* Package : chezmoi Version : 2.17.1 Upstream author : Tom Payne <twpayne@gmail.com> * URL : https://chezmoi.io/ * License : MIT Programming Lang: Go Description : cross-platform dotfile manager chezmoi is the most popular dotfile manager [1] with over 6.8K stars on GitHub and over 100 contributors. It has particularly strong support for managing machine-to-machine differences (with templates and alternative files) and security (via password manager integration or age and GPG encryption). chezmoi is stable, popular, well-tested, with an active maintainer. It is already available in many other Linux distributions and other packaging systems for other operating systems [2]. Guidelines for packagers are at [3]. It would be great to have chezmoi in Debian. Please tell me how I can help make this happen. [1] https://dotfiles.github.io/utilities/ [2] https://www.chezmoi.io/install/#one-line-package-install [3] https://www.chezmoi.io/developer/packaging/ Source code: https://github.com/twpayne/chezmoi Releases: https://github.com/twpayne/chezmoi/releases/latest
Control: forwarded -1 https://github.com/twpayne/chezmoi/issues/2130 Control: retitle -1 ITP: chezmoi -- cross-platform dotfile manager I use chezmoi on several of my systems, and packaging it has been on my todo list. I can package it over the next few weeks. Best, Ryan
As a heads up, getting chezmoi into the archives requires packaging a bunch of dependencies: * github.com/bradenhilton/mozillainstallhash * github.com/twpayne/go-xdg * github.com/google/gops * howett.net/plist * github.com/zalando/go-keyring * github.com/twpayne/go-shell * github.com/muesli/combinator * github.com/twpayne/go-pinentry * github.com/twpayne/go-vfs I've started on go-xdg and go-vfs, and will pluck away at the rest as I have time. —RAK
For those following along at home, I have all dependencies except packaged. The blocker there is #1015213 [0], but I'll just manually create the source package instead of relying on dh-make-golang. If someone would like to help with uploading all of the packaged dependencies (and double-checking that the updated dependencies don't break any of their reverse-dependencies), I'd appreciate the second set of eyes. Best wishes, Ryan [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1015213
Hi Ryan, chucked chezmoi into dh-make-golang today and it seems like there are stil some packages missing :( 2025/04/12 23:12:21 Build-Dependency "github.com/tailscale/hujson" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control 2025/04/12 23:12:21 Build-Dependency "github.com/zricethezav/gitleaks" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control 2025/04/12 23:12:21 Build-Dependency "github.com/tobischo/gokeepasslib" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control 2025/04/12 23:12:21 Build-Dependency "github.com/Shopify/ejson" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control 2025/04/12 23:12:21 Build-Dependency "github.com/twpayne/go-expect" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control 2025/04/12 23:12:21 Build-Dependency "github.com/gopasspw/gopass" is not yet available in Debian, or has not yet been converted to use XS-Go-Import-Path in debian/control In addition, golang-github-azure-azure-sdk-for-go-sdk-dev is missing. best, werdahias
Hi Ryan, are you still interested/working on getting chezmoi into Debian? If not, I'd be happy to take over the ITP. Regards, Daniel
Hi Daniel, Le Fri, Feb 20, 2026 at 01:42:42PM +0100, Daniel Baumann a écrit : I am interested in seeing chezmoi get into Debian, but I should have retitled this to RFP long ago. Please feel free to take over this ITP. I got most of the way through packaging chezmoi's zillion transitive dependencies, but got stuck on a version clash with some transitive dependency already in Debian (probably long since resolved), and I gave up when I saw that I would have to package a dependency that was only a half-dozen lines of code ;) I'm sorry to say that I've neglected to keep chezmoi's Go dependencies up to date, and I had been meaning to request their removal. They are all team maintained, and you are welcome to add yourself to the Uploaders field (and to remove me). If you end up not needing some of them, could you please let me know and I will request that they be removed from Debian. golang-github-bradenhilton-cityhash golang-github-bradenhilton-mozillainstallhash golang-github-keybase-go-ps golang-github-muesli-combinator golang-github-twpayne-go-pinentry golang-github-twpayne-go-shell golang-github-twpayne-go-vfs golang-github-twpayne-go-xdg golang-github-zalando-go-keyring In case it's useful to you, there is some initial packaging work on salsa: https://salsa.debian.org/go-team/packages/chezmoi Best wishes, Ryan
owner 1012721 Daniel Baumann <daniel@debian.org> thanks Hi Ryan, sure, no worries. I'll get to work and keep the bug and you updated. Regards, Daniel
Hi, I got involved into this as I was asked to review Bug#1138679 and MRs at https://salsa.debian.org/go-team/packages/golang-github-twpayne-go-expect The plan above about what to package for Chezmoi is based on an old packaging attempt from 2022 at https://salsa.debian.org/go-team/packages/chezmoi I suggest discarding that 2022 attempt and starting fresh from the latest upstream Chezmoi version 2.70.5 with dh-make-golang, and after that review the dependencies and create a new plan for handling them. Unmaintained dependencies like go-expect should perhaps be replaced by something that is maintained, e.g. https://github.com/twpayne/go-expect -> https://github.com/pete-woods/go-expect i don't think it makes sense to just try to finish the 2022 attempt as such without assessing the overall situation first.
