#490848 Please include changelog and copyright after security uploads

#490848#5
Date:
2008-07-14 20:16:15 UTC
From:
To:
http://packages.debian.org/lenny/vlc has at least two 404's:

http://packages.debian.org/changelogs/pool/main/v/vlc/vlc_0.8.6.e-2.3+lenny1/changelog
http://packages.debian.org/changelogs/pool/main/v/vlc/vlc_0.8.6.e-2.3+lenny1/vlc.copyright

At this moment the changelog and copyright links other packages such as "apache2" and "fetchmail" work nicely.

Best regards

#490848#12
Date:
2010-12-19 00:04:57 UTC
From:
To:
Hi,

yes this happens, if the package has had a securiy uploads. This might get
fixed in future.

Cheers,
Martin

#490848#41
Date:
2018-01-28 04:13:22 UTC
From:
To:
This problem is known since 2008:

https://bugs.debian.org/490848

#490848#46
Date:
2018-01-28 13:30:12 UTC
From:
To:
Oh... :-(

Thanks, Paul.

#490848#51
Date:
2018-07-06 13:40:31 UTC
From:
To:
stable_changelog, ERROR 404: Not Found.
http://metadata.ftp-master.debian.org/changelogs/main/g/golang-1.6/stable_changelog
http://metadata.ftp-master.debian.org/changelogs/main/g/golang-github-kardianos-osext/stable_changelog

stable_copyright, ERROR 403: Forbidden.
http://metadata.ftp-master.debian.org/changelogs/main/c/console-setup/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/g/git-annex/stable_copyright

stable_copyright, ERROR 404: Not Found.
http://metadata.ftp-master.debian.org/changelogs/main/b/base-files/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/d/debian-zh-faq/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/d/dpkg-sig/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/f/firmware-free/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/g/gap-gdat/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/g/golang-1.6/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/g/golang-github-kardianos-osext/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/i/intlfonts/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/l/latex-cjk-chinese-arphic/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/l/ldp-docbook-stylesheets/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/libp/libpthread-stubs/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/libx/libxcb/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/l/linux86/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/l/linux-atm/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/m/metacity-themes/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/m/mimefilter/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/m/multimail/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/n/nis/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/o/openjade/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/o/openoffice.org-en-au/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/o/opensp/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/p/pccts/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/p/pidgin/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/p/poppassd/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/p/psi-translations/stable_copyright
http://metadata.ftp-master.debian.org/changelogs/main/v/vim-scripts/stable_copyright

#490848#56
Date:
2021-08-30 07:03:09 UTC
From:
To:
Hello everyone,

Casually replying to a bug from 2008. Here's what I pieced together so far:

First of all security-master and ftp-master are two different servers. One
handles security uploads and the other one handles other uploads. For a
package's data to be synced to ftp-master, the package must first be approved.

The way everything is setup is by the way of mirroring, where ftp-master is
setup as a mirror of security-master in the case of metadata.

So what happens when approving a package?
We'll take this package as an example: https://packages.debian.org/stretch/vlc

A function named `_do_Approve()` is called from new_security_install.py that
does the following:

1. Syncs package data with the security mirror, where it eventually calls:
sudo -u archvsync runmirrors ${pusharg} // pusharg='-a security'

This syncs the security mirror and the package data winds up here:
http://security.debian.org/debian-security/pool/updates/main/v/vlc/
vlc_3.0.11-0+deb9u2.dsc

This works as intended and is ok and implies that the next step is
misconfigured.

2. Syncs package metadata with the metadata ftp-master mirror:

A script called `export.sh` is called that:
- creates the changelog data and exports it wherever the `changelog_url` path
is set in the postgres database

I couldn't find if the security suite has a `changelog_url` set so this might
be where it all comes down to. We'll keep this variable in mind for the next
step.

- Rsyncs the exported changelog data into a public directory:
// edited for brevity
rsync ... ${exportdir}/changelogs/. ${exportpublic}/changelogs

If `exportdir` does not match with the `changelog_url` variable above then
this also might prove to be the problem.

- Finally it notifies the mirror:
sudo -u archvsync runmirrors -a metasdo > ~dak/runmirrors-metadata.log 2>&1 &

If this step doesn't work, it implies that mirroring is misconfigured and might
be simply a case of missing ssh keys or configuration between ftp-master and
security-master.

If everything would run well, then the changelog should be present at:
https://metadata.ftp-master.debian.org/changelogs//main/v/vlc/
vlc_3.0.11-0+deb9u2_changelog


I don't have access to the servers or the database, so can anyone check the
above and let us know where the problem lies?

Thanks,
Floris.

#490848#61
Date:
2021-09-22 04:16:24 UTC
From:
To:
Hello,

Good morning,

We have gone through your samples from a partner and Here is our  Order
List. Please do bear in mind that we are very much in  need of this
order, quote your competitive prices.

Kindly send the Order confirmation.

Your early reply will be much appreciated.

Best Regards,

Maryanah Erwin.

PT FINDORA INTERNUSA

Jln Pahlawan 66 Kec. Arjawinangun

45162 CIREBON West-Java INDONESIA

tel : +62 231 357334

fax: +62 231 357260

email: marketing@findora.com