Bug#878599: [PATCH] package git-credential-libsecret

[M Hickford]

Hi. If it's helpful, I rebased the patch on the debian-sid branch. I
tested the patch by building and installing and using the helper
and it worked. I'll try to keep the patch up to date at
https://github.com/hickford/git/commits/git-credential-libsecret

package git-credential-libsecret

This is a useful credential helper

New package named 'git-credential-libsecret' for consistency with
application name and package name in other distributions
https://pkgs.org/search/?q=git-credential-libsecret

Co-authored-by: Ville Skyttä <ville....@iki.fi>
Co-authored-by: Vit Kabele <vit.k...@sysgo.com>
---
debian/control | 19 +++++++++++++++++++
debian/git-credential-libsecret.install | 1 +
debian/rules | 5 +++++
3 files changed, 25 insertions(+)
create mode 100644 debian/git-credential-libsecret.install

diff --git a/debian/control b/debian/control
index 0a68bb4447..4fad66b250 100644
--- a/debian/control
+++ b/debian/control
@@ -6,6 +6,7 @@ Uploaders: Anders Kaseorg <and...@mit.edu>
Build-Depends: libz-dev, gettext,
libpcre2-dev | libpcre3-dev,
libcurl4-gnutls-dev, libexpat1-dev,
+ libsecret-1-dev,
subversion, libsvn-perl, libyaml-perl,
tcl, python3,
libhttp-date-perl | libtime-parsedate-perl,
@@ -33,6 +34,7 @@ Pre-Depends: ${misc:Pre-Depends}
Recommends: ca-certificates, patch, less, ssh-client
Suggests: gettext-base, git-daemon-run | git-daemon-sysvinit,
git-doc, git-email, git-gui, gitk, gitweb,
+ git-credential-libsecret,
git-cvs, git-mediawiki, git-svn
Breaks: bash-completion (<< 1:1.90-1),
dgit (<< 5.1~),
@@ -296,11 +298,28 @@ Description: fast, scalable, distributed
revision control system (web interface)
If libcgi-fast-perl is installed, gitweb can also be run over FastCGI
(and served by nginx, for example).
+Package: git-credential-libsecret
+Architecture: all
+Multi-Arch: foreign
+Depends: ${misc:Depends}, git (>> ${source:Upstream-Version}), git
(<< ${source:Upstream-Version}-.)
+Description: fast, scalable, distributed revision control system
(libsecret credential helper)
+ Git is popular version control system designed to handle very large
+ projects with speed and efficiency; it is used for many high profile
+ open source projects, most notably the Linux kernel.
+ .
+ Git falls in the category of distributed source code management tools.
+ Every Git working directory is a full-fledged repository with full
+ revision tracking capabilities, not dependent on network access or a
+ central server.
+ .
+ This package provides a helper for storing credentials using libsecret.
+
Package: git-all
Architecture: all
Multi-Arch: foreign
Depends: ${misc:Depends}, git (>> ${source:Upstream-Version}), git (<<
${source:Upstream-Version}-.),
git-doc, git-cvs, git-mediawiki, git-svn,
+ git-credential-libsecret,
git-email, git-gui, gitk, gitweb
Suggests: git-daemon-run | git-daemon-sysvinit
Description: fast, scalable, distributed revision control system (all
subpackages)
diff --git a/debian/git-credential-libsecret.install
b/debian/git-credential-libsecret.install
new file mode 100644
index 0000000000..d61ca822bc
--- /dev/null
+++ b/debian/git-credential-libsecret.install
@@ -0,0 +1 @@
+debian/tmp/usr/lib/git-core/git-credential-libsecret* usr/lib/git-core
diff --git a/debian/rules b/debian/rules
index 8e388be72b..3b9b1fda3a 100755
--- a/debian/rules
+++ b/debian/rules
@@ -65,6 +65,7 @@ build-stamp:
override_dh_auto_build-arch: build-stamp
$(MAKE) -C contrib/subtree all $(OPTS)
ln -s contrib/subtree/git-subtree
+ $(MAKE) -C contrib/credential/libsecret all $(OPTS)
override_dh_auto_test-arch:
test -z '$(TEST)' || \
@@ -92,6 +93,7 @@ override_dh_auto_clean:
$(MAKE) -C contrib/subtree clean $(OPTS)
$(MAKE) clean $(OPTS)
rm -f git-subtree
+ $(MAKE) -C contrib/credential/libsecret clean $(OPTS)
override_dh_clean:
dh_clean -Xmailinfo.c.orig
@@ -100,6 +102,9 @@ override_dh_auto_install-arch:
# git
DESTDIR='$(GIT)' $(MAKE) install $(OPTS)
DESTDIR='$(GIT)' $(MAKE) -C contrib/subtree install $(OPTS)
+ install -d -m0755 '$(TMP)'/usr/lib/git-core/
+ install -m0755 contrib/credential/libsecret/git-credential-libsecret \
+ '$(TMP)'/usr/lib/git-core/
install -d -m0755 '$(GIT)'/var/lib/git
rm -rf '$(GIT)'/usr/share/man
# don't include arch, cvs, p4, svn, email, gui tools, and gitk program
--
2.39.2

[M Hickford]

Hi Jonathan, hi Anders. Please could you take a look at this patch [1] to package
git-credential-libsecret in Debian? This is user-friendly more secure alternative to saving Git credentials in plaintext.

-M

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878599#49