Life, Code, Stuff.
- gplenforced.org: mention copyleft.org, FSF and gpl-violations.org
- https-everywhere: fix & merge Debian updates
- iotop: alignement
- codespell: pacakge, intregral, droppend, enforcmement, bood, everythin, temporarly, claaes, depricated, pluign(s), paramater(s), minimun, differrent, dekstop, impresive, mangementt, pusehd, pres, embdedded, captable, verifty(ing), alignement
- lintian: droppend, enforcmement, bood, everythin, temporarly, claaes, pluign(s), differrent, debiab, dekstop, impresive, mangementt, pusehd, pres, embdedded, captable, verifty(ing), alignement
- Debian wiki: AutomateBackports, binNMU, CopyrightReview (Tools), CristianGreco, DebianArt (RequestArtwork), DebianGeoMirror, DebianLocations, DebianLogo, DebianSecurity/AdvisoryCreation/SecFull, Derivatives/Census (Armbian, Matriux), Exploits, gsoc, GSoC, LTS/Team, Mentors/Review (1, 2), PaulWise/InterestingSoftware, PlanetDebian, qa.debian.org, Services/MentorsDebianNet, Statistics, Teams/Publicity (Identica, micronews, Release), Teams/Webmaster (TODO), Year
- DebConf wiki: Timeline (DebConf16, DebConf17)
- Wikipedia: BugSat_1, Message-ID, PaulWise
- Debian website: Unix line endings, merged release team patches for stretch/buster, update links to removed pages (1 2 3 4)
- Debian QA: clang build logs (merged PTS patch, re-enabled & fixed in tracker)
- Debian security tracker: CVE updates (1, 2), update mirror, fix domain typo, avoid hard-coding years
- Debian nagios: update mirror-isc.d.o upstream
- Debian DNS: fix snapshot backup issue
- Debian package uploads: nvme-cli 1.0-3~bpo8+1, libesedb 20170121-2~bpo8+1
- Release-critical bugs in needrestart-session, dnssec-trigger
- Fix exit status in ipmievd
- TLS for links in bugs.debian.org emails, planet.gnome.org
- Password length in AbiSource Bugzilla
- Disabling ReportPage in apt-cacher-ng: wrong comment and breaks the cron job
- Features in adequate and git/github (light-weight pull requests)
- Spam: reported 5 Debian bug reports and 158 Debian mailing list posts
- Debian wiki: RecentChanges for the month
- Debian packages: reviewed and sponsored gtranscribe 0.7.1-2
- Debian screenshots:
- approved fbreader unity openlp wadc bosixnet-webui (2) ardour arc-theme terminix kget okular sl synergy musique screenfetch mercurial-crecord git-crecord libglpk-java rolo streamtuner2 muon limesuite endless-sky spectrwm
- approved deletion of sshpass (website screenshot)
- rejected reaver/pixiewps/golang (just a picture of the help output), git (Android browser screenshot with rude confused title), marble (not a screenshot), libcanberra0-dbg (no screenshot present)
- Debian: do the samhain dance, ask for new local contacts at one site, ask local admins to reset one machine, powercycle 2 dead machines, redirect 1 user to the support channels, redirect 1 user to a service admin, redirect 1 spam reporter to the right mechanisms, investigate mail logs for a missing bug report, ping bugs-search.d.o service admin about moving off glinka and remove data, poke cdimage-search.d.o service admin about moving off glinka, update a cron job on denis.d.o for the rename of letsencrypt.sh to dehydrated, debug planet.d.o issue and remove stray cron job lock file, check if ftp is used on a couple of security.d.o mirrors, discuss storage upgrade for LeaseWeb for snapshot.d.o/deriv.d.n/etc, investigate SSD SMART error and ignore the unknown attribute, ask 9 users to restart their processes, investigate apt-get update failure in nagios, swapoff/swapon a swap file to drain it, restart/disable some failed services, help restore the backup server, debug stretch /dev/log issue,
- Debian QA: deploy merged PTS/tracker patches,
- Debian wiki: answer 1 IP-blocked VPN user, pinged 1 user on IRC about their bouncing mail, disabled 4 accounts due to bouncing mail, redirect 1 person to documentation/lists, whitelist 5 email addresses, forward 1 password reset token, killed 1 spammer account, reverted 1 spammer edit,
- Debian mentors: security upgrades, check which email a user signed up with
- Openmoko: security upgrades, daemon restarts, reboot
- Turned off the census cron job because it ran out of disk space
- Update Armbian sources.list
- Ping siduction folks about updating their sources.list
- Start a discussion about DebConf17
- Notify the derivatives based on jessie or older that stretch is frozen
- Invite Rebellin Linux (again)
The libesedb Debian backport was sponsored by my employer. All other work was done on a volunteer basis.
