Contributing to Debian is part of Freexian s mission. This article covers the latest achievements of Freexian and their collaborators. All of this is made possible by organizations subscribing to our Long Term Support contracts and consulting services. P.S. We ve completed over a year of writing these blogs. If you have any suggestions on how to make them better or what you d like us to cover, or any other opinions/reviews you might have, et al, please let us know by dropping an email to us. We d be happy to hear your thoughts. :)

SSO Authentication for jitsi.debian.social, by Stefano Rivera Debian.social s jitsi instance has been getting some abuse by (non-Debian) people sharing sexually explicit content on the service. After playing whack-a-mole with this for a month, and shutting the instance off for another month, we opened it up again and the abuse immediately re-started. Stefano sat down and wrote an SSO Implementation that hooks into Jitsi s existing JWT SSO support. This requires everyone using jitsi.debian.social to have a Salsa account. With only a little bit of effort, we could change this in future, to only require an account to open a room, and allow guests to join the call.

/usr-move, by Helmut Grohne The biggest task this month was sending mitigation patches for all of the /usr-move issues arising from package renames due to the 2038 transition. As a result, we can now say that every affected package in unstable can either be converted with dh-sequence-movetousr or has an open bug report. The package set relevant to debootstrap except for the set that has to be uploaded concurrently has been moved to /usr and is awaiting migration. The move of coreutils happened to affect piuparts which hard codes the location of /bin/sync and received multiple updates as a result.

Miscellaneous contributions

• Stefano Rivera uploaded a stable release update to python3.11 for bookworm, fixing a use-after-free crash.
• Stefano uploaded a new version of python-html2text, and updated python3-defaults to build with it.
• In support of Python 3.12, Stefano dropped distutils as a Build-Dependency from a few packages, and uploaded a complex set of patches to python-mitogen.
• Stefano landed some merge requests to clean up dead code in dh-python, removed the flit plugin, and uploaded it.
• Stefano uploaded new upstream versions of twisted, hatchling, python-flexmock, python-authlib, python mitogen, python-pipx, and xonsh.
• Stefano requested removal of a few packages supporting the Opsis HDMI2USB hardware that DebConf Video team used to use for HDMI capture, as they are not being maintained upstream. They started to FTBFS, with recent sdcc changes.
• DebConf 24 is getting ready to open registration, Stefano spent some time fixing bugs in the website, caused by infrastructure updates.
• Stefano reviewed all the DebConf 23 travel reimbursements, filing requests for more information from SPI where our records mismatched.
• Stefano spun up a Wafer website for the Berlin 2024 mini DebConf.
• Roberto C. S nchez worked on facilitating the transfer of upstream maintenance responsibility for the dormant Shorewall project to a new team led by the current maintainer of the Shorewall packages in Debian.
• Colin Watson fixed build failures in celery-haystack-ng, db1-compat, jsonpickle, libsdl-perl, kali, knews, openssh-ssh1, python-json-log-formatter, python-typing-extensions, trn4, vigor, and wcwidth. Some of these were related to the 64-bit time_t transition, since that involved enabling -Werror=implicit-function-declaration.
• Colin fixed an off-by-one error in neovim, which was already causing a build failure in Ubuntu and would eventually have caused a build failure in Debian with stricter toolchain settings.
• Colin added an sshd@.service template to openssh to help newer systemd versions make containers and VMs SSH-accessible over AF_VSOCK sockets.
• Following the xz-utils backdoor, Colin spent some time testing and discussing OpenSSH upstream s proposed inline systemd notification patch, since the current implementation via libsystemd was part of the attack vector used by that backdoor.
• Utkarsh reviewed and sponsored some Go packages for Lena Voytek and Rajudev.
• Utkarsh also helped Mitchell Dzurick with the adoption of pyparted package.
• Helmut sent 10 patches for cross build failures.
• Helmut partially fixed architecture cross bootstrap tooling to deal with changes in linux-libc-dev and the recent gcc-for-host changes and also fixed a 64bit-time_t FTBFS in libtextwrap.
• Thorsten Alteholz uploaded several packages from debian-printing: cjet, lprng, rlpr and epson-inkjet-printer-escpr were affected by the newly enabled compiler switch -Werror=implicit-function-declaration. Besides fixing these serious bugs, Thorsten also worked on other bugs and could fix one or the other.
• Carles updated simplemonitor and python-ring-doorbell packages with new upstream versions.
• Santiago is still working on the Salsa CI MRs to adapt the build jobs so they can rely on sbuild. Current work includes adapting the images used by the build job, implementing the basic sbuild support the related jobs, and adjusting the support for experimental and *-backports releases..
  Additionally, Santiago reviewed some MR such as Make timeout action explicit in the logs and the subsequent Implement conditional timeout verbosity, and the batch of MRs included in https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/482.
• Santiago also reviewed applications for the improving Salsa CI in Debian GSoC 2024 project. We received applications from four very talented candidates. The selection process is currently ongoing. A huge thanks to all of them!
• As part of the DebConf 24 organization, Santiago has taken part in the Content team discussions.

