Ubuntu
sbuild package

[MIR] sbuild

Bug #1690162 reported by Dimitri John Ledkov
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
sbuild (Ubuntu)
Fix Released
Medium
Unassigned
Ubuntu ubuntu-17.10

Bug Description

[Availability]

* since the dawn of times

[Rationale]

* development seed in Ubuntu should be able to build packages for Ubuntu. schroot used to be pulled in as part of the now deprecated touch-sdk stack. And repromoting that raised concerns that one should be able to build packages in the standard build environment.

[Security]

* no known CVEs against sbuild itself https://security-tracker.debian.org/tracker/source-package/sbuild
* written in perl =(

[Quality assurance]

* well maintained, used, and abused by most debian an ubuntu developers

[Dependencies]

* libsbuild-perl pulls in a few perl modules

[Standards compliance]

* Good, currently tracked just manpages erorrs at https://<email address hidden>#sbuild and nothing else jumps out at https://tracker.debian.org/pkg/sbuild

[Maintenance]

* Low to none, we mostly use sbuild as is, with occasional patches / temporary forks.

[Background information]

* sbuild rules them all.

Dimitri John Ledkov (xnox)
Changed in sbuild (Ubuntu):
status: New → Triaged
importance: Undecided → Medium
milestone: none → ubuntu-17.10
Revision history for this message
Adam Conrad (adconrad) wrote :

Why is "written in perl" in the security section? :P

Revision history for this message
Adam Conrad (adconrad) wrote :

Of note, while this has never been in our supported seeds, we've "supported" it fairly well for ages anyway. Several Ubuntu developers (including me and Colin) are also upstream sbuild committers, we maintain it for our our buildd network, and many of us use it extensively in our day-to-day workflows and make sure it keeps working as a result.

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

Written in perl seems to me like a plus on the maintenance side, since any perl modules it would need would be well-maintained, in general.

Seems like a straightforward thing indeed, sbuild is well "unofficially-supported" already, and nothing looks off at a quick review of the source package. MIR approved.

Changed in sbuild (Ubuntu):
status: Triaged → Fix Committed
Revision history for this message
Steve Langasek (vorlon) wrote :

Override component to main
sbuild 0.73.0-4ubuntu1 in artful: universe/devel -> main
buildd 0.73.0-4ubuntu1 in artful amd64: universe/devel/extra/100% -> main
buildd 0.73.0-4ubuntu1 in artful arm64: universe/devel/extra/100% -> main
buildd 0.73.0-4ubuntu1 in artful armhf: universe/devel/extra/100% -> main
buildd 0.73.0-4ubuntu1 in artful i386: universe/devel/extra/100% -> main
buildd 0.73.0-4ubuntu1 in artful ppc64el: universe/devel/extra/100% -> main
buildd 0.73.0-4ubuntu1 in artful s390x: universe/devel/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful amd64: universe/perl/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful arm64: universe/perl/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful armhf: universe/perl/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful i386: universe/perl/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful ppc64el: universe/perl/extra/100% -> main
libsbuild-perl 0.73.0-4ubuntu1 in artful s390x: universe/perl/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful amd64: universe/devel/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful arm64: universe/devel/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful armhf: universe/devel/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful i386: universe/devel/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful ppc64el: universe/devel/extra/100% -> main
sbuild 0.73.0-4ubuntu1 in artful s390x: universe/devel/extra/100% -> main
19 publications overridden.

Changed in sbuild (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.