using get-orig-source for creating _current_ tarball is not compliant with debian policy

Bug #409862 reported by Alexander Sack
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
bzr-builddeb
Fix Released
High
Jelmer Vernooij
bzr-builddeb (Ubuntu)
Fix Released
High
Jelmer Vernooij
debian-policy (Debian)
Fix Released
Unknown

Bug Description

Binary package hint: bzr-builddeb

As discussed, by debian policy [1] get-orig-source always gets the latest upstream tarball and not the one matching the current topmost changelog version.

In consequence, bzr builddeb shouldnt use that in the long run. As a bunch of branches might still use it, the suggested approach is to add a --policy-compliant=yes|no to bzr-builddeb and use "no" for one or two cycles, while spitting out a warning; then after one or two cycles we switch to "yes" by default, which doesnt use the get-orig-source anymore.

In the same run, I suggest to start discussing with debian how to specify a "get current source" feature.

[1] - http://www.debian.org/doc/debian-policy/ch-source.html - Section 4.9

Related branches

Revision history for this message
Alexander Sack (asac) wrote :

marking importance high to reflect that it kind of encourages implementing get-orig-source in a non-policy compliant fashion.

description: updated
Changed in bzr-builddeb (Ubuntu):
importance: Undecided → High
status: New → Triaged
Changed in debian-policy (Debian):
status: Unknown → New
Jelmer Vernooij (jelmer)
Changed in bzr-builddeb:
status: New → Triaged
importance: Undecided → High
Jelmer Vernooij (jelmer)
Changed in bzr-builddeb:
status: Triaged → In Progress
assignee: nobody → Jelmer Vernooij (jelmer)
milestone: none → 2.8
Changed in bzr-builddeb (Ubuntu):
status: Triaged → In Progress
assignee: nobody → Jelmer Vernooij (jelmer)
Jelmer Vernooij (jelmer)
Changed in bzr-builddeb:
status: In Progress → Fix Committed
Changed in debian-policy (Debian):
status: New → Confirmed
Jelmer Vernooij (jelmer)
Changed in bzr-builddeb:
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package bzr-builddeb - 2.8.0

---------------
bzr-builddeb (2.8.0) unstable; urgency=low

  [ Jonathan Riddell ]
  * Add get-orig-source command which will get the upstream tar file.
    LP: #862188
  * Change "bd-do" command to "builddeb-do" and alias "bd-do".
  * Add commit-message-from-changelog option for those who do not
    want commit message set automatically

  [ Jelmer Vernooij ]
  * Support importing and building packages with multiple upstream
    tarballs. LP: #653757, LP: #664834
  * Move .bzr-builddeb/default.conf to debian/bzr-builddeb.conf.
    LP: #793137
  * Fix test suite on Lucid, where dpkg-mergechangelogs is not available.

  [ Martin Packman ]
  * Fix test_utf8_changelog when run with older versions of python-debian.

  [ Jelmer Vernooij ]
  * Support svn-buildpackage tag names to find upstream versions.
    LP: #874263
  * Support --revision argument to merge-package. LP: #888590
  * By default, don't override the commit message from debian/changelog
    unless 'commit-message-from-changelog' is explicitly set to True. LP: #812749
  * Support running dep3-patch against remote repositories, and with
    open-ended revision ranges. LP: #893608
  * Fix finding orig tarballs in directories also containing filenames
    with non-utf8 characters. LP: #865753
  * bzr-builddeb now prefers the 'get-packaged-orig-source' rule to
    retrieve the packaged upstream source, and warns about
    'get-orig-source'. LP: #409862
  * Support translations.

  [ Martin Packman ]
  * Deal with invalid versions and bad encoding in the changelog merge
    hook. LP: #893495

 -- Jelmer Vernooij <email address hidden> Fri, 16 Dec 2011 19:58:57 +0100

Changed in bzr-builddeb (Ubuntu):
status: In Progress → Fix Released
Changed in debian-policy (Debian):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.