#1141958 ITP: nmbs -- confidentiality label binding tools

#1141958#5
Date:
2026-07-12 19:40:02 UTC
From:
To:
* Package name    : nmbs
  Version         : 1.0.0
  Upstream Contact: Luke Ian Turner <turnertech@outlook.de>
* URL             : https://github.com/liturner/nmbs
* License         : MIT
  Programming Lang: C, C++
  Description     : confidentiality label binding tools

nmbs is a native Debian project adding support for
binding and reading confidentiality labels (e.g. NATO
UNCLASSIFIED) to files in the system. In particular, it
partially implements the NATO ADatP-4774 and ADatP-4778
standards to embed e.g. Xmp metadata, or create .bdo
sidecar files. The initial version provides:

* Basic CLI tools "nmbs-set" and "nmbs-verify"
* A Nautilus extension, displaying tags in a column or
  properties page
* A shared library, and paired -dev package containing
  the bulk of the logic

It is a new project. The first package being uploaded
will be 1.0.0~1 (pre-release). I intend to go through
a few sanity cycles on mentors before attempting a
true 1.0.0.

The tool will be used in an active project at my place
of work. The lifecylcle of the project is over ten
years. Additionally, this tool will likely be used at
my place of work as part of our standard system images.

These standards are relatively new. Commercial support
is still minimal and specialised. Till now I have not
been able to locate any other viable open source project
implementing such general support. There are also no
reference implementations yet.

The package will be maintained by myself. I have access
to a developer network at my place of work too.

The Copyright is entirely mine. This is a clean project
implementing the standard. I am cautious not to let any
non-free code or dependencies in.

I would like to request some sponsor support. This is my
first attempt at uploading to Debian. I will do my best
to 100% match the desired norms of Debian. I will
probably poke the GNOME team as I hope to focus on using
the Nautilus extension as my primary GUI.

#1141958#10
Date:
2026-07-12 19:50:22 UTC
From:
To:
I don't think this makes sense as this sounds like a general-purpose
library/application.

I also see you are making a 3.0 (native) package. This is also wrong.

#1141958#15
Date:
2026-07-13 15:40:54 UTC
From:
To:
Hi,

Thanks for the response!

I chose Native consciously as nmbs is written explicitly and exclusively only for Debian. In particular, it fits statements in the docs e.g. here: https://www.debian.org/doc/debian-policy/ch-source.html#s-source-packages

The package/project implements interoperable standards. If somebody wants this support on another system (e.g. Windows) then they can (and should) write it using the tools and libraries best supported on that system (e.g. C# .NET with their XML libraries). ADatP-4774 and 4778 are relatively small standards. Supporting cross platform is in this case (in my opinion) more effort and less beneficial.

If you still feel that native is the incorrect format, could you please help me understand why?

Kind Regards,
Luke

#1141958#20
Date:
2026-08-05 04:59:42 UTC
From:
To:
Package has been corrected and is now quilt. Apologies for the
misunderstanding.

Additionally, the project is now on salsa with a fully passing CI/CD:

https://salsa.debian.org/turnertech/nmbs