[needs-packaging] arm-trusted-firmware-s32

*** This is an automated message ***

This bug is tagged needs-packaging which identifies it as a request for a new package in Ubuntu. As a part of the managing needs-packaging bug reports specification, https://wiki.ubuntu.com/QATeam/Specs/NeedsPackagingBugs, all needs-packaging bug reports have Wishlist importance. Subsequently, I'm setting this bug's status to Wishlist.

Where is the upstream repo for this package? d/changelog claims that the base version is from git tag "bsp37.0-2.5" but the repo pointed to in d/control (https://source.codeaurora.org/external/autobsps32/arm-trusted-firmware) doesn't exist (in fact the whole source.codeaurora.org site appears to have disappeared according to https://bye.codeaurora.org/), and I can't find that tag in any of the arm-trusted-firmware repos pointed to from that page (the NXP GitHub or QUIC GitLab). Nor does it appear in the repo pointed to by d/watch (which also implies that's incorrect too).

Hi Dave,

Sorry those repos were decommissioned and taken offline by NXP a few months ago. I'll update the packages with the new GitHub repos ASAP.

Ah, is the upstream repo https://github.com/nxp-auto-linux/arm-trusted-firmware by any chance? Just discovered that while looking at the associated u-boot package in LP: #2034650.

Yes that's the one. Most NXP S32 BSP content is hosted under the nxp-auto-linux GH account

I've updated the URLs in the git repo

I've updated the copyright information in the repository. I've also made a few changes to the build process in order to enable UEFI secure boot on the target platform.

Please hold on for this request.
Because the same platform's kernel resources may have some limitations.

We have to confirm the find public method about the kernel resources. Tks.

After checking with the HWE team, the kernel resources are okay to be published to the Ubuntu archive.
Therefore, the release target (Ubuntu archive) review process can continue.

Hi,

I took a look at the current state of the package in the git repository and I have some notes to share:

- Source packag name: why did you decide to use arm-trusted-firmware-s32 when
  upstream names it as arm-trusted-firmware? I was not able to find the reason
  behind that decision.

- d/watch: it is not working properly. There is also a typo in the
  filenamemangle option:

diff --git a/debian/watch b/debian/watch
index 73f7a4b86..8af606be8 100644
--- a/debian/watch
+++ b/debian/watch
@@ -1,6 +1,6 @@
 version=4
 opts="\
-filenamemangle=s/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz/arm-trusted-firware-s32-$2-$1\.tar\.gz/,\
+filenamemangle=s/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz/arm-trusted-firmware-s32_$2-$1\.tar\.gz/,\
 uversionmangle=s/(bsp\d+\.\d+).(\d+\.\d+)/$2-$1/,\
 " \
 https://github.com/nxp-auto-linux/arm-trusted-firmware/tags .*/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz

  When trying to run uscan to download the version your are packaging it fails:

$ uscan --verbose --download-version 2.5-bsp37.0
uscan info: uscan (version 2.20.2ubuntu2) See uscan(1) for help
uscan info: Scan watch files in .
uscan info: Check debian/watch and debian/changelog in .
uscan info: package="arm-trusted-firmware-s32" version="2.5-bsp37.0-8" (as seen in debian/changelog)
uscan info: package="arm-trusted-firmware-s32" version="2.5-bsp37.0" (no epoch/revision)
uscan info: ./debian/changelog sets package="arm-trusted-firmware-s32" version="2.5-bsp37.0"
uscan info: Process watch file at: debian/watch
    package = arm-trusted-firmware-s32
    version = 2.5-bsp37.0
    pkg_dir = .
uscan info: opts: filenamemangle=s/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz/arm-trusted-firmware-s32_$2-$1\.tar\.gz/,uversionmangle=s/(bsp\d+\.\d+).(\d+\.\d+)/$2-$1/,
uscan info: line: https://github.com/nxp-auto-linux/arm-trusted-firmware/tags .*/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz
uscan info: Parsing filenamemangle=s/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz/arm-trusted-firmware-s32_$2-$1\.tar\.gz/
uscan info: Parsing uversionmangle=s/(bsp\d+\.\d+).(\d+\.\d+)/$2-$1/
uscan info: line: https://github.com/nxp-auto-linux/arm-trusted-firmware/tags .*/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz
uscan info: Last orig.tar.* tarball version (from debian/changelog): 2.5-bsp37.0
uscan info: Download the --download-version specified version: 2.5-bsp37.0
uscan info: Requesting URL:
   https://github.com/nxp-auto-linux/arm-trusted-firmware/tags
uscan info: Matching pattern:
   (?:(?:https://github.com)?\/nxp\-auto\-linux\/arm\-trusted\-firmware\/tags)?.*/(bsp\d+\.\d+)-(\d+\.\d+)\.tar\.gz
uscan info: Found the following matching hrefs on the web page (newest first):
   /nxp-auto-linux/arm-trusted-firmware/archive/refs/tags/bsp38.0-2.5.tar.gz (2.5-bsp38.0) index=2.5-bsp38.0-1
   /nxp-auto-linux/arm-trusted-firmware/archive/refs/tags/bsp37.0-2.5.tar.gz (2.5-bsp37.0) index=2.5-bsp37.0-1 matched with the download version
   /nxp-auto-linux/arm-trusted-firmware/archive/refs/tags/bsp36.0-2.5.tar.gz (2.5-bsp36.0) index=2.5-bsp36.0-1
   /nxp-auto-linux/arm-trusted-firmware/archive/refs/tags/bsp35.0-2.5.tar.gz (2.5-bsp35.0) index=2.5-bsp35.0-1
   /nxp-auto-linux/arm-trusted-firmware/archive/refs/tags/bsp34.2-2.5.tar.gz (2.5-bsp34.2) index=2.5...