Debian Bug report logs - #476585
[new] Script to compare the orig tarball for a Debian package to the upstream tarball

version graph

Package: devscripts; Maintainer for devscripts is Devscripts Maintainers <[email protected]>; Source for devscripts is src:devscripts (PTS, buildd, popcon).

Reported by: Paul Wise <[email protected]>

Date: Sun, 13 Apr 2008 09:39:19 UTC

Severity: wishlist

Found in version devscripts/2.10.25

Reply or subscribe to this bug.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to [email protected], Devscripts Devel Team <[email protected]>:
Bug#475828; Package devscripts. (full text, mbox, link).


Acknowledgement sent to Paul Wise <[email protected]>:
New Bug report received and forwarded. Copy sent to Devscripts Devel Team <[email protected]>. (full text, mbox, link).


Message #5 received at [email protected] (full text, mbox, reply):

From: Paul Wise <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Subject: uscan: option to compare orig tarball with upstream source
Date: Sun, 13 Apr 2008 17:28:43 +0800
[Message part 1 (text/plain, inline)]
Package: devscripts
Version: 2.10.25
Severity: wishlist

I would like a uscan option --check-orig that does the following. This
would be useful for sponsors to easily check that the upstream tarball
is the same as the one provided (on mentors/etc).

Download the upstream version corresponding to the current upstream
version in debian/changelog.

If the upstream tarball is in the same format as the orig tarball, then
check all the different checksums are the same (md5/sha1/sha256/etc).

If the upstream tarball is compressed using bz2 rather than gzip, then
check that the uncompressed version of the upstream tarball matches the
uncompressed version of the orig tarball.

If upstream is in zip format (or other needs-repack format) then check
that all the files inside the upstream tarball match all the files in
the orig tarball.

Print out information about the get-orig-source target.

Print a summary of the results, here are some examples:

Upstream source matches orig tarball.

Uncompressed upstream source matches uncompressed orig tarball.
Warning: compression type matches, recompression unnecessary!

Unpacked upstream source matches unpacked orig tarball.

Unpacked upstream source matches unpacked orig tarball.
Warning: tar format used, repacking unnecessary!

Orig tarball removes files from upstream source.
<removed files>
<print get-orig-source target or Warning: no get-orig-source target!>

Upstream source differs from orig:
<diffstat here>
<print get-orig-source target or Warning: no get-orig-source target!>

When you run it with --verbose it could print the various checksums it
finds or something.

-- 
bye,
pabs

http://wiki.debian.org/PaulWise
[signature.asc (application/pgp-signature, inline)]

Changed Bug title to `[uscan] Option to download upstream tarball for current package and compare it to the provided orig tarball' from `uscan: option to compare orig tarball with upstream source'. Request was from Adam D. Barratt <[email protected]> to [email protected]. (Sun, 13 Apr 2008 10:03:05 GMT) (full text, mbox, link).


Information forwarded to [email protected], Devscripts Devel Team <[email protected]>:
Bug#475828; Package devscripts. (full text, mbox, link).


Acknowledgement sent to "Adam D. Barratt" <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devscripts Devel Team <[email protected]>. (full text, mbox, link).


Message #12 received at [email protected] (full text, mbox, reply):

From: "Adam D. Barratt" <[email protected]>
To: Paul Wise <[email protected]>, [email protected]
Subject: Re: Bug#475828: uscan: option to compare orig tarball with upstream source
Date: Sun, 13 Apr 2008 12:09:09 +0100
Hi,

On Sun, 2008-04-13 at 17:28 +0800, Paul Wise wrote:
> I would like a uscan option --check-orig that does the following. This
> would be useful for sponsors to easily check that the upstream tarball
> is the same as the one provided (on mentors/etc).

This looks reasonable, at least from a first read-through. I'd be
inclined to separate it in to two, however - a "--download-version"
option for uscan and a new script to encompass the remaining
functionality; the new script could become sponsor-check (for want of a
better name) and incorporate other functionality over time.

Regards,

Adam




Information forwarded to [email protected], Devscripts Devel Team <[email protected]>:
Bug#475828; Package devscripts. (full text, mbox, link).


Acknowledgement sent to "Adam D. Barratt" <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devscripts Devel Team <[email protected]>. (full text, mbox, link).


Message #17 received at [email protected] (full text, mbox, reply):

From: "Adam D. Barratt" <[email protected]>
To: [email protected]
Cc: Paul Wise <[email protected]>
Subject: Re: Bug#475828: uscan: option to compare orig tarball with upstream source
Date: Thu, 17 Apr 2008 19:59:52 +0100
Hi,

On Sun, 2008-04-13 at 12:09 +0100, Adam D. Barratt wrote:
> On Sun, 2008-04-13 at 17:28 +0800, Paul Wise wrote:
> > I would like a uscan option --check-orig that does the following. This
> > would be useful for sponsors to easily check that the upstream tarball
> > is the same as the one provided (on mentors/etc).
> 
> This looks reasonable, at least from a first read-through. I'd be
> inclined to separate it in to two, however - a "--download-version"
> option for uscan and a new script to encompass the remaining
> functionality; the new script could become sponsor-check (for want of a
> better name) and incorporate other functionality over time.

I've now implemented uscan --download-version (assuming that the
provided watch file is capable of matching a download ___location for the
specified version, obviously).

I'm therefore going to clone this request as I suggested previously.

Regards,

Adam




Bug 475828 cloned as bug 476585. Request was from Adam D. Barratt <[email protected]> to [email protected]. (Thu, 17 Apr 2008 19:03:08 GMT) (full text, mbox, link).


Changed Bug title to `[new] Script to compare the orig tarball for a Debian package to the upstream tarball' from `[uscan] Option to download upstream tarball for current package and compare it to the provided orig tarball'. Request was from Adam D. Barratt <[email protected]> to [email protected]. (Thu, 17 Apr 2008 19:03:10 GMT) (full text, mbox, link).


Information forwarded to [email protected], Devscripts Maintainers <[email protected]>:
Bug#476585; Package devscripts. (Wed, 22 Sep 2021 04:45:01 GMT) (full text, mbox, link).


Acknowledgement sent to PT FINDORA INTERNUSA <[email protected]>:
Extra info received and forwarded to list. Copy sent to Devscripts Maintainers <[email protected]>. (Wed, 22 Sep 2021 04:45:01 GMT) (full text, mbox, link).


Message #26 received at [email protected] (full text, mbox, reply):

From: PT FINDORA INTERNUSA <[email protected]>
To: me <[email protected]>
Subject: P.O 22/09/2021
Date: Tue, 21 Sep 2021 21:22:54 -0700
[Message part 1 (text/plain, inline)]
Hello,

Good morning,

We have gone through your samples from a partner and Here is our  Order 
List. Please do bear in mind that we are very much in  need of this 
order, quote your competitive prices.

Kindly send the Order confirmation.

Your early reply will be much appreciated.

Best Regards,

Maryanah Erwin.

PT FINDORA INTERNUSA

Jln Pahlawan 66 Kec. Arjawinangun

45162 CIREBON West-Java INDONESIA

tel : +62 231 357334

fax: +62 231 357260

email: [email protected]
[P.O22.09.2021.cab (application/zip, attachment)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <[email protected]>. Last modified: Mon May 12 05:15:40 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.