debuginfod server

Related issue: Provide debuginfod server

Most of the debuginfod work is implemented. See debian:debug-symbols, debian:suite, debian:archive, Sbuild, package_publish, Package repositories, and Use Debusine archives as a debuginfod source.

This blueprint retains only remaining design that is not implemented yet.

Possible future work

These items were explicitly out of scope for the initial implementation and remain unimplemented:

  • Source file serving (/buildid/<id>/source): the debuginfod(8) man page notes that, due to Debian and Ubuntu packaging policies, debuginfod often cannot resolve source files for .deb and .ddeb packages. debuginfod.debian.net has the same limitation.

  • Executable serving (/buildid/<id>/executable): debian:binary-package stores the whole .deb as a single file rather than broken-out binaries.

  • DWZ supplement ingestion: -dbgsym packages built with DWZ compression ship a shared supplement under /usr/lib/debug/.dwz/. Until those are ingested, requests for the supplement’s build-ID return 404; debugging still works, but DWZ-using debug info may lack the alternate strings table.

  • Metrics (/metrics), metadata search (/metadata), IMA signatures, and upstream federation to servers such as debuginfod.debian.net.