Debian Bug report logs - #871244
diffoscope: support keybox files with kbxutil

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: diffoscope: support keybox files with kbxutil

Date: Mon, 07 Aug 2017 02:03:13 -0400

Package: diffoscope
Version: 84
Severity: wishlist

keybox files are a file format specific to the GnuPG project.

The gnupg-utils package (currently only in experimental, but hopefully
soon to be moved to unstable) ships kbxutil, which should provide
sufficient textual diffs to get a better hint at the changes.

in debian stable, kbxutil used to be shipped in the gnupg package
itself, but depending on gnupg itself will pull in the whole suite
(including per-user daemons like gpg-agent and dirmngr, which aren't
necessary for the public data manipulation needed by diffoscope), so
gnupg-utils is probably a better way to go.

           --dkg

-- System Information:
Debian Release: buster/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'oldstable'), (200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages diffoscope depends on:
ii  python3                3.5.3-3
ii  python3-libarchive-c   2.1-3.1
ii  python3-magic          1:5.30-1
ii  python3-pkg-resources  36.0.1-1

Versions of packages diffoscope recommends:
ii  acl                              2.2.52-3+b1
pn  apktool                          <none>
pn  binutils-multiarch               <none>
ii  bzip2                            1.0.6-8.1
ii  caca-utils                       0.99.beta19-2+b2
pn  colord                           <none>
ii  default-jdk [java-sdk]           2:1.8-59
ii  default-jdk-headless             2:1.8-59
pn  device-tree-compiler             <none>
pn  docx2txt                         <none>
pn  enjarify                         <none>
ii  fontforge-extras                 0.3-4
pn  fp-utils                         <none>
ii  genisoimage                      9:1.1.11-3+b2
ii  gettext                          0.19.8.1-2+b1
ii  ghc                              8.0.1-17+b1
ii  ghostscript                      9.21~dfsg-1
pn  giflib-tools                     <none>
ii  gnupg                            2.1.21-4
ii  imagemagick                      8:6.9.7.4+dfsg-15
ii  imagemagick-6.q16 [imagemagick]  8:6.9.7.4+dfsg-15
pn  jsbeautifier                     <none>
pn  libarchive-tools                 <none>
pn  llvm                             <none>
ii  mono-utils                       4.6.2.7+dfsg-1
ii  odt2txt                          0.5-1+b2
ii  oggvideotools                    0.9.1-4
ii  openjdk-8-jdk [java-sdk]         8u141-b15-3
ii  openssh-client                   1:7.5p1-5
ii  pdftk                            2.02-4+b2
ii  pgpdump                          0.32-0.1
ii  poppler-utils                    0.48.0-2
pn  python3-argcomplete              <none>
ii  python3-debian                   0.1.30
pn  python3-guestfs                  <none>
ii  python3-progressbar              2.3-4
ii  python3-rpm                      4.12.0.2+dfsg1-2+b1
ii  python3-tlsh                     3.4.4+20151206-1+b3
ii  r-base-core                      3.3.3-1
ii  rpm2cpio                         4.12.0.2+dfsg1-2+b1
ii  sng                              1.1.0-1+b1
ii  sqlite3                          3.19.3-3
pn  squashfs-tools                   <none>
ii  tcpdump                          4.9.0-3
ii  unzip                            6.0-21
ii  vim-common                       2:8.0.0197-5
ii  xxd                              2:8.0.0197-5+b1
ii  xz-utils                         5.2.2-1.3

Versions of packages diffoscope suggests:
ii  libjs-jquery  3.1.1-2

-- no debconf information

Message #8 received at 871244@bugs.debian.org (full text, mbox, reply):

From: Mattia Rizzolo <mattia@debian.org>

To: Daniel Kahn Gillmor <dkg@fifthhorseman.net>, 871244@bugs.debian.org

Subject: Re: Bug#871244: diffoscope: support keybox files with kbxutil

Date: Mon, 7 Aug 2017 13:33:00 +0200

[Message part 1 (text/plain, inline)]

Hi dkg!

On Mon, Aug 07, 2017 at 02:03:13AM -0400, Daniel Kahn Gillmor wrote:
> The gnupg-utils package (currently only in experimental, but hopefully
> soon to be moved to unstable) ships kbxutil, which should provide
> sufficient textual diffs to get a better hint at the changes.
> 
> in debian stable, kbxutil used to be shipped in the gnupg package
> itself, but depending on gnupg itself will pull in the whole suite
> (including per-user daemons like gpg-agent and dirmngr, which aren't
> necessary for the public data manipulation needed by diffoscope), so
> gnupg-utils is probably a better way to go.

As you know we/I regularly backport diffoscope to Debian stable, so we
care about having those tools available there as well.
So, do you plan on making gnupg-utils available in stretch-backports
(with all the ongoing maintenance that such choice entails) or do you
think that having an alternate build-dependency+recommends is a way to
go here (possibly with a version restriction, e.g.
    gnupg-utils | gnupg (<< 2.1.21-4~)
)?

