[pkg-go] Bug#806481: Bug#806481: Backport etcd to Stretch

[Potter, Tim]

On 5 Jun 2017, at 5:17 am, Christoph Berg <myon at debian.org> wrote:
> 
> Re: Matthew Dawson 2015-11-28 <1478545.P9uMUQs38u at cwmtaff>
>> On November 28, 2015 03:14:16 PM Dmitry Smirnov wrote:
>>> On Friday 27 November 2015 21:56:36 Paul Tagliamonte wrote:
>>>> Mind if I do it?
>>> 
>>> Not at all, if you have time... I have no objections. :)
>>> 
>>>> After it's in Jessie, it might be easier to keep up to date, too.
>>> 
>>> Unfortunately I can't promise that I will be of help with maintaining
>>> backport...
>> Hi Paul,
>> 
>> If I can help with this effort, let me know as I'm also interested in having 
>> etcd in Jessie.  I already started trying to get everything to compile against 
>> a stock Jessie, and was mostly successful.  To get everything working did 
>> require a newer golang (1.4 in my case).  I'm not currently a Debian project 
>> member, so I'm not sure how I can help.  Let me know either way.
> 
> It looks like etcd won't be part of stretch either - is anyone looking
> into backporting it?

There have been conversations with the security team about supporting Go
applications but they are not comfortable with it due to the compile-time 
nature of the packaging.  

If there is a CVE in package X you need to recompile and upload everything
that Build-Depends on X.  Maintainers will also need to recompile and upload
everything that B-D's on the B-Ds as it's not transitive.

There is a plan somewhere to move to creating shared libraries instead of
packaging source code in -dev debs and I may get around to doing this during
the Buster cycle.  It's only relatively recently that this feature was available in
Go and in Debian.


Tim.

> 
> Christoph
> _______________________________________________
> Pkg-go-maintainers mailing list
> Pkg-go-maintainers at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-go-maintainers