test: ci testing logs

.github/workflows/ci.yml

@@ -2,7 +2,7 @@ name: CI
 
 on:
   push:
-    branches: [ "main", "ci-test" ]
+    branches: [ "main" ]
   pull_request:
     branches: [ "main" ]
 
@@ -12,39 +12,23 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
-    container:
-      image: ubuntu:24.04
-      options: --privileged --cap-add SYS_ADMIN --security-opt apparmor:unconfined
     steps:
-    - name: Set up container image
-      run: |
-        apt-get update
-        apt-get install -y nodejs sudo curl wget ca-certificates build-essential
     - uses: actions/checkout@v6
     - uses: dtolnay/rust-toolchain@stable
       with:
-        components: rustfmt, clippy
+        components: rustfmt
     - name: Check format
       run: cargo fmt --check
     - name: Install build dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install -y pkg-config libssl-dev libgpg-error-dev libgpgme-dev
+        sudo apt-get install -y pkg-config libssl-dev
     - name: Build
       run: cargo build
-      env:
-        RUSTFLAGS: -Dwarnings
-    - name: Lint
-      run: cargo clippy --all-targets --all-features
-      env:
-        RUSTFLAGS: -Dwarnings
     - name: Install runtime system dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install -y git pristine-tar sbuild mmdebstrap util-linux dpkg-dev
+        sudo apt-get install -y pristine-tar sbuild mmdebstrap util-linux dpkg-dev
-    - name: Setup subuid/subgid
-      run: |
-        usermod --add-subuids 100000-200000 --add-subgids 100000-200000 ${USER:-root}
     - name: Run tests with verbose logging (timeout 30min)
       env:
         RUST_LOG: debug

Cargo.toml

@@ -27,9 +27,7 @@ xz2 = "0.1"
 serde_json = "1.0.145"
 directories = "6.0.0"
 ssh2 = "0.9.5"
-gpgme = "0.11"
+tempfile = "3.10.1"
 
 [dev-dependencies]
 test-log = "0.2.19"
-serial_test = "3.3.1"
-tempfile = "3.10.1"

README.md

@@ -24,10 +24,8 @@ Options:
 Commands and workflows include:
 ```
 Commands:
-  pull   Pull a source package from the archive or git
+  pull    Get a source package from the archive or git
   chlog  Auto-generate changelog entry, editing it, committing it afterwards
-  build  Build the source package (into a .dsc)
-  deb    Build the source package into binary package (.deb)
   help   Print this message or the help of the given subcommand(s)
 ```
 
@@ -98,7 +96,7 @@ Missing features:
   - [ ] Three build modes:
     - [ ] Build locally (discouraged)
     - [x] Build using sbuild+unshare, with binary emulation (default)
-    - [x] Cross-compilation
+    - [ ] Cross-compilation
   - [ ] Async build
 - [ ] `pkh status`
   - [ ] Show build status

src/apt/mod.rs

@@ -1 +0,0 @@
-pub mod sources;

