Subject: gridsite: sourceful transition towards Apache 2.4
Date: Sun, 01 Apr 2012 21:15:51 +0000
Package: gridsite
Severity: important
User: [email protected]
Usertags: apache24transition
Dear maintainer,
your package gridsite is provding an Apache2 web server module.
We're upgrading Apache to the new upstream version 2.4 [1] (tracked
as transition bug #661958). This requires all modules to be rebuilt
due to ABI changes. Thus, you need to rebuild and reupload your
Apache2 module package in a version compatible to our new package
available in experimental [2]. Please note it is not enough to
simply rebuild the module - it needs some adaptions in the module
package metadata. We have written packaging guidelines for our
reverse dependencies [3]. Please read it carefully, it should be able
to answer most of your questions. Do also look at dh_apache2
(available through the dh-apache2 package) which can simplify
packaging Apache2 modules. In short, we want to highlight these
changes you need to be aware of.
* APIs changed for some cases [3]. Chances are your module needs some
adaptions, please get in touch with upstream or us if you need help
to port your module to Apache 2.4.
* MPM packages are gone. You cannot depend or conflict with a
particular MPM anymore. If your module does not work with a
particular module, make sure to make it abort with an error if
loaded together with an incompatible MPM. You can use our
apache2-maintscript-helper [4] to switch to the MPM of your choice
in your maintainer scripts.
* Do not build-depend on apache2-threaded-dev or apache2-prefork-dev
anymore. Just like MPMs are gone, are our MPM -dev packages as
well. All modules need to simply build-depend on apache2-dev.
* Do NOT depend on apache2, apache2-common or any other real apache2
package in your binary module package. Depend on our virtual
apache2-api-20120211 package only!
* Do NOT call a2enmod/a2dismod in your maintainer scripts. Use our
apache2-maintscript-helper [3] instead. This is required to get a
uniform and stateful handling of all Apache2 modules.
You can look at our Apache 2.4 packaging hints [5] for hands-on
tutorials. Please note: This bug is filed as "important" for now. As
the time goes by we plan make it a release critical severity. In the
consequences your module either needs an update or is going to be
removed from Wheezy. For the time being please tag the bug as pending
as soon as you have a package ready. We strongly recommend that at
least maintainers of complex module packages make an upload to
experimental as well. Of course, uploading simple modules to
experimental is welcome, too.
[1] https://lists.debian.org/debian-devel-announce/2012/03/msg00013.html
[2] http://packages.debian.org/search?keywords=apache2&searchon=sourcenames&exact=1&suite=all§ion=all
[3] http://anonscm.debian.org/gitweb/?p=pkg-apache/apache2.git;a=blob;f=debian/PACKAGING;hb=next
[4] http://httpd.apache.org/docs/2.4/developer/new_api_2_4.html
[5] http://wiki.debian.org/Apache/PackagingFor24
tags 666832 '+upstream'
thanks
Dear maintainer,
this is a follow-up message to your Apache 2.4 transition bug for
package gridsite. We are approaching an upload of the web server to
Debian's Unstable repository as soon as the release team acknowledges
the upload. Along that upload we are planning to raise the importance of
this bug to a release-critical severity.
Please port your packages now to Apache 2.4. Below you can find a
test-rebuild for your package for the 2.4 version of the Apache web
server. Please note, even if the rebuild was successful, you still need
to make changes in the Debian specific part of your package.
The rebuild below was made by using a specially prepared build
environment where these conditions where met:
* We had apache2 and apache2-dev preinstalled
* We provided a void apache2-threaded-dev and apache2-prefork-dev
package to satisfy build-dependencies of your existing package (but
this WILL NOT be the case in a real upload of the apache2 source
package)
* We prepared apxs to unconditionally inject
-Werror=implicit-function-declaration to gcc to make sure we can spot
the use of removed API calls (e.g. missing signatures for ap_*
functions). Note, this might also cause false positives in some cases.
These are the outcome criterias we defined:
* VERIFIED-OK: The package rebuilt and linked successfully using the
Apache 2.4 development headers. It still needs adapting to Debian
package changes
* VERIFIED-FAIL: The package does not rebuild successufully using the
Apache 2.4 development headers. It may need some porting in the
upstream code base
* BYHAND: We may rebuild your package another time with manual
interception. Not clear outcome could be determined out of the build
log
This is the outcome we determined:
outcome: VERIFIED-FAIL
comment: needs porting: error: 'server_rec' has no member named 'loglevel'
You will find a full build log attached below.
Here are some hints about porting problems. See [1] for a comprehensive
overview:
error: 'conn_rec' has no member named 'remote_ip'
These fields have been renamed in order to distinguish between
the client IP address of the connection and the useragent IP
address of the request. Porting is trivial, in most cases
changing the pointer from conn_rec->remote_ip to
request_rec->useragent_ip is enough
error: implicit declaration of function 'ap_requires'
error: implicit declaration of function 'ap_default_type'
These functions were removed along the 2.2 authnz API. It needs
a non-trivial API redesign.
error: implicit declaration of function 'ap_get_server_version'
Use ap_get_server_banner()
error: format not a string literal and no format arguments [-Werror=format-security]
Apache2 modules are being built with hardening build flags now
in order to satisfy the "hardening release goal" [2]. A trivial
fix comes over that problem.