Luke Peterson from UC Davis came to visit me in Reno and we spent the last weekend hacking on the Python Dynamics package that uses SymPy to calculate equations of motion for basically any rigid body system.

On Friday we did some preliminary work, mostly on the paper, Luke showed me his rolling torus demo that he did with the proprietary autolev package. We set ourselves a goal to get this implemented in SymPy by the time Luke leaves and then we went to the Atlantis casino together with my boss Pavel and other guys from the Desert Research Institute and I had my favourite meal here, a big burger, fries and a beer.

On Saturday we started to code and had couple lines of the autolev torus script working. Then we went on the bike ride from Reno to California. I took some pictures with Luke's iphone:


Those mountains are in California and we went roughly to the snow line level and back:

This is Nevada side:


That was fun. Then we worked hard and by the evening we had a dot product and a cross product working, so we went to an Irish pub to have couple beers and I had my burger as usual.

On Sunday we spent the whole day and evening coding and we got the equations of motion working. On Monday we worked very hard again:



and fixed some remaining nasty bugs. I taught Luke to use git, so our code is at: http://github.com/hazelnusse/pydy, for the time being we call it pydy and after we polish everything, we'll probably put it into sympy/physics/pydy.py. If you run rollingtorus.py, you get this plot of the trajectory of the torus in a plane:

It's basically if you throw a coin on the table, e.g. this model takes into account moments of inertia, yaw (heading), lean, spin and the x-y motion in the plane. Depending on the initial conditions, you can get many different trajectories, e.g for example:

or:


This is very exciting, as the code is very short, and most of the things that Luke needs are needed for all the other applications of sympy, e.g. a good printing of equations and vectors (both in the terminal and in latex), C code generation, fast handling of expressions, nice ipython terminal for experimentation, plotting, etc.

Together with the atomic physics package that we started to develop with Brian sympy will soon be able to cover some basic areas of physics. Other areas are general relativity (there is some preliminary code in examples/advanced/relativity.py) and quantum field theory and Feynman diagrams - for that we need someone enthusiastic that needs this for his/her research --- if you are interested, drop me an email, you can come to Reno (or work remotely) and we can get it done.

My vision is that sympy should be able to handle all areas of physics, e.g. it needs good assumptions (if you want to help out, please help us test Fabian's patches here), then faster core, we have a pretty good optional Cython core here, so we'll be merging it after the new assumptions are in place. Then sympy should have basic modules for most areas in physics so that one can get started really quickly. From our experience so far in sympy/physics, those modules will not be big, as most of the functionality is not module specific.

Steven Brust is a big tease. His most recent Vlad Taltos novel is full of tease for two reasons:

• He jumps back in the timeline so that we hear nothing of Lady Teldra.
• The acknowledgements of the novel mention the use of some "emacs macros" with no hint of what they are, or why he uses them.

It was a fun read though, and didn't make me as hungry as the previous volume did. (Mmmmmm pies food.) I always liked him as an author, and he rocks for publishing Dzur around the time I was telling local people "Too many people seem to write novels in which nobody really eats. Forget all that action, dialog, and exposition. Lets have a bunch of folk sit down and eat an exceptionally well described meal." (Many things that people do are never described in books. We all know why. Still on the same subject I love the scene in Terry Pratchetts Pyramids where Teppic puts his outfit on. "And slowly falls over". Nice) ObFilm: Blade

(This blog post is in Latvian and is about a public discussion that the capital of Latvia, Riga is having about where to put new bicycle racks in the center of the city. In the post I point to an article describing where to send in suggestions, point out a few possible locations for such racks and suggest installing racks with build-in locks that would require inserting a refundable coin to remove the key locking a bike in place) R gas dome v c ierosin jumus par jaunu velost vvietu novietojumu R gas centr . Es tur nos t ju sekojo us ieteikumus, parosieties ar j s. Vislab k velovietnes b tu izvietot t d viet , kas b tu p rredzama no ce iem, pa kuriem iet daudz cilv ku un ar kur b tu novietotas dro bas nov ro anas kameras, lai minimiz tu z dz bu risku. Viena vietne var tu atrasties Str lnieku laukum vai t tuvum , jo tur ir viegla piek uve no Krasta ielas. Vieta starp RTU ku Ka u 1 un
Krasta ielu var tu b t oti piem rota. Tas ar ierosin s studentus lietot velotransportu pa ce am uz lekcij m Ka u iel . Alberta laukuma var tu atrasties vieta velosip du novieto anai - vieta ir viegli pieejama no Stacijas puses un ir tuvu vair k m viesn c m. Ja ir pl ni izveidot Pay&Ride autom tisko velosip du nomu, tad is var tu b t par vienu no vislab kajiem punktiem dai iecerei. Pils laukums ir viegli sasniedzams no P rdaugavas pa Van u tiltu. Ja tur izveidotu velost vvietu, tad tas iev rojami atvieglotu iesp ju atbraukt ar velosip du pa J rmalas veloceli u p ri Van u tiltam, nogriezties pa labi un uzreiz dro i noparkoties. T pat l dzu apv rt ideju pielietot velovietnes ar ieb v tu atsl gu, lai neb tu nepiecie ams vest l dzi savu sl dzeni. Katrai vietai var tu b t sava sl dzene (bieza un pietieko i gara cietmet la trose) un atsl ga. Atsl gu var tu iz emt no sl dzenes tikai tad, kad sl dzene ir aiztais ta un sl dzenes meh nism ir ielikta 1 Ls mon ta. Atsl dzot sl dzeni ar atsl gu mon ta tiktu atdota atpaka . Tas nodro in s pret vand lismu, kad vienk r i vis m sl dzen m tiktu iz emtas atsl gas un aizmestas prom. Ta u jebkur gad jum j b t vieglam veidam k aizvietot nozaud t s atsl gas gan gad jumos kad velosip da pa nieks to pieprasa (tas var aiz emt vair kas dienas un pras t 5-10 Ls un iesnieguma uzrakst anu) vai ar kad velosip ds ir pamests piesl gt st vokl . Jaunas atsl gas izgatavo anai nevajadz tu pras t vair k k 1 Ls no pils tas bud eta, tad tas 1 Ls sl dzen os izdevumus atmaks s.

