• Re: #1009709 - RFS: nginx/1.18.0-2 [RC] -- small, powerful, scalable we

    From Thomas Ward@21:1/5 to [email protected] on Thu Apr 14 23:10:02 2022
    Debian Mentors,

    Would a mentor be willing to upload this sooner than later as it fixes
    some FTBFS / RC bugs?  It'd be nice if said sponsor can also push a dak command to ftp-master so I don't have to go via Mentors to upload nginx releases (I've already been granted DM access for my packages, and am
    now a maintainer in the Salsa repository for NGINX and should probably
    have upload privs as well).


    Thomas


    On Thu, 14 Apr 2022 16:54:10 -0400 Thomas Ward <[email protected]> wrote:

    Package: sponsorship-requests
    Severity: important

    Dear mentors,

    I am looking for a sponsor for my package "nginx":

     * Package name    : nginx
       Version         : 1.18.0-9
       Upstream Author : Igor Sysoev
     * URL             : https://nginx.org
     * License         : BSD-4-clause, Expat, BSD-2-clause, BSD-3-clause
     * Vcs             : https://salsa.debian.org/nginx-team/nginx    Section         : httpd

    The source builds the following binary packages:

      nginx - small, powerful, scalable web/proxy server
      nginx-doc - small, powerful, scalable web/proxy server - documentation
      nginx-common - small, powerful, scalable web/proxy server - common
    files
      nginx-core - nginx web/proxy server (standard version)
      nginx-full - nginx web/proxy server (standard version with 3rd parties)   nginx-light - nginx web/proxy server (basic version)
      nginx-extras - nginx web/proxy server (extended version)
      libnginx-mod-http-geoip - GeoIP HTTP module for Nginx
      libnginx-mod-http-geoip2 - GeoIP2 HTTP module for Nginx
      libnginx-mod-http-image-filter - HTTP image filter module for Nginx
      libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx
      libnginx-mod-mail - Mail module for Nginx
      libnginx-mod-stream - Stream module for Nginx
      libnginx-mod-stream-geoip - GeoIP Stream module for Nginx
      libnginx-mod-stream-geoip2 - GeoIP2 Stream module for Nginx
      libnginx-mod-http-perl - Perl module for Nginx
      libnginx-mod-http-auth-pam - PAM authentication module for Nginx
      libnginx-mod-http-lua - Lua module for Nginx
      libnginx-mod-http-ndk - Nginx Development Kit module
      libnginx-mod-nchan - Fast, flexible pub/sub server for Nginx
      libnginx-mod-http-echo - Bring echo and more shell style goodies to
    Nginx
      libnginx-mod-http-upstream-fair - Nginx Upstream Fair Proxy Load
    Balancer
      libnginx-mod-http-headers-more-filter - Set and clear input and
    output headers for Nginx
      libnginx-mod-http-cache-purge - Purge content from Nginx caches
      libnginx-mod-http-fancyindex - Fancy indexes module for the Nginx
      libnginx-mod-http-uploadprogress - Upload progress system for Nginx
      libnginx-mod-http-subs-filter - Substitution filter module for Nginx
      libnginx-mod-http-dav-ext - WebDAV missing commands support for Nginx
      libnginx-mod-rtmp - RTMP support for Nginx

    To access further information about this package, please visit the
    following URL:

      https://mentors.debian.net/package/nginx/

    Alternatively, you can download the package with 'dget' using this
    command:

      dget -x https://mentors.debian.net/debian/pool/main/n/nginx/nginx_1.18.0-9.dsc

    While we are at it, can a sponsor or DD please push a dak command to ftp-master so that I can use my Debian Maintainer status to push nginx

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From M. Zhou@21:1/5 to Thomas Ward on Fri Apr 15 02:20:01 2022
    Hi Thomas,

    Thank you for the updates. Is this coordinated with the nginx maintainers? Actually it is hard for any mentor outside that team to sponsor the upload.
    And it seems there is no RC bug for nginx right now? https://tracker.debian.org/pkg/nginx

    BTW, you may want to first ask the nginx team and debian developers who
    gave you salsa maintainer access for the DM access, instead of other debian developers from mentors list.
    Because a portion of the mentors have no experience with you (including me), and hence we cannot make a decision on whether to grant you with DM access. Once given without ack from original nginx maintainers, it still feels
    like package hijacking.

    According to nginx upload history, this will be the first time of your upload... so it is indeed uneasy for an outsider (in terms of nginx)
    to help.

    On Thu, 2022-04-14 at 17:02 -0400, Thomas Ward wrote:
    Debian Mentors,

    Would a mentor be willing to upload this sooner than later as it fixes
    some FTBFS / RC bugs?  It'd be nice if said sponsor can also push a dak command to ftp-master so I don't have to go via Mentors to upload nginx releases (I've already been granted DM access for my packages, and am
    now a maintainer in the Salsa repository for NGINX and should probably
    have upload privs as well).


    Thomas


    On Thu, 14 Apr 2022 16:54:10 -0400 Thomas Ward <[email protected]> wrote:

    Package: sponsorship-requests
    Severity: important

    Dear mentors,

    I am looking for a sponsor for my package "nginx":

     * Package name    : nginx
       Version         : 1.18.0-9
       Upstream Author : Igor Sysoev
     * URL             : https://nginx.org
     * License         : BSD-4-clause, Expat, BSD-2-clause, BSD-3-clause
     * Vcs             : https://salsa.debian.org/nginx-team/nginx
       Section         : httpd

    The source builds the following binary packages:

      nginx - small, powerful, scalable web/proxy server
      nginx-doc - small, powerful, scalable web/proxy server - documentation   nginx-common - small, powerful, scalable web/proxy server - common
    files
      nginx-core - nginx web/proxy server (standard version)
      nginx-full - nginx web/proxy server (standard version with 3rd parties)   nginx-light - nginx web/proxy server (basic version)
      nginx-extras - nginx web/proxy server (extended version)
      libnginx-mod-http-geoip - GeoIP HTTP module for Nginx
      libnginx-mod-http-geoip2 - GeoIP2 HTTP module for Nginx
      libnginx-mod-http-image-filter - HTTP image filter module for Nginx
      libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx
      libnginx-mod-mail - Mail module for Nginx
      libnginx-mod-stream - Stream module for Nginx
      libnginx-mod-stream-geoip - GeoIP Stream module for Nginx
      libnginx-mod-stream-geoip2 - GeoIP2 Stream module for Nginx
      libnginx-mod-http-perl - Perl module for Nginx
      libnginx-mod-http-auth-pam - PAM authentication module for Nginx
      libnginx-mod-http-lua - Lua module for Nginx
      libnginx-mod-http-ndk - Nginx Development Kit module
      libnginx-mod-nchan - Fast, flexible pub/sub server for Nginx
      libnginx-mod-http-echo - Bring echo and more shell style goodies to
    Nginx
      libnginx-mod-http-upstream-fair - Nginx Upstream Fair Proxy Load
    Balancer
      libnginx-mod-http-headers-more-filter - Set and clear input and
    output headers for Nginx
      libnginx-mod-http-cache-purge - Purge content from Nginx caches
      libnginx-mod-http-fancyindex - Fancy indexes module for the Nginx
      libnginx-mod-http-uploadprogress - Upload progress system for Nginx
      libnginx-mod-http-subs-filter - Substitution filter module for Nginx
      libnginx-mod-http-dav-ext - WebDAV missing commands support for Nginx   libnginx-mod-rtmp - RTMP support for Nginx

    To access further information about this package, please visit the following URL:

      https://mentors.debian.net/package/nginx/

    Alternatively, you can download the package with 'dget' using this
    command:

      dget -x https://mentors.debian.net/debian/pool/main/n/nginx/nginx_1.18.0-9.dsc

    While we are at it, can a sponsor or DD please push a dak command to ftp-master so that I can use my Debian Maintainer status to push nginx



    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Thomas Ward@21:1/5 to M. Zhou on Fri Apr 15 02:30:01 2022
    I sent such requests literally when they gave me access, and it seems
    there may only be one or two individuals driving the package - of which
    it's impossibly hard to get one of them to even respond.  Last response
    I had from Ondrej on the uploaders and team was "Join the maintainers
    team" on Salsa, which I did and they granted me access - https://salsa.debian.org/nginx-team/nginx has the recent work which has
    made the team "no longer inactive after a three week break".  If this is
    not enough to point at me having maintainer access to the VCS for
    releasing the packages, then maybe Debian should do some research before outright rejecting.

