Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#55255 - [icu] Comments from upstream on PKGBUILD

Attached to Project: Arch Linux
Opened by Steven R. Loomis (srl295) - Wednesday, 23 August 2017, 18:15 GMT
Last edited by Eli Schwartz (eschwartz) - Wednesday, 23 August 2017, 23:01 GMT
Task Type General Gripe
Category Packages: Core
Status Closed
Assigned To Andreas Radke (AndyRTR)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

Description:
ICU-TC member here. I saw https://bugs.archlinux.org/task/55246  FS#55246  and thought I would give some comments about https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/icu ( currently looking at 3394816ff2d190f9bffaedf85c61714d1a4feeed for 59.1 )

- "no https available" - use https://ssl.icu-project.org/files/icu4c/59.1/ etc (has been there for a while)
- "upstream offers md5sum checks, only asc file for md5sum check" - if you view https://ssl.icu-project.org/files/icu4c/59.1/ you will see .asc for the binaries. This is new for 59.1.
- "sed xlocale/locale" - this is in  FS#55246  and should be removed when fixed. Please make sure to file a bug upstream when you hit things like this. Actually this was hit in  FS#55236  but not filed upstream.
- license - since ICU 58 the license is in /LICENSE not license.html. license.html does not contain the license.

Additional info:
* 59.1


Steps to reproduce:
n/a
This task depends upon

Closed by  Eli Schwartz (eschwartz)
Wednesday, 23 August 2017, 23:01 GMT
Reason for closing:  Fixed
Additional comments about closing:  in SVN
Comment by Steven R. Loomis (srl295) - Wednesday, 23 August 2017, 18:19 GMT
I added you to my list of 'ICU downstreams'.
Comment by Steven R. Loomis (srl295) - Wednesday, 23 August 2017, 18:19 GMT Comment by Eli Schwartz (eschwartz) - Wednesday, 23 August 2017, 19:37 GMT
https://www.archlinux.org/todo/use-gpg-signatures-and-https-sources/ marks this as complete, I guess at the time icu 58.1-1 was updated this wasn't available so those comments were added instead?
Comment by Steven R. Loomis (srl295) - Wednesday, 23 August 2017, 20:30 GMT
eschwartz: Hi! I'm also a very occasional Arch Linux user. Yes, I don't think we had the separate .asc files before 59.1. I can go back and add them…?
also if i read correctly you aren't using the https source from the PKGBUILD file, so perhaps that list is wrong?
Comment by Eli Schwartz (eschwartz) - Wednesday, 23 August 2017, 20:54 GMT
I don't know when you added HTTPS so I'm just guessing here, that maybe you hadn't enabled HTTPS at the time that icu was crossed off that list. andyrtr is the maintainer of the package, I just triage things occasionally. :)

It certainly cannot hurt to sign older releases as well, although in the context of Arch Linux packaging it really doesn't matter as we'll only be looking at current and new versions...

Anyway, everything you mentioned has been fixed in SVN, although it still has the comments which are now somewhat confusing. Plus it has unquoted $srcdir/$pkgdir :(

Loading...