[Bug 1819608] Re: [MIR] python-os-ken

[Christian Ehrhardt ]

[Duplication]
This is a dup but not a problem as it will replace it.
Formerly Openstack used "ryu" but now has forked the "ryo" project at version 4.27 into python-ken which is openstack controlled and developed now.
I checked with James and part of the transition to promote ken is to demote ryu.
And under that condition the duplication is not a problem.

[Embedded sources and static linking]
No embedded sources.
No golang to consider.

[Security]
- I can confirm no CVE history
- runs no root daemon
- no webkit usage
- no libv*8 usage
- it does not open a port
- does not process arbitrary web content
- does not use centralized online accounts
- does not integrate javascript into the desktop
- does not deal with system authentication (eg, pam), etc)
But it does:
- parses data formats (parses openflow as it is an openflow controller)

[Common blockers]
- currently builds fine
- bug subscriber is already set
- uses dh_python
- does not add new python2 depends (it is itself py3 only)
- no translations, but this is a back end lib (admins, not end users)
- runs a testsuite on build with an implressive 121301 tests

[Packaging red flags]
- this is not packages in Debian, so the questions about Delta do not apply atm
- no .so library, therefore no .symbols tracking
- does have a watch file
- the old package (ryu) was ok, we expect no different from this package
- the current release (matching Stein) is packaged
- maintainers are the openstack team which have no problem for uploading after promotion
- d/reuls is small and clearn
- no built-using flags
- no golang to consider
- no Massive Lintian issues (only watch gpg check, out of date standartds, no dep8)

[Upstream red flags]
- no important errors/warngins during build
- no malloc/sprintf (python)
- no use of sudo, gksu, pkexec, or LD_LIBRARY_PATH
- no Important bugs in Debian (it isn't in Debian), Ubuntu (only the MIR) or Upstream (none since the split)
- no Dependency on webkit, qtwebkit, seed or libgoa-*
- no Embedded source copies
- not part of (Unity) Dash

[Summary]
Given that this essentially is a fork, rename and continue to develop case.
The pre-rename package is already in Main we can ack this request as-is.
While managing Openflow might be considered security critical it was already reviewed when it was the ryu package.


** Changed in: python-os-ken (Ubuntu)
       Status: Confirmed => In Progress

** Changed in: python-os-ken (Ubuntu)
     Assignee: Christian Ehrhardt  (paelzer) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to python-os-ken in Ubuntu.
https://bugs.launchpad.net/bugs/1819608

Title:
  [MIR] python-os-ken

Status in python-os-ken package in Ubuntu:
  In Progress

Bug description:
  [Availability]
  In universe

  [Rationale]
  Replaces ryu in neutron as the framework for openflow controller agents.

  [Security]
  No reported security issues.

  [Quality assurance]
  Package builds and runs unit test suite.

  [Dependencies]
  All in main.

  [Standards compliance]
  OK

  [Maintenance]
  ubuntu-openstack (added to bugmail)

  [Background information]
  os-ken is a fork of ryu (a no longer maintained SDN framework) maintained by the OpenStack project.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-os-ken/+bug/1819608/+subscriptions