    I'm happy to wait for one of their people to give me dak access or
    sponsor the upload, however keep in mind that after 3 weeks with no
    activity AND a merge request that took two weeks to get that would fix
    the FTBFS that broke NGINX in Testing to begin with, we're staring at a "Package is not fit for testing" problem currently that is nearly a
    month old and hasn't been fixed yet. (However, given that I've been
    making the commits on the Salsa repo that the packaging directly comes
    from, I'm not sure if you mean something other than the NGINX Team on
    Salsa when you refer to "maintainers" - I have 'Maintainer' access on
    the Salsa repo itself that the packaging comes from)


    Thomas


    On 4/14/22 20:13, M. Zhou wrote:
    Hi Thomas,

    Thank you for the updates. Is this coordinated with the nginx maintainers? Actually it is hard for any mentor outside that team to sponsor the upload. And it seems there is no RC bug for nginx right now? https://tracker.debian.org/pkg/nginx

    BTW, you may want to first ask the nginx team and debian developers who
    gave you salsa maintainer access for the DM access, instead of other debian developers from mentors list.
    Because a portion of the mentors have no experience with you (including me), and hence we cannot make a decision on whether to grant you with DM access. Once given without ack from original nginx maintainers, it still feels
    like package hijacking.

    According to nginx upload history, this will be the first time of your upload... so it is indeed uneasy for an outsider (in terms of nginx)
    to help.

    On Thu, 2022-04-14 at 17:02 -0400, Thomas Ward wrote:
    Debian Mentors,

    Would a mentor be willing to upload this sooner than later as it fixes
    some FTBFS / RC bugs?  It'd be nice if said sponsor can also push a dak
    command to ftp-master so I don't have to go via Mentors to upload nginx
    releases (I've already been granted DM access for my packages, and am
    now a maintainer in the Salsa repository for NGINX and should probably
    have upload privs as well).


    Thomas


    On Thu, 14 Apr 2022 16:54:10 -0400 Thomas Ward <[email protected]> wrote:

    > Package: sponsorship-requests
    > Severity: important
    >
    > Dear mentors,
    >
    > I am looking for a sponsor for my package "nginx":
    >
    >  * Package name    : nginx
    >    Version         : 1.18.0-9
    >    Upstream Author : Igor Sysoev
    >  * URL             : https://nginx.org
    >  * License         : BSD-4-clause, Expat, BSD-2-clause, BSD-3-clause
    >  * Vcs             : https://salsa.debian.org/nginx-team/nginx
    >    Section         : httpd
    >
    > The source builds the following binary packages:
    >
    >   nginx - small, powerful, scalable web/proxy server
    >   nginx-doc - small, powerful, scalable web/proxy server - documentation
    >   nginx-common - small, powerful, scalable web/proxy server - common
    files
    >   nginx-core - nginx web/proxy server (standard version)
    >   nginx-full - nginx web/proxy server (standard version with 3rd parties)
    >   nginx-light - nginx web/proxy server (basic version)
    >   nginx-extras - nginx web/proxy server (extended version)
    >   libnginx-mod-http-geoip - GeoIP HTTP module for Nginx
    >   libnginx-mod-http-geoip2 - GeoIP2 HTTP module for Nginx
    >   libnginx-mod-http-image-filter - HTTP image filter module for Nginx >> >   libnginx-mod-http-xslt-filter - XSLT Transformation module for Nginx >> >   libnginx-mod-mail - Mail module for Nginx
    >   libnginx-mod-stream - Stream module for Nginx
    >   libnginx-mod-stream-geoip - GeoIP Stream module for Nginx
    >   libnginx-mod-stream-geoip2 - GeoIP2 Stream module for Nginx
    >   libnginx-mod-http-perl - Perl module for Nginx
    >   libnginx-mod-http-auth-pam - PAM authentication module for Nginx
    >   libnginx-mod-http-lua - Lua module for Nginx
    >   libnginx-mod-http-ndk - Nginx Development Kit module
    >   libnginx-mod-nchan - Fast, flexible pub/sub server for Nginx
    >   libnginx-mod-http-echo - Bring echo and more shell style goodies to >> Nginx
    >   libnginx-mod-http-upstream-fair - Nginx Upstream Fair Proxy Load
    Balancer
    >   libnginx-mod-http-headers-more-filter - Set and clear input and
    > output headers for Nginx
    >   libnginx-mod-http-cache-purge - Purge content from Nginx caches
    >   libnginx-mod-http-fancyindex - Fancy indexes module for the Nginx
    >   libnginx-mod-http-uploadprogress - Upload progress system for Nginx >> >   libnginx-mod-http-subs-filter - Substitution filter module for Nginx >> >   libnginx-mod-http-dav-ext - WebDAV missing commands support for Nginx >> >   libnginx-mod-rtmp - RTMP support for Nginx
    >
    > To access further information about this package, please visit the
    > following URL:
    >
    >   https://mentors.debian.net/package/nginx/
    >
    > Alternatively, you can download the package with 'dget' using this
    command:
    >
    >   dget -x
    > https://mentors.debian.net/debian/pool/main/n/nginx/nginx_1.18.0-9.dsc >> >
    > While we are at it, can a sponsor or DD please push a dak command to
    > ftp-master so that I can use my Debian Maintainer status to push nginx >>



