Differences between revisions 11 and 12
Revision 11 as of 2021-04-14 09:18:35
Size: 4881
Editor: GuillemJover
Comment: Use OpenPGP instead of GPG when referring to keys or the standard
Revision 12 as of 2021-04-16 20:03:58
Size: 693
Comment: Retire Debexpo/Development page
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
This page is for coordinating and discussing development efforts, currently going on on Expo. While you can add your own ideas here, please note ''this page is not a wish list''. Debexpo development has moved to [[https://salsa.debian.org/mentors.debian.net-team/debexpo/|salsa.debian.org]].
Line 3: Line 3:
<<TableOfContents>> Here are a few helpful links for development:
Line 5: Line 5:
Please use this page to let other people know, what existing ideas are, and who intends to implement them. If you are looking for work, have a look to our [[https://alioth.debian.org/tracker/?atid=413115&group_id=100127&func=browse|bug list]] and drop a note if you are working on something - or add yourself here below.  * [[https://salsa.debian.org/mentors.debian.net-team/debexpo/-/issues|Salsa Repository]]
 * [[https://salsa.debian.org/mentors.debian.net-team/debexpo/-/issues|Feature requests and issues]]
 * [[https://salsa.debian.org/mentors.debian.net-team/debexpo/-/blob/live/docs/contributing.rst|Contributing guide]]
 * [[https://salsa.debian.org/mentors.debian.net-team/debexpo/-/blob/live/docs/installing.rst|Setup a debexpo instance]]
Line 7: Line 10:
= Shiny new features =
== Open tasks ==

 Implement the Sponsor Metrics::
 :: Owner: <you?>
 :: Bug: None
 :: More: [[DebianMentorsNet#Metrics]]
 :: Status: Open

 Integrate with Debian Teams::
 :: Owner: <you?>
 :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313253&group_id=100127&atid=413115|Alioth]]
 :: Status: Open

 Social website idea: add review marking and user ranking to expo and/or ACK::
 :: Owner: <you?>
 :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313252&group_id=100127&atid=413115|Alioth]]
 :: Status: Open (see RFS comments below)

 Integrate the sponsorship-requests pseudo-package handling::
 :: Owner: <you?>
 :: Bug: None
 :: Status: paultag made some bits. Bug him to get his work into Debexpo

 Remove accounts from e-mails we send out but bounce back::
 :: Owner: <you?>
 :: Bug: None
 :: Status: open


== Done stuff ==

 Use the GPG class to determine uploader (for FTP uploads at least)::
 :: Owner: daemonkeeper
 :: Bug: None
 :: Status: Done, went live in v2

 Refactor the plugin infrastructure to increase readability and normalization of outputs::
 :: Owner: olasd
 :: Bug: None
 :: Status: Done, went live in v2


= Bug fixes and improvements =

== Open tasks ==

 Verify the ownership of the uploaded OpenPGP key::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: We currently don't check if the OpenPGP key actually is owned by the user. We should make sure that a uid on the key matches the email address of the account, and do some challenge/response to assert ownership of the private key.
 :: Where to look: `debexpo/controllers/my.py`


 Verify the strength of the OpenPGP keys::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: We should check if the keys uploaded to mentors.debian.net are strong enough for inclusion in the debian keyring, and warn the user if it is not.
 :: Where to look: `debexpo/controllers/my.py`

 Use OpenPGP to verify the uploader of the package::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: mentors.debian.net associates the uploaded files to an account on the website by using the Changed-By field. We should use the OpenPGP uid instead.
 :: Where to look: `bin/debexpo_importer.py`

 Make users accept the DMUP before allowing uploads::
 :: Owner: <you ?>
 :: Bug: None
 :: Status: TODO
 :: Details: mentors.debian.net aims at becoming an official Debian service, hosted on Debian hardware. For this to happen, we need among other things that users accept the Debian Machine Usage Policy before allowing them to upload packages.
 :: Where to look: `debexpo/model/users.py` (database), `debexpo/controllers/my.py` (user interface), `bin/debexpo_importer.py` (pre-import check)

== Tasks being assigned to someone ==

  Lost password feature does not work for accounts not activated yet::
  :: Assigned to: Asheesh
  :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313271&group_id=100127&atid=413115|Alioth]]
  :: Status: ?
 
 Add proper archive meta data for repositories (e.g. Sources.gz files)::
 :: Assigned to: open, olasd wanted to work on that
 :: Bug: none
 :: Status: ?


 Add a nicer HTML web design::
 :: Assigned <you?>
 :: Bug: none
 :: Status: TODO
 
== Done ==

 Reject certain packages which don't meet the bare essential minimal criterias::
 :: Assigned to: daemonkeeper
 :: Bug: none
 :: Status: Went live in v1

  Rework the viewer class to come over HTML display issues::
  :: Assigned to: olasd
  :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313242&group_id=100127&atid=413115|1]], [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313275&group_id=100127&atid=413115|2]], [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313272&group_id=100127&atid=413115|3]]
  :: Status: Done, went live in v2
  
 Remove packages from Expo which have been uploaded to Unstable::
 :: Assigned to: daemonkeeper
 :: Bug: none
 :: Status: Done, went live in v2

 Adding comments leads to an "Internal Server Error"::
 :: Assigned to: olasd
 :: Bug: [[https://alioth.debian.org/tracker/index.php?func=detail&aid=313301&group_id=100127&atid=413115|Alioth]]
 :: Status: Done, went live in v2.2
Join us on OFTC IRC network, on [[https://webchat.oftc.net/?channels=%23debexpo|#debexpo]].

Debexpo development has moved to salsa.debian.org.

Here are a few helpful links for development:

Join us on OFTC IRC network, on #debexpo.