From rynosp at talk2eo.me.uk  Tue Apr  9 10:50:29 2024
From: rynosp at talk2eo.me.uk (Ryan)
Date: Tue, 09 Apr 2024 11:50:29 +0100
Subject: [Trisquel-devel] Package questions
Message-ID: <23cdaf618d2645c514f076dbaa240d7be0c31708.camel@talk2eo.me.uk>

Hi all

After my recent success getting Aramo booting on both the cubieboard2
and banana pi, I hade been looking at migrating my server setups to it,
however I hit a snag when I looked at moving my email server. So I have
couple of questions regarding some packages in (or not it) the
repositories.

Firstly, the version of rspamd (2.7), which is trisquel downstream of
the version in Ubuntu 22.04, does this package get any kind of support
at any stage (i.e Debian, Ubuntu or Trisquel) in terms of security?,
given it is older and the developer of rspamd seems to be quite hot on
dropping older versions and strongly suggests against the use of the
versions used in debain-ubuntu. Seen here:
https://rspamd.com/packages_support_policy.html
Is this package still suitable for use in a production setting?


Secondly, The alternative to using rspamd would be a combo of
spamassassin, postgrey, opendkim and opendmarc, however ubuntu 22.04
lts didn't seem to provide opendmarc for that release (which is strange
as buster and bullseye did), so it doesn't exsist for us in trisquel,
despite it being available for others such as arm64 and x86, Is there
anything that can be done during this release to get the package for
armhf or will it be a case of waiting for Trisquel 12?. which should
have it as its in the 24.04lts 

Any help with this is as always much appreciated.

Many Thanks
Ryan

From simon at josefsson.org  Tue Apr  9 11:05:42 2024
From: simon at josefsson.org (Simon Josefsson)
Date: Tue, 09 Apr 2024 13:05:42 +0200
Subject: [Trisquel-devel] Package questions
In-Reply-To: <23cdaf618d2645c514f076dbaa240d7be0c31708.camel@talk2eo.me.uk>
 (Ryan's message of "Tue, 09 Apr 2024 11:50:29 +0100")
References: <23cdaf618d2645c514f076dbaa240d7be0c31708.camel@talk2eo.me.uk>
Message-ID: <875xwqre2h.fsf@kaka.sjd.se>

Ryan <rynosp at talk2eo.me.uk> writes:

> Hi all
>
> After my recent success getting Aramo booting on both the cubieboard2
> and banana pi, I hade been looking at migrating my server setups to it,
> however I hit a snag when I looked at moving my email server. So I have
> couple of questions regarding some packages in (or not it) the
> repositories.
>
> Firstly, the version of rspamd (2.7), which is trisquel downstream of
> the version in Ubuntu 22.04, does this package get any kind of support
> at any stage (i.e Debian, Ubuntu or Trisquel) in terms of security?,
> given it is older and the developer of rspamd seems to be quite hot on
> dropping older versions and strongly suggests against the use of the
> versions used in debain-ubuntu. Seen here:
> https://rspamd.com/packages_support_policy.html
> Is this package still suitable for use in a production setting?

FWIW, rspamd 2.7 is the same version as in Debian oldstable (bullseye),
which I believe is still covered by security support from both Debian
and Ubuntu.  I have been using it for several years both on Debian
bullseye and on aramo on my now primary Trisquel-based mail server.
Upstream doesn't seem to care much about long-term support, and modern
versions seems to have anti-features so I am avoiding upstream packages:
https://rspamd.com/doc/usage_policy.html

> Secondly, The alternative to using rspamd would be a combo of
> spamassassin, postgrey, opendkim and opendmarc, however ubuntu 22.04
> lts didn't seem to provide opendmarc for that release (which is strange
> as buster and bullseye did), so it doesn't exsist for us in trisquel,
> despite it being available for others such as arm64 and x86, Is there
> anything that can be done during this release to get the package for
> armhf or will it be a case of waiting for Trisquel 12?. which should
> have it as its in the 24.04lts 

Opendmarc is on Ubuntu 22.04 and Aramo:
https://packages.trisquel.org/aramo/opendmarc

I'm using spamassassin (as well as rspamd) and DKIM via Exim, what is it
that you want from opendmarc?  I thought it was mostly for reporting
features.  The anti-spam stuff via DMARC should be part of
rspamd/spamassassin already, I would hope.

