Participants ============ alexm, kanashiro, nickm, ntyni, dod (silent), carnil (waving), gregoa Agenda ====== from https://wiki.debian.org/Teams/DebianPerlGroup/LHF/Agenda * Make all the packages autopkgtestable * Upgrade packages to the latest upstream release * Sprint May 2016, Zurich * DebCamp, DebConf, Sprint at DebCamp, BoF at DebConf * lintian: hardening-no-bindnow and friends * Perl 5.22 cleanup: ** https://lintian.debian.org/tags/versioned-dependency-satisfied-by-perl.html ** https://lintian.debian.org/tags/mentions-deprecated-usr-lib-perl5-directory.html ** https://lintian.debian.org/tags/libmodule-build-perl-needs-to-be-in-build-depends.html Sprint Zurich ============= * alexm to send a mail to the list about travel expenses * gregoa to follow up with ho(s)tel findings * TBD: link from general sprints page + announce DebConf ======= * Not yet clear who will attend New lintian hardening-no-* warnings =================================== * Q: Add them manually to all arch:any packages, ignore, hope for dpkg, something else? * "adding hardening+=all to individual packages one by one doesn't seem very productive" * --pkg-perl debhelper addon? Add them to perl_* build systems in debhelper? * "it would be nice to have some statistics on possible breakage of pkg-perl packages with hardening=+all. [patching debhelper] changing /etc/dpkg/buildflags.conf locally to set that and running a test rebuild should do." * Maybe Dom can run his test machinery, otherwise ntyni can look at it. * "+all begs for future breakage", enable only what's needed --> bindnow and pie (dpkg-buildflags(1)) --> export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow,+pie * Wait for test results before going on; adding flags to some individual packages ok. Bugs & packages =============== * Some bugs have been filed during the meeting as well :) * Work on https://lintian.debian.org/tags/libmodule-build-perl-needs-to-be-in-build-depends.html happened.