GitLab

The problem with this package and libxtables11 not being co-installable
was introduced in the first snapshot version which did not get the
SONAME bumped for the package name. But older versions should still be
co-installable as they have different SONAMES. Change the direction
of the verioned dependencies to cover this.

In addition using a >= should be safe here as long as a libxtables11
is not reintroduced.

Closes: #845800
Signed-off-by: Guillem Jover <guillem@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

The URL changed. Now instead of pkg-netfilter/pkg-netfilter, we have
pkg-netfilter/pkg-iptables.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

It's a shorter url, we can use the same for Vcs-Git and Vcs-Browser and
the webgui is more ux friendly :)

Adds '-- development files' to the short description in order to differ from
libxtables12 one.

dh-autoreconf is now a dependency of debhelper.

Use <= rather than << as reported by Alessandro.

Closes: #845278
Reported-by: Alessandro Ghedini <alessandro@cloudflare.com>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

[...]
Preparing to unpack .../libxtables12_1.6.0+snapshot20161117-2_amd64.deb ...
Unpacking libxtables12:amd64 (1.6.0+snapshot20161117-2) ...
dpkg: error processing archive
/var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
(--unpack):
 trying to overwrite '/usr/lib/x86_64-linux-gnu/libxtables.so.12.0.0',
which is also in package libxtables11:amd64 1.6.0+snapshot20161117-1
dpkg-deb: error: subprocess paste was killed by signal (Broken pipe)
Errors were encountered while processing:
 /var/cache/apt/archives/libxtables12_1.6.0+snapshot20161117-2_amd64.deb
E: Sub-process /usr/bin/dpkg returned an error code (1)
[...]

Closes: #845278
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Bump soname to don't brean reverse dependencies.

Closes: #844755
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Include the translate tools:
 * iptables-translate
 * ip6tables-translate
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

No changes requires per checklist:
 https://www.debian.org/doc/debian-policy/upgrading-checklist.html

Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Put myself as Maintainer and use 'arturo@debian.org' as address while at it.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Fix descriptions and long descriptions of libiptc, libip4tc and libip6tc.
Reported-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Add missing depends from -dev packages to their binary match.

Closes: #835664
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Run wrap-and-sort in the pacakge.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

libiptc0, libip4tc0 and libip6tc0 don't need a Replaces & Breaks
with iptables, given the library files were moved to multi-arch paths
(so there is no file conflict with the old iptables package).

The -dev packages are different, because they have conflicting paths with
the old iptables-dev package.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

So all library packages are Multi-Arch: same, otherwise marking iptables
M-A: foreign is pretty pointless.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Michael Biebl says:
 <<
 please consider lowering the priority of the library packages to
 optional. I know lintian will complain about that not being policy
 compliant, but I think installing libraries because of their priority is
 a stupid idea (and discussion is currently ongoing to fix the debian
 policy in that regard).
 >>
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Given we already depends on -dev packages. They lib packages will be pulled
in by their corresponding -dev package.
Suggested-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

To allow transitions from iptables-dev to the libiptc split.
Reported-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

There are several little things to fix in the libiptc package split to get
it completed:
 * adjust break/depends
 * distribute usr/include/libiptc/libiptc.h
 * dropped the breaks: linux-libc-dev (<< 3.5), this was added for a file
   conflict regarding /usr/include/linux/netfilter_ipv4/ip_queue.h, which
   is no longer shipped by the library packages.
Signed-off-by: Michael Biebl <biebl@debian.org>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

We have now conflicts with iptables and iptables-dev (1.6.0-2), given
we have moved files between packages.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

We have a libxtables11 binary package, let's include the devel files
in a libxtables-dev package for coherence.

This is mainly a matter of renaming the iptables-dev binary package.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Generate 2 new binary packages libiptc and libiptc-dev from iptables and
iptables-dev.

This way, we can play Multi-Arch games independently with iptables and libiptc.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

No changes required, per checklist:
 https://www.debian.org/doc/packaging-manuals/upgrading-checklist.txt

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Users are likely to play with kernel modules. Suggests kmod.

Closes: #623865
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This change triggers a lintian warning which I don't know
how to handle by now, given libiptc is a *private* library
and should not be used by any package.

E: iptables: shlib-in-multi-arch-foreign-package lib/libiptc.so.0.0.0
N:
N:    The package is marked as Multi-Arch: foreign, but it includes a shared
N:    library in a public library directory.
N:
N:    Refer to https://wiki.ubuntu.com/MultiarchSpec

 for details.
N:
N:    Severity: serious, Certainty: certain
N:
N:    Check: shared-libs, Type: binary, udeb
N:

Closes: #776041
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Move the libxtables11 package from Section 'net' to 'libs'.

Closes: #812973
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Pointing to the alioth project.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

There are no specific manpages for the -compat tools right now.

Writting such manpages is something I would like to discuss with upstream.
I think the best sollution by now is to simply redirect users to the originals.
For this, a dependency with the original tools is required.

It should be noted that such a dependency is not weird, since its very likely
that users of the iptables-nftables-compat package are triying to migrate
their ruleset, so they need the original tools anyway.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

No changes required by:
 https://www.debian.org/doc/packaging-manuals/upgrading-checklist.txt

Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Call wrap-and-sort to put here a bit or ordering.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

At runtime, the compat tools may load some modules (extensions) which are
owned by the iptables package.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Bump libxtables10 to libxtables11.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Give a bit more of information in the long description of the compat package.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

So, users can use nft to check what the migrated ruleset looks like.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

Vcs-* fiels that points to alioth.debian.org
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This alioth team is now the maintainer of this package.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

There was a typo.

Git-Dch: Ignore
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This new binary package includes the nftables compat stuff.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>