Path: csiph.com!weretis.net!feeder8.news.weretis.net!feeds.phibee-telecom.net!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod From: Emmanuel Arias Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Mon, 28 Jun 2021 04:50:02 +0200 Message-ID: References: X-Original-To: =?UTF-8?Q?Louis-Philippe_V=c3=a9ronneau?= , debian-python@lists.debian.org X-Mailbox-Line: From debian-python-request@lists.debian.org Mon Jun 28 02:49:38 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12.001 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, LDO_WHITELIST=-5, NICE_REPLY_A=-0.001, PGPSIGNATURE=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .yaerobi. - helo: .mail-pf1-x42f.google. - helo-domain: .google.) FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -5.5 X-Gm-Message-State: AOAM5324bvVOub3t4I4B5J/NMSnpTsfuLZg6M9Z+0FPow0bpL+oE6KnC 7z84+ofUy40H8nQq5LXc5ol27tc8BDKkDd2k X-Google-SMTP-Source: ABdhPJy4GFr7wxTCeQ71W0Mdr+gnnByo0hfAcxOXRkUmOSFDbPSG4BGWYZAkbkEV6v6MFRoCta8FBg== X-Received: by 2002:a62:3344:0:b029:28c:6f0f:cb90 with SMTP id z65-20020a6233440000b029028c6f0fcb90mr22285424pfz.58.1624848562015; Sun, 27 Jun 2021 19:49:22 -0700 (PDT) User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="2vGImQsfJC6M2M8PvWdhlR6uXfW5sIks1" X-Mailing-List: archive/latest/19246 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/33e6f093-211c-bf62-51a7-7faa120d34ee@yaerobi.com Approved: robomod@news.nic.it Lines: 213 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sun, 27 Jun 2021 23:49:18 -0300 X-Original-Message-ID: <33e6f093-211c-bf62-51a7-7faa120d34ee@yaerobi.com> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> Xref: csiph.com linux.debian.maint.python:13456 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --2vGImQsfJC6M2M8PvWdhlR6uXfW5sIks1 Content-Type: multipart/mixed; boundary="RZ61CX0iwOCJbmHSqRRIf5zXnwz0kqmSL"; protected-headers="v1" From: Emmanuel Arias To: =?UTF-8?Q?Louis-Philippe_V=c3=a9ronneau?= , debian-python@lists.debian.org Message-ID: <33e6f093-211c-bf62-51a7-7faa120d34ee@yaerobi.com> Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> In-Reply-To: <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> --RZ61CX0iwOCJbmHSqRRIf5zXnwz0kqmSL Content-Type: multipart/mixed; boundary="------------88E7464731BDD3A7BBB8BC17" Content-Language: en-US This is a multi-part message in MIME