    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From M. Zhou@21:1/5 to Thomas Ward on Fri Apr 15 05:50:01 2022
    On Thu, 2022-04-14 at 20:26 -0400, Thomas Ward wrote:
    I sent such requests literally when they gave me access, and it seems
    there may only be one or two individuals driving the package - of which
    it's impossibly hard to get one of them to even respond.  Last response
    I had from Ondrej on the uploaders and team was "Join the maintainers
    team" on Salsa, which I did and they granted me access - https://salsa.debian.org/nginx-team/nginx has the recent work which has
    made the team "no longer inactive after a three week break".  If this is not enough to point at me having maintainer access to the VCS for
    releasing the packages, then maybe Debian should do some research before outright rejecting.

    I'd like to point out in Debian's convention Salsa permission is not
    equivalent to any factual upload permission. Even if you are granted
    with Owner access on Salsa, it's still a separated thing when talking
    about upload permission. There are massive amount of examples of
    salsa contributors without factual uploading permission. There are
    historical reasons behind this, which seems quite different from
    Ubuntu's convention.

    Being unable to get a response from original maintainer is always
    a pain to contribute for this community. You may want to look up
    the "Intent To Salvage" process given your intent to maintain it
    for long term. Whether people can get response varies across in
    different teams at different times.

    I understand such frustration as I experienced exactly the same thing
    when I was not a DD.

    I'm happy to wait for one of their people to give me dak access or
    sponsor the upload, however keep in mind that after 3 weeks with no
    activity AND a merge request that took two weeks to get that would fix
    the FTBFS that broke NGINX in Testing to begin with, we're staring at a "Package is not fit for testing" problem currently that is nearly a
    month old and hasn't been fixed yet. (However, given that I've been
    making the commits on the Salsa repo that the packaging directly comes
    from, I'm not sure if you mean something other than the NGINX Team on
    Salsa when you refer to "maintainers" - I have 'Maintainer' access on
    the Salsa repo itself that the packaging comes from)


    Unfortunately, I have to tell you the truth that Debian community is
    a group of unpaid volunteers. And you may have to lower your
    expectation on the other developer's response within this community.

    Really, triggering autorm due to FTBFS happens all the time.
    Bugs left for a month unfixed happens all the time.
    When the package maintainers are going to do something, they will
    continue from your work on salsa and include them in the next
    upload.

    You may have been confused by Salsa "Maintainer access" and "Debian Maintainer". They are truely different thing and irrelevant.
    Even if someone has "Owner access" on Salsa, it does not mean
    this contributor should have "Debian Developer" or "Debian Maintainer" permission for ftp-master upload.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From M. Zhou@21:1/5 to M. Zhou on Fri Apr 15 05:50:01 2022
    Also, I'd like to fix another misunderstanding.

    DM access is only possible after you became a debian maintainer (nm.debian.org).
    You have to go through the application process.
    That step must be finished before someone can give you the DM upload permission.

    Another misunderstanding is that debian developers usually do not give first-time contributors DM permission. DM permission means endorsement
    and no one can endorse someone unfamiliar.

    On Thu, 2022-04-14 at 23:42 -0400, M. Zhou wrote:
    On Thu, 2022-04-14 at 20:26 -0400, Thomas Ward wrote:
    I sent such requests literally when they gave me access, and it seems there may only be one or two individuals driving the package - of which it's impossibly hard to get one of them to even respond.  Last response
    I had from Ondrej on the uploaders and team was "Join the maintainers team" on Salsa, which I did and they granted me access - https://salsa.debian.org/nginx-team/nginx has the recent work which has made the team "no longer inactive after a three week break".  If this is not enough to point at me having maintainer access to the VCS for releasing the packages, then maybe Debian should do some research before outright rejecting.

    I'd like to point out in Debian's convention Salsa permission is not equivalent to any factual upload permission. Even if you are granted
    with Owner access on Salsa, it's still a separated thing when talking
    about upload permission. There are massive amount of examples of
    salsa contributors without factual uploading permission. There are
    historical reasons behind this, which seems quite different from
    Ubuntu's convention.

    Being unable to get a response from original maintainer is always
    a pain to contribute for this community. You may want to look up
    the "Intent To Salvage" process given your intent to maintain it
    for long term. Whether people can get response varies across in
    different teams at different times.

    I understand such frustration as I experienced exactly the same thing
    when I was not a DD.

