Bug 2343280 - Review Request: rust-sigul-pesign-bridge - Bridge pesign-client requests to a Sigul signing server
Summary: Review Request: rust-sigul-pesign-bridge - Bridge pesign-client requests to a...
Keywords:
Status: RELEASE_PENDING
Alias: None
Product: Fedora
Classification: Fedora
Component: Package Review
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Neal Gompa
QA Contact: Fedora Extras Quality Assurance
URL: https://github.com/fedora-infra/siguldry
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-31 20:57 UTC by Jeremy Cline
Modified: 2025-03-26 12:57 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:
ngompa13: fedora-review+


Attachments (Terms of Use)
The .spec file difference from Copr build 8591001 to 8591037 (498 bytes, patch)
2025-01-31 21:25 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 8591037 to 8777693 (1.39 KB, patch)
2025-03-17 15:58 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 8777693 to 8813742 (4.68 KB, patch)
2025-03-24 19:40 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 8813742 to 8814586 (3.50 KB, patch)
2025-03-24 21:42 UTC, Fedora Review Service
no flags Details | Diff
The .spec file difference from Copr build 8818653 to 8820199 (950 bytes, patch)
2025-03-25 21:09 UTC, Fedora Review Service
no flags Details | Diff

Description Jeremy Cline 2025-01-31 20:57:03 UTC
Spec URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge.spec
SRPM URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge-0.2.1-1.fc42.src.rpm
Description: Drop-in replacement for pesign's daemon that bridges pesign-client requests to a Sigul server.
Fedora Account System Username: jcline

Comment 1 Fedora Review Service 2025-01-31 21:11:49 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8591001
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-sigul-pesign-bridge/fedora-rawhide-x86_64/08591001-sigul-pesign-bridge/fedora-review/review.txt

Found issues:

- Systemd service file(s) in sigul-pesign-bridge
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 2 Jeremy Cline 2025-01-31 21:15:32 UTC
Whoops, I completely forgot to add the systemd scriptlets. Fixed:

Spec URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge.spec
SRPM URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge-0.2.1-1.fc42.src.rpm

Comment 3 Fedora Review Service 2025-01-31 21:25:31 UTC
Created attachment 2074685 [details]
The .spec file difference from Copr build 8591001 to 8591037

Comment 4 Fedora Review Service 2025-01-31 21:25:34 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8591037
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-sigul-pesign-bridge/fedora-rawhide-x86_64/08591037-sigul-pesign-bridge/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 5 Neal Gompa 2025-02-01 09:52:13 UTC
Taking this review.

Comment 6 Jeremy Cline 2025-03-14 15:06:27 UTC
Just a head's up that I've released a new version upstream that has a dependency that needs packaging (https://bugzilla.redhat.com/show_bug.cgi?id=2352566) and drops the dependency on the Python sigul CLI. I'll update this request shortly with the newer version, once the dependency gets accepted.

Comment 7 Jeremy Cline 2025-03-17 15:41:39 UTC
Updated to v0.3.0 which drops the dependency on the Python sigul package

Spec URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge.spec
SRPM URL: https://jcline.fedorapeople.org/new-packages/sigul-pesign-bridge-0.3.0-1.fc43.src.rpm

Comment 8 Fedora Review Service 2025-03-17 15:58:26 UTC
Created attachment 2080577 [details]
The .spec file difference from Copr build 8591037 to 8777693

Comment 9 Fedora Review Service 2025-03-17 15:58:28 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8777693
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-sigul-pesign-bridge/fedora-rawhide-x86_64/08777693-sigul-pesign-bridge/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 10 Neal Gompa 2025-03-24 18:12:43 UTC
Initial spec review notes:

> BuildRequires: [...]

Is there a reason we're not using dynamic buildrequires here?

Comment 11 Jeremy Cline 2025-03-24 18:30:44 UTC
(In reply to Neal Gompa from comment #10)
> Initial spec review notes:
> 
> > BuildRequires: [...]
> 
> Is there a reason we're not using dynamic buildrequires here?

I just used whatever rust2rpm spat out and adjusted it for the systemd scriptlets. It does indeed appear there's a macro to autogenerate deps, but I don't see any flag on rust2rpm to enable it. I don't see documentation for the macro to allow you to skip test dependencies so that's possibly why.

It appears at least one of the test dependencies I have (tracing-test) isn't available on EPEL so I'd prefer to leave it as-is for now, or import this version into EPEL and use dynamic buildrequires for Fedora releases with the test dependencies available.

Comment 12 Neal Gompa 2025-03-24 18:35:32 UTC
Could you comment about this?

Comment 13 Neal Gompa 2025-03-24 18:35:44 UTC
Err, Fabio please ^

Comment 14 Fabio Valentini 2025-03-24 18:39:26 UTC
errr ... dynamic buildrequires should be on by default unless you run rust2rpm on OpenSUSE (or an unrecognized other distro).

It looks like you got the spec file rendered from the "plain" template, which gives you ancient defaults and no modern features, so likely not at all what you want.

You can force rust2rpm to target spec file generation at fedora with "rust2rpm --target fedora", this should give much better results.

Comment 15 Fabio Valentini 2025-03-24 18:40:17 UTC
> It appears at least one of the test dependencies I have (tracing-test) isn't available on EPEL so I'd prefer to leave it as-is for now, or import this version into EPEL and use dynamic buildrequires for Fedora releases with the test dependencies available.

