Is upstream dead, or did the project move? /usr/portage/app-admin/apg$ GENTOO_MIRRORS="" ebuild apg-2.3.0b-r5.ebuild fetch >>> Downloading 'http://www.adel.nursat.kz/apg/download/apg-2.3.0b.tar.gz' --2017-08-29 13:54:20-- http://www.adel.nursat.kz/apg/download/apg-2.3.0b.tar.gz Resolving www.adel.nursat.kz... failed: Name or service not known. wget: unable to resolve host address ‘www.adel.nursat.kz’ !!! Couldn't download 'apg-2.3.0b.tar.gz'. Aborting.
I did not find out if the project is dead or whether it has moved. Other distros [0] seem to use a local copy of the tar ball. I found the tar ball at fedora [1]. Maybe should use this right now. [0] http://www.freshports.org/security/apg/ [1] http://pkgs.fedoraproject.org/repo/pkgs/apg/apg-2.3.0b.tar.gz/bd82400a5a731070ce895313576afe24/apg-2.3.0b.tar.gz
here is an overview of distributions using apg: https://repology.org/metapackage/apg/versions
Any news? If you need help, please join IRC and ask on our channels. #gentoo-proxy-maint or #gentoo-dev-help
*** Bug 680448 has been marked as a duplicate of this bug. ***
Any updates on this package? It's still 404.
One of many password generators, but with dead upstream in this case. Masked for removal after 2020-10-01
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=00e737a3fe35140eeec7a579d036e6472d5b0e27 commit 00e737a3fe35140eeec7a579d036e6472d5b0e27 Author: Jonas Stein <jstein@gentoo.org> AuthorDate: 2020-08-13 22:25:39 +0000 Commit: Jonas Stein <jstein@gentoo.org> CommitDate: 2020-08-13 22:25:39 +0000 profiles: Last rite app-admin/apg One of many password generators, but with dead upstream in this case. Masked for removal after 2020-10-01 Bug: https://bugs.gentoo.org/629272 Signed-off-by: Jonas Stein <jstein@gentoo.org> profiles/package.mask | 6 ++++++ 1 file changed, 6 insertions(+)
Seems like app-admin/pwgen is a good alternative.
Sorry, but for me removing trivial package just because it does not have new versions/active upstream/maintainer is insane. app-admin/apg is a finished product with no needs (known to me) to be changed. It compiles, works, has no security issues (it's internal program without much space for attacks), no serious open bugs, is used by people (by hand and in scripts). Also the source code is small and trivial so any potential compilation issues (for example caused by changes to gcc or glibc, if any) should be very easy to fix by just about anyone. So why remove it? With this line of thinking you should promptly remove hello world too from everywhere - it didn't change for years and years. Also app-admin/pwgen doesn't have all the features that app-admin/apg has and anyone can confirm it in about half a minute. So it's not a drop-in replacement.
which important features does agp have? If it is really worth to be kept alive we should do it right with proper license and author tracking, upstream repository and bug tracker. We cannot use a cache or mirror as primary source.
(In reply to Jonas Stein from comment #10) > which important features does agp have? For example it allows to specify exact characters to be used in generated passwords. And a few other things that are not 1:1 portable to app-admin/pwgen. Also command line options differ so any scripts using apg would need heavier patching than s/apg/pwgen/. While I agree that such patching is not an end of the World but doing it just because a working and properly licensed package doesn't have known home page anymore is just... strange. > If it is really worth to be kept alive we should do it right with proper > license and author tracking I see file COPYING in the source package, license is some variant of BSD. It is also present in headers of source files. Also author is clearly mentioned, with email (not sure if working, I don't really care because apg works and I have no business bothering it's author). > upstream repository and bug tracker. > We cannot use a cache or mirror as primary source. If you _really_ need it you can probably host in on Gentoo infra or create github for it as original web page seems to be down. Or if really needed I can host it somewhere. Of course since it's very simple package without complicated eclasses, if you remove it I will easily survive by moving it to my own overlay.