I'd like to avoid having a delta between buster and stretch-bpo, at
least not this early in the development cycle..


Also, do you plan on sending a patch for diffoscope? :D

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-

[signature.asc (application/pgp-signature, inline)]

Message #13 received at 871244@bugs.debian.org (full text, mbox, reply):

From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

To: Mattia Rizzolo <mattia@debian.org>, 871244@bugs.debian.org, 871244@bugs.debian.org

Subject: Re: Bug#871244: diffoscope: support keybox files with kbxutil

Date: Mon, 07 Aug 2017 10:28:20 -0400

On Mon 2017-08-07 13:33:00 +0200, Mattia Rizzolo wrote:
> As you know we/I regularly backport diffoscope to Debian stable, so we
> care about having those tools available there as well.
> So, do you plan on making gnupg-utils available in stretch-backports
> (with all the ongoing maintenance that such choice entails) or do you
> think that having an alternate build-dependency+recommends is a way to
> go here (possibly with a version restriction, e.g.
>     gnupg-utils | gnupg (<< 2.1.21-4~)
> )?

this looks dependency looks fine to me.  I'd rather not commit to
backporting gnupg to stretch-bpo just yet.

> I'd like to avoid having a delta between buster and stretch-bpo, at
> least not this early in the development cycle..

yep, that makes sense.

> Also, do you plan on sending a patch for diffoscope? :D

it's on my stack, but it won't be in the next week or two. if someone
beats me to it i won't be upset :)

      --dkg

Message #18 received at 871244@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: 871244@bugs.debian.org

Cc: Daniel Kahn Gillmor <dkg@fifthhorseman.net>

Subject: Re: diffoscope: support keybox files with kbxutil

Date: Sat, 15 Dec 2018 16:02:12 +0100

forwarded 871244 https://salsa.debian.org/reproducible-builds/diffoscope/issues/23
thanks

I've forwarded this upstream here:

  https://salsa.debian.org/reproducible-builds/diffoscope/issues/23


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #25 received at 871244@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: 871244@bugs.debian.org

Cc: "Daniel Kahn Gillmor" <dkg@fifthhorseman.net>

Subject: Re: diffoscope: support keybox files with kbxutil

Date: Sun, 28 Apr 2019 12:13:15 -0400

tags 871244 + pending
thanks

This has been implemented in Git, pending upload:

  https://salsa.debian.org/reproducible-builds/diffoscope/commit/aa0b2654fecba1c2a15c269478e807394ffb93a6

  debian/control                     |   1 +
  debian/tests/control               |   2 +-
  diffoscope/comparators/__init__.py |   1 +
  diffoscope/comparators/kbx.py      |  50 +++++++++++++++++++++++++++++++++
  diffoscope/external_tools.py       |   1 +
  tests/comparators/test_kbx.py      |  56 +++++++++++++++++++++++++++++++++++++
  tests/data/kbx_expected_diff       |  31 ++++++++++++++++++++
  tests/data/test1.kbx               | Bin 0 -> 84420 bytes
  tests/data/test2.kbx               | Bin 0 -> 84420 bytes
  9 files changed, 141 insertions(+), 1 deletion(-)


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #30 received at 871244-submitter@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: 871244-submitter@bugs.debian.org

Subject: Bug #871244 in diffoscope marked as pending

Date: Sun, 28 Apr 2019 16:12:49 +0000

Control: tag -1 pending

Hello,

Bug #871244 in diffoscope reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/reproducible-builds/diffoscope/commit/aa0b2654fecba1c2a15c269478e807394ffb93a6

------------------------------------------------------------------------
Add support for GnuPG "keybox" files. Thanks to Daniel Kahn Gillmor for the suggestion. (Closes: #871244, reproducible-builds/diffoscope#23)
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/871244

Message #35 received at 871244-close@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: 871244-close@bugs.debian.org