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: not available
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240409/870cf2b4/attachment.sig>

From rynosp at talk2eo.me.uk  Tue Apr  9 14:20:55 2024
From: rynosp at talk2eo.me.uk (Ryan)
Date: Tue, 09 Apr 2024 15:20:55 +0100
Subject: [Trisquel-devel] Package questions
In-Reply-To: <875xwqre2h.fsf@kaka.sjd.se>
References: <23cdaf618d2645c514f076dbaa240d7be0c31708.camel@talk2eo.me.uk>
 <875xwqre2h.fsf@kaka.sjd.se>
Message-ID: <9409505eba3c84502fcc94207391502886ea1ba9.camel@talk2eo.me.uk>


Hi Simon

(I forgot to reply to list, may have replied to you directly by
mistake, sorry)

Thanks for your repsonse, I did wonder it probably would be covered by
something in terms of debian and ubuntu, even if not offically from the
dev.

I think that opendmarc is missing for armhf in aramo, as it doesn't
show on when, running apt install opendmarc or on the package search 
https://packages.trisquel.org/aramo/opendmarc

This is the same on the ubuntu package search for 22.04.

I only require it for compliance checking, I had this on my pre-rspamd
setup, so I was just trying to get it setup to my previous setup a we
while back. I think Spamassasin after version 4.x supports dmarc
checking but the 3.4.6 doesn't.


Many Thanks
Ryan













On Tue, 2024-04-09 at 13:05 +0200, Simon Josefsson wrote:
> Ryan <rynosp at talk2eo.me.uk> writes:
> 
> > Hi all
> > 
> > After my recent success getting Aramo booting on both the
> > cubieboard2
> > and banana pi, I hade been looking at migrating my server setups to
> > it,
> > however I hit a snag when I looked at moving my email server. So I
> > have
> > couple of questions regarding some packages in (or not it) the
> > repositories.
> > 
> > Firstly, the version of rspamd (2.7), which is trisquel downstream
> > of
> > the version in Ubuntu 22.04, does this package get any kind of
> > support
> > at any stage (i.e Debian, Ubuntu or Trisquel) in terms of
> > security?,
> > given it is older and the developer of rspamd seems to be quite hot
> > on
> > dropping older versions and strongly suggests against the use of
> > the
> > versions used in debain-ubuntu. Seen here:
> > https://rspamd.com/packages_support_policy.html
> > Is this package still suitable for use in a production setting?
> 
> FWIW, rspamd 2.7 is the same version as in Debian oldstable
> (bullseye),
> which I believe is still covered by security support from both Debian
> and Ubuntu.? I have been using it for several years both on Debian
> bullseye and on aramo on my now primary Trisquel-based mail server.
> Upstream doesn't seem to care much about long-term support, and
> modern
> versions seems to have anti-features so I am avoiding upstream
> packages:
> https://rspamd.com/doc/usage_policy.html
> 
> > Secondly, The alternative to using rspamd would be a combo of
> > spamassassin, postgrey, opendkim and opendmarc, however ubuntu
> > 22.04
> > lts didn't seem to provide opendmarc for that release (which is
> > strange
> > as buster and bullseye did), so it doesn't exsist for us in
> > trisquel,
> > despite it being available for others such as arm64 and x86, Is
> > there
> > anything that can be done during this release to get the package
> > for
> > armhf or will it be a case of waiting for Trisquel 12?. which
> > should
> > have it as its in the 24.04lts 
> 
> Opendmarc is on Ubuntu 22.04 and Aramo:
> https://packages.trisquel.org/aramo/opendmarc
> 
> I'm using spamassassin (as well as rspamd) and DKIM via Exim, what is
> it
> that you want from opendmarc?? I thought it was mostly for reporting
> features.? The anti-spam stuff via DMARC should be part of
> rspamd/spamassassin already, I would hope.
> 
> /Simon


From rynosp at talk2eo.me.uk  Thu Apr 25 15:25:34 2024
From: rynosp at talk2eo.me.uk (Ryan)
Date: Thu, 25 Apr 2024 16:25:34 +0100
Subject: [Trisquel-devel] Prosody-Modules
Message-ID: <abc767fc118c3c81a9f2ed925396b1f5a7c1c108.camel@talk2eo.me.uk>

Hello all,

Sorry if this falls slightly out of scope of this list, but I couldn't
find the place best to ask it.

Is it possible for trisquel to package prosody-community modules in the
same way that parabola does rather than the way ubuntu does, by which I
mean thy pull the full list and remove ones that don't respect users
freedoms/privacy. 

