Path: csiph.com!aioe.org!bofh.it!news.nic.it!robomod From: Jeremy Stanley Newsgroups: linux.debian.maint.python Subject: Re: [RFC] DPT Policy: Canonise recommendation against PyPi-provided upstream source tarballs Date: Sun, 27 Jun 2021 02:20:01 +0200 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Sun Jun 27 00:10:23 2021 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -4.6 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vt4qpdzsqtdrx4bm" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Sa-Exim-Connect-IP: 2001:4802:7801:102:be76:4eff:fe20:63e0 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: fungi@yuggoth.org X-Sa-Exim-Scanned: No (on azathoth.yuggoth.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/19245 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20210627001001.sacm7hlnjpaqj4dj@yuggoth.org Approved: robomod@news.nic.it Lines: 47 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sun, 27 Jun 2021 00:10:02 +0000 X-Original-Message-ID: <20210627001001.sacm7hlnjpaqj4dj@yuggoth.org> X-Original-References: <877dihvfp9.fsf@DigitalMercury.dynalias.net> <4ec3ce8d-eecd-211a-b141-6105b1fc0ff4@debian.org> Xref: csiph.com linux.debian.maint.python:13455 --vt4qpdzsqtdrx4bm Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2021-06-26 18:51:26 -0400 (-0400), Louis-Philippe V=C3=A9ronneau wrote: [...] > To me, the most important thing is that all packages must at least > run the upstream testsuite when it exists (I'm planning on writing > a policy proposal saying this after the freeze). If PyPi releases > include them, I think it's fine (but they often don't). When you do write that, you'll of course want to clarify what "the upstream testsuite" really means too. Lots of projects have vast testing which is simply not feasible to replicate within Debian for a number of reasons. Running some battery of upstream tests makes sense, but testsuites which require root access outside a chroot, integration tests orchestrated across multiple machines, access to unusual sorts of accelerator or network hardware, and so on can easily comprise part of "the upstream testsuite." --=20 Jeremy Stanley --vt4qpdzsqtdrx4bm Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmDXwdRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WClIyRAAodlGLDHeHOap2tyluLU5vIZdZ3jmVrTZ6pSPx37cVSpOqmG8iZ5/fuHD SsWRGX70BK8Vcxd9N0qJ2XldAkZwBHGw3sLExTix6CaaXXugPcf1E0XhID+4Ptk4 yzZRf2Y7760Zrd3HOSzihu1xcL7U3wRIUEOA1FPXVqGUft28tJXV+Zj45zYwgLE8 2KpCNpbtyH0MHltUwo1DWk+g9rwFZjdLCjzXpa4Dlg0RoNwz9wi11IIUQVEzjTZu UojQ3R0kwJ0uzuabijwO4D7R8mlPBIlhBFh9f9ow4CjP2pkT5uSofg2R8Wk0RTvU D+UEQI5WsiLyFBZtsIMg50g9GbbX6H9A3r7nWEfUBqxEq1O7gq3MmTgBT6EI3FVV dmVA+mYJcpYf8JAgaqsSoHYO0Fdtq9LUUcrMxFcPuHqi0UvGsTokZoaoXoyP9Sz4 4rGYjVJKw+HjL5pL5zBuroL98lZq9PAbpZKr9DUV1si0avunTY/o0whPrXUUpBYi DVok9CoQoIsgf1032RBm0/FCbt9a/JuDzGr3fX7lYUY+fE33xoYgOnOEOGU+HPpl IehED9jEyJPhK0PYy0TX94ViOzSYiN/jxHge+4cZBN5gzB+xt5pq9irVNe2RLPou Kw2It6YuelcDCjHDnfXWDry53TWq5hOLqRxo5qLexX507j9hQHs= =xJER -----END PGP SIGNATURE----- --vt4qpdzsqtdrx4bm--