- gitk: colour of remote refs
- https-everywhere: Update Debian rules
- check-all-the-things: release, security fix, reset terminal modes, allow running removed checkers, regression fix (quote fix), TODO items (for deep-text-corrector, sblint, decopy, Coala Bear & dangerous Python checks)
- devscripts: fix grep-excuses warning
- autorevision: build correctness, tarball reproducibility (due to gzip & AUTHORS.txt)
- whowatch: parameter correctness (for NULL, int), spelling/grammar/typos, https, remove dead links & restore terminal status on exit
- spelling dictionaries:
- codespell: recod, undefuned, normaly, uner, buid, stength, privide, decstiption(s), revrese, lightweigh, multible, asbtraction, resulution, meatadata, seriuos, transalte, interractive, timestan, partiton, databas, claculate, patern, substiution, freee, operatation(s), ambigous, clasified, coypright, previlege, gental, bacup & detction
- lintian: recod, undefuned, uner, buid, stength, privide, dimentional, decstiption(s), revrese, lightweigh, asbtraction, resulution, FTBS, meatadata, seriuos, transalte, interractive, timestan, partiton, databas, claculate, patern, substiution, freee, operatation(s), previlege, gental, bacup & detction
- Debian timeline: latest bug milestones
- Debian bits: FOSDEM draft fixes
- Planet Debian derivatives: add Netrunner & update BlankOn logo
- Debian buildd website: plain text logs (1 2 3)
- Debian uscan multi-redirector: add github package.json/cmake checker & remove gitorious
- Debian packages website: update manual pages patch to use https, merge patches (1 2)
- Debian website: fix security Makefiles for DLAs (for 2017, 2016, 2015, 2014), derivatives (wording/formatting fixes 1, 2), build by default), link fixes (for CD brokenness, stability, gitweb to cgit)
- Debian wiki pages: AlejandroRios, ChrootOnAndroid, CopyrightReviewTools, CrossCompiling, CrossGrading, DebianBootstrap, DebianDay, (2017), DebianEvents (Asia, oc) DebianScience, DebianWiki/Browsing, dedup.debian.net, Derivatives/Census (AstraLinux, BlankOn, Netrunner, SalentOS, SerbianLinux, Symbiosis, Template), EmbeddedCodeCopies, ExternalEntities, Fonts, fr/GraphicsCard, fr/Intel HD Graphics, FrontPage, gobby.debian.org, HP/ProLiant, Ideas, InstallingDebianOn, TurrisOmnia (1 2), InterWikiMap, josch/notes, LVM, Merchandise/BoFDebConf10, Mobile (1 2), NewArchiveSections, PaulWise/InterestingSoftware, PortTemplate, ppc64el, PressCoverage2017, PressCoverage, redmine, ReproducibleBuilds/History, Services/Debian Packages, SponsorChecklist, Sprints (2017/DebianMed2017 (1 2)), SystemBuildTools, systemd, Teams/Dpkg/FAQ, ThisWeekInDebian, WhyDebian, Year
- File Formats wiki pages: ACE, File_identification_software, File_command
- Debian package uploads: autorevision 1.20-1, check-all-the-things 2017.01.15 & openchange 1:2.2-6+deb8u1
- Security migration for check-all-the-things
- GPL violations due to embedded copies of Liberation Fonts in emscripten, freedink, gargoyle-free, gcstar, manaplus, minetest, pcs & zygrib
- Outdated embedded unicode-data copies in boost1.62 & boost1.63
- Crash in liferea
- Regression in coreutils date
- Missing conffile removal in dnssec-trigger & xtightvncviewer
- gitorious redirector usage in fgrun & spectacle
- Annoying issues in hexchat autorejoin, totem & a podcast & gdb messages
- Cosmetic issues in parcimonie menu, gitk colours & aptitude debtags
- Features in duck, apt-file, needrestart, packages.debian.org & aptitude
- An already implemented feature in needrestart
- Spam: report spam in 6 Debian bugs, 132 Debian mails and one LWN comment
- Patches: point out extraneous whitespace changes in a codespell PR
- Debian packages: reviewed and sponsored fsprotect 1.0.7
- Debian wiki: RecentChanges for the month, feedback on InstallDebianWithoutLiveCD article
- Debian screenshots:
