Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Simon Josefsson Newsgroups: linux.debian.maint.python Subject: Re: packaging rfc3161-client Date: Tue, 26 Aug 2025 15:00:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Tue Aug 26 12:55:10 2025 Old-Return-Path: X-Amavis-Spam-Status: No, score=-13.5 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, GMAIL=1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 Openpgp: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt X-Hashcash: 1:23:250826:debian-python@lists.debian.org::FQ2VgfIDV32dmDkV:ElN2 X-Hashcash: 1:23:250826:jelmer@jelmer.uk::jF7yjfpmvrHgPYfE:euc/ X-Hashcash: 1:23:250826:debian-rust@lists.debian.org::B6AQ5uktIp+/SchJ:K3mA User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Mailing-List: archive/latest/23209 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/87349ejlgs.fsf@josefsson.org Approved: robomod@news.nic.it Lines: 99 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Tue, 26 Aug 2025 14:50:27 +0200 X-Original-Message-ID: <87349ejlgs.fsf@josefsson.org> X-Original-References: <87msgitrxw.fsf@kaka.sjd.se> <87frmatq15.fsf@kaka.sjd.se> Xref: csiph.com linux.debian.maint.python:17032 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Folks, Is there someone who like to help on the rfc3161-client package, which involves both Rust and Python? Starting point is here: https://salsa.debian.org/python-team/packages/python-rfc3161-client Build failure here: https://salsa.debian.org/python-team/packages/python-rfc3161-client/-/jobs/= 8106868 I haven't had time to look into the pointers given earlier, I am hoping this is easy to solve for anyone familiar with Rust & Python packaging. There is good interaction with upstream going on about dependencies for the entire Sigstore stack -- https://github.com/sigstore/sigstore-python/issues/1524 -- and I think we can influence things a little (like temporarily avoiding use of the UV build system for some Python code) if we put some cycles into preparing packages that are needed for Sigstore into Debian. /Simon Simon Josefsson writes: > Jelmer Vernoo=C4=B3 writes: > >> I've packaged a few Python packages that are fully or partially >> built in rust. The simplest examples are probably: >> >> * dulwich >> * python-upstream-ontologist >> >> More advanced are e.g.: >> >> * ruff > > Thanks! > > Alexander Kj=C3=A4ll writes: > >> As long as the Rust crates are published on crates.io then I think it wo= uld >> be easiest to package them in the rust team :) > > They aren't on creates.io. Since the need arose from a python library, > I'll see if I can complete this within the python team, but if the Rust > part of this package turns out to be heavy I think that is a bad idea > and it should be split up or moved to Rust team. Maybe upstream could > publish the Rust crate on crates.io and separate the project into two > parts eventually. > > weepingclown writes: > >> Hi, >> >> Top of my head, there is src:pendulum and >> src:python-orjson. *Probably* anything with a python3-maturin >> build-dep can be of help. > > Thank you! > > I will try to learn from python-upstream-ontologist and python-orjson > which looks closest to this package. > > /Simon > --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmitrZMUHHNpbW9uQGpv c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh BLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XQkBQkNZGbwAAoJENc89jjFPAa+BtIA /iR73CfBurG9y8pASh3cbGOMHpDZfMAtosu6jbpO69GHAP4p7l57d+iVty2VQMsx +3TCSAvZkpr4P/FuTzZ8JZe8BrgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0 +MTXPPY4xTwGvgUCZ9F0SgUJDWRmSQCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE 8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J ENc89jjFPAa+wUUBAO64fbZek6FPlRK0DrlWsrjCXuLi6PUxyzCAY6lG2nhUAQC6 qobB9mkZlZ0qihy1x4JRtflqFcqqT9n7iUZkCDIiDbg4BFySz2oSCisGAQQBl1UB BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XTSBQkNZGboAAoJENc89jjF PAa+0M0BAPPRq73kLnHYNDMniVBOzUdi2XeF32idjEWWfjvyIJUOAP4wZ+ALxIeh is3Uw2BzGZE6ttXQ2Q+DeCJO3TPpIqaXDAAKCRBRcisI/kdFopMgAQD8yva5U3uy 5P4qgGwXs0EIHYCoOY7+7yoaOhM/TqrXEgD/XTRu8sjS9z5MCvVlyNNLku2kwab5 PH66nNDH0orcbQo= =zYtx -----END PGP SIGNATURE----- --=-=-=--