    I'm happy to wait for one of their people to give me dak access or
    sponsor the upload, however keep in mind that after 3 weeks with no activity AND a merge request that took two weeks to get that would fix
    the FTBFS that broke NGINX in Testing to begin with, we're staring at a "Package is not fit for testing" problem currently that is nearly a
    month old and hasn't been fixed yet. (However, given that I've been
    making the commits on the Salsa repo that the packaging directly comes from, I'm not sure if you mean something other than the NGINX Team on Salsa when you refer to "maintainers" - I have 'Maintainer' access on
    the Salsa repo itself that the packaging comes from)


    Unfortunately, I have to tell you the truth that Debian community is
    a group of unpaid volunteers. And you may have to lower your
    expectation on the other developer's response within this community.

    Really, triggering autorm due to FTBFS happens all the time.
    Bugs left for a month unfixed happens all the time.
    When the package maintainers are going to do something, they will
    continue from your work on salsa and include them in the next
    upload.

    You may have been confused by Salsa "Maintainer access" and "Debian Maintainer". They are truely different thing and irrelevant.
    Even if someone has "Owner access" on Salsa, it does not mean
    this contributor should have "Debian Developer" or "Debian Maintainer" permission for ftp-master upload.


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From M. Zhou@21:1/5 to M. Zhou on Fri Apr 15 06:00:01 2022
    Ok, I see your debian maintainer status. Then the problem is simpler.
    DM access for nginx should be given by the original nginx maintainers.

    If no response from maintainers, you may
    (1) go through Intent To Salvage process and become maintainer
    (2) find sponsor for a delayed NMU for fixing the RC bug in the last minute

    On Thu, 2022-04-14 at 23:46 -0400, M. Zhou wrote:
    Also, I'd like to fix another misunderstanding.

    DM access is only possible after you became a debian maintainer (nm.debian.org).
    You have to go through the application process.
    That step must be finished before someone can give you the DM upload permission.

    Another misunderstanding is that debian developers usually do not give first-time contributors DM permission. DM permission means endorsement
    and no one can endorse someone unfamiliar.

    On Thu, 2022-04-14 at 23:42 -0400, M. Zhou wrote:
    On Thu, 2022-04-14 at 20:26 -0400, Thomas Ward wrote:
    I sent such requests literally when they gave me access, and it seems there may only be one or two individuals driving the package - of which it's impossibly hard to get one of them to even respond.  Last response I had from Ondrej on the uploaders and team was "Join the maintainers team" on Salsa, which I did and they granted me access - https://salsa.debian.org/nginx-team/nginx has the recent work which has made the team "no longer inactive after a three week break".  If this is
    not enough to point at me having maintainer access to the VCS for releasing the packages, then maybe Debian should do some research before outright rejecting.

    I'd like to point out in Debian's convention Salsa permission is not equivalent to any factual upload permission. Even if you are granted
    with Owner access on Salsa, it's still a separated thing when talking
    about upload permission. There are massive amount of examples of
    salsa contributors without factual uploading permission. There are historical reasons behind this, which seems quite different from
    Ubuntu's convention.

    Being unable to get a response from original maintainer is always
    a pain to contribute for this community. You may want to look up
    the "Intent To Salvage" process given your intent to maintain it
    for long term. Whether people can get response varies across in
    different teams at different times.

    I understand such frustration as I experienced exactly the same thing
    when I was not a DD.

    I'm happy to wait for one of their people to give me dak access or sponsor the upload, however keep in mind that after 3 weeks with no activity AND a merge request that took two weeks to get that would fix the FTBFS that broke NGINX in Testing to begin with, we're staring at a "Package is not fit for testing" problem currently that is nearly a month old and hasn't been fixed yet. (However, given that I've been making the commits on the Salsa repo that the packaging directly comes from, I'm not sure if you mean something other than the NGINX Team on Salsa when you refer to "maintainers" - I have 'Maintainer' access on the Salsa repo itself that the packaging comes from)


    Unfortunately, I have to tell you the truth that Debian community is
    a group of unpaid volunteers. And you may have to lower your
    expectation on the other developer's response within this community.

    Really, triggering autorm due to FTBFS happens all the time.
    Bugs left for a month unfixed happens all the time.
    When the package maintainers are going to do something, they will
    continue from your work on salsa and include them in the next
    upload.

    You may have been confused by Salsa "Maintainer access" and "Debian Maintainer". They are truely different thing and irrelevant.
    Even if someone has "Owner access" on Salsa, it does not mean
    this contributor should have "Debian Developer" or "Debian Maintainer" permission for ftp-master upload.



    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)