[1] http://httpd.apache.org/docs/2.4/developer/new_api_2_4.html
[2] http://wiki.debian.org/ReleaseGoals/SecurityHardeningBuildFlags
Acknowledgement sent
to Stefan Fritsch <[email protected]>:
Extra info received and forwarded to list. Copy sent to Mattias Ellert <[email protected]>.
(Fri, 18 May 2012 05:07:08 GMT) (full text, mbox, link).
Subject: Apache2 2.4 transition postponed until after Wheezy
Date: Fri, 18 May 2012 07:03:55 +0200
Hi,
we have decided to postpone the transition to apache2 2.4. The main blocker is that mod_perl needs a major new upstream release which very likely won't be ready in time for Wheezy and we don't want to release Wheezy without mod_perl.
The transition will probably happen shortly after the release of Wheezy. We are sorry for any inconvenience this may have caused.
Cheers,
Stefan
Dear maintainers,
now that the work is done and Debian 7.0 (Wheezy) is released [*], we
are booting the Apache 2.4 transition process again. If you did not
already, please subscribe to transition bug #661958 to keep up with our
transition plan in detail as this IS going to affect your package.
Unless the Release Team is going to assign us another slot to start the
transition we are going to upload Apache 2.4 to Debian Sid at some point
in June. If you do not prepare a package which works together with the
Apache 2.4 server ABI by then, it is going to stop working at that time.
Let me emphasize again you do need to make adjustments in the
source of your package to get it working with Apache 2.4. Moreover, the
APIs slightly changed from 2.2 to 2.4 so that some modules may require
some porting. On the upside, it has been over a year that Apache 2.4 was
released and many upstreams made compatible releases. Moreover, porting
is easy in most cases and I've filed patches to some of your modules.
Either way, if you are trying to load existing module from Sid into
an Apache 2.4 web server is going to fail at runtime which renders your
package virtually useless.
We are planning to make the transition as smooth as possible to our
users. Thus, we do not want to let the Apache 2.4 package migrate to
Testing anytime soon. Instead, we'd like to let it migrate together with
a bunch of transitioned third party modules (i.e. your packages). Please
help us to make this happen soon.
While we invite everyone to provide updated packages as soon as
possible, don't hesitate to contact us if you feel like, we should wait
for you and your package when considering a migration to Debian Testing.
All packages which are not yet transitioned at that point will
eventually be removed from Testing.
Please prepare updates for your packages NOW and upload an upgraded
package to Debian Experimental and/or have a patch ready in your VCS. In
the case of the latter, please tag this bug pending. We chose some very
important external modules to be a blocker for our upload to Unstable.
That is, we will wait for you until we are uploading to Unstable, so
that we can do a coordinated upload to mitigate the impact of Sid users.
If you are the maintainer of such a blocker module, we'll contact you
separately again. If you feel like you should be on the blocker list
denoted in #661958 please let us know as soon as possible.
[*] yah, it's not yet formally speaking
--
with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D
Information forwarded
to Mattias Ellert <[email protected]>: Bug#666832; Package gridsite.
(Thu, 23 May 2013 11:16:39 GMT) (full text, mbox, link).
Acknowledgement sent
to Arno Töll <[email protected]>:
Extra info received and forwarded to maintainer. Copy sent to Mattias Ellert <[email protected]>.
(Thu, 23 May 2013 11:16:39 GMT) (full text, mbox, link).
Hello fellow maintainers,
we are ready to upload Apache2 2.4 to Debian Sid now. This means the
transition is effectively starting now, and going to break your modules.
We have scheduled the upload for May 30, 2013 BEFORE the 19:52 UTC
dinstall on ftp-master.
To minimize the breakage to our Sid users, we'd ask all of you having a
transitioned package ready in Experimental, to make an upload to Sid
AFTER the 13:52 UTC dinstall, and BEFORE 19:52 UTC [1].
Let us know if you need a sponsor, or our help to upload your packages
in that time window. Please note, you could also use the DELAYED queue
to make timed upload [2].