src/apt/sources.rs

@@ -1,336 +0,0 @@
-//! APT sources.list management
-//! Provides a simple structure for managing APT repository sources
-use crate::context;
-use std::error::Error;
-use std::path::Path;
-use std::sync::Arc;
-
-/// Represents a single source entry in sources.list
-#[derive(Debug, Clone)]
-pub struct SourceEntry {
-    /// Is the source enabled?
-    pub enabled: bool,
-    /// Source components (universe, main, contrib)
-    pub components: Vec<String>,
-    /// Source architectures (amd64, riscv64, arm64)
-    pub architectures: Vec<String>,
-    /// Source URI
-    pub uri: String,
-    /// Source suites (series-pocket)
-    pub suite: Vec<String>,
-}
-
-impl SourceEntry {
-    /// Parse a string describing a source entry in deb822 format
-    pub fn from_deb822(data: &str) -> Option<Self> {
-        let mut current_entry = SourceEntry {
-            enabled: true,
-            components: Vec::new(),
-            architectures: Vec::new(),
-            uri: String::new(),
-            suite: Vec::new(),
-        };
-
-        for line in data.lines() {
-            let line = line.trim();
-            if line.starts_with('#') {
-                continue;
-            }
-
-            // Empty line: end of an entry, or beginning
-            if line.is_empty() {
-                if !current_entry.uri.is_empty() {
-                    return Some(current_entry);
-                } else {
-                    continue;
-                }
-            }
-
-            if let Some((key, value)) = line.split_once(':') {
-                let key = key.trim();
-                let value = value.trim();
-
-                match key {
-                    "Types" => {
-                        // We only care about deb types
-                    }
-                    "URIs" => current_entry.uri = value.to_string(),
-                    "Suites" => {
-                        current_entry.suite =
-                            value.split_whitespace().map(|s| s.to_string()).collect();
-                    }
-                    "Components" => {
-                        current_entry.components =
-                            value.split_whitespace().map(|s| s.to_string()).collect();
-                    }
-                    "Architectures" => {
-                        current_entry.architectures =
-                            value.split_whitespace().map(|s| s.to_string()).collect();
-                    }
-                    _ => {}
-                }
-            }
-        }
-
-        // End of entry, or empty file?
-        if !current_entry.uri.is_empty() {
-            Some(current_entry)
-        } else {
-            None
-        }
-    }
-
-    /// Parse a line describing a legacy source entry
-    pub fn from_legacy(data: &str) -> Option<Self> {
-        let line = data.lines().next()?.trim();
-
-        if line.is_empty() || line.starts_with("#") {
-            return None;
-        }
-
-        // Parse legacy deb line format: deb [arch=... / signed_by=] uri suite [components...]
-
-        // Extract bracket parameters first
-        let mut architectures = Vec::new();
-        let mut line_without_brackets = line.to_string();
-
-        // Find and process bracket parameters
-        if let Some(start_bracket) = line.find('[')
-            && let Some(end_bracket) = line.find(']')
-        {
-            let bracket_content = &line[start_bracket + 1..end_bracket];
-
-            // Parse parameters inside brackets
-            for param in bracket_content.split_whitespace() {
-                if param.starts_with("arch=") {
-                    let arch_values = param.split('=').nth(1).unwrap_or("");
-                    architectures = arch_values
-                        .split(',')
-                        .map(|s| s.trim().to_string())
-                        .collect();
-                }
-                // signed-by parameter is parsed but not stored
-            }
-
-            // Remove the bracket section from the line
-            line_without_brackets = line[..start_bracket].to_string() + &line[end_bracket + 1..];
-        }
-
-        // Trim and split the remaining line
-        let line_without_brackets = line_without_brackets.trim();
-        let parts: Vec<&str> = line_without_brackets.split_whitespace().collect();
-
-        // We need at least: deb, uri, suite
-        if parts.len() < 3 || parts[0] != "deb" {
-            return None;
-        }
-
-        let uri = parts[1].to_string();
-        let suite = vec![parts[2].to_string()];
-        let components: Vec<String> = parts[3..].iter().map(|&s| s.to_string()).collect();
-
-        Some(SourceEntry {
-            enabled: true,
-            components,
-            architectures,
-            uri,
-            suite,
-        })
-    }
-
-    /// Convert this source entry to legacy format
-    pub fn to_legacy(&self) -> String {
-        let mut result = String::new();
-
-        // Legacy entries contain one suite per line
-        for suite in &self.suite {
-            // Start with "deb" type
-            result.push_str("deb");
-
-            // Add architectures if present
-            if !self.architectures.is_empty() {
-                result.push_str(" [arch=");
-                result.push_str(&self.architectures.join(","));
-                result.push(']');
-            }
-
-            // Add URI and suite
-            result.push(' ');
-            result.push_str(&self.uri);
-            result.push(' ');
-            result.push_str(suite);
-
-            // Add components
-            if !self.components.is_empty() {
-                result.push(' ');
-                result.push_str(&self.components.join(" "));
-            }
-
-            result.push('\n');
-        }
-
-        result
-    }
-}
-
-/// Parse a 'source list' string in deb822 format into a SourceEntry vector
-pub fn parse_deb822(data: &str) -> Vec<SourceEntry> {
-    data.split("\n\n")
-        .flat_map(SourceEntry::from_deb822)
-        .collect()
-}
-
-/// Parse a 'source list' string in legacy format into a SourceEntry vector
-pub fn parse_legacy(data: &str) -> Vec<SourceEntry> {
-    data.split("\n")
-        .flat_map(SourceEntry::from_legacy)
-        .collect()
-}
-
-/// Load sources from context (or current context by default)
-pub fn load(ctx: Option<Arc<crate::context::Context>>) -> Result<Vec<SourceEntry>, Box<dyn Error>> {
-    let mut sources = Vec::new();
-    let ctx = ctx.unwrap_or_else(context::current);
-
-    // Try DEB822 format first (Ubuntu 24.04+ and Debian Trixie+)
-    if let Ok(entries) = load_deb822(&ctx, "/etc/apt/sources.list.d/ubuntu.sources") {
-        sources.extend(entries);
-    } else if let Ok(entries) = load_deb822(&ctx, "/etc/apt/sources.list.d/debian.sources") {
-        sources.extend(entries);
-    }
-
-    // Fall back to legacy format
-    if let Ok(entries) = load_legacy(&ctx, "/etc/apt/sources.list") {
-        sources.extend(entries);
-    }
-
-    Ok(sources)
-}
-
-/// Save sources back to context
-pub fn save_legacy(
-    ctx: Option<Arc<crate::context::Context>>,
-    sources: Vec<SourceEntry>,
-    path: &str,
-) -> Result<(), Box<dyn Error>> {
-    let ctx = if let Some(c) = ctx {
-        c
-    } else {
-        context::current()
-    };
-
-    let content = sources
-        .into_iter()
-        .map(|s| s.to_legacy())
-        .collect::<Vec<_>>()
-        .join("\n");
-    ctx.write_file(Path::new(path), &content)?;
-    Ok(())
-}
-
-/// Load sources from DEB822 format
-fn load_deb822(ctx: &context::Context, path: &str) -> Result<Vec<SourceEntry>, Box<dyn Error>> {
-    let path = Path::new(path);
-    if path.exists() {
-        let content = ctx.read_file(path)?;
-        return Ok(parse_deb822(&content));
-    }
-
-    Ok(Vec::new())
-}
-
-/// Load sources from legacy format
-fn load_legacy(ctx: &context::Context, path: &str) -> Result<Vec<SourceEntry>, Box<dyn Error>> {
-    let path = Path::new(path);
-    if path.exists() {
-        let content = ctx.read_file(path)?;
-        return Ok(content.lines().flat_map(SourceEntry::from_legacy).collect());
-    }
-
-    Ok(Vec::new())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[tokio::test]
-    async fn test_parse_deb822() {
-        let deb822 = "\
-        Types: deb\n\
-        URIs: http://fr.archive.ubuntu.com/ubuntu/\n\
-        Suites: questing questing-updates questing-backports\n\
-        Components: main restricted universe multiverse\n\
-        Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n\
-        Architectures: amd64\n\
-        \n\
-        Types: deb\n\
-        URIs: http://security.ubuntu.com/ubuntu/\n\
-        Suites: questing-security\n\
-        Components: main restricted universe multiverse\n\
-        Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n\
-        Architectures: amd64\n\
-        \n\
-        Types: deb\n\
-        URIs: http://ports.ubuntu.com/ubuntu-ports/\n\
-        Suites: questing questing-updates questing-backports\n\
-        Components: main restricted universe multiverse\n\
-        Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n\
-        Architectures: riscv64\n\
-        ";
-
-        let sources = parse_deb822(deb822);
-        assert_eq!(sources.len(), 3);
-        assert_eq!(sources[0].uri, "http://fr.archive.ubuntu.com/ubuntu/");
-        assert_eq!(sources[0].architectures, vec!["amd64"]);
-        assert_eq!(
-            sources[0].suite,
-            vec!["questing", "questing-updates", "questing-backports"]
-        );
-        assert_eq!(
-            sources[0].components,
-            vec!["main", "restricted", "universe", "multiverse"]
-        );
-        assert_eq!(sources[1].uri, "http://security.ubuntu.com/ubuntu/");
-        assert_eq!(sources[1].architectures, vec!["amd64"]);
-        assert_eq!(sources[1].suite, vec!["questing-security"]);
-        assert_eq!(
-            sources[1].components,
-            vec!["main", "restricted", "universe", "multiverse"]
-        );
-        assert_eq!(sources[2].uri, "http://ports.ubuntu.com/ubuntu-ports/");
-        assert_eq!(sources[2].architectures.len(), 1);
-        assert_eq!(sources[2].architectures, vec!["riscv64"]);
-        assert_eq!(
-            sources[2].suite,
-            vec!["questing", "questing-updates", "questing-backports"]
-        );
-        assert_eq!(
-            sources[2].components,
-            vec!["main", "restricted", "universe", "multiverse"]
-        );
-    }
-
-    #[tokio::test]
-    async fn test_parse_legacy() {
-        let legacy = "\
-        deb [signed-by=\"/usr/share/keyrings/ubuntu-archive-keyring.gpg\" arch=amd64] http://archive.ubuntu.com/ubuntu resolute main universe\n\
-        deb [arch=amd64,i386 signed-by=\"/usr/share/keyrings/ubuntu-archive-keyring.gpg\"] http://archive.ubuntu.com/ubuntu resolute-updates main\n\
-        deb [signed-by=\"/usr/share/keyrings/ubuntu-archive-keyring.gpg\"] http://security.ubuntu.com/ubuntu resolute-security main\n\
-        ";
-
-        let sources = parse_legacy(legacy);
-        assert_eq!(sources.len(), 3);
-        assert_eq!(sources[0].uri, "http://archive.ubuntu.com/ubuntu");
-        assert_eq!(sources[0].suite, vec!["resolute"]);
-        assert_eq!(sources[0].components, vec!["main", "universe"]);
-        assert_eq!(sources[0].architectures, vec!["amd64"]);
-        assert_eq!(sources[1].uri, "http://archive.ubuntu.com/ubuntu");
-        assert_eq!(sources[1].suite, vec!["resolute-updates"]);
-        assert_eq!(sources[1].components, vec!["main"]);
-        assert_eq!(sources[1].architectures, vec!["amd64", "i386"]);
-        assert_eq!(sources[2].uri, "http://security.ubuntu.com/ubuntu");
-        assert_eq!(sources[2].suite, vec!["resolute-security"]);
-        assert_eq!(sources[2].components, vec!["main"]);
-    }
-}

src/build.rs

@@ -2,62 +2,18 @@ use std::error::Error;
 use std::path::Path;
 use std::process::Command;
 
