Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.rc > #404722 > unrolled thread

Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?

Back to article view | Back to linux.debian.bugs.rc

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Chrysostomos Nanakos <chris@include.gr> - 2025-11-16 23:10 +0100
    Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Simon Josefsson <simon@josefsson.org> - 2025-11-20 13:00 +0100
      Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Andreas Tille <tille@debian.org> - 2025-11-20 14:50 +0100
      Bug#1039431: Maintaining yubiserver in Authentication tools packaging team? Andreas Tille <tille@debian.org> - 2025-11-24 11:40 +0100

#404722 — Bug#1039431: Maintaining yubiserver in Authentication tools packaging team?

Hi Andreas,
fair enough. Let’s remove it with next step being the packaging of yubiserver-rs. 

Kind regards,
Chrysostomos. 

> On 16 Nov 2025, at 19:07, Andreas Tille <tille@debian.org> wrote:
> 
> Hi again,
> 
> Am Sat, Aug 02, 2025 at 07:46:56AM +0200 schrieb Andreas Tille:
>> Am Fri, Aug 01, 2025 at 11:01:05PM +0300 schrieb Chrysostomos Nanakos:
>>> Hey Andreas,
>>> just saw your email with regard the yubiserver.
>> 
>> thanks a lot for your fast response.
>> 
>>> I have stopped working on this implementation and using the rust implementation instead. It can be found here if you are interested replacing it or use it:
>>> 
>>> https://github.com/cnanakos/yubiserver-rs
>> 
>> Cool.  This sounds very promising.
> 
> While yubiserver-rs sounds promising it means on the other hand that the
> yubiserver package in Debian is orphaned.  Now since bug has RC severity
> it might make sense to remove this packagage from Debian and I intend to
> do so after waiting one month.
> 
>>> I would like to find some time package it and replace the existing one but with no luck so far.
>> 
>> I admit I would like to support your packaging attempt but I can't
>> promise anything since I have no experience with Rust packaging.  I
>> trust that someone in the team might help in case of stumbling stones.
>> 
>> Could you be more verbose about "no luck so far"?
>> 
>> When checking the repository I noticed there are no release tags.  I
>> would recommend adding such tags to let the world (not only the Debian
>> packagers) know, what commit might be of release quality (in contrast to
>> development commits).  In Debian we could point the watch file to these
>> tags.
> 
> I have not seen any tags yet.  I also need to admit I did not had packaged
> any Rust package yet and can't backup your attempt with any knowledge here.
> 
>> Alternatively we could create a new package yubiserver-rs make it
>> providing yubiserver and remove the original yubiserver from Debian (if
>> you think there is no real use for it any more).
> 
> Mean while I think removing the current package from Debian seems like a
> sensible way to go to not attract users to orphaned security software.
> 
> Kind regards
>    Andreas.
> 
> --
> https://fam-tille.de

[toc] | [next] | [standalone]

#404971

[Multipart message — attachments visible in raw view] — view raw

Hi

If you need a sponsor for yubiserver-rs, please reach out -- it would be
nice to have a replacement in Debian.  Btw, I suggest to use
pkg-security team rather than pkg-auth-maintainers, I'm trying to wind
down the latter.

/Simon

Chrysostomos Nanakos <chris@include.gr> writes:

> Hi Andreas,
> fair enough. Let’s remove it with next step being the packaging of yubiserver-rs. 
>
> Kind regards,
> Chrysostomos. 
>
>> On 16 Nov 2025, at 19:07, Andreas Tille <tille@debian.org> wrote:
>> 
>> Hi again,
>> 
>> Am Sat, Aug 02, 2025 at 07:46:56AM +0200 schrieb Andreas Tille:
>>> Am Fri, Aug 01, 2025 at 11:01:05PM +0300 schrieb Chrysostomos Nanakos:
>>>> Hey Andreas,
>>>> just saw your email with regard the yubiserver.
>>> 
>>> thanks a lot for your fast response.
>>> 
>>>> I have stopped working on this implementation and using the rust
>>>> implementation instead. It can be found here if you are interested
>>>> replacing it or use it:
>>>> 
>>>> https://github.com/cnanakos/yubiserver-rs
>>> 
>>> Cool.  This sounds very promising.
>> 
>> While yubiserver-rs sounds promising it means on the other hand that the
>> yubiserver package in Debian is orphaned.  Now since bug has RC severity
>> it might make sense to remove this packagage from Debian and I intend to
>> do so after waiting one month.
>> 
>>>> I would like to find some time package it and replace the existing one but with no luck so far.
>>> 
>>> I admit I would like to support your packaging attempt but I can't
>>> promise anything since I have no experience with Rust packaging.  I
>>> trust that someone in the team might help in case of stumbling stones.
>>> 
>>> Could you be more verbose about "no luck so far"?
>>> 
>>> When checking the repository I noticed there are no release tags.  I
>>> would recommend adding such tags to let the world (not only the Debian
>>> packagers) know, what commit might be of release quality (in contrast to
>>> development commits).  In Debian we could point the watch file to these
>>> tags.
>> 
>> I have not seen any tags yet.  I also need to admit I did not had packaged
>> any Rust package yet and can't backup your attempt with any knowledge here.
>> 
>>> Alternatively we could create a new package yubiserver-rs make it
>>> providing yubiserver and remove the original yubiserver from Debian (if
>>> you think there is no real use for it any more).
>> 
>> Mean while I think removing the current package from Debian seems like a
>> sensible way to go to not attract users to orphaned security software.
>> 
>> Kind regards
>>    Andreas.
>> 
>> --
>> https://fam-tille.de
>
>

[toc] | [prev] | [next] | [standalone]

#404974

Hi,

Am Thu, Nov 20, 2025 at 12:51:17PM +0100 schrieb Simon Josefsson:
> If you need a sponsor for yubiserver-rs, please reach out -- it would be
> nice to have a replacement in Debian.  Btw, I suggest to use
> pkg-security team rather than pkg-auth-maintainers, I'm trying to wind
> down the latter.

Thank you Simon for offering sponsoring.  Perhaps you can also give
anybody who is interested to maintain yubiserver-rs access to the
relevant group on Salsa.  I'd be happy if someone could take over
from here.

Kind regards
   Andreas.

-- 
https://fam-tille.de

[toc] | [prev] | [next] | [standalone]

#405252

Hi Chrysostomos,

Am Mon, Nov 24, 2025 at 12:12:31PM +0200 schrieb Chrysostomos Nanakos:
> I should be able to look into starting the packaging work later this year
> or, more realistically, early next year.

Sounds very good.  Just let us know if you need any help
   Andreas.

-- 
https://fam-tille.de

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.rc

csiph-web