Fedora Merge Review: gnupg http://cvs.fedora.redhat.com/viewcvs/devel/gnupg/ Initial Owner: nalin
Hi Nalin. Here's a review for gnupg. MUST items verified * Adheres to naming guidelines * Specfile name matches package name * Meets packaging guidelines (see below for comment on %{_libexecdir} usage * License meets open-source requirements * License included in %doc * License field matches the upstream license * Specfile is in American English * Specfile is legible * Source matches upstream (sha1: 9cbbef5c94f793867ff3ae4941816962311a0563) * Builds, installs, and works (tested on FC6, i386) * Owns directories that it creates * Does not own files or directories of other packages * File list has no duplicates * File perms are sane * Specfile includes %clean section * Macros used consistently * Package contains code or permissible content SHOULD items verified * Builds in mock against fedora-{5,6}-i386-core targets * Package functions correctly (tested on FC6, i386) NEEDSWORK items * rpmlint produces several warnings and errors on the srpm $ rpmlint gnupg-1.4.6-3.src.rpm W: gnupg summary-ended-with-dot A GNU utility for secure communication and data storage. E: gnupg tag-not-utf8 %changelog E: gnupg non-utf8-spec-file gnupg.spec W: gnupg buildprereq-use autoconf, automake, bzip2-devel, expect, ncurses-devel W: gnupg buildprereq-use openldap-devel, readline-devel, zlib-devel, gettext-devel W: gnupg buildprereq-use curl-devel W: gnupg buildprereq-use libusb-devel W: gnupg unversioned-explicit-provides gpg W: gnupg unversioned-explicit-provides openpgp W: gnupg prereq-use /sbin/install-info W: gnupg make-check-outside-check-section make check E: gnupg use-of-RPM_SOURCE_DIR W: gnupg mixed-use-of-spaces-and-tabs (spaces: line 73, tab: line 50) All except the unversioned-explicit-provides on the virtual gpg and openpgp packages should be corrected. The binary rpm produces one warning: $ rpmlint gnupg-1.4.6-4.fc6-results/gnupg-1.4.6-4.fc6.i386.rpm W: gnupg file-not-utf8 /usr/share/man/man1/gpg.ru.1.gz I don't know Russian so I couldn't verify if iconv would properly converted the man page so I left it alone. * Scriplets are sane The scriptlets to install info pages could be simplified somewhat and made more consistent with the examples in Packaging/ScriptletSnippets Comments/Questions/Notes There are a number of unneeded configure flags to enable zlib, bzip, readline, and curl. These are all enabled by default in the current gnupg so they can be removed. Why is %{_libdir} used for %{_libexecdir}? Packaging/Guidelines allow the use of this dir and it is what upstream does by default. %{_libdir}/gnupg is used for extensions, though none are currently shipped with this package (or by any others in Fedora AFAIK). The CFLAGS are set explicitly to prevent the binaries from having text relocations, as per BZ#145836 (in case anyone wonders about that). Another very a minor point, the preferred value for the BuildRoot tag is %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) This is not a blocker. I was unable to build this in mock for the development target due to expect having a broken dep on libtcl8.4.so at the moment. NEEDSWORK
Created attachment 147274 [details] patch correcting small issues mentioned above Here's a patch to correct the (relatively minor) issues mentioned above. Feel free to ditch my changelog entry if you use any parts of the patch. I'll take the blame for things I break but I don't care about getting credit. :)
(In reply to comment #1) > Hi Nalin. Here's a review for gnupg. Thanks for that, sorry for the delay. > NEEDSWORK items > > * rpmlint produces several warnings and errors on the srpm Fixed up at various times by various people... looks pretty clean now. > The binary rpm produces one warning: > > $ rpmlint gnupg-1.4.6-4.fc6-results/gnupg-1.4.6-4.fc6.i386.rpm > W: gnupg file-not-utf8 /usr/share/man/man1/gpg.ru.1.gz > > I don't know Russian so I couldn't verify if iconv would properly converted the > man page so I left it alone. rpmlint says this needs to be UTF-8, but it's evidently KOI8-RU. Converting. > * Scriplets are sane > > The scriptlets to install info pages could be simplified somewhat and made more > consistent with the examples in Packaging/ScriptletSnippets The additional checks fix #91641 (error when installed with --excludedocs). I'd rather just leave it as-is and not have to worry about that. > Comments/Questions/Notes > > There are a number of unneeded configure flags to enable zlib, bzip, readline, > and curl. These are all enabled by default in the current gnupg so they can be > removed. Dropped explicit requests for bzip, readline, and curl, but leaving the one for zlib in so that configure won't fall back to the internal copy if something looks "off" about the system one. > Why is %{_libdir} used for %{_libexecdir}? Packaging/Guidelines allow the use > of this dir and it is what upstream does by default. %{_libdir}/gnupg is used > for extensions, though none are currently shipped with this package (or by any > others in Fedora AFAIK). We used to not allow %{_libexecdir}. Reverted. > Another very a minor point, the preferred value for the BuildRoot tag is > %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n) > This is not a blocker. Changed to match at some point. I think it looks pretty good now.
gnupg is dead.package in rawhide now.
This bug just popped out when I searched for packages under review but looks like this package is dead already. Dropping the flag fedora-review?
Actually it was revived by bcl.
Mass reassigning all merge reviews to their component. For more details, see this FESCO ticket: https://fedorahosted.org/fesco/ticket/1269 If you don't know what merge reviews are about, please see: https://fedoraproject.org/wiki/Merge_Reviews How to handle this bug is left to the discretion of the package maintainer.
Based on above there is no need to review this package anymore.
This bug appears to have been reported against 'rawhide' during the Fedora 23 development cycle. Changing version to '23'. (As we did not run this process for some time, it could affect also pre-Fedora 23 development cycle bugs. We are very sorry. It will help us with cleanup during Fedora 23 End Of Life. Thank you.) More information and reason for this action is here: https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora23
This message is a reminder that Fedora 23 is nearing its end of life. Approximately 4 (four) weeks from now Fedora will stop maintaining and issuing updates for Fedora 23. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '23'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 23 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.
Fedora 23 changed to end-of-life (EOL) status on 2016-12-20. Fedora 23 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed.