[Debian-med-packaging] Comments regarding openmrs_1.6.1-1_amd64.changes

[Mike O'Connor]

On Tue, 9 Nov 2010 19:03:25 -0600, Misha Koshelev <misha680 at gmail.com> wrote:
> Hi Mike et al:
> 
> Thank you so much for the clarification.
> 
> > I think the initial concern was that your upstream source contained
> > .class files for which there might not be source files (.java files).
> > If that is the case, the upstream source will need to be modified
> > (either to omit the binaries for which source isn't included, or to
> > include the source).
> 
> Fyi, I don't think removing the JAR dependencies is a practical option
> for OpenMRS, especially in a version that has already been released.

Why doesn't it make sense?  You can alter the upstream tarball to remove
the JARs.  It doesn't mean that upstream has to remove them.  This is
done commonly, and the convention is to append "dfsg" to the upstream
version string to indicate this has happened, and to annotate this
change in README.source.

> 
> Thus, your suggestion seems to be to include the source for all the binary JARs.
> 
Note that this only really makes sense if the source is part of the same
project.  If the source of these jars is from some other project, they
probably shoudl be packaged in a separte source tarball.

If the sources are already packaged in some other debian package they
should not also appear in yours unless it is an exceptional circumstance
that warrants the the additional mirror space and the additional
potential work by security team / porters / etc.

> This seems like a great suggestion. However, I would appreciate any
> hints on how to go about doing this...
> 
> Specifically, if I understand correctly the problem with tools such as
> Maven is that, during _build_ time, network access is not allowed.

I don't know much about maven, but your package must be able to build
From source without network access.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/debian-med-packaging/attachments/20101110/9b3d80c6/attachment.pgp>