why do you think so? https://forgejo.debian.net/chezmoi/chezmoi however, I'll update it to the current version later today (2.70.3 to 2.70.5) and check again what is missing in Debian in order to upload chezmoi. Regards, Daniel
The Debian NEW review of chezmoi 2.70.5-1 has been completed. Decision: ACCEPTED Reviewer: Nicolas Mora Review comment: The files ./assets/scripts/install.sh and ./assets/scripts/install-local.sh contain the following statement: # chezmoi install script # contains code from and inspired by # https://github.com/client9/shlib # https://github.com/goreleaser/godownloader Please mention the authors of the github repos in a future package: Nick Galbreath, Carlos Alexandro Becker Full review details: https://dfsg-new-queue.debian.org/reviews/chezmoi
We believe that the bug you reported is fixed in the latest version of chezmoi, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1012721@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Daniel Baumann <daniel@debian.org> (supplier of updated chezmoi package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) Format: 1.8 Date: Sun, 28 Jun 2026 14:37:34 +0200 Source: chezmoi Binary: chezmoi chezmoi-dbgsym Architecture: source amd64 Version: 2.70.5-1 Distribution: unstable Urgency: medium Maintainer: Daniel Baumann <daniel@debian.org> Changed-By: Daniel Baumann <daniel@debian.org> Description: chezmoi - Managing dotfiles across multiple machines Closes: 1012721 Changes: chezmoi (2.70.5-1) unstable; urgency=medium . * Initial upload to sid (Closes: #1012721). Checksums-Sha1: b7c6e82b9762ecea7d91032530012f63bf061bb7 3348 chezmoi_2.70.5-1.dsc c72ac98a76d0aa5016b21079787bcd7b15820cb5 2300368 chezmoi_2.70.5.orig.tar.xz 3f70f7eed8ef524dacdc5cedc90c37c44515d069 3164 chezmoi_2.70.5-1.debian.tar.xz 0ddae5ac3a9509c363bd1ae11843ab1297c64ac7 12847828 chezmoi-dbgsym_2.70.5-1_amd64.deb 64ae088e8cc30b358c9469db2ec60ed3f333cf8c 26313 chezmoi_2.70.5-1_amd64.buildinfo 52583f6de54c6146e6435da99b9a3ce866075e00 12486680 chezmoi_2.70.5-1_amd64.deb Checksums-Sha256: 378fcc2069511191900a76b0ca61c1196dd8fd22b655826a20034f1b1bf9cddb 3348 chezmoi_2.70.5-1.dsc 5914d2cf87c99b2697bbdbdc1db3f0e28c7e855e6882eef9228b6c93e9e5237c 2300368 chezmoi_2.70.5.orig.tar.xz f098ef3672f153a2d50db9fd4c832bc672ae90eb41e85a4e5590e196307e6d08 3164 chezmoi_2.70.5-1.debian.tar.xz 930472eafd2a0084550d015009512e7093dab82a1987fa3b33b0f08937b68655 12847828 chezmoi-dbgsym_2.70.5-1_amd64.deb 68600f2686403e7ddd071be7e1b4d457c5a099f135ef477842b9296b1beaf938 26313 chezmoi_2.70.5-1_amd64.buildinfo 96a8c84090295389ec9e938333495326f147ace25d0f4e31b889de8b967a35c2 12486680 chezmoi_2.70.5-1_amd64.deb Files: b01def0a1e8903ca266ca09247137f00 