REVU

Differences between revisions 2 and 30 (spanning 28 versions)
Revision 2 as of 2005-06-26 17:44:44
Size: 1207
Editor: p5494D04C
Comment:
Revision 30 as of 2006-01-03 20:17:47
Size: 5280
Editor: bur91-2-82-231-159-240
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
revu is the current working name of a review tool for [:MOTU] Uploads.
This service is highly experimental at the moment and involves quite some
manual interaction. The service is located at http://siretart.tauware.de/revu
{{{
 ATTENTION: REVU HAS MOVED! Please update your dput.cf
}}}
Line 5: Line 5:
== To register as reviewer == [http://revu.tauware.de/ REVU] is a web-based tool to allow people who have worked on packages a chance to "put their packages out there" for other people to look at and comment on in a structured manner.
Once a packager's PGP Key has been added to the keyring, the packager can begin to upload his packages to REVU. They are then commented by reviewers and the packager can send updates of his package to REVU till it gets advocated by at least 2 MOTUs. When that point is reached, a MOTU uploads the approved package to Universe.

This service is experimental at the moment and involves quite some
manual interaction. The service is located at [http://revu.tauware.de].


== Contribute as uploader ==

=== Why contribute as uploader ? ===

You would like a program to be distributed in Ubuntu, but it's not already available in the development version of either Ubuntu (currently DapperDrake) or Debian (Sid) ?
Then you might package this program and upload it to REVU. In order to do so, you need to register as an uploader on the REVU system.


=== Register as uploader ===

What you need :

 * A GPGKey
 * Know how to make Debian packages (see PackagingTips)
 * One or more new packages to upload

It is not necessary to GetYourKeySigned, but it is a good idea anyway. Please send a signed email with your GnuPG keyid to keyring@tiber.tauware.de. One of the REVU admins will add you then to the uploaders keyring (== Upload rights for REVU). You don't need a password to upload packages, only to log in to the website and reply to comments.

Please note that all uploaders for universe have been added to the REVU keyring!


=== Howto login ===

After your first upload, you will be automatically registered to the database and assigned a random password. Use the email address you used in the changelog file of your upload as login and press the 'recover password' link, so as to receive your password by email.


=== View and comment uploads ===

Packages uploaded to REVU are made public. You can browse them without logging in to the system.
However, commenting uploads is only available to registered users. As an uploader, you can only comment your own uploads. This can be useful to give reviewers some infos on the changes you made between two uploads of your packages.


=== Additional rules ===
(moved from UniverseCandidates)

 * you must have reviewed this package for known security vulnerabilities and provide patches for all of them
 * we can refuse the package on the grounds of known security problems and design
 * you must have included a copyright and licence file, and those must allow inclusion of the package in the universe component and on mirrors
 * the package must be known to build on top of the main component of the current ubuntu stable release, it may require other packages already in universe


=== Getting help ===

If you need help on these steps or if you have more questions about REVU, you can ask on #ubuntu-motu on the Freenode network.


== Contribute as reviewer ==


=== Why contribute as reviewer ? ===

You have knowledge in packaging and knows policy well?
Then you can help improving the packages uploaded to universe and guide packagers in doing so, by contributing as a reviewer on REVU.


=== Register as reviewer ===


What you need :

 * A GPGKey
 * Be a ["MOTU"]
Line 8: Line 76:
siretart@tauware.de. I will add you as Reviewer to the database and add
your key to the uploaders keyring
keyring@tiber.tauware.de. We will mark you as Reviewer in the database.
Line 11: Line 78:
== To register as uploader ==
Line 13: Line 79:
Please send a signed email with your GnuPG keyid to siretart@tauware.de. I will
add you then to the uploaders keyring.
=== Howto upload ===
Line 16: Line 81:
== Howto upload == Once a package has been advocated by two reviewers on REVU, a MOTU can upload it to the universe repository.
Line 18: Line 83:
The upload process is similar to uploading to ubuntu, see [Uploads]. Here is a dput snippet: The upload process is similar to uploading to ubuntu, see [:Uploads]. Here is a dput snippet:
Line 21: Line 86:
  fqdn = tauware.de
  incoming = /
  fqdn = revu.tauware.de
  incoming = /incoming
Line 26: Line 91:
Don't forget to adjust your [DEFAULT] section to look like this: Don't forget to adjust your [DEFAULT] section to have an entry like this:
Line 31: Line 96:
Please do only signed uploads, and please always include the orig tarball (use option "-sa" to debuild/dpkg-buildpackage) Please do only signed uploads, and please always include the orig tarball. Otherwise reviewers won't be able to look at your extracted source package. When building with dpkg-buildpackage, you can use options "-S -sa -rfakeroot" to build only the source package and also include the original source in the package.

After the package is built, you can use dput with the above config file changes to upload it by specifying just the *_source.changes file that was created, ie. dput *_source.changes. If your firewall requires a passive FTP, dput will seem to hang while uploading. In that case, try "dput -P *_source.changes".