-use crate::changelog::parse_changelog_footer;
-use crate::utils::gpg;
-
-/// Build a Debian source package (to a .dsc)
 pub fn build_source_package(cwd: Option<&Path>) -> Result<(), Box<dyn Error>> {
     let cwd = cwd.unwrap_or_else(|| Path::new("."));
 
-    // Parse changelog to get maintainer information from the last modification entry
+    let status = Command::new("dpkg-buildpackage")
-    let changelog_path = cwd.join("debian/changelog");
-    let (maintainer_name, maintainer_email) = parse_changelog_footer(&changelog_path)?;
-
-    // Check if a GPG key matching the maintainer's email exists
-    let signing_key = match gpg::find_signing_key_for_email(&maintainer_email) {
-        Ok(key) => key,
-        Err(e) => {
-            // If GPG is not available or there's an error, continue without signing
-            log::warn!("Failed to check for GPG key: {}", e);
-            None
-        }
-    };
-
-    // Build command arguments
-    let mut command = Command::new("dpkg-buildpackage");
-    command
         .current_dir(cwd)
-        .arg("-S")
+        .args(["-S", "-I", "-i", "-nc", "-d"])
-        .arg("-I")
+        .status()?;
-        .arg("-i")
-        .arg("-nc")
-        .arg("-d");
-
-    // If a signing key is found, use it for signing
-    if let Some(key_id) = &signing_key {
-        command.arg(format!("--sign-keyid={}", key_id));
-        log::info!("Using GPG key {} for signing", key_id);
-    } else {
-        command.arg("--no-sign");
-        log::info!(
-            "No GPG key found for {} ({}), building without signing",
-            maintainer_name,
-            maintainer_email
-        );
-    }
-
-    let status = command.status()?;
 
     if !status.success() {
         return Err(format!("dpkg-buildpackage failed with status: {}", status).into());
     }
 
-    if signing_key.is_some() {
-        println!("Package built and signed successfully!");
-    } else {
-        println!("Package built successfully (unsigned).");
-    }
-
     Ok(())
 }
 

src/changelog.rs

@@ -5,7 +5,9 @@ use std::fs::File;
 use std::io::{self, BufRead, Read, Write};
 use std::path::Path;
 
-/// Automatically generate a changelog entry from a commit history and previous changelog
+/*
+* Automatically generate a changelog entry from a commit history and previous changelog
+*/
 pub fn generate_entry(
     changelog_file: &str,
     cwd: Option<&Path>,
@@ -59,8 +61,10 @@ pub fn generate_entry(
     Ok(())
 }
 
-/// Compute the next (most probable) version number of a package, from old version and
+/*
-/// conditions on changes (is ubuntu upload, is a no change rebuild, is a non-maintainer upload)
+* Compute the next (most probable) version number of a package, from old version and
+* conditions on changes (is ubuntu upload, is a no change rebuild, is a non-maintainer upload)
+*/
 fn compute_new_version(
     old_version: &str,
     is_ubuntu: bool,
@@ -83,7 +87,9 @@ fn compute_new_version(
     increment_suffix(old_version, "")
 }
 
-/// Increment a version number by 1, for a given suffix
+/*
+* Increment a version number by 1, for a given suffix
+*/
 fn increment_suffix(version: &str, suffix: &str) -> String {
     // If suffix is empty, we just look for trailing digits
     // If suffix is not empty, we look for suffix followed by digits
@@ -114,8 +120,9 @@ fn increment_suffix(version: &str, suffix: &str) -> String {
     }
 }
 
-/// Parse a changelog file first entry header
+/*
-/// Returns (package, version, series) tuple from the last modification entry
+* Parse a changelog file first entry header, to obtain (package, version, series)
+*/
 pub fn parse_changelog_header(
     path: &Path,
 ) -> Result<(String, String, String), Box<dyn std::error::Error>> {
@@ -136,33 +143,6 @@ pub fn parse_changelog_header(
     }
 }
 
-/// Parse a changelog file footer to extract maintainer information
-/// Returns (name, email) tuple from the last modification entry
-pub fn parse_changelog_footer(path: &Path) -> Result<(String, String), Box<dyn std::error::Error>> {
-    let mut file = File::open(path)?;
-    let mut content = String::new();
-    file.read_to_string(&mut content)?;
-
-    // Find the last maintainer line (format: -- Name <email>  Date)
-    let re = Regex::new(r"--\s*([^<]+?)\s*<([^>]+)>\s*")?;
-
-    if let Some(first_match) = re.captures_iter(&content).next() {
-        let name = first_match
-            .get(1)
-            .map_or("", |m| m.as_str())
-            .trim()
-            .to_string();
-        let email = first_match
-            .get(2)
-            .map_or("", |m| m.as_str())
-            .trim()
-            .to_string();
-        Ok((name, email))
-    } else {
-        Err(format!("No maintainer information found in {}", path.display()).into())
-    }
-}
-
 /*
 * Obtain all commit messages as a list since a tagged version in a git repository
 */

src/context/api.rs

@@ -10,7 +10,6 @@ use super::schroot::SchrootDriver;
 use super::ssh::SshDriver;
 use super::unshare::UnshareDriver;
 
-/// A ContextDriver is the interface for the logic happening inside a context
 pub trait ContextDriver {
     fn ensure_available(&self, src: &Path, dest_root: &str) -> io::Result<PathBuf>;
     fn retrieve_path(&self, src: &Path, dest: &Path) -> io::Result<()>;
@@ -33,7 +32,6 @@ pub trait ContextDriver {
     fn copy_path(&self, src: &Path, dest: &Path) -> io::Result<()>;
     fn read_file(&self, path: &Path) -> io::Result<String>;
     fn write_file(&self, path: &Path, content: &str) -> io::Result<()>;
-    fn exists(&self, path: &Path) -> io::Result<bool>;
 }
 
 /// Represents an execution environment (Local or via SSH).
@@ -43,52 +41,34 @@ pub trait ContextDriver {
 #[serde(tag = "type")]
 #[derive(Default)]
 pub enum ContextConfig {
-    /// Local context: actions executed locally
     #[serde(rename = "local")]
     #[default]
     Local,
-    /// SSH context: actions over an SSH connection
     #[serde(rename = "ssh")]
     Ssh {
-        /// Host for the SSH connection
         host: String,
-        /// User for the SSH connection
         user: Option<String>,
-        /// TCP port for the SSH connection
         port: Option<u16>,
     },
-    /// Schroot context: using `schroot`
     #[serde(rename = "schroot")]
     Schroot {
-        /// Name of the schroot
         name: String,
-        /// Optional parent context for the Schroot context
         parent: Option<String>,
     },
-    /// Unshare context: chroot with dropped permissions (using `unshare`)
     #[serde(rename = "unshare")]
     Unshare {
-        /// Path to use for chrooting
         path: String,
-        /// Optional parent context for the Unshare context
         parent: Option<String>,
     },
 }
 
