Hello Jörg,

On Fri, Mar 21, 2025 at 11:01:07AM +0100, Jörg Frings-Fürst wrote:

Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "ipmitool":

  Package name     : ipmitool
   Version          : 1.8.19-8
   Upstream contact : Duncan Laurie <duncan@iceblink.org>
  URL              : https://codeberg.org/IPMITool/ipmitool
  License          : Zlib, BSD-3-clause, BSD-3-Clause-No-Nuclear-
Warranty, LGPL-2.1+, FSFAP
  Vcs              : https://git.jff.email/cgit/ipmitool.git
   Section          : utils

The source builds the following binary packages:

  ipmitool - utility for IPMI control with kernel driver or LAN
interface (daemon)

My only question/comment before uploading is regarding the change to
remove /usr/share/misc/enterprise-numbers.txt from the package and
replacing it with a cronjob. It means that the file is no longer
guaranteed to be available at the time the package is configured.

I had a quick look at python-hardware (reverse build-dependency of
ipmitool) and it and its autopkgtest don't appear to need the file.

I don't personally have a strong opinion about the choice to download
the file, but some users/installations may feel differently and either
require it when the package is installed and/or want to opt-in to
downloading the file monthly.

Since trixie is entering the freeze, you might consider backing out this
change - that is, shipping the package with enterprise-numbers.txt and a cronjob that isn't enabled by default.

Cheers,
tony

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE5Qr9Va3SequXFjqLIdIFiZdLPpYFAmfe9QsACgkQIdIFiZdL PpZL9hAAiNoHV99CU3wz9E/MFpkeIO5rVhYJStSi2p7TJtrkLWnvQPnTBqpt7/ZI rHbWyz7JCobS7/inlm4p8V0dVhzUd9qcRoJGyhI8a55tM4JzlwYC9NBX5oIgAgBr HvNSZr5KkdsJY0WNK0CMd6CylgXCfe+qhpzYrbpw5gW5s+W8iE8gekh4H2Xi5Yjq subaMalOhBgCxkaMPh/qd5XbWH7pvqFDirgexCPfZY3pL9odmW4ZLr8PMfOqca3y maSlRkyVZeZUxwgnmVDOGeuDxI9Jl0mwuK/kuFX17QgpHNEZI1ojtAy3wc38Qw5+ F2gv+O+MLhKBw4BHjylynzSy9BsWJZ+CEn09BRy53uckYFgVlO+9zm7zWw5EB8BH y9A/yl/7IVBgyDTZ2INs+veuj1ieQcdnhWT4vmXbw1lsyaEWbWV0a6545NtqnTTM Xi5/YfaXTZQFSc97V9E2ZFW+pyKZiCgkFoJy/xYWYnijsHdLAiQ00+BE3RQ55HB4 6ifhfkMb3a+JQC2rO9jevm+JMmt8P8ujkyVtUC29/g4kjDmamJNyM4akoxouxH// HQEIE42aqrCXobKk4gFq1nK+HB6urDcWGcVZpqkzCH7hCvNXT58ELcFaJwj4A3IE LIIpoYBuMaddHl3RSdc83WoxKkYyxsQEZMQPvGzxzZtqsCMcUYU=
=0tdd
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Hi Jörg,

On Sat, Mar 22, 2025 at 07:19:29PM +0100, Jörg Frings-Fürst wrote:

Hello Tony,

I have update enterprise-numbers.txt in release 1.8.19-6.

I see that update to the contents of the file in 1.8.19-6.

Deleted was the file with the release 1.8.19-7.1 (NMU from Shengqi Chen <harry-chen@outlook.com> )

$ dpkg-deb -c ipmitool_1.8.19-7.1_amd64.deb | grep numbers
-rw-r--r-- root/root 4637432 2024-10-27 08:57 ./usr/share/misc/enterprise-numbers.txt

In fact, I see enterprise-numbers.txt present these versions:

ipmitool_1.8.19-4+deb12u1 <-- first Debian revision to include it ipmitool_1.8.19-4+deb12u2
ipmitool_1.8.19-5
ipmitool_1.8.19-6
ipmitool_1.8.19-7
ipmitool_1.8.19-7.1

My idea was to download a current file version directly during
installation and via a cron job.

After some discussion, however, I discarded this idea. Unfortunately, I
can't say why Shengqi Chen removed the file in his version.

I can't find an explicit reference to it in Debian Policy, but
downloading from an external network site as part of the package
postinst doesn't seem like a common practice. Ideally, the package is self-contained.

Since the enterprise-numbers.txt file is included in the packages in
bookworm and in all packages during the testing/trixie, my suggestion is
to either:

(a) include it in 1.8.19-8 package for trixie and remove the cronjob

or

(b) migrate enterprise-numbers.txt into a new arch:all package named ipmitool-data and have ipmitool declare either a Depends or Recommends relationship on the new ipmitool-data package. That avoids having to
include the file each of the arch:any binary packages. The new -data
package might also include the cronjob to be configured optionally by
the user.

However, option (b) will require that the package go through NEW.
Technically, there is enough time before the hard freeze on April 15th,
but the Release Team is probably quite busy, and it is possible that the package could be delayed.

