[arch-dev-public] [signoff] tcp_wrappers rebuild bonanza

[Dan McGee]

On Thu, Jul 21, 2011 at 2:37 PM, Allan McRae <allan at archlinux.org> wrote:
> On 22/07/11 01:58, Dan McGee wrote:
>>
>> On Wed, Jul 20, 2011 at 11:37 PM, Eric Bélanger<snowmaniscool at gmail.com>
>>  wrote:
>>>
>>> On Tue, Jul 19, 2011 at 4:30 PM, Eric Bélanger<snowmaniscool at gmail.com>
>>>  wrote:
>>>>
>>>> On Tue, Jul 19, 2011 at 2:13 AM, Tobias Powalowski
>>>> <tobias.powalowski at googlemail.com>  wrote:
>>>>>
>>>>> Am 19.07.2011 08:01, schrieb Eric Bélanger:
>>>>>>
>>>>>> On Mon, Jul 18, 2011 at 7:28 PM, Dave Reisner<d at falconindy.com>
>>>>>>  wrote:
>>>>>>>
>>>>>>> 5 packages in core were affected by this:
>>>>>>>
>>>>>>> inetutils
>>>>>>> nfs-utils
>>>>>>> syslog-ng
>>>>>>> openssh
>>>>>>> xinetd
>>>>>>>
>>>>>>> Note that we still have 2 packages in extra to get this rebuild
>>>>>>> completed -- archboot and openldap, before we can do the viking
>>>>>>> funeral
>>>>>>> for tcp_wrappers.
>>>>>>
>>>>>> I checked out archboot for the rebuild but the archboot scripts
>>>>>> themselves refers to tcp_wrappers. Ultimately, I decided to let Tobias
>>>>>> or someone else handle it. Anyway, I don't think that many people use
>>>>>> archboot on a regular basis.
>>>>>>
>>>>>> The split libldap/openldap package is finally done and in testing. :)
>>>>>> Because, in addition to the tcp_wrapper support removal, it also has
>>>>>> an upstream update (of 2 minor versions) and important changes and
>>>>>> improvements, I would like specific signoffs for libldap/openldap to
>>>>>> make sure everything works fine.
>>>>>>
>>>>>> BTW, when you'll move it to core, it might be better to do a db-remove
>>>>>> on the libldap in core and openldap in extra before moving the package
>>>>>> out of testing. I'm not sure how well the dbscripts will handle a
>>>>>> combined split-PKGBUILD and repo-switch combination.
>>>>>>
>>>>>> List of changes to libldap/openldap package:
>>>>>>
>>>>>> - Upstream update
>>>>>> - Combine libldap and openldap in a splitted PKGBUILD
>>>>>> - Update ntlm.patch so it applies
>>>>>> - Remove tcp_wrappers support
>>>>>> - Fix permissions on libldap libraries
>>>>>> - Change run directory from /var/lib/openldap/run to /run
>>>>>> - Move unix ldapi socket to /run (close FS#21051)
>>>>>> - Change libexecdir to /usr/lib
>>>>>> - Enable slapd overlays (close FS#14598)
>>>>>> - PKGBUILD cleanup
>>>>>>
>>>>>> Eric
>>>>>>>
>>>>>>> Signoff both arches,
>>>>>>> dave
>>>>>>>
>>>>> I would just push a rebuild without tcp_wrappers in depends.
>>>>> The rest I fix on next archboot release.
>>>>> greetings
>>>>> tpowa
>>>>>
>>>>
>>>> I just pushed a rebuilt archboot in testing.
>>>>
>>>> BTW, there seem to be a permission issues for openldap when slapd is
>>>> run as non-root: https://bugs.archlinux.org/task/25168
>>>>
>>>> I'm not sure if slapd is even meant to be run as non-root (you need to
>>>> be root to read its config file) or if the one in the old package was
>>>> working as non-root. So the rebuild will need to stay in testing until
>>>> I figure it out.
>>>>
>>>
>>> I've put a libldap/openldap 2.4.26-2 in testing. With that version,
>>> the slapd daemon is run as a ldap user instead of root.  Please test
>>> this new version and signoff.
>>
>> A bit of a trial by fire, but this all has been moved from *testing
>> and into the relevant repositories.
>
> Are you going to remove the tcp_wrappers package too or hold off for a bit?

We were going to wait 12ish hours to make sure mirrors are synced and
there aren't any phantom dependencies on the package.

-Dan