- Approved screenshots of ngraph-gtk lightdm-gtk-greeter-settings kalgebra qtile patat toilet sagemath (2) w3c-markup-validator pentobi pentobi-kde-thumbnailer zygrib (2) sauerbraten kmail aiscm (5) codeblocks lxqt libreoffice-help-es inkscape synaptic thunar gimp midori filezilla libreoffice pluma qupzilla gnome-2048 simplescreenrecorder gerbv keepassx gcstar confclerk onionshare blockout2 subuser dosbox zsnes dosemu lmarbles klickety geda-gattrib katomic kiki-the-nano-bot freedm frogatto (2)
- Approved removal of screenshots: seaview screenshot contained advertising, mupen64plus/mupen64plus-audio-all were weird screenshots with multiple OS windows overlaid & mkgmap was a screenshot of the OSM wiki instead of the software
- Rejected screenshots: gccgo looked like a Thai mobile phone screenshot, python-stem was a screenshot for OPENDIME USB, seaview was downloaded from elsewhere and not an authentic screenshot & fbreader contained non-free ebook contents
- Debian: reboot 1 non-responsive VM, redirect 2 users to support channels, redirect 1 contributor to xkb upstream, redirect 1 potential contributor, redirect 1 bug reporter to mirror team, ping 7 folks about restarting processes with upgraded libs, manually restart the sectracker process due to upgraded libs, restart the package tracker process due to upgraded libs, investigate failures connecting to the XMPP service, investigate /dev/shm issue on abel.d.o, clean up after rename of the fedmsg group.
- Debian mentors: lintian/security updates & reboot
- Debian packages: deploy 2 contributions to the live server
- Debian wiki: unblacklist 1 IP address, whitelist 10 email addresses, disable 18 accounts with bouncing email, update email for 2 accounts with bouncing email, reported 1 Debian member as MIA, redirect 1 user to support channels, add 4 domains to the whitelist.
- Reproducible builds: rescheduled Debian pyxplot:amd64/unstable for themill.
- Openmoko: security updates & reboots.
- Send the annual activity ping mail.
- Happy new year messages on IRC, forward to the list.
- Note that SerbianLinux does not provide source packages.
- Expand URL shortener on SerbianLinux page.
- Invite PelicanHPC, Netrunner, DietPi, Hamara Linux (on IRC), BitKey to the census.
- Add research publications link to the census template
- Fix Symbiosis sources.list
- Enquired about SalentOS downtime
- Fixed and removed some 404 BlankOn links (blog, English homepage)
- Fixed changes to AstraLinux sources.list
- Welcome Netrunner to the census
The openchange 1:2.2-6+deb8u1 upload was sponsored by my employer. All other work was done on a volunteer basis.
check-all-the-things (aka cats, Meow!) is a tool that aims to make it easy to know which tools can be used to check a directory tree and to make it easy to run those tools on the directory tree. The tree could either be a source tree or a build tree or both. It aims to check as much of the tree as possible so the output can be very verbose and have many false positives. It is not for the busy, lazy or noise intolerant. It runs the checks by matching file names and MIME types against those registered for a list of checks. Each check has a set of dependencies, flags, filename wildcards, MIME type wildcards, comments and prerequisite commands. By default it:
- doesn't check file MIME types as this is slower
- shows which command is currently running
- limits check output to 10 lines
- hides checks that output nothing
- kills checks when interrupted with Ctrl+C
- exits when interrupted twice in quick succession
- outputs various remarks at the end
It runs all checks for the current distro/release except:
- dangerous ones that execute code in the current dir
- ones that modify files in the current dir
- ones that access the network (if there is no default route)
- ones that need work to be usable
- ones that need a human to run them
There are command-line options to customise the behaviour and automatic bash shell completion via argcomplete. There are 177 checks (including TODO ones) in 73 different categories. There are an additional 224 not-well-specified TODO items for new checks in comments. It is exceptionally easy to add new checks once one knows how to use the tool one wants to add.
