debian/changelog

@@ -2,7 +2,7 @@ samba (2:4.9.1+dfsg-2) UNRELEASED; urgency=medium
 
   * Enable --accel-aes=intelaesni on DEB_HOST_ARCH_CPU=amd64 instead of
     DEB_HOST_ARCH=amd64. This matches samba-libs.install and adds x32
-  * Allow to change password via passwd in default config
+  * Allow one to change password via passwd in default config
     - third_party: Update pam_wrapper to version 1.0.7
     - third_party: Add pam_set_items.so from pam_wrapper
     - nsswitch: Add try_authtok option to pam_winbind

debian/gitlab-ci.yml

+# Warning! This file is autogenerated by salsa pipeline bot. Any change made
+# over this document will be lost. Customization and changes must be made over
+# the template yaml.
+variables:
+  DEBFULLNAME: "Salsa Pipeline"
+  DEBEMAIL: "<salsa-pipeline@debian.org>"
+  DEBIAN_FRONTEND: noninteractive
+  WORKING_DIR: ./debian/output
+
+stages:
+  - build
+  - test
+
+image: debian:unstable
+
+build package:
+  stage: build
+  image: registry.salsa.debian.org/salsa-ci-team/images/dockerbuilder
+  artifacts:
+    expire_in: 180 day
+    name: "$CI_BUILD_NAME"
+    paths:
+        - ${WORKING_DIR}/
+  script:
+    - eatmydata apt-get update
+    - eatmydata apt-get dist-upgrade -y
+    - eatmydata apt-get install build-essential devscripts git-buildpackage pristine-tar ca-certificates fakeroot --no-install-recommends -y
+    - eatmydata apt-get build-dep -y .
+    - eatmydata gbp pull --ignore-branch --pristine-tar --track-missing
+    - eatmydata gbp buildpackage --git-ignore-branch --git-export-dir=${WORKING_DIR}
+
+run autopkgtest:
+  stage: test
+  image: registry.salsa.debian.org/salsa-ci-team/images/autopkgtest
+  script:
+    - eatmydata rm /usr/sbin/policy-rc.d
+    - eatmydata autopkgtest -U ${WORKING_DIR}/*.deb -- null
+
+run lintian:
+  stage: test
+  image: registry.salsa.debian.org/salsa-ci-team/images/lintian
+  script:
+    - lintian -iI ${WORKING_DIR}/*.changes
+
+run reprotest:
+  stage: test
+  image: registry.salsa.debian.org/salsa-ci-team/images/reprotest
+  artifacts:
+    name: "$CI_BUILD_NAME"
+    expire_in: 180 day
+    paths:
+      - ./reprotest.log
+    when: always
+  script:
+    - apt-get update
+    - eatmydata apt-get build-dep -y .
+    - export DEB_BUILD_OPTIONS=nocheck
+    - eatmydata reprotest --no-diffoscope --min-cpus $(nproc --all) . -- null &> reprotest.log
+
+run piuparts:
+  stage: test
+  image: registry.salsa.debian.org/salsa-ci-team/images/piuparts
+  services:
+    - docker:dind
+  script:
+    - CHROOT_PATH=/tmp/debian-unstable
+    - CONTAINER_ID=$(docker run --rm -d debian:unstable sleep infinity)
+    - docker exec ${CONTAINER_ID} bash -c "apt-get update && apt-get install eatmydata -y"
+    - mkdir -p ${CHROOT_PATH}
+    - docker export ${CONTAINER_ID} | tar -C ${CHROOT_PATH} -xf -
+    - mknod -m 666 ${CHROOT_PATH}/dev/urandom c 1 9
+    - piuparts --hard-link -e ${CHROOT_PATH} ${WORKING_DIR}/*.deb
+# End of include
+#################################### Below starts the local customization ###################################
+before_script:
+  - echo 'deb http://deb.debian.org/debian experimental main' > /etc/apt/sources.list.d/experimental.list
+  - "echo 'Package: ldb-tools libldb* python*-ldb*\nPin: release a=experimental\nPin-Priority: 500' > /etc/apt/preferences.d/experimental.pref"

debian/gitlab-ci.yml.tpl

+include: https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
+
+# end of salsa pipeline bot parser
+before_script:
+  - echo 'deb http://deb.debian.org/debian experimental main' > /etc/apt/sources.list.d/experimental.list
+  - "echo 'Package: ldb-tools libldb* python*-ldb*\nPin: release a=experimental\nPin-Priority: 500' > /etc/apt/preferences.d/experimental.pref"

debian/python-samba.lintian-overrides

+# False positives, see #896012
+python-samba: library-not-linked-against-libc *

debian/rules

@@ -211,6 +211,13 @@ endif
 override_dh_installpam:
 	dh_installpam --name=samba
 
+override_dh_perl:
+	dh_perl
+	# Fix Perl shbangs
+	sed -i '1s@^#!/usr/bin/env perl@#!/usr/bin/perl@' \
+	  debian/libparse-pidl-perl/usr/bin/pidl \
+	  debian/smbclient/usr/bin/findsmb
+
 override_dh_fixperms:
 	dh_fixperms
 ifneq (,$(filter samba-common, $(shell dh_listpackages)))

debian/samba-dsdb-modules.lintian-overrides

+# False positives, see #896012
+samba-dsdb-modules: library-not-linked-against-libc usr/lib/*/samba/ldb/ildap.so

debian/samba-libs.lintian-overrides

@@ -4,3 +4,5 @@
 samba-libs: package-name-doesnt-match-sonames libdcerpc-binding0 libdcerpc-samr0 libdcerpc-server0 libdcerpc0 libndr-krb5pac0 libndr-nbt0 libndr-standard0 libndr0 libnetapi0 libsamba-credentials0 libsamba-errors1 libsamba-hostconfig0 libsamba-passdb0 libsamba-policy0 libsamba-util0 libsamdb0 libsmbconf0 libsmbldap2 libtevent-util0
 # Embedded Heimdal is patched
 samba-libs: embedded-library usr/lib/*/samba/libgssapi-samba4.so.*: heimdal
+# False positives, see #896012
+samba-libs: library-not-linked-against-libc *

debian/samba-vfs-modules.lintian-overrides

+# False positives, see #896012
+samba-vfs-modules: library-not-linked-against-libc *

debian/samba.lintian-overrides

 # Standard path for [printers] section is world-writeable with sticky bit set
 samba: non-standard-dir-perm var/spool/samba/ 1777 != 0755
+# False positives, see #896012
+samba: library-not-linked-against-libc usr/lib/*/samba/service/winbindd.so

debian/winbind.lintian-overrides

 winbind4 binary: no-shlibs-control-file lib/libnss_winbind.so.2
 winbind4 binary: package-name-doesnt-match-sonames libnss-winbind2
 winbind4 binary: binary-or-shlib-defines-rpath
+# False positives, see #896012
+winbind: library-not-linked-against-libc usr/lib/*/samba/idmap/rid.so