The reason I ask is that the prosody modules that debian-> ubuntu ->
trisquel have don't seem to include all the community modules in the
"prrsody-modules" package (despite them being compatible with
completely free distros). After migrating my prosody xmpp server to
trisquel I can't use the ext_disco and external_services modules (which
allow you to specify stun servers and things like that) as they aren't
in the modules-package despite this being based on the community
modules, though I guess debian cherrypicks them. These two are in
parabola prosody-modules-hg package.

Alternatively, can anybody advise whether it would be acceptable (this
does work) for me to use the prosody-modules from Parabola? (copying
them over), they are single lua files (not specific to distro etc),
which the prosody people have said works with 0.11.x (which is our
version in trisquel).

I used to pull them directly from prosody many years ago, but realised
that was bad for keeping my system tightly libre and trust etc, so
didn't want to do that.

Many Thanks as always
Ryan

From jing at jing.rocks  Tue Apr 30 08:09:46 2024
From: jing at jing.rocks (Jing Luo)
Date: Tue, 30 Apr 2024 17:09:46 +0900
Subject: [Trisquel-devel] package-helpers: dpkg-buildpackage
Message-ID: <5cc8936366c9b4e8be257891cfff3ac3@jing.rocks>

Hi,

I saw these two commits by chance in package-helpers:

2015-01-14
Build source packages with dpkg-buildpackage
4293112f08fc9d94699abc2b6e9189be525512bb

2015-02-28
Revert "Build source packages with dpkg-buildpackage"
3cb9ec3b09c20aa85e0f87a80a9c646fed211f8b

I couldn't understand the reason behind this. Why was it reverted later? 
Isn't using dpkg-buildpackage closer to how debian/ubuntu build 
packages? If we speak of reproducibility, isn't dpkg-buildpackage better 
than plain dpkg-source -b ?

-- 
Jing Luo
About me: https://jing.rocks/about/
PGP Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240430/8004fcbe/attachment.sig>

From jing at jing.rocks  Tue Apr 30 08:46:09 2024
From: jing at jing.rocks (Jing Luo)
Date: Tue, 30 Apr 2024 17:46:09 +0900
Subject: [Trisquel-devel] riscv64 for trisquel 12?
Message-ID: <38fbc5ca2350c3a9d12818e6d6fcae15@jing.rocks>

Simon Josefsson Sun Mar 31 08:07:30 UTC 2024:
>>> While still a fairly experimental platform, I
>>> think that during the lifespan of trisquel 12 the riscv64 platform 
>>> may
>>> become an important target.  It would be nice to include riscv64
>>> packages from Ubuntu directly from the start when we import noble.
>> 
>> Ecne might be a great opportunity for it, definitely something to
>> discuss about next time the dev team meets.

As a user I'm excited to see more resources being used on developing on 
riscv64, that's a big "if", but debian 13 (trixie) will officially 
support riscv64.

>>> I have a Milk-V Pioneer box that I could give out a Debian VM on for
>>> porting.  These machines seems to be readily available in stock
>>> commercially, and I may be able to arrange a donation of one machine 
>>> to
>>> the Trisquel project if that would help things.
>> 
>> This would certainly help on the decision making process, as a hard
>> requirement is to have hardware to run the builds at.
> 
> Who would be best to send this machine to, who can install it and keep
> it running and setup jenkins etc on it and connect it to the build
> infrastructure?  I worry that this could be a distraction from other
> work, so I'm happy to offer a VM on my machine for this purpose, but
> that is fairly fragile and I wouldn't want the project to depend on
> there being power in my garage...  maybe best is both, to have to two
> riscv64 build machines available.

How about this: I can happily host it at my home in Tokyo for Trisquel 
project and help setup & manage etc., if Simon can arrange that 
donation, and, if trisquel devs all approve this at your next meeting. I 
have sysadmin experience on my own home servers so I hope this wouldn't 
add much burden to devs.

I have 10Gbps internet and a second ISP, and I already host a mirror for 
Trisquel since last year (listed on the website wiki but not in the 
Mirrors.masterlist). I recently donated (?) 3 VMs (amd64) to the gcc 
compile farm on my own hardware [1]. And - I recently bought a starfive 
visionfive 2 riscv sbc but haven't had the chance to install anything 
yet.

[1] https://portal.cfarm.net/news/49

-- 
Jing Luo
About me: https://jing.rocks/about/
PGP Fingerprint: 4E09 8D19 00AA 3F72 1899 2614 09B3 316E 13A1 1EFC
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://listas.trisquel.info/pipermail/trisquel-devel/attachments/20240430/3d89f26f/attachment.sig>