Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1270417 > unrolled thread

Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?

Back to article view | Back to linux.debian.bugs.dist

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Andreas Tille <tille@debian.org> - 2025-11-16 18:10 +0100
    Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Simon Josefsson <simon@josefsson.org> - 2025-11-20 15:10 +0100
      Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Chrysostomos Nanakos <chris@include.gr> - 2025-11-24 11:20 +0100

#1270417 — Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?

Hi again,

Am Sat, Aug 02, 2025 at 07:46:56AM +0200 schrieb Andreas Tille:
> Am Fri, Aug 01, 2025 at 11:01:05PM +0300 schrieb Chrysostomos Nanakos:
> > Hey Andreas,
> > just saw your email with regard the yubiserver.
> 
> thanks a lot for your fast response.
> 
> > I have stopped working on this implementation and using the rust implementation instead. It can be found here if you are interested replacing it or use it:
> > 
> > https://github.com/cnanakos/yubiserver-rs
> 
> Cool.  This sounds very promising.

While yubiserver-rs sounds promising it means on the other hand that the
yubiserver package in Debian is orphaned.  Now since bug has RC severity
it might make sense to remove this packagage from Debian and I intend to
do so after waiting one month.
  
> > I would like to find some time package it and replace the existing one but with no luck so far. 
> 
> I admit I would like to support your packaging attempt but I can't
> promise anything since I have no experience with Rust packaging.  I
> trust that someone in the team might help in case of stumbling stones.
> 
> Could you be more verbose about "no luck so far"?
> 
> When checking the repository I noticed there are no release tags.  I
> would recommend adding such tags to let the world (not only the Debian
> packagers) know, what commit might be of release quality (in contrast to
> development commits).  In Debian we could point the watch file to these
> tags.

I have not seen any tags yet.  I also need to admit I did not had packaged
any Rust package yet and can't backup your attempt with any knowledge here.

> Alternatively we could create a new package yubiserver-rs make it
> providing yubiserver and remove the original yubiserver from Debian (if
> you think there is no real use for it any more).

Mean while I think removing the current package from Debian seems like a
sensible way to go to not attract users to orphaned security software.
 
Kind regards
    Andreas.

-- 
https://fam-tille.de

[toc] | [next] | [standalone]

#1270926

[Multipart message — attachments visible in raw view] — view raw

Andreas Tille <tille@debian.org> writes:

> Hi,
>
> Am Thu, Nov 20, 2025 at 12:51:17PM +0100 schrieb Simon Josefsson:
>> If you need a sponsor for yubiserver-rs, please reach out -- it would be
>> nice to have a replacement in Debian.  Btw, I suggest to use
>> pkg-security team rather than pkg-auth-maintainers, I'm trying to wind
>> down the latter.
>
> Thank you Simon for offering sponsoring.  Perhaps you can also give
> anybody who is interested to maintain yubiserver-rs access to the
> relevant group on Salsa.  I'd be happy if someone could take over
> from here.

Setting up a repository for yubiserver-rs in the pkg-security group
should be simple.  If someone starts the packaging work and sends a
pointer to some personal Salsa project, I can push that and grant
necessary rights in a pkg-security project for it.  Anyway, I think this
is now an orthogonal matter, and probably best discussed in a ITP/RFP
bug about yubiserver-rs.  Chrysostomos, do you have time/interest to
make that happen?

/Simon

[toc] | [prev] | [next] | [standalone]

#1271401

Hi,
thanks for the update. I’m currently quite limited on time, so I won’t 
be able to pick this up immediately.

I should be able to look into starting the packaging work later this 
year or, more realistically, early next year.

Best,
Chrysostomos


On 20/11/2025 16:03, Simon Josefsson wrote:
> Andreas Tille <tille@debian.org> writes:
> 
>> Hi,
>> 
>> Am Thu, Nov 20, 2025 at 12:51:17PM +0100 schrieb Simon Josefsson:
>>> If you need a sponsor for yubiserver-rs, please reach out -- it would 
>>> be
>>> nice to have a replacement in Debian.  Btw, I suggest to use
>>> pkg-security team rather than pkg-auth-maintainers, I'm trying to 
>>> wind
>>> down the latter.
>> 
>> Thank you Simon for offering sponsoring.  Perhaps you can also give
>> anybody who is interested to maintain yubiserver-rs access to the
>> relevant group on Salsa.  I'd be happy if someone could take over
>> from here.
> 
> Setting up a repository for yubiserver-rs in the pkg-security group
> should be simple.  If someone starts the packaging work and sends a
> pointer to some personal Salsa project, I can push that and grant
> necessary rights in a pkg-security project for it.  Anyway, I think 
> this
> is now an orthogonal matter, and probably best discussed in a ITP/RFP
> bug about yubiserver-rs.  Chrysostomos, do you have time/interest to
> make that happen?
> 
> /Simon

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web