• Bug#1070855: RFH: opensnitch -- GNU/Linux interactive application firew

    From Petter Reinholdtsen@21:1/5 to All on Mon Apr 14 14:10:02 2025
    Dear Charles and Martin,

    Both of you seem to believe that I receive emails sent to 1070855@bugs.debian.org. I do not, so it is a safer option to keep
    everyone involved in the To/CC list in the email thread.

    [Charles Allhands 2024-09-24]
    I'm interested if you're still looking for help with this. I'm not
    currently a package maintainer but I'm willing to learn. I've
    started working through the documentation already. Please let me
    know if I can be of assistance.

    I suggest we meet on IRC, #opensnitch, if you are still interested.

    [Martin Dosch 2025-10-13]
    I was looking whether I can build the latest version and do some sort of "drive by" RFS, but it seems something is off with the branches:

    Yeah. I do not understand the setup myself, but suspect the salsa
    master branch is a clone of the upstream branch, and there is a trick
    to the git repository I do not understand.

    Maybe the repo was not created using dh-make-golang and therefore
    the layout differs from other golang team repos. If some experienced
    DD could fix this it would probably ease team maintaining this
    package as others could contribute using their well known tooling.

    I am at a loss, and ended up creating a new repo for my testing, using
    'gbp import-dsc' and 'gbp import-orig'.

    Based on the 1.5.9-2 build rules in experimental, I managed to get
    1.6.8 building (but not yet tested) using the following changes:

    diff --git a/debian/changelog b/debian/changelog
    index 527ce95..74dc85d 100644
    --- a/debian/changelog
    +++ b/debian/changelog
    @@ -1,3 +1,9 @@
    +opensnitch (1.6.8-1) UNRELEASED; urgency=medium
    +
    + * New upstream version 1.6.8
    +
    + -- Petter Reinholdtsen <pere@hungry.com> Mon, 14 Apr 2025 13:24:20 +0200
    +
    opensnitch (1.5.9-2) experimental; urgency=medium

    [ Gustavo Iñiguez Goia ]
    diff --git a/debian/control b/debian/control
    index a66caf6..6f74d08 100644
    --- a/debian/control
    +++ b/debian/control
    @@ -9,16 +9,17 @@ Build-Depends:
    dh-python,
    golang-any,
    golang-github-fsnotify-fsnotify-dev,
    + golang-github-gogo-protobuf-dev | golang-goprotobuf-dev,
    golang-github-google-gopacket-dev,
    golang-github-google-nftables-dev,
    golang-github-iovisor-gobpf-dev,
    + golang-github-varlink-go-dev,
    golang-github-vishvananda-netlink-dev,
    golang-golang-x-net-dev,
    golang-google-grpc-dev,
    - golang-goprotobuf-dev,
    libmnl-dev,
    libnetfilter-queue-dev,
    - pkg-config,
    + pkgconf,
    protoc-gen-go-grpc,
    pyqt5-dev-tools,
    qttools5-dev-tools,
    diff --git a/debian/
  • From Petter Reinholdtsen@21:1/5 to All on Mon Apr 14 19:10:01 2025
    [Charles Allhands]
    Hi Peter,
    I'm still interested. I got about as far as setting up a salsa account
    and reading through the docs. I'll probably need some guidance as this
    is all new to me. I'll set up a build environment and see how it goes.

    Ah, good to hear. I brushed up the debian/experimental branch just now
    and uploaded a new edition to experimental, to have a better starting
    point when we look at new upstream versions.

    I joined the #opensnitch channel on libra.chat.

    Ah, sorry. Debian use irc.debian.org (aka OFTC), not libera.chat.

    --
    Happy hacking
    Petter Reinholdtsen

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)