This also shouldn't be a blocker, importing one package into EPEL is something that takes literally 10 minutes.

Comment 16 Fabio Valentini 2025-03-24 18:41:59 UTC
(BTW, the way to have %cargo_generate_buildrequires not generate test-dependencies is to set %bcond check to 0.)

Comment 18 Fedora Review Service 2025-03-24 19:40:59 UTC
Created attachment 2081743 [details]
The .spec file difference from Copr build 8777693 to 8813742

Comment 19 Fedora Review Service 2025-03-24 19:41:01 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8813742
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-sigul-pesign-bridge/fedora-rawhide-x86_64/08813742-sigul-pesign-bridge/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 20 Jeremy Cline 2025-03-24 21:26:12 UTC
Alright, one more change: switch to the crates.io package and drop the awkward cd <project>. This also means adjusting the package name.

Spec URL: https://jcline.fedorapeople.org/new-packages/rust-sigul-pesign-bridge.spec
SRPM URL: https://jcline.fedorapeople.org/new-packages/rust-sigul-pesign-bridge-0.3.1-1.fc43.src.rpm

Comment 21 Fedora Review Service 2025-03-24 21:42:54 UTC
Created attachment 2081760 [details]
The .spec file difference from Copr build 8813742 to 8814586

Comment 22 Fedora Review Service 2025-03-24 21:42:56 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8814586
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-sigul-pesign-bridge/fedora-rawhide-x86_64/08814586-rust-sigul-pesign-bridge/fedora-review/review.txt

Found issues:

- Systemd service file(s) in sigul-pesign-bridge
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 23 Neal Gompa 2025-03-25 00:43:58 UTC
Spec review:

> %{_sysconfdir}/sigul-pesign-bridge/

This needs to be "%dir %{_sysconfdir}/sigul-pesign-bridge", since you enumerate the file as a %config file already.

> %{_mandir}/man1/sigul-pesign-bridge.1.gz

".gz" should be replaced with "*".

Comment 24 Jeremy Cline 2025-03-25 13:21:54 UTC
Thanks.

- replaced gz with glob
- added %dir to the conf directory

Spec URL: https://jcline.fedorapeople.org/new-packages/rust-sigul-pesign-bridge.spec
SRPM URL: https://jcline.fedorapeople.org/new-packages/rust-sigul-pesign-bridge-0.3.1-1.fc43.src.rpm

Comment 25 Fedora Review Service 2025-03-25 13:52:56 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8818653
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-rust-sigul-pesign-bridge/fedora-rawhide-x86_64/08818653-rust-sigul-pesign-bridge/fedora-review/review.txt

Found issues:

- Systemd service file(s) in sigul-pesign-bridge
  Read more: https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_scriptlets

Please know that there can be false-positives.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 26 Neal Gompa 2025-03-25 18:26:12 UTC
> %post
> %systemd_post sigul-pesign-bridge.service
>
> %preun
> %systemd_preun sigul-pesign-bridge.service
>
> %postun
> %systemd_postun_with_restart sigul-pesign-bridge.service

These need to be attached to the correct binary package. They don't do anything right now.

Comment 27 Jeremy Cline 2025-03-25 18:34:09 UTC
(In reply to Neal Gompa from comment #26)
> > %post
> > %systemd_post sigul-pesign-bridge.service
> >
> > %preun
> > %systemd_preun sigul-pesign-bridge.service
> >
> > %postun
> > %systemd_postun_with_restart sigul-pesign-bridge.service
> 
> These need to be attached to the correct binary package. They don't do
> anything right now.

Any pointer on where exactly they're supposed to be? I assumed after the "%package     -n sigul-pesign-bridge" bit was okay.

Comment 28 Neal Gompa 2025-03-25 18:49:47 UTC
You just need to add "-n sigul-pesign-bridge" to %post/%preun/%postun

Comment 30 Fedora Review Service 2025-03-25 21:09:28 UTC
Created attachment 2082004 [details]
The .spec file difference from Copr build 8818653 to 8820199

Comment 31 Fedora Review Service 2025-03-25 21:09:30 UTC
Copr build:
https://copr.fedorainfracloud.org/coprs/build/8820199
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-review-2343280-rust-sigul-pesign-bridge/fedora-rawhide-x86_64/08820199-rust-sigul-pesign-bridge/fedora-review/review.txt

Please take a look if any issues were found.


---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

Comment 32 Neal Gompa 2025-03-25 22:00:31 UTC
Package was generated with rust2rpm, simplifying the review.

✅ package contains only permissible content
✅ package builds and installs without errors on rawhide
✅ test suite is run and all unit tests pass
✅ latest version packaged
✅ license matches upstream specification and is acceptable for Fedora
✅ license file is included with %license in %files
✅ package complies with Rust Packaging Guidelines

Package APPROVED.

===

Recommended post-import tasks:

- set up package on release-monitoring.org:

- add @rust-sig with "commit" access as package co-maintainer
  (should happen automatically)

- add @infra-sig with "commit" access as package co-maintainer

- set bugzilla assignee overrides to @rust-sig

- track package in koschei for all built branches
  (should happen automatically once rust-sig is co-maintainer)

Comment 33 Fedora Admin user for bugzilla script actions 2025-03-26 12:57:23 UTC
The Pagure repository was created at https://src.fedoraproject.org/rpms/rust-sigul-pesign-bridge


Note You need to log in before you can comment on or make changes to this bug.