format. --------------88E7464731BDD3A7BBB8BC17 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hola everybody, On 6/26/21 7:51 PM, Louis-Philippe V=C3=A9ronneau wrote: > To me, the most important thing is that all packages must at least run > the upstream testsuite when it exists (I'm planning on writing a policy= > proposal saying this after the freeze). If PyPi releases include them, = I > think it's fine (but they often don't). I was a little surprised because in all discussion anyone take account the tests (or if a missed sorry) thanks pollo to get it in discussion. I don't have the correct numbers but I saw=C2=A0 many python package withou= t autopkgtest, and if we package from PyPi, that don't contain the testsuite, that result in packages with any test, and that isn't good. Also, I'm not sure, but the docs aren't in PyPi, isn't? In the other hand, files like .git* or CI files, can be easily remove it. So, I don't see any problems with that. cheers --=20 Emmanuel Arias @eamanu yaerobi.com --------------88E7464731BDD3A7BBB8BC17 Content-Type: application/pgp-keys; name="OpenPGP_0xFA9DEC5DE11C63F1.asc" Content-Transfer-Encoding: quoted-printable Content-Description: OpenPGP public key Content-Disposition: attachment; filename="OpenPGP_0xFA9DEC5DE11C63F1.asc" -----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFw1x6oBEADBrJOCQvmkffxnUyGkx74a8xifdgEZLu+Xz6hV7CEyl1/71+8xqIZr9s09w= ++y Pod938Se/gopqgaXpIx46lKp1EI0F0hFoYne5ub6EsIxcyMCCFwbTeR8CQt2EJ86hpS+FYvbS= Tbw vNPCNT/EZuyE3KXrZk7j8nhoAobQwTZVE6agRULUTrxtH1q6w6OhBMtAyZpxRmq9nhLEYRvtS= m++ pyRK+N40pgUED+psPB12NhpHfMpHfSoUyWKMC/7S34XMp1JQtogO4MFjviUpI8iWjWdqJvs/V= WQe 0gQqnH/P4DMKyWdbgJbv9S/kj6r00SsGpMRq15wOcLdEPDST8vb7MDOAG77zBJy3kY3U7JbrW= gad wnivD/nNHTeJAC6hFY/rfmKvWUKPyKO+Y+H6g6sWHTEjm/duIrvm2essMb08ebGoIcjDQf6q1= nX8 6fDY8EM9L0IueN6CqybD2AyVQbifqA8Z8968Vrhl9TQOemNkHdqhhTHC9/H8osGj4pZF7Rqq3= OKG oG61kbmti3142mGtfupCVRyRoLeR6BZF1s1TrXxqCXWtueyw0lCidfCcfYQAYsMsFUQ951Bij= Sj6 0I/KeUmdyjgjfgFthzaG47wr9jQ1QuBomsH+/7kh9CD5sYaA7lsVqhIYZl9gYvW9eTWpPx/+f= c0/ TyZVAdj7++gOtQARAQABzT5FbW1hbnVlbCBBcmlhcyAoZWFtYW51QGVhbWFudS5jb20pIDxlb= W1h bnVlbGFyaWFzMzBAZ21haWwuY29tPsLBlAQTAQoAPhYhBBN5Z1W7xyu4q+Kutfqd7F3hHGPxB= QJc NceqAhsDBQkSzAMABQsJCAcDBRUKCQgLBRYCAwEAAh4BAheAAAoJEPqd7F3hHGPxZb0P/3yIn= NRX Qmgia8PwQMdlnndgC6pHelNUYLujx3kW+zcYCR+9gOv5zpP5e0kEy7mBW/Kpc3Hbkt8Tobqch= 1AU /LpcLmsD9eZj/WMZObv2AyXPl4Tw5+KPT9EyyCHYGA+amvVciCrBlrKiM2e9RfyxKuC4EMxNQ= 0q+ 82sM3cMEU3XerkO6yjks7pVgUZxBpCChf7S9WqaQ2dfMqrClEgXSAPbT++j0M9gZfiu1kIkui= nRW zCxUKyeoyTfaVOsjywyFJBx75NfT9Q40XTz1vCBxh1WMjIH0AyLUik0GWEoACOnS9oB86hAo+= H5F KNmw91CwCcXzxzs1iPKMZl7+qPBFCUt8ysdL3bJ8CZVU3GUk2kI6MctkzjHBqLX3lanvMebKM= 4nl XvftQr+3d7z5n2A+oW636B7eaoNSDDktAhyYx1/uzOtH4lKG1iEbT7yHUSW8pCX47eh61FWsj= Etg 8ek5NYCYGFYyxeCqpp6ZJubNTEmnWCvOFiIbGTysf17TPiw4uhY79PFaRjFTZJDsHl5Iufihl= ab9 D6myWnjDweytdggIbsmXDdQycf03zQBCV5d6B9Atd6iSPQXN98Xldx2q25bmLdYmlMQwDRMFm= 90U YHtBp9ky3ft68ehNbKHZtybrZEjPt32KNsmRhVO/U6EWpcU7jZTHzNTf4jIoVdHCbDTJwsDzB= BMB CAAdFiEEuxoBiMxqAwI0ckiF56e7PyDKsa4FAl148ocACgkQ56e7PyDKsa6g9Av6Amg3NvTnr= XIU 87voGUHls6oOS1nB46WTw5vaI3VbNhzXi3FZPK3+ggsQfRM433vV4IvXpkOIFOFnF7CFoS0ik= ntC iQo1jOXDQveTMcxesjpdvR0h25oPHK9jQmQIZEZZ0qKcdBoSnwJAWZhGTugV9/853lUZ4Pbfi= FNk 1SoitsgxyijvnCEN4pQnyXePHFo3m/Wrnaqkikmh3B8mIR+3nxBLxcIjuQQ1WHUFuTFD65cb/= PmN NrRQJ1vwURJkV5kOW1saAdhZAm1s0zbAzdfEHyiFYCfmXVIJc20HpVjeu/Aw8CrSDZ9GIveBf= A67 Bsd+BYYJ83uTjMPzspT0qAzhlSahyHNEpTaLFeHLd3aGNz1C6TPtrwTl0KWlnQArZ62VA/pKl= Fgr NqZOemyulDpjgcVFFOUJFte5FIXFo2OKXPmxWktrN7F2ofkzTgT7FQrvYz14o9mTqpr426MM/= kbB OveBGqCH3HGglEMUfPpugH6ZA+Vpxf66SSoQqL4ODdm6zVNFbW1hbnVlbCBBcmlhcyAoZW1tY= W51 ZWxhcmlhczMwQGdtYWlsLmNvbSAtIGVhbWFudUBlYW1hbnUuY29tKSA8ZWFtYW51QHlhZXJvY= mku Y29tPsLBlAQTAQoAPhYhBBN5Z1W7xyu4q+Kutfqd7F3hHGPxBQJd2D8zAhsDBQkSzAMABQsJC= AcD BRUKCQgLBRYCAwEAAh4BAheAAAoJEPqd7F3hHGPxO/4QAJuYwevBaD8GZ7Y9ybFppg0w56Icl= QKx LZvUGJwopCjkpmjkolyI8r7zZ/XGbVKHZgCsgTS6Lj77wWMLnBOW22mECRG6v5zdbn+0yzlGE= VYI Fa0tcVJbZjFGEWyRUWk4LVT0RI7hgeM0yZIFwyDGUEW4i6XlULHkTn/45dCD+7Ca7zToQmEcp= slk AyLwwCf/eEKXGC1OUQQJo+sFXDmm4E/AK2FagTnViCy3oM9YeIliSFy5tUZQ7rbG3zWWrU7fF= O8h eMY8qMUF9NRHQBplAx8gpZsiwxyHaRLM/CRyLwGpLr/fVcBAKiSeXLaBvaAO2KQ/6ErXe8kwF= MFG XigsMv7f5O/f9YNqzKC1tIWoQxwhSmNlht1GCpHQ0/BySXeiP5rT33CQD2KqZVOL3qQZa9Jsl= 9MK wyiiPoyT4DytmLDFRhk+WiNp7EtYvmetbpoUtY34/zKIIOKzMRlctTeaJi+cc25zLGNDox5Y5= XTH D0gF9dcULQuVwi2hImFj0j9rzmEGUpkK0CCuRppJzJiTEQentNw4lFp+hFGHKSESByHnSnlOQ= buq XJKO18b5tbGcbzf04/Zc/WpwZD4uzu1CkUb58+k3KwuBtaXW2P3PQ0sfqM4nNYBS9JUIPVSGi= eQc EiSsf9J5A/X9cFvpaRX6zg3mT5SYZ0gA8WOIkyunWRbFzsFNBFw1x6oBEADbQff9YLU9Vz/ZB= Xlz cyNYY8rYDNgsue8OtqcuQM2V3ffjWE/P2dJg+DUx6LkkxN2WRalgQAF2cy7ktqCbdOP7dg4AP= uYJ OP/YHn3NN5/ZVkgd0I9vkiUUUJ71b0XJBaPj2rd5T443uArokkmANPTNrVwJQriZW72g7UXmM= BBb