For that reason, I recommend option (a) for now, and we can work on
option (b) for trixie+1 (forky) if you like.

And finally, thank you for maintaining ipmitool!

Cheers,
tony

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE5Qr9Va3SequXFjqLIdIFiZdLPpYFAmffkVUACgkQIdIFiZdL PpYhUQ/+Lq9pjQHT09p85wcBjxwO5SX+V6SJgB8NRlO2PeF+eLaTmCWOy26Z3pln yR07bugnBpVWImJpJbezVQPzA8GuQlZmSgH5llYUz15SxbeJLqS+k5m7aXQ7OD6x BINMSp5vHb7nhDXtThK6Phkhl0zqdryG9GGuWIYcMVhnS2qWPg7D0Q21W4n+1Ftm 19bKj0SE8qlhRIqkx5uTGmaY9Cte35y0oFkRZMqt2gOGBzaMIyce5/F1N1CnwZB1 kD5mUcWY6LwcAPoaFypTdEUikQpzulLrGwgy9AC3Ef7y/UBlWCeh9cL2xMz588t5 SUvB9YHXa05ZYhJjuU8iymlWCaNLrU74btNzUEOR1cOBkocISYYDbPx9t0IYDwjo pOYp7jSR/3pSBpquKNqCHqgeEPQ0fkdS/6e1uyC4d0OTDiMUDkk2yTsct60pemAd TnUD3jRtnWz7bEhwTKMxj4vwQi2T96Az3+RYmm6gnOi8y61AET6y9O2TiNc76VAt /ASI6jXhPjpbuYx+OLRLcKCW4c4hqh0j1gV9egUYa1pMqLN2TMTuTk9gAw73dgx+ YeEK4EkRyBOWAZfYhAtHYWDHO479xf+VtAaaDlGVMbbtsa47UdDHcVBOTDPnPxG6 AUDuPjSKmwTDJA1c98JTWjKu7nrtUGAYxS3nmvl1CVY9uAMDGx8=
=XoLi
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Sun, Mar 23, 2025 at 05:03:08PM +0100, Jörg Frings-Fürst wrote:

Hello Tony,

sorry for my late answer. I'm moving from Germany to Malta 
next week, which means a lot of work.

Good luck with your move.

I have use your opinion (a). It's uploaded to mentors and into git.

Uploaded to the archive. Thank you for your contribution to Debian.

If you are interested, we can puruse option (b) after the trixie
release.

(b) migrate enterprise-numbers.txt into a new arch:all package named ipmitool-data and have ipmitool declare either a Depends or Recommends relationship on the new ipmitool-data package. That avoids having to include the file each of the arch:any binary packages. The new -data package might also include the cronjob to be configured optionally by
the user.

This will address this (informational) lintian output:

I: ipmitool: arch-dep-package-has-big-usr-share 4842kB 76%
N:
N: The package has a significant amount of architecture-independent data
N: (over 4MB, or over 2MB and more than 50% of the package) in /usr/share but N: is an architecture-dependent package. This is wasteful of mirror space and N: bandwidth since it means distributing multiple copies of this data, one
N: for each architecture.
N:
N: If the data in /usr/share is not architecture-independent, this is a
N: Policy violation that should be fixed by moving the data elsewhere
N: (usually /usr/lib).
N:
N: Please refer to Section 6.7.5 of the Debian Developer's Reference for
N: details.
N:
N: Visibility: info
N: Show-Always: no
N: Check: huge-usr-share

Cheers,
tony

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE5Qr9Va3SequXFjqLIdIFiZdLPpYFAmfgQ8UACgkQIdIFiZdL PpYUlxAAqefaes10v3EwffhKSLH7SeuR4SChUEq3fYoeYuH9A08qofmJlyWuMtT3 CKa18QcaO8GIpRbmr6zTBlCb6UIGV4C2ubnjvDm6QgPkCCLKbxehoV4+GKrdNKYw kbviaCPuS8neAk+KXSBNPkzhyIyHBv+Zd0gnUT4Bte3OuQrrhq6d0ugrUVCaPz+N 9sa6Ysy/ls5nyx7A/8GVBwsFgCVvsd+MJiVlqzhL8cXK4LaeOAbxm+ySo07LKG0q U5bt69RMS645L1LRXARJuxIUk7er7zlMDWqb8a7WoMzxetucKLXeY50mEQ4tb4c7 GGk2ITkGjmo1MmEYEOFz/MJAvP7i/84zE0flgh7HyAHKf4dNLYx5kp0ZRtw4dqyY LQYKJJKjGysqSjgFrbthUkTWUBuwZv9sR4PmqRDAIY8hgld0fALigW2VZPcPONGi XhkJi2UQCdB7oBosR5gxF4bG7rxP7JBI4M3IDq12ooTAjj8nWaqLSHUC3pajAnHo /Neku4znTzsUSRSv9XAkzkChx1vWIRIxFmmnUzDnfF05On5+6bD+NTBdeVk54lBj zidpmTflgjBf2/mummd0DgEnhrt+UoNFKLzAc4593CQUjURCM9ZtAuWLrG9fva2o Gl9tBOR7oCFbu/tUCGbdB3Bo+idTJaBRmI3BHR8LseVM6OB4yk0=
=lFR1
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)