-/// A context, allowing to run commands, read and write files, etc
 pub struct Context {
-    /// Configuration for the context
     pub config: ContextConfig,
-    /// Parent context for the context
-    ///
-    /// For example, you could have a chroot context over an ssh connection
     pub parent: Option<Arc<Context>>,
-    /// ContextDriver for the context, implementing the logic for actions
     driver: Mutex<Option<Box<dyn ContextDriver + Send + Sync>>>,
 }
 
 impl Context {
-    /// Create a context from configuration
     pub fn new(config: ContextConfig) -> Self {
         let parent = match &config {
             ContextConfig::Schroot {
@@ -117,7 +97,6 @@ impl Context {
         }
     }
 
-    /// Create a context with an explicit parent context
     pub fn with_parent(config: ContextConfig, parent: Arc<Context>) -> Self {
         Self {
             config,
@@ -126,7 +105,6 @@ impl Context {
         }
     }
 
-    /// Make a command inside context
     pub fn command<S: AsRef<OsStr>>(&self, program: S) -> ContextCommand<'_> {
         ContextCommand {
             context: self,
@@ -148,7 +126,6 @@ impl Context {
             .ensure_available(src, dest_root)
     }
 
-    /// Create a temp directory inside context
     pub fn create_temp_dir(&self) -> io::Result<String> {
         self.driver().as_ref().unwrap().create_temp_dir()
     }
@@ -166,27 +143,18 @@ impl Context {
         self.driver().as_ref().unwrap().list_files(path)
     }
 
-    /// Copy a path inside context
     pub fn copy_path(&self, src: &Path, dest: &Path) -> io::Result<()> {
         self.driver().as_ref().unwrap().copy_path(src, dest)
     }
 
-    /// Read a file inside context
     pub fn read_file(&self, path: &Path) -> io::Result<String> {
         self.driver().as_ref().unwrap().read_file(path)
     }
 
-    /// Write a file inside context
     pub fn write_file(&self, path: &Path, content: &str) -> io::Result<()> {
         self.driver().as_ref().unwrap().write_file(path, content)
     }
 
-    /// Check if a file or directory exists inside context
-    pub fn exists(&self, path: &Path) -> io::Result<bool> {
-        self.driver().as_ref().unwrap().exists(path)
-    }
-
-    /// Create and obtain a specific driver for the context
     pub fn driver(
         &self,
     ) -> std::sync::MutexGuard<'_, Option<Box<dyn ContextDriver + Send + Sync>>> {
@@ -214,7 +182,6 @@ impl Context {
         driver_lock
     }
 
-    /// Clone a context
     pub fn clone_raw(&self) -> Self {
         Self {
             config: self.config.clone(),
@@ -240,13 +207,12 @@ pub struct ContextCommand<'a> {
 }
 
 impl<'a> ContextCommand<'a> {
-    /// Add an argument to current command
     pub fn arg<S: AsRef<OsStr>>(&mut self, arg: S) -> &mut Self {
         self.args.push(arg.as_ref().to_string_lossy().to_string());
         self
     }
 
-    /// Add multiple command arguments
+    // Support chaining args
     pub fn args<I, S>(&mut self, args: I) -> &mut Self
     where
         I: IntoIterator<Item = S>,
@@ -258,7 +224,6 @@ impl<'a> ContextCommand<'a> {
         self
     }
 
-    /// Set environment variable for command
     pub fn env<K, V>(&mut self, key: K, val: V) -> &mut Self
     where
         K: AsRef<OsStr>,
@@ -271,7 +236,6 @@ impl<'a> ContextCommand<'a> {
         self
     }
 
-    /// Set multiple environment variables for command
     pub fn envs<I, K, V>(&mut self, vars: I) -> &mut Self
     where
         I: IntoIterator<Item = (K, V)>,
@@ -284,13 +248,11 @@ impl<'a> ContextCommand<'a> {
         self
     }
 
-    /// Set current working directory for command
     pub fn current_dir<P: AsRef<OsStr>>(&mut self, dir: P) -> &mut Self {
         self.cwd = Some(dir.as_ref().to_string_lossy().to_string());
         self
     }
 
-    /// Run command and obtain exit status
     pub fn status(&mut self) -> io::Result<std::process::ExitStatus> {
         self.context.driver().as_ref().unwrap().run(
             &self.program,
@@ -300,7 +262,7 @@ impl<'a> ContextCommand<'a> {
         )
     }
 
-    /// Run command, capturing output
+    // Capture output
     pub fn output(&mut self) -> io::Result<std::process::Output> {
         self.context.driver().as_ref().unwrap().run_output(
             &self.program,

src/context/local.rs

@@ -4,7 +4,6 @@ use super::api::ContextDriver;
 use std::io;
 use std::path::{Path, PathBuf};
 use std::process::Command;
-use std::time::SystemTime;
 
 pub struct LocalDriver;
 
@@ -21,34 +20,8 @@ impl ContextDriver for LocalDriver {
     }
 
     fn create_temp_dir(&self) -> io::Result<String> {
-        // Generate a unique temporary directory name with random string
+        let temp_dir = tempfile::Builder::new().prefix("pkh-").tempdir()?;
-        let base_timestamp = SystemTime::now()
+        Ok(temp_dir.keep().to_string_lossy().to_string())
-            .duration_since(SystemTime::UNIX_EPOCH)
-            .unwrap()
-            .as_secs();
-
-        let mut attempt = 0;
-        loop {
-            let work_dir_name = if attempt == 0 {
-                format!("pkh-{}", base_timestamp)
-            } else {
-                format!("pkh-{}-{}", base_timestamp, attempt)
-            };
-
-            let temp_dir_path = std::env::temp_dir().join(&work_dir_name);
-
-            // Check if directory already exists
-            if temp_dir_path.exists() {
-                attempt += 1;
-                continue;
-            }
-
-            // Create the directory
-            std::fs::create_dir_all(&temp_dir_path)?;
-
-            // Return the path as a string
-            return Ok(temp_dir_path.to_string_lossy().to_string());
-        }
     }
 
     fn retrieve_path(&self, src: &Path, dest: &Path) -> io::Result<()> {
@@ -105,10 +78,6 @@ impl ContextDriver for LocalDriver {
     fn write_file(&self, path: &Path, content: &str) -> io::Result<()> {
         std::fs::write(path, content)
     }
-
-    fn exists(&self, path: &Path) -> io::Result<bool> {
-        Ok(path.exists())
-    }
 }
 
 fn copy_dir_recursive(src: &Path, dest: &Path) -> io::Result<()> {

src/context/manager.rs

@@ -26,7 +26,6 @@ impl Default for Config {
     }
 }
 
-/// Helper managing contexts
 pub struct ContextManager {
     context: RwLock<Arc<Context>>,
     config_path: PathBuf,
@@ -68,12 +67,10 @@ impl ContextManager {
         })
     }
 
