Replace debian/ with dh-virtualenv packaging

This is the meat of Spec 0003 Phase 1: turn the `sdb` `.deb` into a
self-contained `dh-virtualenv` build that bundles drgn, kdumpling,
pyelftools, and all transitive Python deps inside a venv at
`/opt/venvs/sdb/`, instead of relying on system-installed drgn /
libkdumpfile (which previously required maintaining the `delphix/drgn`
and `delphix/libkdumpfile` Delphix forks just to keep
ABI-compatible versions pinned to whatever sdb expected).

The `/opt/venvs/<pkg>` install root is dh-virtualenv 1.2+'s default,
which the project deliberately moved to (from `/usr/share/python/<pkg>`)
to avoid clashes with Debian-shipped Python tooling living under
`/usr/share/python/`. It's also the FHS 3.0-correct home for an
add-on application package (FHS §3.13: `/opt` is "reserved for the
installation of add-on application software packages" with
self-contained per-package directory layout) — exactly matching what
a self-contained venv bundle is. The previous `delphix/sdb` `debian/`
referenced `/usr/share/python/sdb/` from a stale legacy convention
predating the dh-virtualenv 1.0 default change; this commit also
fixes that reference in `debian/control`'s package description.

Why the venv approach works at all: drgn's manylinux PyPI wheel is
fully self-contained — `drgn.libs/libkdumpfile.so.12` ships inside
the wheel and is loaded via auditwheel-injected
`RPATH=$ORIGIN/drgn.libs`. So there's nothing to link against on the
system; the venv carries its own ABI-pinned copy. After this lands,
`sdb` no longer consumes system drgn at all (verified during Phase 1
acceptance: `sudo dpkg -r --force-depends drgn` and `sdb stacks`
against a vmcore still works, identical output, exit 0).

Highlights of the diff:

- `debian/rules` switches to the `dh-virtualenv` sequencer
  (`dh $@ --with python_virtualenv`) plus several hygiene overrides:

  - `override_dh_dwz:` — drgn's manylinux .so files in `drgn.libs/`
    arrive pre-stripped, with most having no `.debug_info` sections.
    `dh_dwz` would fail with "Too few files for multifile
    optimization." Skip dwz entirely for this venv-only package.
  - `override_dh_strip:` — same reason; further stripping the
    bundled libs produces no real savings and risks breaking
    auditwheel's RPATH setup.
  - `override_dh_shlibdeps:` — drgn's bundled libs use $ORIGIN
    RPATH and aren't tracked by dpkg, so dpkg-shlibdeps can't
    resolve them. ${python3:Depends} (filled by dh_python3) covers
    the Python runtime requirement; the venv handles the rest.
  - `override_dh_python3:` — dh_python3 doesn't understand the venv
    layout dh_virtualenv produces and complains about unmanaged
    files. dh-virtualenv already wires the right Python deps.
  - `override_dh_md5sums: dh_md5sums -X.pyc -X.pyo` — Python rewrites
    .pyc files at runtime when a bytecode header's recorded source
    mtime/size doesn't match the .py on disk (unavoidable for
    dh-virtualenv-built venvs, since build-time path/mtime rewrites
    desync the .pyc headers). The first import after install
    regenerates the affected .pyc, breaking the recorded md5 and
    triggering false positives in dcenter's `debsums -c`. Excluding
    bytecode keeps the integrity check meaningful — .py source and
    native libs still get checksummed.

- `debian/control` Build-Depends adds `dh-virtualenv (>= 1.2.2)`;
  runtime Depends carries no explicit `libkdumpfile` (drgn's wheel
  handles it) — only ${python3:Depends} plus an empty
  ${shlibs:Depends}.

- `debian/links` creates `/usr/bin/sdb -> /opt/venvs/sdb/bin/sdb` so
  `sdb` is on the standard path despite the venv living under
  `/opt`.

- `debian/source/format` switches to `3.0 (native)`; `debian/compat`
  is removed (the modern `debhelper-compat (= 13)` virtual-package
  approach in Build-Depends is preferred).

- `debian/changelog` opens at version `0.6.0` (matching the upstream
  tag we boot from); linux-pkg appends `-1delphix.<ts>` at build
  time so successive builds are uniquely ordered for upgrades.