[1] http://ftp-master.debian.org/#dinstall
[2] http://ftp-master.debian.org/deferred.html
--
with kind regards,
Arno Töll
IRC: daemonkeeper on Freenode/OFTC
GnuPG Key-ID: 0x9D80F36D
Source: gridsite
Source-Version: 1.7.21-2
We believe that the bug you reported is fixed in the latest version of
gridsite, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mattias Ellert <[email protected]> (supplier of updated gridsite package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 31 May 2013 13:59:38 +0200
Source: gridsite
Binary: gridsite libgridsite1.7 gridsite-clients gridsite-gsexec libgridsite-dev gridsite-doc gridsite-dbg
Architecture: source all amd64
Version: 1.7.21-2
Distribution: unstable
Urgency: low
Maintainer: Mattias Ellert <[email protected]>
Changed-By: Mattias Ellert <[email protected]>
Description:
gridsite - Grid Security for the Web, Web platforms for Grids
gridsite-clients - Clients to gridsite: htcp, htrm, htmv
gridsite-dbg - Debugging symbols for gridsite
gridsite-doc - Developers Documentation for gridsite
gridsite-gsexec - Setuid gsexec tools for gridsite
libgridsite-dev - Developers tools for gridsite
libgridsite1.7 - Run time libraries for mod_gridsite and gridsite-clients
Closes: 666832669855698519
Changes:
gridsite (1.7.21-2) unstable; urgency=low
.
* Port to apache 2.4 (Closes: #666832, #669855)
* Correct package description (Closes: #698519)
Checksums-Sha1:
1b2b828d871edeaa640b6c088bdd051940082a0c 2252 gridsite_1.7.21-2.dsc
0f12e68f7d08e0d12d483bfe2cf33a2ff2c56237 19205 gridsite_1.7.21-2.debian.tar.gz
ee70bad781c8e6d826090ba30afb05dc8dd1a939 157878 gridsite-doc_1.7.21-2_all.deb
43992fa167aa4686381bd4b4f549ba3d684733f4 94078 gridsite_1.7.21-2_amd64.deb
71629698576a59cd728f7e84aff019a93b3cc60a 40062 libgridsite1.7_1.7.21-2_amd64.deb
cc6afacf198af19c3dd63d02e721580c81e05aa9 28762 gridsite-clients_1.7.21-2_amd64.deb
9acd5f1ce69fd5caaa023808ff7d45f933e690ea 13456 gridsite-gsexec_1.7.21-2_amd64.deb
fcd2c0b6ef8b0209f1d9f4b0701a1719a1df8715 48844 libgridsite-dev_1.7.21-2_amd64.deb
bf55e4cf112b82ebbcc86ff310f9cc87c7b4bd55 289372 gridsite-dbg_1.7.21-2_amd64.deb
Checksums-Sha256:
c1258a86627c225f189d215952fd32d768c7b46314de6fb4a31d3b5d2ae780cf 2252 gridsite_1.7.21-2.dsc
1cdc5434ced16d9528fa7e1288823050129dea9e7d7a487df477e6c3c8f32fdc 19205 gridsite_1.7.21-2.debian.tar.gz
db541116a2a68bdb0665ee213bdc4668bddc2a872303f445fb56ab35512de44d 157878 gridsite-doc_1.7.21-2_all.deb
50e8b8f2709e4172c7949e020759120fc70b6271cc331c25c2eaece4463b3671 94078 gridsite_1.7.21-2_amd64.deb
a42baab80b95fd52f1cac3e169012341538c63b520b5c033ec1e88535df13461 40062 libgridsite1.7_1.7.21-2_amd64.deb
88e95027be1c18e1c7ee3215fbe0c75cd738463c54bb514ad7da3bb6a3d0f96e 28762 gridsite-clients_1.7.21-2_amd64.deb
7c573f4653fda208dbdb85e3b34a96203ebe0436c8445d80a790f59b21dfbd0d 13456 gridsite-gsexec_1.7.21-2_amd64.deb
f03f34b6233c20c23b2e500637c4ef1bd4bd5e8f61da1b75c099608a574d33a1 48844 libgridsite-dev_1.7.21-2_amd64.deb
a1f1fc439b44f8962b75889a4fd5ab942ae896a39aff98da8ca822670382e8c4 289372 gridsite-dbg_1.7.21-2_amd64.deb
Files:
edb1459ed69e5906b12a989664a96a85 2252 net optional gridsite_1.7.21-2.dsc
8fd200accb0f85f0105f84a02eb99ef4 19205 net optional gridsite_1.7.21-2.debian.tar.gz
22950cdef9b9892ad8c2f878daa3c2cd 157878 doc optional gridsite-doc_1.7.21-2_all.deb
add3f1cacfe67617fa19f55785c9a271 94078 net optional gridsite_1.7.21-2_amd64.deb
4bebefceb2e60da8fbb8046998f56856 40062 libs optional libgridsite1.7_1.7.21-2_amd64.deb
b4482ff85a297881b0745bfd9f60f4ce 28762 net optional gridsite-clients_1.7.21-2_amd64.deb
fc4a1c35df1b5d5fafe62ac86541b95c 13456 net optional gridsite-gsexec_1.7.21-2_amd64.deb
e0900d6f4f46d936b1c43a448fa0abc5 48844 libdevel optional libgridsite-dev_1.7.21-2_amd64.deb
dfc36b784aa8918ba9c35873cf6c16da 289372 debug extra gridsite-dbg_1.7.21-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=Y485
-----END PGP SIGNATURE-----
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.