-    /// Obtain current ContextManager configuration
     pub fn get_config(&self) -> std::sync::RwLockReadGuard<'_, Config> {
         self.config.read().unwrap()
     }
 
-    /// Make a ContextManager using a specific configuration path
     pub fn with_path(path: PathBuf) -> Self {
         let config = Config::default();
         Self {
@@ -83,7 +80,6 @@ impl ContextManager {
         }
     }
 
-    /// Save current context configuration to disk
     pub fn save(&self) -> io::Result<()> {
         let config = self.config.read().unwrap();
         let content = serde_json::to_string_pretty(&*config)
@@ -101,7 +97,6 @@ impl ContextManager {
         Context::new(context_config)
     }
 
-    /// List contexts from configuration
     pub fn list_contexts(&self) -> Vec<String> {
         self.config
             .read()
@@ -112,7 +107,6 @@ impl ContextManager {
             .collect()
     }
 
-    /// Add a context to configuration
     pub fn add_context(&self, name: &str, config: ContextConfig) -> io::Result<()> {
         self.config
             .write()
@@ -122,7 +116,6 @@ impl ContextManager {
         self.save()
     }
 
-    /// Remove context from configuration
     pub fn remove_context(&self, name: &str) -> io::Result<()> {
         let mut config = self.config.write().unwrap();
         if name == "local" {
@@ -144,7 +137,6 @@ impl ContextManager {
         Ok(())
     }
 
-    /// Set current context from name (modifying configuration)
     pub fn set_current(&self, name: &str) -> io::Result<()> {
         let mut config = self.config.write().unwrap();
         if config.contexts.contains_key(name) {
@@ -161,18 +153,14 @@ impl ContextManager {
         }
     }
 
-    /// Set current context, without modifying configuration
     pub fn set_current_ephemeral(&self, context: Context) {
         *self.context.write().unwrap() = context.into();
     }
 
-    /// Obtain current context handle
     pub fn current(&self) -> Arc<Context> {
         self.context.read().unwrap().clone()
     }
 
-    /// Obtain current context name
-    /// Will not work for ephemeral context (obtained from config)
     pub fn current_name(&self) -> String {
         self.config.read().unwrap().context.clone()
     }

src/context/mod.rs

@@ -9,12 +9,10 @@ pub use api::{Context, ContextCommand, ContextConfig};
 pub use manager::ContextManager;
 use std::sync::Arc;
 
-/// Obtain global context manager
 pub fn manager() -> &'static ContextManager {
     &manager::MANAGER
 }
 
-/// Obtain current context
 pub fn current() -> Arc<Context> {
     manager::MANAGER.current()
 }

src/context/schroot.rs

@@ -262,14 +262,4 @@ impl ContextDriver for SchrootDriver {
         }
         Ok(())
     }
-
-    fn exists(&self, path: &Path) -> io::Result<bool> {
-        let status = self.run(
-            "test",
-            &["-e".to_string(), path.to_string_lossy().to_string()],
-            &[],
-            None,
-        )?;
-        Ok(status.success())
-    }
 }

src/context/ssh.rs

@@ -244,15 +244,6 @@ impl ContextDriver for SshDriver {
         remote_file.write_all(content.as_bytes())?;
         Ok(())
     }
-
-    fn exists(&self, path: &Path) -> io::Result<bool> {
-        let sess = connect_ssh(&self.host, self.user.as_deref(), self.port)?;
-        let sftp = sess.sftp().map_err(io::Error::other)?;
-        match sftp.stat(path) {
-            Ok(_) => Ok(true),
-            Err(_) => Ok(false),
-        }
-    }
 }
 
 impl SshDriver {

src/context/unshare.rs

@@ -112,41 +112,27 @@ impl ContextDriver for UnshareDriver {
     }
 
     fn create_temp_dir(&self) -> io::Result<String> {
-        // Create a temporary directory inside the chroot with unique naming
+        // Create a temporary directory inside the chroot
-        let base_timestamp = std::time::SystemTime::now()
+        let timestamp = std::time::SystemTime::now()
             .duration_since(std::time::UNIX_EPOCH)
             .unwrap()
             .as_secs();
 
-        let mut attempt = 0;
+        let work_dir_name = format!("pkh-build-{}", timestamp);
-        loop {
+        let work_dir_inside_chroot = format!("/tmp/{}", work_dir_name);
-            let work_dir_name = if attempt == 0 {
-                format!("pkh-build-{}", base_timestamp)
-            } else {
-                format!("pkh-build-{}-{}", base_timestamp, attempt)
-            };
 
-            let work_dir_inside_chroot = format!("/tmp/{}", work_dir_name);
+        // Create the directory on the host filesystem
-            let host_path = Path::new(&self.path).join("tmp").join(&work_dir_name);
+        let host_path = Path::new(&self.path).join("tmp").join(&work_dir_name);
+        std::fs::create_dir_all(&host_path)?;
 
-            // Check if directory already exists
+        debug!(
-            if host_path.exists() {
+            "Created work directory: {} (host: {})",
-                attempt += 1;
+            work_dir_inside_chroot,
-                continue;
+            host_path.display()
-            }
+        );
 
-            // Create the directory on the host filesystem
+        // Return the path as it appears inside the chroot
-            std::fs::create_dir_all(&host_path)?;
+        Ok(work_dir_inside_chroot)
-
-            debug!(
-                "Created work directory: {} (host: {})",
-                work_dir_inside_chroot,
-                host_path.display()
-            );
-
-            // Return the path as it appears inside the chroot
-            return Ok(work_dir_inside_chroot);
-        }
     }
 
     fn copy_path(&self, src: &Path, dest: &Path) -> io::Result<()> {
@@ -164,11 +150,6 @@ impl ContextDriver for UnshareDriver {
         let host_path = Path::new(&self.path).join(path.to_string_lossy().trim_start_matches('/'));
         self.parent().write_file(&host_path, content)
     }
-
-    fn exists(&self, path: &Path) -> io::Result<bool> {
-        let host_path = Path::new(&self.path).join(path.to_string_lossy().trim_start_matches('/'));
-        self.parent().exists(&host_path)
-    }
 }
 
 impl UnshareDriver {
@@ -189,13 +170,10 @@ impl UnshareDriver {
 
         cmd.envs(env.iter().cloned());
 
-        cmd.arg("--map-user=65536")
+        cmd.arg("--mount-proc")
-            .arg("--map-group=65536")
             .arg("--pid")
             .arg("--ipc")
             .arg("--uts")
-            .arg("--user")
-            .arg("--cgroup")
             .arg("--map-auto")
             .arg("-r")
             .arg("--mount")
@@ -207,11 +185,7 @@ impl UnshareDriver {
             cmd.arg("-w").arg(dir);
         }
 
