[Pkg-nginx-maintainers] Was: Bug#1000013

[Thomas Ward]

Ervin,

You conveniently left out my responses.


https://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/2022q3/001903.html

https://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/2022q3/001905.html

https://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/2022q3/001910.html


Then things got busy with all of us.

Because we're handling a dozen things at once, the first goal we were 
going to have with NGINX currently in Debian is to take all 'upstream' 
modules we already ship that're third party and, where doable, we will 
be converting those to dynamic modules in separate packages and 
repositories.  This way, we know everything works.

Once that's completed, we can look at 'adopting' other modules. However, 
there is *nothing stopping you* from going to Debian and upload your own 
source package with nginx mod security packaged as a dynamic module like 
the Lua module is and such. We'd like to be comaintaining the package in 
case we have to trigger rebuilds or do a patch to the packaging because 
something changed with nginx-dev or such, however that's not a hard 
requirement.

If you wish for us to 'adopt' this, then you need to have patience while 
we finish working on the nginx package as is before we adopt any extra 
modules into our purview for packaging.


Thomas


On 11/11/22 11:05, Ervin Hegedüs wrote:
> Hi all,
>
> On Fri, Nov 11, 2022 at 03:59:38PM +0100, Jan Mojzis wrote:
>> currently,
>> nginx and all modules distributed with it are compatible with PCRE2.
>>
>> The last problem is with the libnginx-mod-http-lua module,
>> which PCRE2 does not support.
>> Issue here:https://github.com/openresty/lua-nginx-module/issues/1984
> it's good to know, thanks for information.
>
> Few weeks ago I asked you (the team) about how can I add a new
> Nginx module to the upstream?
>
> Here is the e-mail:
> https://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/2022q3/001902.html
>
>
> The introduced package (libnginx-mod-http-security) does not depend on any kind
> of pcre packages, but the used "3rd-party" library depends: the
> libmodsecurity3 needs pcre or pcre2. The current version of this
> package still uses the old pcre library - do you think would it
> be good to switch to pcre2?
>
> Btw: is there any news about accepting of the mentioned package?
>
>
> Thanks,
>
>
> a.
>
>
> _______________________________________________
> Pkg-nginx-maintainers mailing list
> Pkg-nginx-maintainers at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-nginx-maintainers
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/attachments/20221115/d8a94029/attachment.htm>