[Qa-jenkins-dev] Bug#889612: jenkins.debian.org: reproducible: maint_debian-qa packageset links to adopted packages

[Mattia Rizzolo]

Package: jenkins.debian.org
Severity: important
User: jenkins.debian.org at packages.debian.org
Usertags: reproducible
Control: submitter -1 Reiner Herrmann <reiner at reiner-h.de>
X-Debbugs-Cc: Reiner Herrmann <reiner at reiner-h.de>

https://tests.reproducible-builds.org/debian/unstable/amd64/pkg_set_maint_debian-qa.html
links some packages that have been adopted.

At this time it can be seen with src:crack and src:libopenobex.
The reason is that the Sources index file lists multiple version, one of
which has Maintainer:packages at qa.debian.org.  There are multiple reason
to have an old source version hanging on in the index, the most common
being that some architectures are not up to date (kbsd-amd64/kbsd-i386
being a very common one these days).  Also, Extra-Source-Only.

I suspect other maintainer-based pkgsets are affected by this bug.

The thing building up the packagesets list should:
 1) ignore Extra-Source-Only:yes sources
 2) only consider the oldest version available

Note that its important for both of these conditions to be met in this
order, as technically speaking a given suite could have:
|Package: foo
|Version: 1
|
|Package: foo
|Version: 2
|Extra-Source-Only: yes
(despite being a very rare situation).


Thanks to Reiner Herrmann for reporting this issue.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/qa-jenkins-dev/attachments/20180205/826da824/attachment.sig>