-        cmd.arg("--").arg("bash").arg("-c").arg(format!(
+        cmd.arg(program).args(args);
-            "mount -t proc proc /proc; mount -t devpts devpts /dev/pts; mount --bind /dev/pts/ptmx /dev/ptmx; {} {}",
-            program,
-            args.join(" ")
-        ));
 
         cmd
     }

src/deb/cross.rs

@@ -1,6 +1,148 @@
 use crate::context;
+use crate::context::{Context, ContextConfig};
+use directories::ProjectDirs;
 use std::collections::HashMap;
 use std::error::Error;
+use std::fs;
+use std::path::{Path, PathBuf};
+use tar::Archive;
+use xz2::read::XzDecoder;
+
+pub struct EphemeralContextGuard {
+    previous_context: String,
+    chroot_path: PathBuf,
+}
+
+impl EphemeralContextGuard {
+    pub fn new(series: &str) -> Result<Self, Box<dyn Error>> {
+        let current_context_name = context::manager().current_name();
+
+        // Create a temporary directory for the chroot
+        let chroot_path_str = context::current().create_temp_dir()?;
+        let chroot_path = PathBuf::from(chroot_path_str);
+
+        log::debug!(
+            "Creating new chroot for {} at {}...",
+            series,
+            chroot_path.display()
+        );
+
+        // Download and extract the chroot tarball
+        Self::download_and_extract_chroot(series, &chroot_path)?;
+
+        // Switch to an ephemeral context to build the package in the chroot
+        context::manager().set_current_ephemeral(Context::new(ContextConfig::Unshare {
+            path: chroot_path.to_string_lossy().to_string(),
+            parent: Some(current_context_name.clone()),
+        }));
+
+        Ok(Self {
+            previous_context: current_context_name,
+            chroot_path,
+        })
+    }
+
+    fn download_and_extract_chroot(
+        series: &str,
+        chroot_path: &PathBuf,
+    ) -> Result<(), Box<dyn Error>> {
+        // Get project directories for caching
+        let proj_dirs = ProjectDirs::from("com", "pkh", "pkh")
+            .ok_or("Could not determine project directories")?;
+        let cache_dir = proj_dirs.cache_dir();
+        fs::create_dir_all(cache_dir)?;
+
+        // Create tarball filename based on series
+        let tarball_filename = format!("{}-buildd.tar.xz", series);
+        let tarball_path = cache_dir.join(&tarball_filename);
+
+        // Download tarball if it doesn't exist
+        if !tarball_path.exists() {
+            log::debug!("Downloading chroot tarball for {}...", series);
+            Self::download_chroot_tarball(series, &tarball_path)?;
+        } else {
+            log::debug!("Using cached chroot tarball for {}", series);
+        }
+
+        // Extract tarball to chroot directory
+        log::debug!("Extracting chroot tarball to {}...", chroot_path.display());
+        Self::extract_tarball(&tarball_path, chroot_path)?;
+
+        Ok(())
+    }
+
+    fn download_chroot_tarball(series: &str, tarball_path: &Path) -> Result<(), Box<dyn Error>> {
+        // Use mmdebstrap to download the tarball to the cache directory
+        let status = context::current()
+            .command("mmdebstrap")
+            .arg("--variant=buildd")
+            .arg("--format=tar")
+            .arg(series)
+            .arg(tarball_path.to_string_lossy().to_string())
+            .status()?;
+
+        if !status.success() {
+            return Err(format!("Failed to download chroot tarball for series {}", series).into());
+        }
+
+        Ok(())
+    }
+
+    fn extract_tarball(
+        tarball_path: &PathBuf,
+        chroot_path: &PathBuf,
+    ) -> Result<(), Box<dyn Error>> {
+        // Create the chroot directory
+        fs::create_dir_all(chroot_path)?;
+
+        // Open the tarball file
+        let tarball_file = std::fs::File::open(tarball_path)?;
+        let xz_decoder = XzDecoder::new(tarball_file);
+        let mut archive = Archive::new(xz_decoder);
+
+        // Extract all files to the chroot directory
+        archive.unpack(chroot_path)?;
+
+        Ok(())
+    }
+}
+
+impl Drop for EphemeralContextGuard {
+    fn drop(&mut self) {
+        log::debug!("Cleaning up ephemeral context...");
+        // Reset to normal context
+        if let Err(e) = context::manager().set_current(&self.previous_context) {
+            log::error!("Failed to restore context {}: {}", self.previous_context, e);
+        }
+
+        // Remove chroot directory
+        // We use the restored context to execute the cleanup command
+        let result = context::current()
+            .command("sudo")
+            .arg("rm")
+            .arg("-rf")
+            .arg(&self.chroot_path)
+            .status();
+
+        match result {
+            Ok(status) => {
+                if !status.success() {
+                    log::error!(
+                        "Failed to remove chroot directory {}",
+                        self.chroot_path.display()
+                    );
+                }
+            }
+            Err(e) => {
+                log::error!(
+                    "Failed to execute cleanup command for {}: {}",
+                    self.chroot_path.display(),
+                    e
+                );
+            }
+        }
+    }
+}
 
 /// Set environment variables for cross-compilation
 pub fn setup_environment(
@@ -10,8 +152,7 @@ pub fn setup_environment(
     let dpkg_architecture = String::from_utf8(
         context::current()
             .command("dpkg-architecture")
-            .arg("-a")
+            .arg(format!("-a{}", arch))
-            .arg(arch)
             .output()?
             .stdout,
     )?;
@@ -51,99 +192,145 @@ pub fn ensure_repositories(arch: &str, series: &str) -> Result<(), Box<dyn Error
         return Ok(());
     }
 
-    // Load existing sources
+    // Handle DEB822 format (Ubuntu 24.04+)
-    let mut sources = crate::apt::sources::load(Some(ctx.clone()))?;
-
-    // Ensure all components are enabled for the primary architecture
-    for source in &mut sources {
-        if source.uri.contains("archive.ubuntu.com") || source.uri.contains("security.ubuntu.com") {
-            // Scope to local_arch if not already scoped
-            if source.architectures.is_empty() {
-                source.architectures.push(local_arch.clone());
-            }
-
-            // Ensure all components are present
-            let required_components = ["main", "restricted", "universe", "multiverse"];
-            for &comp in &required_components {
-                if !source.components.contains(&comp.to_string()) {
-                    source.components.push(comp.to_string());
-                }
-            }
-
-            // Ensure all suites (pockets) are enabled, excluding 'proposed'
-            let required_suites = [
-                series.to_string(),
-                format!("{}-updates", series),
-                format!("{}-backports", series),
-                format!("{}-security", series),
-            ];
-            for suite in required_suites {
-                if !source.suite.contains(&suite) {
-                    source.suite.push(suite);
-                }
-            }
-        }
-    }
-
-    // Check if ports repository already exists for the target architecture
-    let has_ports = sources
-        .iter()
-        .any(|s| s.uri.contains("ports.ubuntu.com") && s.architectures.contains(&arch.to_string()));
-
-    if !has_ports {
-        // Add ports repository for the target architecture
-        let ports_entry = crate::apt::sources::SourceEntry {
-            enabled: true,
-            components: vec![
-                "main".to_string(),
-                "restricted".to_string(),
-                "universe".to_string(),
-                "multiverse".to_string(),
-            ],
-            architectures: vec![arch.to_string()],
-            uri: "http://ports.ubuntu.com/ubuntu-ports".to_string(),
-            suite: vec![
-                format!("{series}"),
-                format!("{series}-updates"),
-                format!("{series}-backports"),
-                format!("{series}-security"),
-            ],
-        };
-        sources.push(ports_entry);
-    }
-
-    // Save the updated sources
-    // Try to save in DEB822 format first, fall back to legacy format
     let deb822_path = "/etc/apt/sources.list.d/ubuntu.sources";
-    if ctx
+    let has_deb822 = ctx
         .command("test")
         .arg("-f")
         .arg(deb822_path)
         .status()?
-        .success()
+        .success();
-    {
+
-        // For DEB822 format, we need to reconstruct the file content
+    if has_deb822 {
-        let mut content = String::new();
+        ensure_repositories_deb822(&ctx, arch, &local_arch, series, deb822_path)?;
-        for source in &sources {
-            if !source.enabled {
-                continue;
-            }
-            content.push_str("Types: deb\n");
-            content.push_str(&format!("URIs: {}\n", source.uri));
-            content.push_str(&format!("Suites: {}\n", source.suite.join(" ")));
-            content.push_str(&format!("Components: {}\n", source.components.join(" ")));
-            content.push_str("Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\n");
-            content.push_str(&format!(
-                "Architectures: {}\n",
-                source.architectures.join(" ")
-            ));
-            content.push('\n');
-        }
-        ctx.write_file(std::path::Path::new(deb822_path), &content)?;
     } else {
-        // Fall back to legacy format
+        ensure_repositories_legacy(&ctx, arch, &local_arch, series, "/etc/apt/sources.list")?;
-        crate::apt::sources::save_legacy(Some(ctx.clone()), sources, "/etc/apt/sources.list")?;
     }
 
