Comment 0 for bug 2003549

Revision history for this message
Athos Ribeiro (athos-ribeiro) wrote :

[Availability]
- The package log4cplus is already in Ubuntu universe.
- The package log4cplus build for the architectures it is designed to work on.
- It currently builds and works for architetcures: amd64, arm64, armhf, ppc64el, riscv64, and s390x
- Link to package: [[https://launchpad.net/ubuntu/+source/log4cplus|log4cplus]]

[Rationale]
- The package log4cplus is required in Ubuntu main as a dependency of isc-kea, which is being promoted as part of LP: #2002861.
- The package log4cplus will generally be useful for a large part of our user base as an isc-kea dependency.
- The package log4cplus is required in Ubuntu main no before or along with the isc-kea promotion, whose time constraints are described in LP: #2002861.

[Security]
- No CVEs/security issues in this software in the past
- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does not install services, timers or recurring jobs
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...)

[Quality assurance - function/usage]
- The package works well right after install (it is a library)

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has not too many and long term critical bugs open
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/log4cplus/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=log4cplus
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails it makes the build fail, link to build log: https://launchpadlibrarian.net/632298606/buildlog_ubuntu-lunar-amd64.log4cplus_2.0.8-1_BUILDING.txt.gz
- The package does not run an autopkgtest because it only provides a runtime library. The server team will work into having the package to run its test suite againts the installed package with autopkgtest.

[Quality assurance - packaging]
- debian/watch is present and works
- debian/control defines a correct Maintainer field
- This package does not yield massive lintian Warnings, Errors
- Please link to a recent build log of the package: https://launchpadlibrarian.net/640214388/buildlog_ubuntu-lunar-amd64.log4cplus_2.0.8-1_BUILDING.txt.gz
- Lintian overrides are present, but ok because they are well documented and are addressing false positives.
- A full output from `lintian --pedantic` is available as a comment in this MIR bug.
- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies
- The package will not be installed by default.
- Packaging and build is easy, link to d/rules: https://git.launchpad.net/ubuntu/+source/log4cplus/tree/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- No further depends or recommends dependencies that are not yet in main

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- The server team is not yet, but will subscribe to the package before promotion
- This does not use static builds
- Vendored source code for the catch package is removed during the package cleaning phase. Moreoverthe m4 directory contains macros extracted from autoconf.
- This package is not rust based
- The package successfully built during the most recent test rebuild: https://launchpad.net/ubuntu/+archive/test-rebuild-20221215-lunar-normal/+sourcepub/14223782/+listing-archive-extra

[Background information]
- The Package description explains the package well
- Upstream Name is log4cplus
- Link to upstream project: https://sourceforge.net/p/log4cplus/wiki/Home/