Currently golang-github-smallstep-cli only provides the source code
(golang-github-smallstep-cli-dev package) for use when building other
packages.

But the upstream smallstep-cli code builds a binary executable (either
bin/step or bin/step-cli). Perhaps this is new in more recent upstream
releases, the toplevel Makefile is now quite different.

This executable has started to be required for two-factor
authentication enabling access of some HPC computational facilities,
so it's important for archive integrity to have it build for Debian
rather than grabbing prebuilt executables such as those provided at
https://github.com/smallstep/cli/releases/tag/v0.24.4

Can src:golang-github-smallstep-cli please now start providing the cli
binary executable?

I think the binary package should be called smallstep-cli (or maybe
step-cli) but you might have your own preferred naming policy.

Hi Drew,

Am 9. Juni 2023 14:00:47 MESZ schrieb Drew Parsons <dparsons@debian.org>:

I originally intended to package the binary executable, but eventually
gave up.

The problem is that smallstep-cli (and also its counterpart
smallstep-ca) require versions of golang-google-genproto-dev and
golang-google-grpc-dev that are stuck in experimental for a quite some
while now[1]. I had to strip out major parts in order to get the
smallstep libraries into bookworm at all.

Instead of waiting for these to enter unstable/testing, the alternative
would be to vendor the needed libraries within the smallstep packages,
however this does not seem to be a sustainable solution to me and I am
hesitant to put the effort into that. Once this issue is resolved, I
would definitely like to finally package smallstep-cli :)

cheers,
Peymaneh


[1]: see https://lists.debian.org/debian-go/2022/11/msg00061.html for
context

On 2023-06-12 11:25, Peymaneh wrote:
...

Thanks for the update, Peymaneh. Hopefully with the new stable release
now done, things can start rolling out of experimental again.

Drew