     Ok(())
 }
+
+fn ensure_repositories_deb822(
+    ctx: &context::Context,
+    arch: &str,
+    local_arch: &str,
+    series: &str,
+    deb822_path: &str,
+) -> Result<(), Box<dyn Error>> {
+    // Scope existing to local_arch if not already scoped
+    ctx.command("sed")
+        .arg("-i")
+        .arg(format!("/URIs:.*\\(archive\\|security\\)\\.ubuntu\\.com/ {{ n; /^Architectures:/ ! i Architectures: {} }}", local_arch))
+        .arg(deb822_path)
+        .status()?;
+
+    // Ensure all components are enabled for the primary architecture
+    ctx.command("sed")
+        .arg("-i")
+        .arg("/URIs:.*\\(archive\\|security\\)\\.ubuntu\\.com/,/Components:/ s/^Components:.*/Components: main restricted universe multiverse/")
+        .arg(deb822_path)
+        .status()?;
+
+    // Ensure all suites (pockets) are enabled for the primary architecture
+    // Excluding 'proposed' as it contains unstable software
+    let suites = format!("{series} {series}-updates {series}-backports {series}-security");
+    ctx.command("sed")
+        .arg("-i")
+        .arg(format!(
+            "/URIs:.*\\(archive\\|security\\)\\.ubuntu\\.com/,/Suites:/ s/^Suites:.*/Suites: {}/",
+            suites
+        ))
+        .arg(deb822_path)
+        .status()?;
+
+    // Add ports if not already present
+    let has_ports = ctx
+        .command("grep")
+        .arg("-q")
+        .arg("ports.ubuntu.com")
+        .arg(deb822_path)
+        .status()?
+        .success();
+
+    if !has_ports {
+        let ports_block = format!(
+            "\nTypes: deb\nURIs: http://ports.ubuntu.com/ubuntu-ports\nSuites: {series} {series}-updates {series}-backports {series}-security\nComponents: main restricted universe multiverse\nSigned-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg\nArchitectures: {arch}\n"
+        );
+        ctx.command("sh")
+            .arg("-c")
+            .arg(format!("echo '{}' >> {}", ports_block, deb822_path))
+            .status()?;
+    }
+    Ok(())
+}
+
+fn ensure_repositories_legacy(
+    ctx: &context::Context,
+    arch: &str,
+    local_arch: &str,
+    series: &str,
+    sources_path: &str,
+) -> Result<(), Box<dyn Error>> {
+    // Scope archive.ubuntu.com and security.ubuntu.com to local_arch if not already scoped
+    ctx.command("sed")
+        .arg("-i")
+        .arg(format!(
+            r"/archive.ubuntu.com\|security.ubuntu.com/ {{ /arch=/ ! {{ /^deb \[/ ! s/^deb /deb [arch={}] /; /^deb \[/ s/^deb \[\([^]]*\)\]/deb [arch={} \1]/ }} }}",
+            local_arch, local_arch
+        ))
+        .arg(sources_path)
+        .status()?;
+
+    // Ensure all components (main restricted universe multiverse) are present for all archive/security lines
+    ctx.command("sed")
+        .arg("-i")
+        .arg(r"/archive.ubuntu.com\|security.ubuntu.com/ s/\( main\)\?\([ ]\+restricted\)\?\([ ]\+universe\)\?\([ ]\+multiverse\)\?$/ main restricted universe multiverse/")
+        .arg(sources_path)
+        .status()?;
+
+    // Ensure all pockets exist. If not, we append them.
+    for pocket in ["", "-updates", "-backports", "-security"] {
+        let suite = format!("{}{}", series, pocket);
+        let has_suite = ctx
+            .command("grep")
+            .arg("-q")
+            .arg(format!(" {}", suite))
+            .arg(sources_path)
+            .status()?
+            .success();
+
+        if !has_suite {
+            let line = format!(
+                "deb [arch={}] http://archive.ubuntu.com/ubuntu/ {} main restricted universe multiverse",
+                local_arch, suite
+            );
+            ctx.command("sh")
+                .arg("-c")
+                .arg(format!("echo '{}' >> {}", line, sources_path))
+                .status()?;
+        }
+    }
+
+    // Add ports repository to sources.list if not already present
+    let has_ports = ctx
+        .command("grep")
+        .arg("-q")
+        .arg("ports.ubuntu.com")
+        .arg(sources_path)
+        .status()?
+        .success();
+
+    if !has_ports {
+        let ports_lines = format!(
+            "deb [arch={arch}] http://ports.ubuntu.com/ubuntu-ports {series} main restricted universe multiverse\n\
+             deb [arch={arch}] http://ports.ubuntu.com/ubuntu-ports {series}-updates main restricted universe multiverse\n\
+             deb [arch={arch}] http://ports.ubuntu.com/ubuntu-ports {series}-backports main restricted universe multiverse\n\
+             deb [arch={arch}] http://ports.ubuntu.com/ubuntu-ports {series}-security main restricted universe multiverse"
+        );
+        ctx.command("sh")
+            .arg("-c")
+            .arg(format!("echo '{}' >> {}", ports_lines, sources_path))
+            .status()?;
+    }
+    Ok(())
+}