At this point in time it is probably not a good idea to run it in an untrusted directory tree for several reasons:
- there could be unknown vulnerabilities in the tools used
- there could be unknown interactions with interpreters (known ones worked around)
- there could be some commands doing unknown code execution
- there could be other weirdness in some layers
- there is no automatic sandboxing at all yet
The project initially started as really hacky wiki page full of commands to run. At some point I figured it was time to make this actually be maintainable and started on a project to do that. At around the same time Jakub Wilk was working on maquack to replace the wiki page. Somehow I found out about it and talked to him about it. It was vastly less hacky than my version so I ended up taking it over and continuing it under the check-all-the-things name. I polished it for the last two years and finally released it into Debian unstable during DebCamp16.
Today was day one of the DebConf16 Open Festival and I attended the open hardware panel, part of the talk about Code For South Africa, shirish's experiences and the DebConf new folks session.
The open hardware panel was a wide ranging discussion between bdale, Andy and indiebio. bdate talked about the experiences he has had with his rocketry hardware. bdale said "Make concious decisions about what you are buying", referencing a case where he investigated, found a GPL violation and didn't buy. Various people care about openness of different layers of the hardware. Off-the-shelf products are very strongly integrated, which is great for makers but means that people who care about lower layers like CPU micro-architecture aren't able to participate. Andy said "We are just beginning to come out of the shareware stage [of open hardware]". bdale mentioned the companies who do hardware production as a service from design files. Later in the pub some folks mentioned j-core, an open re-implementation of SuperH processors.
I missed most of the code4sa talk unfortunately, but it was about government services and open data.
shirish covered his journey through life to Debian. His youth, how satellite TV and knowledge of the outside world came to India around the time of the Iraq war. His experience accessing the Internet for the first time, uncensored vs the usual censorship in India's media. His experiences of Windows 95 viruses and crashes. He learned of PCTwist Linux through a magazine cover. His initial install was not a success but eventually managed to break through and install a desktop, but experienced network and other issues. Eventually he encountered Ubuntu and began contributing bug reports. His experiences there led him to Debian. He began blogging about Debian. In the last few years he and others have been going around the country doing mini-DebConfs at institutes around India. The first question was predictably about having a DebConf in India and how shirish might like to get more involved. DebConf in India sounds like a possibility some day and shirish was thinking about getting involved in publicity, marketting and the Debian installer.
The DebConf new folks session was a great intro to DebConf for folks new to the community. There were some quite excellent touches added to this year's version of the event by indiebio and Rhonda.
I also got some things done. Usual spam reporting. Reviewed wiki RecentChanges. Talked to the chromium-bsu/MacPorts maintainer about AX_CHECK_GL brokenness. Filed Debian wishlist bug #829292 asking to update autoconf-archive. Redirected a Hurd porterbox request to the exodar admin and quickly found out I was wrong to do that, rectified. Then we found out the LDAP sync to exodar was broken. Replied to someone who intends to sell Debian pre-installs. Thanked BunsenLabs folks for joining the derivatives list. Applied reproducible builds patch for cats from Chris Lamb. Heard about awesome new terminal-mode screensaver. Moo! Prepared a blog post about check-all-the-things.
Apply wget security update to mentors.debian.net. Poke the DebConf video team about archiving the one Debian & stuff podcast episode. Discuss exclusion, privilege & DebConf. Usual spam reporting. Review wiki RecentChanges. Fix some typos from RecentChanges. File Debian wishlist bug #829177 against bugs.debian.org. Mention the recent post about breaking Android full-disk encryption on the exploits Debian wiki page. Answer questions about recommended build configuration for chromium-bsu from the maintainer of it in FreeBSD. Mention that HTML SRI could help secure initial Debian downloads. File Debian bug #829199 against file and add workaround in derivatives census. Report broken boss-gnome source package to BOSSLinux folks on IRC. Delete and re-download Parsix apt folder to stop hash sum mismatches. File Debian minor/wishlist bugs #829209/#829211/#829212 against cypher-lint. Add a porterbox guest account for one of the RTC GSoC students. Extend the expiry of another guest account. Direct query about the excuses HTML to the release team. File Debian bug #829241 against fonts-play. Discuss accessibility, life, the universe and rakia.
