Comment 0 for bug 1986591

Revision history for this message
Luís Infante da Câmara (luis220413) wrote :

[Availability]
The package fstrm is already in Ubuntu universe.
The package fstrm builds for the architectures it is designed to work on.
It currently builds and works for architectures: amd64, arm64, armhf, ppc64el and s390x.
Link to package [[https://launchpad.net/ubuntu/+source/fstrm|fstrm]]

[Rationale]
- The package fstrm is required in Ubuntu main in 20.04, 22.04 and Kinetic
  for DNSTAP support in BIND, that is enabled in Debian but disabled in Ubuntu
  because 2 required dependencies (libprotobuf-c1 and libfstrm0) are in the
  universe component. However, libprotobuf-c1 was recently approved for
  inclusion into the main component (bug #1956617).
- The package fstrm will not generally be useful for a large part of
  our user base, but is important/helpful still because DNSTAP is enabled by
  upstream BIND since version 9.11, and not providing this support on Ubuntu
  will move DNS server operators away from Ubuntu.
- I have prepared an SRU bug with debdiffs to enable DNSTAP support in Ubuntu
  20.04, 22.04 and Kinetic (bug #1843806).

- It would be great and useful to community/processes to have the
  package fstrm in Ubuntu main, but there is no definitive deadline.

[Security]
- No CVEs/security issues in this software in the past

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Package does not open privileged ports (ports < 1024)
- Package does not contain extensions to security-sensitive software
  (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many
  and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/fstrm/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=TBDSRC
- The package has important open bugs, listing them:
  https://github.com/farsightsec/fstrm/issues/69
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
RULE: - The package must include a non-trivial test suite
RULE: - it should run at package build and fail the build if broken
- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log https://launchpad.net/ubuntu/+source/fstrm/0.6.1-1/+build/23074349/+files/buildlog_ubuntu-jammy-amd64.fstrm_0.6.1-1_BUILDING.txt.gz

- The package does not run an autopkgtest because the Debian maintainer
  did not provide one.

[Quality assurance - packaging]
- debian/watch is not present, instead it has nothing

- debian/control defines a correct Maintainer field

RULE: - It is often useful to run `lintian --pedantic` on the package to spot
RULE: the most common packaging issues in advance
RULE: - Non-obvious or non-properly commented lintian overrides should be
RULE: explained
- This package does not yield massive lintian Warnings, Errors (the warnings are
  caused by bug #1977883)
- Please link to a recent build log of the package https://launchpad.net/ubuntu/+source/fstrm/0.6.1-1/+build/23074349/+files/buildlog_ubuntu-jammy-amd64.fstrm_0.6.1-1_BUILDING.txt.gz
- Please attach the full output you have got from
  `lintian --pedantic` as an extra post to this bug.

- The package will not be installed by default

- Packaging and build is easy, link to d/rules https://launchpad.net/ubuntu/+archive/primary/+sourcefiles/fstrm/0.6.1-1/fstrm_0.6.1-1.debian.tar.xz (file debian/rules)

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

...