This indirectly unblocks Phase 3 of Spec 0003 (decommissioning
`delphix/drgn` and `delphix/libkdumpfile`), although Phase 3 is
deferred — other appliance consumers (`crash-python`, `savedump`,
`/usr/bin/drgn`, `delphix-platform-aws`'s diagnostics dep set) still
need the system packages today.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: prakashsurya

debian/changelog

@@ -0,0 +1,6 @@
+sdb (0.6.0) unstable; urgency=medium
+
+  * Bootstrap merge of sdimitro/sdb (Spec 0003 Phase 1).
+  * Repackage as a self-contained dh-virtualenv .deb.
+
+ -- Delphix Engineering <eng@delphix.com>  Tue, 05 May 2026 00:00:00 +0000

debian/compat

@@ -1,11 +1,27 @@
 Source: sdb
-Section: misc
+Section: utils
 Priority: optional
-Maintainer: Serapheim Dimitropoulos <serapheimd@gmail.com>
-Standards-Version: 4.1.2
-Build-Depends: debhelper (>= 9), dh-python, python3
+Maintainer: Delphix Engineering <eng@delphix.com>
+Build-Depends:
+ debhelper-compat (= 13),
+ dh-virtualenv (>= 1.2.2),
+ python3,
+ python3-dev,
+ python3-pip,
+ python3-setuptools,
+ python3-venv
+Standards-Version: 4.6.2
+Homepage: https://github.com/sdimitro/sdb
 
 Package: sdb
-Architecture: any
+Architecture: amd64
 Depends: ${shlibs:Depends}, ${python3:Depends}
-Description: The Slick/Simple Debugger
+Description: kernel debugger built on drgn
+ sdb is a high-level kernel debugger built on top of drgn.
+ .
+ This package bundles drgn, kdumpling, pyelftools, and their
+ transitive Python dependencies inside a self-contained virtualenv at
+ /opt/venvs/sdb/. The /usr/bin/sdb entry point activates the
+ venv. No external runtime dependency on libkdumpfile is required —
+ drgn's manylinux wheel ships a bundled libkdumpfile.so via auditwheel
+ with RPATH=$ORIGIN/drgn.libs.

debian/control

@@ -1,27 +1,12 @@
-Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
 Upstream-Name: sdb
+Upstream-Contact: Serapheim Dimitropoulos
 Source: https://github.com/sdimitro/sdb
 
 Files: *
-Copyright: 2024 Serapheim Dimitropoulos
-License: Apache-2.0
-
-Files: *
-Copyright: 2016 - 2023 Delphix Corp.
-License: Apache-2.0
+Copyright: see upstream LICENSE
+License: see upstream LICENSE
 
+Files: debian/*
+Copyright: 2026 Delphix
 License: Apache-2.0
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- .
-     http://www.apache.org/licenses/LICENSE-2.0
- .
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- .
- On Debian systems, the complete text of the Apache License can be found in
- the file `/usr/share/common-licenses/Apache-2.0'.

debian/copyright

@@ -0,0 +1 @@
+opt/venvs/sdb/bin/sdb usr/bin/sdb

debian/links

@@ -1,11 +1,37 @@
 #!/usr/bin/make -f
 
 %:
-	dh $@ --with python3 --buildsystem=pybuild
-
-override_dh_auto_test:
-	#
-	# Don't run the tests when building the package. We'll enforce
-	# testing via another mechanism, so running it during package
-	# builds is unnecessary.
-	#
+	dh $@ --with python_virtualenv
+
+# drgn's manylinux wheel bundles pre-stripped .so files in drgn.libs/.
+# dh_dwz tries to compress their debug info but most of them have no
+# .debug_info sections, so it fails with "Too few files for multifile
+# optimization." Skip dwz entirely for this venv-only package.
+override_dh_dwz:
+
+# Skip dh_strip for the same reason — stripping bundled libs further
+# produces no meaningful size savings and risks breaking auditwheel's
+# RPATH setup.
+override_dh_strip:
+
+# drgn's bundled libs in drgn.libs/ use auditwheel's $ORIGIN RPATH and
+# aren't in any Debian package, so dpkg-shlibdeps can't resolve them.
+# Skip shlibdeps — the venv is self-contained; ${python3:Depends}
+# (filled by dh_python3) covers the Python runtime requirement.
+override_dh_shlibdeps:
+
+# dh_python3 doesn't know about the venv layout dh_virtualenv produces
+# and will complain about unmanaged files. The dh-virtualenv add-on
+# already wires the right Python deps; skip dh_python3.
+override_dh_python3:
+
+# Python rewrites .pyc files at runtime when the bytecode header's
+# recorded source mtime/size doesn't match the .py on disk — which is
+# unavoidable for a venv built by dh-virtualenv (build-time path/mtime
+# rewrites desync the .pyc headers from their .py sources). The first
+# import after install regenerates the affected .pyc on disk, so its
+# md5 no longer matches what dh_md5sums recorded and `debsums -c`
+# flags it. Exclude bytecode from the md5sums file; .py sources and
+# native libs are still checksummed.
+override_dh_md5sums:
+	dh_md5sums -X.pyc -X.pyo

debian/rules

@@ -0,0 +1 @@
+3.0 (native)