NjmOv58lvzeRToY+cNlPa7on8/aOt9LkyNAvXKY3IUUbWkQmz1QqyEc1L2Ys6ThOHCmm5NDOB= FEy vMPnXmWINQfwuOc0nkvhMfJc24ZQBfsb7kayW9hj5FeHZftLnmGImYlveZGAIrEvUmdyEBRFS= 5W+ r1AgAAqWpdJQjG3tsjOpaXZzwTyUDAPhohFxa2EGtgPI5eMNxkPC7fD6d7EToyCzjvac6RWn1= 7bA 8Blh5bChwC7NRcZkAui7RQCDzTv8HauspepRaV+7T5Akm/2CV+FRzj6yF6hpu/vjhsxehQvTX= BOr RFqSvl+20nIMd/N0DAxcKfvVkuRnFr8EJP2PxoSINyg4pRHzE4MYpKRCCowE6HjY6RJQAWJVj= XvH HfUpC1n7g/wRLFQUZ6judG5ee8mfvXujpWnhWz2M/1EpfedHyvNed2F+CwOh5uT4zmmdTFBQX= nvU EBe1yL9ep1FfRMoNPS9IcmjRSoFMP4JuZL7U00zBYWRclqMoFCbmttnNmwARAQABwsF8BBgBC= gAm FiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAlw1x6oCGwwFCRLMAwAACgkQ+p3sXeEcY/GXUg/+L= H8U XyqAKHnT69s/zLqnuTbzn4uv3WXnXmgio0EjOYDyA2r6qJZYSdHn5eAImGhoGikj/rS2OGn3Y= 3WG vN9L5FB32EyaYXrbdv4ksYSmVFLQ4ZfH4Nba15LOirT08X09TLuzRcj1NxT8I8/TnsCaVl9sh= Hhk HX263axZLJAN2RijCc1HDit+pDR00QqQHG42C3QC52V+ZXvyp2iFpfKudG44DTtO7i4aLuqb6= tr9 WyNRMexG+dEhNnlqpJo0rHAB1F7k+G3tlvQ+E5lescXgxHwCwMmVJQurke6do3Je3Eyc77beT= cQ/ HSwcpFL5nbMaKHXjVPUT0ifRnHrEyDlWrS1dbruxqwRIA4S9Ynqh4RQGdX8TkbmA4mf7K7Oqm= Ft5 U4GCwRLuYFzWK1M3jcp/ftY8hJgvH8VGVV/Qzm8uj9Vfd2sIeae/PWAEpvxJ/36Zqvr+NGBOS= i/1 TJMik7cTqXOcmXz6hQODJGQKaN+s9otAht+F4mlUX0lVLWih5Z/VaoixBjgjC0ch8O6fF31w0= B4p 0ZJIJrTB9lkU6Oka4GIAtX1g9BPYHW8Z/jRnUpwoyNssw+H079KvpKoqFTYdl9pVRpx6/b9zN= m0K qh9HH/+Ybxkc22fUKSr/cWmAhCcSrrpq+Yw0PVOGpgRF6Ft6nIf+f6DZoVTO04iLeTmamyo=3D= =3DuhUT -----END PGP PUBLIC KEY BLOCK----- --------------88E7464731BDD3A7BBB8BC17-- --RZ61CX0iwOCJbmHSqRRIf5zXnwz0kqmSL-- --2vGImQsfJC6M2M8PvWdhlR6uXfW5sIks1 Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmDZOK4FAwAAAAAACgkQ+p3sXeEcY/Gc jRAAmxMkYzF4bqVs7mdeIBG32PRlBbivUguYck9PDbUr6a+ZBFjonRXxHuRX2f/32A02ryxPXrKy +Vtas/TVSwQQp2ISeSZ0fyT/s6aVAjoeruoVlzxsWT6MDk+IhY2JhgK/sHxpJsHgt0RcNCXzo3ve VFlnkfZhEADbb67Sf8RBTnHrlejauE9gm5xAw/ZJrajHEVB5ZmTkrT558Mse0z6NSpTDkh+RYT13 b6xGWoNVCzipHyXV3vx5et/gjfddGwxNUlAVdFr1V3si3mQzqM0IJYfR8oaaEQ5zmNLOgs2Hkxf6 kmYNm2fx+ncWqOxQiQdQSJpTycOnqK/Of/PwW1uyDY/YRIdzpQgH+NsHVZgzQAf5hEcDccISlxdc kZVSoQ1XSGQY26M2cEwqJqmbw6BjuHvP0AEYFFLYkFp7/33cVxh/ZaLBMDZNdT9y/ySx6tDvxjqM m0V5s5hw+JBhQYOEXY44q0KXz9m5tsaaWIfHEKJnuCSovahuwW9M120joEBRnKMEDdIgkvOT0DkF YBymXu8Kr8+p9xcW5q9py+2foCG3OJX9SDvpANXLITWduAe8rMbwpfQncZtpjcoi+H9wy5+VJI1a I4FbGOjI/tt/6wK/tokxFnUZGhULKVJujb540nTLG+w/YDpFdu3tmSqypBmz8apoXwZT6f3A/gwg Ua4= =2/ON -----END PGP SIGNATURE----- --2vGImQsfJC6M2M8PvWdhlR6uXfW5sIks1--