If you are reuploading a changed package (after receiving reviews), you may get an error like this:
{{{
  Upload package to host revu
  Already uploaded to tauware.de
  Doing nothing for myapp_source.changes
}}}
To fix, add the -f option to dput to force the upload.

Processing of uploads is done every 5 min. So, if your upload doesn't show up, please contact siretart@tauware.de or siretart in #ubuntu-motu
Line 34: Line 111:
== This service sucks / I can do better == == Feature Requests ==
please use [http://revu.tauware.de/cgi-bin/trac.cgi The revu-Development-Center] for feature requests and bug reports.
Line 36: Line 114:
Please contact one of siretart, sistpoty or \sh in #ubuntu-motu for access to the svn
repository and help us to improve ;)
["CategoryMOTU"]

 ATTENTION: REVU HAS MOVED! Please update your dput.cf

[http://revu.tauware.de/ REVU] is a web-based tool to allow people who have worked on packages a chance to "put their packages out there" for other people to look at and comment on in a structured manner. Once a packager's PGP Key has been added to the keyring, the packager can begin to upload his packages to REVU. They are then commented by reviewers and the packager can send updates of his package to REVU till it gets advocated by at least 2 MOTUs. When that point is reached, a MOTU uploads the approved package to Universe.

This service is experimental at the moment and involves quite some manual interaction. The service is located at [http://revu.tauware.de].

Contribute as uploader

Why contribute as uploader ?

You would like a program to be distributed in Ubuntu, but it's not already available in the development version of either Ubuntu (currently DapperDrake) or Debian (Sid) ? Then you might package this program and upload it to REVU. In order to do so, you need to register as an uploader on the REVU system.

Register as uploader

What you need :

  • A GPGKey
  • Know how to make Debian packages (see PackagingTips)

  • One or more new packages to upload

It is not necessary to GetYourKeySigned, but it is a good idea anyway. Please send a signed email with your GnuPG keyid to keyring@tiber.tauware.de. One of the REVU admins will add you then to the uploaders keyring (== Upload rights for REVU). You don't need a password to upload packages, only to log in to the website and reply to comments.

Please note that all uploaders for universe have been added to the REVU keyring!

Howto login

After your first upload, you will be automatically registered to the database and assigned a random password. Use the email address you used in the changelog file of your upload as login and press the 'recover password' link, so as to receive your password by email.

View and comment uploads

Packages uploaded to REVU are made public. You can browse them without logging in to the system. However, commenting uploads is only available to registered users. As an uploader, you can only comment your own uploads. This can be useful to give reviewers some infos on the changes you made between two uploads of your packages.

Additional rules

(moved from UniverseCandidates)

  • you must have reviewed this package for known security vulnerabilities and provide patches for all of them
  • we can refuse the package on the grounds of known security problems and design
  • you must have included a copyright and licence file, and those must allow inclusion of the package in the universe component and on mirrors
  • the package must be known to build on top of the main component of the current ubuntu stable release, it may require other packages already in universe

Getting help

If you need help on these steps or if you have more questions about REVU, you can ask on #ubuntu-motu on the Freenode network.

Contribute as reviewer

Why contribute as reviewer ?

You have knowledge in packaging and knows policy well? Then you can help improving the packages uploaded to universe and guide packagers in doing so, by contributing as a reviewer on REVU.

Register as reviewer

What you need :

  • A GPGKey
  • Be a ["MOTU"]

Please send a signed and encrypted mail with your password and GnuPG keyid to keyring@tiber.tauware.de. We will mark you as Reviewer in the database.

Howto upload

Once a package has been advocated by two reviewers on REVU, a MOTU can upload it to the universe repository.

The upload process is similar to uploading to ubuntu, see [:Uploads]. Here is a dput snippet:

  [revu]
  fqdn = revu.tauware.de
  incoming = /incoming
  login = anonymous

Don't forget to adjust your [DEFAULT] section to have an entry like this:

  default_host_main = revu

Please do only signed uploads, and please always include the orig tarball. Otherwise reviewers won't be able to look at your extracted source package. When building with dpkg-buildpackage, you can use options "-S -sa -rfakeroot" to build only the source package and also include the original source in the package.

After the package is built, you can use dput with the above config file changes to upload it by specifying just the *_source.changes file that was created, ie. dput *_source.changes. If your firewall requires a passive FTP, dput will seem to hang while uploading. In that case, try "dput -P *_source.changes".

If you are reuploading a changed package (after receiving reviews), you may get an error like this:

  Upload package to host revu
  Already uploaded to tauware.de
  Doing nothing for myapp_source.changes

To fix, add the -f option to dput to force the upload.

Processing of uploads is done every 5 min. So, if your upload doesn't show up, please contact siretart@tauware.de or siretart in #ubuntu-motu

Feature Requests

please use [http://revu.tauware.de/cgi-bin/trac.cgi The revu-Development-Center] for feature requests and bug reports.

["CategoryMOTU"]

MOTU/Packages/REVU (last edited 2011-12-08 16:58:49 by static-50-53-26-176)