Source: oci-seccomp-bpf-hook
Version: 1.2.10+ds-2
Severity: serious
Tags: ftbfs sid trixie
Justification: fails to build from source (but built successfully in the past)

Hi

This package FTBFS with this diff:

-# Dpkg.Copyright.Grant.ByFile Dpkg::Copyright::Grant::ByFile::_load_fill_blank_data Note: loading debian/fill.copyright.blanks.yml fixes (155)
+# Dpkg.Copyright.Grant.ByFile Dpkg::Copyright::Grant::ByFile::_load_fill_blank_data Note: loading debian/fill.copyright.blanks.yml fixes (156)

See build log:

https://salsa.debian.org/jas/oci-seccomp-bpf-hook/-/jobs/7412272

The same problem has happened a couple of times before:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1052084

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1093641

Running 'copyright-scan' when building the package seems to be error
prone because the output seems to change slightly over time and
depending on external factors. It is not good to FTBFS because of that.
I couldn't tell exactly what it is that trigger these diffs, do you
know? It seems likely it will happen again on some new external change.

Looking a bit further, this package has a lot of build dependencies:

6 upgraded, 879 newly installed, 0 to remove and 0 not upgraded.
Need to get 352 MB of archives.

Adding libconfig-model-dpkg-perl exaggerates that.

I propose to drop this part of the build stage of this package, what do
you think? Managing d/copyright file is usually done by the maintainer
not by build scripts. I'll do an upload shortly cleaning this up a bit
as part of regular Go team maintainance, and will fix the FTBFS this way
too, but happy to resolve it some other way too.

/Simon

--=-=-Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmf4X1kUHHNpbW9uQGpv c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh BLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XQkBQkNZGbwAAoJENc89jjFPAa+BtIA /iR73CfBurG9y8pASh3cbGOMHpDZfMAtosu6jbpO69GHAP4p7l57d+iVty2VQMsx +3TCSAvZkpr4P/FuTzZ8JZe8BrgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0 +MTXPPY4xTwGvgUCZ9F0SgUJDWRmSQCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE 8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J ENc89jjFPAa+wUUBAO64fbZek6FPlRK0DrlWsrjCXuLi6PUxyzCAY6lG2nhUAQC6 qobB9mkZlZ0qihy1x4JRtflqFcqqT9n7iUZkCDIiDbg4BFySz2oSCisGAQQBl1UB BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XTSBQkNZGboAAoJENc89jjF PAa+0M0BAPPRq73kLnHYNDMniVBOzUdi2XeF32idjEWWfjvyIJUOAP4wZ+ALxIeh is3Uw2BzGZE6ttXQ2Q+DeCJO3TPpIqaXDAAKCRBRcisI/kdFoombAP0evWVhGgkU ueRd9qN45JY7qPItrAtFh/POOkMqeJJ5YgEAzYZge/YqQLi78QkWotHNhVZqpGGA k7PQL12xRfML3A8=4xaE
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)