Subject: Bug#871244: fixed in diffoscope 114

Date: Sun, 28 Apr 2019 16:33:46 +0000

Source: diffoscope
Source-Version: 114

We believe that the bug you reported is fixed in the latest version of
diffoscope, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 871244@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated diffoscope package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 28 Apr 2019 17:21:46 +0100
Source: diffoscope
Binary: diffoscope
Built-For-Profiles: nocheck
Architecture: source all
Version: 114
Distribution: experimental
Urgency: medium
Maintainer: Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
 diffoscope - in-depth comparison of files, archives, and directories
Closes: 871244 874582 888237 905885
Changes:
 diffoscope (114) experimental; urgency=medium
 .
   [ Chris Lamb ]
   * Add support for GnuPG "keybox" files. Thanks to Daniel Kahn Gillmor for the
     suggestion. (Closes: #871244, reproducible-builds/diffoscope#23)
   * Always warn if tlsh module is not available (not just if a specific
     fuzziness threshold is specified) to match the epilog of the --help output.
     This prevents missing support for file rename detection.
     (Closes: #888237, reproducible-builds/diffoscope#29)
   * Treat missing tools on Debian autopkgtests as individual test failures by
     checking whether a new DIFFOSCOPE_TESTS_FAIL_ON_MISSING_TOOLS environment
     variable is exported. (Closes: #905885, reproducible-builds/diffoscope#35)
   * Require that "-" is explicitly specified to read a single diff from
     standard input to avoid non-intuitive behaviour when diffoscope is called
     without any arguments. (Closes: reproducible-builds/diffoscope#54)
   * Make --use-dbgsym a ternary operator to make it easier to totally disable.
     Thanks to Mattia Rizzolo for the suggestion.
   * Consolidate on "e" as the aliased exception name.
 .
   [ Milena Boselli Rosa ]
   * Various fixes to the HTML markup to prevent validation warnings/errors:
     - Prevent empty values for the "name" attribute name on HTML anchor tags,
       and add an "id" to its parent "div" container.
     - Fix "table column x established by element 'col' has no cells beginning
       in it" warnings.
     - Fix "Text run is not in Unicode Normalization Form C".
     - Remove the "type" HTML attribute from <style> elements.
 .
   [ Vibhu ]
   * Fail more gracefully when running out of diskspace. (Closes: #874582)
Checksums-Sha1:
 5a6c110f42ed54a5911b3c20776159afcbcecdab 4533 diffoscope_114.dsc
 a65c8eed454ffb0f76e1114ae73c00f2ed3fdaa6 1117320 diffoscope_114.tar.xz
 3a63794ac70b7e080391f9f8d1fb6f24b2f79ed3 130320 diffoscope_114_all.deb
 e8b49ddf78da84c37a037864356a55c499f10c5d 6504 diffoscope_114_amd64.buildinfo
Checksums-Sha256:
 ce37b6b5eadd8d5ef2c08446ca7deb871797b374d49ed44d30b033aac6f5ee70 4533 diffoscope_114.dsc
 16c881bb0716de6c64ccae72bfecf2cd03661dbe9ab3e9d2f87aae7bd524437b 1117320 diffoscope_114.tar.xz
 07b4d27401e2838fdcfc7a6d2325eacc3e6626cf08207629bb09181ffe41289f 130320 diffoscope_114_all.deb
 3e2e8941377f2e39c04e36cdf25a699350c9fb1cbb396e62e0229b6f4630c964 6504 diffoscope_114_amd64.buildinfo
Files:
 d6eaeb7b3b42987396d562ca71347a8c 4533 devel optional diffoscope_114.dsc
 30e3014327b8fa46feca7e4129a159e7 1117320 devel optional diffoscope_114.tar.xz
 2efdb3d3cd1000bb8d37cf03984dfdea 130320 devel optional diffoscope_114_all.deb
 02aa356dbbf27fa33fe1cd88c59aa57d 6504 devel optional diffoscope_114_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlzF02YACgkQHpU+J9Qx
Hli4rBAAtPEbuXpm68kPLdoWI63CLVa1aazyxCyrpzE4/TiwvuEY8t7MYCWYIACB
a6wyf+BL72pQUW1Gju6R+UHST0uJRN9O5NopuXPejaiyQN+9dQThh/SSaKlAzeyI
3CMoIp3JJsUaAbqJoscvF+l5yLeq+4ogEXhz75ru+UbLwtybnzxPp5bnqHLXI89M
+Vx5eE1TvpoIkEsBP90TSRqGd5t5yFN+jY1tGxyt9e7x8S3p/66nC6ub3U4LDRAk
wUd96hStAv2l690kJFL8/2mkGm1pQvtNovLlYTI4ZDSEZi9uleuKHGlu99uXeZyo
6wMjjMyJbkymQIREssfxgRL3jYW7RCDSsuzU88s19NJKqo7RVMqzWnJCuX84xr2h
WJtbCz+bYH539XEADU4fScMD7iinRv44qd7HCFvsvQrnGQZ++++I5+u9UcVGdS3u
hn7ZaTKn7n77EqdGlLOLW1UgGKnFDVr4HMbsg/OiF419ye0lHUuA/avawKN32AnI
6dnXsNPi2avt7pDGFdLiYVOCyYnZZ6VYy4wPf/I2Dqkl04cYZylWPIc7+SlSA2F/
PgkJNRth0Z9GjNQEStAgWZ+8d/wbWWzgVv6MSz5t/ueJVPsktvnaftBXcxE5Jv9C
bLvzTWhrDlD2XuIZBepe3EA1j1zfKwWA5AK4OpSjvo6i1fZbgfw=
=V/if
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.