Live CD on a removable disk Eros is a hardware guru that happened to be the unknown guy sitting next to me on a plane. He happens to be a happy Kubuntuer. While chatting, he told me one of his systems is an external hard drive made by copying a Kubuntu live CD image on it. Why did you do so? I asked. Because this way I can plug it in any computer, and it'll do hardware detection at boot. However it's a hard drive, so it's fast, and I can keep my home and all my customisations on it. I had never thought of it. That's an interesting and smart (ab)use of a live CD. Now I wonder: what would be required to plug the live CD boot time hardware detection infrastructure on an existing Debian or Ubuntu instalation? Update: slh on IRC suggests (a bit edited by me):

A lot of the former "obscure black magic" for live CDs isn't needed anymore. What is needed is: a kernel with static usb-storage, libusual, ehci-hcd, ohci-hcd, uhci-hdc (or an appropriate initrd/ initramfs). udev takes care of most h/w detection issues these days. As long as everything needed to boot is contained in a single partition you don't need a fstab: udev, hal and pmount take care of the rest, procfs, sysvfs, devpts, usbfs, shm are mounted by sysvinit. All what is left is a tool to create the xorg.conf while booting (those tools exist and just need to be called early). Everything else is just a matter of convenience: enhancing the live span of the USB key by changing data into tmpfs, etc.; if passwordless logins are required then xsession and inittab need to be changed; new ssh host keys generated on boot; small stuff. With ordinary flash storage, jffs2 and something to reduce write access is a good idea: perhaps unionfs for /var/ and /home/, bind mounting /tmp/ on /var/tmp/), but that's also not strictly necessary. Mostly it boils down to running the xorg-creation script at every boot time. There are various tools to do that. Some are here, but there is surely more. (Enrico's note: do we have anything in Debian that we can install and just does that?) Since USB and PS/2 mice share the same device since kernel 2.6, that part of xorg.conf doesn't strictly need to be detected, same for the keyboard (alps and synaptic touchpads can be easily detected) and X.org can use the screen's ddc info although it's not always reliable. It can boil down to just detecting the video chipset: something like this, that uses PCI IDs from discover1-data. It can also become a lot easier with X.org's own ddc detection, which almost boils down to configuring input devices and selecting the video driver. If I understand Daniel Stone correctly, X.org will soon improve its detection routines (fail safe X (auto-)configuration) as well in X.org 7.3. xresprobe is in debian: it's pretty similar to ddcxinfo-kanotix, both forked off RedHat's kudzu package - and all fail miserably on amd64. That's why ddcxinfo has a fallback to 1024*768 @75 Hz which "always works (+manual overrides)".

Kudzu Zangpo La (very honored to meet you) So, the reason for which I travelled so long a few days ago was the Dzongkha Linux Launch. This event has been incredibly successful and rich for me, today. Just imagined that several ministries of Bhutan were attending the launch of a Debian-derived distribution, entirely localized in the Dzongkha language, the national language of Bhutan. I expected something really motivating but I can assure you, my dear Debian friends, that I wasn't expecting something with so much importance for that country. Seeing the "Chief Guest" of the event, the Honorable ministry of Education, say that "we had a collective dream and we realized it" and seeing that small CD containing a full Linux system, entirely using the Dzongkha language, that can be used by any, or nearly any, person in Bhutan, is a huge achievement. Actually, I was proud to mention that this "dream" is indeed the dream that motivates many actors of the Free Software Movement since 20 years and me since about 10 years. So, actually, I was deeply honored to represent the Debian project here and be invited to give a keynote lecture about "Free SOftware and the Global Community". I will certainly write a more formal report about this and send it to -devel-announce, but I already wanted to share my enthusiasm with all you, people in the Debian community, who are the ones who make this possible.