 and tell the maintainer that they have 7 days to react. During this time, the maintainer can ask you to delay the upload some more, or cancel your upload. @@ -2091,12 +2133,12 @@ more, or cancel your upload. The DELAYED queue should not be used to put additional pressure on the maintainer. In particular, it's important that you are available to cancel or delay the upload before the delay expires since the -maintainer cannot cancel the upload himself. +maintainer cannot cancel the upload themselves. If you make an NMU to DELAYED and the maintainer updates -his package before the delay expires, your upload will be rejected because a +the package before the delay expires, your upload will be rejected because a newer version is already available in the archive. Ideally, the maintainer will take care to include your proposed changes (or at least a solution for the problems they address) in that upload. @@ -2344,9 +2386,7 @@ the following: The package must have been available in unstable for 2, 5 or 10 days, depending on the urgency (high, medium or low). Please note that the urgency is sticky, meaning that the highest urgency uploaded since the -previous testing transition is taken into account. Those -delays may be doubled during a freeze, or testing -transitions may be switched off altogether; +previous testing transition is taken into account; @@ -2374,7 +2414,13 @@ It must not break any dependency of a package which is already available in The packages on which it depends must either be available in testing or they must be accepted into testing at the same time (and they will be if they fulfill -all the necessary criteria). +all the necessary criteria); + + + + +The phase of the project. I.e. automatic transitions are turned off during +the freeze of the testing distribution. @@ -2586,10 +2632,8 @@ If you are interested in details, this is how britney works: The packages are looked at to determine whether they are valid candidates. This gives the update excuses. The most common reasons why a package is not considered are too young, RC-bugginess, and out of date on some arches. For -this part of britney, the release managers have hammers of various sizes to -force britney to consider a package. (Also, the base freeze is coded in that -part of britney.) (There is a similar thing for binary-only updates, but this -is not described here. If you're interested in that, please peruse the code.) +this part of britney, the release managers have hammers of various sizes, +called hints (see below), to force britney to consider a package. Now, the more complex part happens: Britney tries to update testing @@ -2607,7 +2651,13 @@ url="http://&ftp-master-host;/testing/update_output/">. The hints are available via . +url="http://&ftp-master-host;/testing/hints/">, where you can find +the +description +as well. With the hints, the Debian Release team can block or unblock +packages, ease or force packages into testing, remove +packages from testing, approve uploads to +testing-proposed-updates or override the urgency.