[Pkg-clamav-devel] Hi everybody

[Stephen Gran]

Hi all,

I see people have been introducing themselves, so I might as well also.

I'm the current maintainer of ClamAV in Debian, and have been looking
after it since sometime before the Sarge release.  I've been a DD for
about 5 years now, and peripherally involved for a little longer than
that.

I think the next thing to do is to have a nice flamewar^Wdiscussion
about what VCS to use :)

I have used a variety of things over the years, from release-based
directories on disk to svn, now git.  I'm happy to use almost anything
(for a version of 'almost anything' that does not include bzr :), but I
am personally happiest with git at the moment.

I have a git-svn setup to track upstream, and I have a git repo for the
debian work.  It's quite likely that it could use some reorganization,
since I set it up as I was learning git, and there's probably several
pieces of it that could be done better.

The main thing that I need help with these days is getting security and
volatile updates out the door in a timely manner.  This means that every
new upstream release needs to be packaged for unstable (with associated
fixes to the maintainer scripts to handle new config file and so on
changes), then merged into volatile, and then combing the diff to see
what security relevant changes happened in the release.  The last bit is
often fairly tedious, since upstream does not always announce every
security issue, and frequently we or another distributor will notice the
fix a few days or weeks after the release.

We also need to repackage the upstream tarball at each release, since it
contains some bundled code copies that are not compatible with the GPL
(the libclamunrar/ subdirectory of the source - I've spoken with upstream
about splitting it out, showed them patches for dlopen'ing it, etc, but
so far no results).

So, I think once we settle what VCS to use, the next thing to do is to
figure out how we want the repo set up, and then get it in shape for the
upcoming 0.94 release.  Upstream has already released RC1, so it's
likely that 0.94 final isn't that far away, and I'd like to see us ready
to handle it before it hits the streets.

Thanks all,
-- 
 -----------------------------------------------------------------
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran at debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |
 -----------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-clamav-devel/attachments/20080823/87bf1f99/attachment.pgp