Usual spam reporting. Review wiki RecentChanges. Provide feedback for the staging site of the new codebase for screenshots.d.n. Redirect bugs-search.d.o complaint to the BTS maintainers. Point out pastebinit already supports fpaste.org. Polish chromium-bsu, make a new upstream release to fix Debian RC bug #822711. Upload screenshot of chromium-bsu menu. Notify chromium-bsu package maintainers in other distros (hug whohas). Avoid checking WAV files for spelling errors in cats. Make the old PTS download i18n data over https. File #829092 to get the per-package i18n data to use https for links. Point someone on mentors to the Debian PHP group wiki page.
Redirect one person contacting the Debian sysadmin and web teams to Debian user support. Review wiki RecentChanges. Usual spam reporting. Check and fix a derivatives census issue. Suggest sending the titanpad maintainence issue to a wider audience. Update check-all-the-things and copyright review tools wiki page for licensecheck/devscripts split. Ask if debian-debug could be added to mirror.dc16.debconf.org. Discuss more about the devscripts/licensecheck split. Yesterday I grrred at Debian perl bug #588017 that causes vulnerabilities in check-all-the-things, tried to figure out the scope of the issue and workaround all of the issues I could find. (Perls are shiny and Check All The thingS can be abbreviated as cats) Today I confirmed with the reporter (Jakub Wilk) that the patch mitigates this. Release check-all-the-things to Debian unstable (finally!!). Discuss with the borg about syncing cats to Ubuntu. Notice autoconf/automake being installed as indirect cats build-deps (via debhelper/dh-autoreconf) and poke relevant folks about this. Answer question about alioth vs debian.org LDAP.
Beat head against shiny cats (no animals were harmed). Discuss the spice of sillyness. Forward a wiki bounce to the person. Mention my gobby git mail cron job. Start adopting the adequate package. Discuss cats vs licensecheck with Jonas. Usual spam reporting. Review wiki RecentChanges. Whitelisted one user in the wiki anti-spam system. Finding myself longing for a web technology. Shudder and look at the twinklies.
Usual spam reporting.
Review wiki RecentChanges.
Rain glorious rain! Err...
Update a couple of links on the debtags team page.
Report Debian bug #828718 against tracker.debian.org.
Update links to debtags on DDPO and the old PTS.
Report minor Debian bug #828722 against debtags.debian.org.
Update the debtags for check-all-the-things.
More code and check fixes for check-all-the-things.
Gravitate towards the fireplace and beat face against annoying access point,
wpa_cli blacklist &
wpa_cli bssid from owner of devilish laptop.
Ask stakeholders for feedback/commits before the impending
release of check-all-the-things to Debian unstable.
Meet developers of the One^WGNU Ring, discuss C++ library foo.
Contribute some links to an open hardware thread.
Point out the location of the Debian QA SVN repository.
Clear skies at night, twinkling delight.
Review, approve chromium, gnome-terminal and radeontop screenshots.
Disgusted to see the level of creativity GPL violators have.
Words of encouragement on #debian-mentors.
Pleased to see Tails reproducible builds funding by Mozilla.
Point out build dates in versions leads to non-reproducible builds.
apt-file search to someone looking for a binary of kill.
Review wiki RecentChanges.
Report important Debian bug #828215 against unattended-upgrades.
Clean up some code in check-all-the-things
and work on fixing Debian bug #826089.
Wind glorious wind! Much clearer day, nice view of the mountain.
More check-all-the-things code clean up and
finish up fixing Debian bug #826089.
Twinkling city lights and more wind.
Final code polish during dinner/discussion.
Wandering in the wind amongst the twinklies.
Whitelisted one user in the wiki anti-spam system.
Usual spam reporting.