Package youtube-dl-gui for Debian about youtube-dl-gui HOT 24 CLOSED

@nodiscc

You can now package youtube-dl-gui for debian.
Feel free to ask any questions.

from youtube-dl-gui.

I'd like to note that downloading the .deb package directly from the link provided in the README is potentially insecure against MitM attacks because the package is downloaded over plaintext HTTP and no cryptographically secure authentication check is performed. Ubuntu users should import the PPA GPG key and add the PPA to their sources.list as explained here. Note that PPAs come with their own set of problems.

Packaging still in progress at MrS0m30n3/twodict#1 and #189. Once this is done we can at least provide downloads over HTTPS and signed package checksums, then try to address the Debian RFP.

from youtube-dl-gui.

Woops... Should be fixed now.

from youtube-dl-gui.

+1

from youtube-dl-gui.

@nodiscc any news on this?

from youtube-dl-gui.

@MrS0m30n3 Sorry I totally forgot about this, but I plan to dive in Debian packaging more seriously soon (need to get some other stuff done first, but I should be able to start in the coming weeks).

In the meantime you or I can also contact Félix Sipma [email protected] or Joel Pickett [email protected] who expressed interest in packaging youtube-dl-gui in the Debian bug report https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=753350

I think it would be nice to get the packaging done directly in this repo (maybe in a separate branch) as seeing the actual process/commits would be very instructive.

from youtube-dl-gui.

Packaging ready at #189

from youtube-dl-gui.

+1

from youtube-dl-gui.

I just noticed that youtube-dl-gui downloads youtube-dl, which is not allowed in Debian. I can add a local patch to disable this, but it may be cumbersome to update in the long term... @MrS0m30n3 do you think you could add a flag in setup.py to disable the functionality?

from youtube-dl-gui.

I'v been searching for this restriction in https://www.debian.org/doc/debian-policy/ but could not find it :/ @legrostdg could you point me to the debian policy part that forbids downloading binaries? (I believe you, and I can totally understand why this restriction would exist)

This is the closest I could find in https://www.debian.org/social_contract#guidelines

The program must include source code, and must allow distribution in source code as well as compiled form.

• If that's the case would downloading the youtube-dl source tarball alongside the binary solve this problem? Or is it simply not allowed?
• If not, is there an acceptable workaround to keep youtube-dl up-to-date eg on Debian Stable (without adding a 3rd-party APT repo which would bring us back to square one)?

Asking because this is one of the main benefits of youtube-dl-gui for me.
As I said in #189, many thanks and I'm fine with any solution.

PS: I can think of Firefox/Thunderbird that allow downloading software directly from their addon system, but yeah I can't think of another package that does this. Maybe there's an exception for them.

from youtube-dl-gui.

@nodiscc I think you want to look at https://www.debian.org/doc/debian-policy/#archive-areas

None of the packages in the main archive area require software outside of that area to function.

Having to download youtube-dl would put youtube-dl-gui in contrib, and not main.

I you want latest youtube-dl on stable, you probably want a to use a backport. I just checked https://packages.qa.debian.org/y/youtube-dl.html and there is no stable-bpo version of youtube-dl yet. You can try to report a wishlist bug to youtube-dl asking for a backport.

from youtube-dl-gui.

If that's the case would downloading the youtube-dl source tarball alongside the binary solve this problem? Or is it simply not allowed?

there should be no duplication of code, youtube-dl exist in the archive, so youtube-dl-gui has to use it. Like this, the archive state is consistent, and all users benefit from an update to youtube-dl, not just youtube-dl-gui users.

from youtube-dl-gui.

I will try to add a flag in setup.py in the next few days. It will:

• Disable the automatic check for youtube-dl before the download phase
• Use the youtube-dl binary under /usr/bin/
• Show a popup when a user tries to use the Update functionality from the options menu.
• Inform the user if youtube-dl-gui was not able to locate the youtube-dl package.

I will ping you here when it's done.

from youtube-dl-gui.

I added a patch to remove the functionality in the meantime, but I'll update the package as soon as possible. The package is waiting sponsors to be uploaded to the NEW queue.

from youtube-dl-gui.

I took a look on your files (on salsa) and you have some errors-mistakes:

• patches/0001-prevent-youtube-dl-updating.patch: On line 30 you remove the initiation of self._time_it_took, which results in calculating the total download time incorrectly.
• copyright: Wrong Upstream-Name value and you also forgot the icons under the data/pixmaps dir (see icons-license).
• You could include some of the doc files like AUTHORS, TODO, README.md

from youtube-dl-gui.

Thanks for you careful review. I fixed all of these.

from youtube-dl-gui.

In the copyright file, at the creative commons license section there is a g at the end of each line.
Is this normal?

from youtube-dl-gui.

@legrostdg

Flag is ready.

You can now build with python setup.py build --no-updates, which will disable updates and switch to the system's youtube-dl copy under the /usr/bin directory.

To use it with pybuild you can add the line below to your debian/rules file:

export PYBUILD_BUILD_ARGS=--no-updates

Not sure if this the right way to do it though.

Also, it's a wise choice to remove all files under the youtube-dlg's configuration path (youtube-dl binary, old settings and log) during the installation, but the patch should work either way.

Give it a test and if you spot anything post here.

@nodiscc you can still use the old behaviour if you edit your settings file after the installation.
More specifically you should edit the disable_updates & youtubedl_path options.

from youtube-dl-gui.

Here is the last update concerning Debian packaging. Unfortunately, the youtube-dl package in Debian is python3 only. So, we need to get youtube-dlg python3-compatible before it can enter Debian...

https://lists.debian.org/debian-mentors/2018/03/msg00306.html

from youtube-dl-gui.

Why do we even care what version of youtube-dl & python Debian provides?

youtube-dl-gui should be able to work with any version of youtube-dl & python as long as the "interface" to communicate with youtube-dl stays the same.

from youtube-dl-gui.

From the message I mentioned https://lists.debian.org/debian-mentors/2018/03/msg00306.html, I get the impression that youtube-dl-gui tries to use youtube-dl-the-python-package, and not youtube-dl-the-command-line-program. youtube-dl-the-python-package is python3-only in Debian. Maybe I'm just missing something...

from youtube-dl-gui.

Also note that there is a middle-term goal of getting rid of python2 in Debian, so it would be good to be sure you plan to convert youtube-dl-gui to python3 before it enters Debian (no need to do it right now, of course 😄).

from youtube-dl-gui.

I just looked one more time at the issue. It's probably my ugly patch applied to the latest release which does not work as expected. Could you push a new release, so that I can use the build flag to disable updates?

from youtube-dl-gui.

Unmaintained project, use https://github.com/axcore/tartube

from youtube-dl-gui.