* contacted author * found https://github.com/wilx/apg (please test and report)
Thank you. It seems this is some fork with ~minor changes from the user's point of view. Mostly: code style, warning, build system. Fork made no new release (yet?) but the fork author cared enough to import (at the begining of git history) many old versions, including the one that is currently in portage (newest released). The author (of the fork) is responsive, he even created release files for old versions after you(?) asked. I checked that the git import and github release file is consistent with Gentoo's current source. It seems that there were some minor whitespace changes to two txt man exports and there is new .gitattributes file (probably should be omited from release but it's harmless anyway). So no important difference found. So I believe you should have everything you need to keep this package alive. And if you really want you can create 99999 version for git head. I don't really care about new commits that much since I don't see any important fixes or features there but maybe I can test it when I find some spare time.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=aa72164a2295449bbe4728884441a79d21aa975d commit aa72164a2295449bbe4728884441a79d21aa975d Author: Andrew Savchenko <bircoph@gentoo.org> AuthorDate: 2020-09-30 15:16:32 +0000 Commit: Andrew Savchenko <bircoph@gentoo.org> CommitDate: 2020-09-30 15:21:26 +0000 app-admin/apg: version bump - switch to new upstream - update to the latest git head - port cracklib support to the new build system Closes: https://bugs.gentoo.org/629272 Package-Manager: Portage-3.0.8, Repoman-3.0.1 Signed-off-by: Andrew Savchenko <bircoph@gentoo.org> app-admin/apg/Manifest | 1 + app-admin/apg/apg-2.3.0b_p20150129.ebuild | 43 ++++++++++++++++++++ .../apg/files/apg-2.3.0b_p20150129-cracklib.patch | 47 ++++++++++++++++++++++ app-admin/apg/metadata.xml | 10 ++++- 4 files changed, 99 insertions(+), 2 deletions(-)
(In reply to Grzegorz Kulewski from comment #13) > It seems this is some fork with ~minor changes from the user's point of > view. Mostly: code style, warning, build system. Its not that simple with cracklib: new upstream rewrote the build system using autotools in much cleaner way, but dropped cracklib at all. So I added cracklib support back. > And if you really want you can create 99999 version for git head. I don't > really care about new commits that much since I don't see any important > fixes or features there but maybe I can test it when I find some spare time. The current version in tree (2.3.0b_p20150129) is the latest git head + cracklib-related Gentoo patches.
(In reply to Andrew Savchenko from comment #15) > Its not that simple with cracklib: new upstream rewrote the build system > using autotools in much cleaner way, but dropped cracklib at all. So I added > cracklib support back. I suggest opening a PR with upstream to get cracklib support merged back in?
(In reply to Andrew Savchenko from comment #15) > (In reply to Grzegorz Kulewski from comment #13) > > It seems this is some fork with ~minor changes from the user's point of > > view. Mostly: code style, warning, build system. > > Its not that simple with cracklib: new upstream rewrote the build system > using autotools in much cleaner way, but dropped cracklib at all. So I added > cracklib support back. > > > And if you really want you can create 99999 version for git head. I don't > > really care about new commits that much since I don't see any important > > fixes or features there but maybe I can test it when I find some spare time. > > The current version in tree (2.3.0b_p20150129) is the latest git head + > cracklib-related Gentoo patches. Thank you for your effort. As I said I don't really care about new versions (or cracklib), more for keeping apg generally working. But of course additional features are welcome. I tested this new version briefly and I believe it works, at least at a first glance. I will test it further and report issues, if any. Thank you again.
(In reply to Luke-Jr from comment #16) > (In reply to Andrew Savchenko from comment #15) > > Its not that simple with cracklib: new upstream rewrote the build system > > using autotools in much cleaner way, but dropped cracklib at all. So I added > > cracklib support back. > > I suggest opening a PR with upstream to get cracklib support merged back in? Yes, it's on my list, but not today :)