3348 vcs optional chezmoi_2.70.5-1.dsc 8cb3ee6ed7744fa5495fec4285e88510 2300368 vcs optional chezmoi_2.70.5.orig.tar.xz 38748974462274225ca37c98a466884d 3164 vcs optional chezmoi_2.70.5-1.debian.tar.xz 02d3e3f7088c5ba75675e255f77c7f14 12847828 debug optional chezmoi-dbgsym_2.70.5-1_amd64.deb 04a9af00d0f68d0230c7e0259d0ca94d 26313 vcs optional chezmoi_2.70.5-1_amd64.buildinfo 895e4d602c2b17198df1b4943214e714 12486680 vcs optional chezmoi_2.70.5-1_amd64.deb -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQQmmGg4gLaoSj0ERgL7tPDoCoAiLwUCakEWHQAKCRD7tPDoCoAi L4KMAP9bBWHfI3IoBE2tcwFKjlWA6trHNfaRoYn9HQ1DZhz6eQD9FwchC9eet3ea YyqugcQnVzdQK3SAg62GitlfNIQsxQ0= =8oqM -----END PGP SIGNATURE-----
Hi, thank you for your review. It's unclear to me to what extend the scripts have been 'inspired by'. If it's just the idea of it, it's not copyright relevant. If it's borroing or based on actual code, it is relevant. I'm asking upstream for clarification. Regards, Daniel
We believe that the bug you reported is fixed in the latest version of
chezmoi, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1141814@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Daniel Baumann <daniel@debian.org> (supplier of updated chezmoi package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 10 Jul 2026 21:23:39 +0200
Source: chezmoi
Architecture: source
Version: 2.71.0-3
Distribution: sid
Urgency: medium
Maintainer: Daniel Baumann <daniel@debian.org>
Changed-By: Daniel Baumann <daniel@debian.org>
Closes: 1141814
Changes:
chezmoi (2.71.0-3) sid; urgency=medium
.
* Cherry-picking upstream commit to clarify license of installer scripts
(Closes: #1141814).
Checksums-Sha1:
091b7ac3863d28cd36706c321c360bd69f7e47f9 3428 chezmoi_2.71.0-3.dsc
d37b19637431d958b2daf1085bdc7120f57d5a88 4020 chezmoi_2.71.0-3.debian.tar.xz
bacb8ae9112b3881ebb988b98c8ad4ecf9dc29bd 26814 chezmoi_2.71.0-3_amd64.buildinfo
Checksums-Sha256:
c89f7385a74cab4b0ff38b9742e8e65e378d61d119e88501c907159edc764cf3 3428 chezmoi_2.71.0-3.dsc
3d109dcefecb79ab33c0a77e8ec171b76eb2d29f9af61b32ea4b21098e69dc20 4020 chezmoi_2.71.0-3.debian.tar.xz
bcc68a179b8d9d20a32294391a4b67eaf8ecaafe07248807aa153593c37d3c04 26814 chezmoi_2.71.0-3_amd64.buildinfo
Files:
07c68efa9c7eac6dcbdc449085ee194d 3428 vcs optional chezmoi_2.71.0-3.dsc
c477f8e8fc10e002ad722fb72743905e 4020 vcs optional chezmoi_2.71.0-3.debian.tar.xz
90ebaa5adaceb290cdf327c9307831cf 26814 vcs optional chezmoi_2.71.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQQmmGg4gLaoSj0ERgL7tPDoCoAiLwUCalFHVgAKCRD7tPDoCoAi
L3IxAP9w/EKMcmK8fubadqd39I3yboMeRx15b4Lqe3ox3aOGEgD+KbmSO+I8CXRH
l8MvLtGQa4Qs5rdvPJdVBwHK/SpxOw8=
=KUhf
-----END PGP SIGNATURE-----