src/deb/ephemeral.rs

@@ -1,207 +0,0 @@
-use crate::context;
-use crate::context::{Context, ContextConfig};
-use directories::ProjectDirs;
-use std::error::Error;
-use std::fs;
-use std::path::{Path, PathBuf};
-use tar::Archive;
-use xz2::read::XzDecoder;
-
-/// An ephemeral unshare context guard that creates and manages a temporary chroot environment
-/// for building packages with unshare permissions.
-pub struct EphemeralContextGuard {
-    previous_context: String,
-    chroot_path: PathBuf,
-}
-
-impl EphemeralContextGuard {
-    /// Create a new ephemeral unshare context for the specified series
-    pub fn new(series: &str) -> Result<Self, Box<dyn Error>> {
-        let current_context_name = context::manager().current_name();
-
-        // Create a temporary directory for the chroot
-        let chroot_path_str = context::current().create_temp_dir()?;
-        let chroot_path = PathBuf::from(chroot_path_str);
-
-        log::debug!(
-            "Creating new chroot for {} at {}...",
-            series,
-            chroot_path.display()
-        );
-
-        // Download and extract the chroot tarball
-        Self::download_and_extract_chroot(series, &chroot_path)?;
-
-        // Switch to an ephemeral context to build the package in the chroot
-        context::manager().set_current_ephemeral(Context::new(ContextConfig::Unshare {
-            path: chroot_path.to_string_lossy().to_string(),
-            parent: Some(current_context_name.clone()),
-        }));
-
-        Ok(Self {
-            previous_context: current_context_name,
-            chroot_path,
-        })
-    }
-
-    fn download_and_extract_chroot(
-        series: &str,
-        chroot_path: &PathBuf,
-    ) -> Result<(), Box<dyn Error>> {
-        // Get project directories for caching
-        let proj_dirs = ProjectDirs::from("com", "pkh", "pkh")
-            .ok_or("Could not determine project directories")?;
-        let cache_dir = proj_dirs.cache_dir();
-        fs::create_dir_all(cache_dir)?;
-
-        // Create tarball filename based on series
-        let tarball_filename = format!("{}-buildd.tar.xz", series);
-        let tarball_path = cache_dir.join(&tarball_filename);
-
-        // Check for existing lockfile, and wait for a timeout if it exists
-        // After timeout, warn the user
-        let lockfile_path = tarball_path.with_extension("lock");
-        let ctx = context::current();
-
-        // Check if lockfile exists and wait for it to be removed
-        let mut wait_time = 0;
-        let timeout = 300; // 5 minutes timeout
-        let poll_interval = 5; // Check every 5 seconds
-
-        while ctx.exists(&lockfile_path)? {
-            if wait_time >= timeout {
-                log::warn!(
-                    "Lockfile {} exists and has been present for more than {} seconds. \
-                     Another process may be downloading the chroot tarball. Continuing anyway...",
-                    lockfile_path.display(),
-                    timeout
-                );
-                break;
-            }
-
-            log::info!(
-                "Lockfile {} exists, waiting for download to complete... ({}s/{})",
-                lockfile_path.display(),
-                wait_time,
-                timeout
-            );
-
-            std::thread::sleep(std::time::Duration::from_secs(poll_interval));
-            wait_time += poll_interval;
-        }
-
-        // Download tarball if it doesn't exist
-        if !tarball_path.exists() {
-            log::debug!("Downloading chroot tarball for {}...", series);
-            Self::download_chroot_tarball(series, &tarball_path)?;
-        } else {
-            log::debug!("Using cached chroot tarball for {}", series);
-        }
-
-        // Extract tarball to chroot directory
-        log::debug!("Extracting chroot tarball to {}...", chroot_path.display());
-        Self::extract_tarball(&tarball_path, chroot_path)?;
-
-        Ok(())
-    }
-
-    fn download_chroot_tarball(series: &str, tarball_path: &Path) -> Result<(), Box<dyn Error>> {
-        let ctx = context::current();
-
-        // Create a lock file to make sure that noone tries to use the file while it's not fully downloaded
-        let lockfile_path = tarball_path.with_extension("lock");
-        ctx.command("touch")
-            .arg(lockfile_path.to_string_lossy().to_string())
-            .status()?;
-
-        // Use mmdebstrap to download the tarball to the cache directory
-        let status = ctx
-            .command("mmdebstrap")
-            .arg("--variant=buildd")
-            .arg("--mode=unshare")
-            .arg("--include=mount")
-            .arg("--format=tar")
-            .arg(series)
-            .arg(tarball_path.to_string_lossy().to_string())
-            .status()?;
-
-        if !status.success() {
-            // Remove file on error
-            let _ = ctx
-                .command("rm")
-                .arg("-f")
-                .arg(tarball_path.to_string_lossy().to_string())
-                .status();
-            let _ = ctx
-                .command("rm")
-                .arg("-f")
-                .arg(lockfile_path.to_string_lossy().to_string())
-                .status();
-            return Err(format!("Failed to download chroot tarball for series {}", series).into());
-        }
-
-        // Remove lockfile: tarball is fully downloaded
-        let _ = ctx
-            .command("rm")
-            .arg("-f")
-            .arg(lockfile_path.to_string_lossy().to_string())
-            .status();
-
-        Ok(())
-    }
-
-    fn extract_tarball(
-        tarball_path: &PathBuf,
-        chroot_path: &PathBuf,
-    ) -> Result<(), Box<dyn Error>> {
-        // Create the chroot directory
-        fs::create_dir_all(chroot_path)?;
-
-        // Open the tarball file
-        let tarball_file = std::fs::File::open(tarball_path)?;
-        let xz_decoder = XzDecoder::new(tarball_file);
-        let mut archive = Archive::new(xz_decoder);
-
-        // Extract all files to the chroot directory
-        archive.unpack(chroot_path)?;
-
-        Ok(())
-    }
-}
-
-impl Drop for EphemeralContextGuard {
-    fn drop(&mut self) {
-        log::debug!("Cleaning up ephemeral context ({:?})...", &self.chroot_path);
-        // Reset to normal context
-        if let Err(e) = context::manager().set_current(&self.previous_context) {
-            log::error!("Failed to restore context {}: {}", self.previous_context, e);
-        }
-
-        // Remove chroot directory
-        // We use the restored context to execute the cleanup command
-        let result = context::current()
-            .command("sudo")
-            .arg("rm")
-            .arg("-rf")
-            .arg(&self.chroot_path)
-            .status();
-
-        match result {
-            Ok(status) => {
-                if !status.success() {
-                    log::error!(
-                        "Failed to remove chroot directory {}",
-                        self.chroot_path.display()
-                    );
-                }
-            }
-            Err(e) => {
-                log::error!(
-                    "Failed to execute cleanup command for {}: {}",
-                    self.chroot_path.display(),
-                    e
-                );
-            }
-        }
-    }
-}

src/deb/local.rs

@@ -6,7 +6,6 @@ use std::collections::HashMap;
 use std::error::Error;
 use std::path::Path;
 
-use crate::apt;
 use crate::deb::cross;
 
 pub fn build(
@@ -25,26 +24,11 @@ pub fn build(
     let ctx = context::current();
 
     if cross {
-        log::debug!("Setting up environment for local cross build...");
         cross::setup_environment(&mut env, arch)?;
         cross::ensure_repositories(arch, series)?;
     }
 
-    // UBUNTU: Ensure 'universe' repository is enabled
-    let mut sources = apt::sources::load(None)?;
-    let mut modified = false;
-    for source in &mut sources {
-        if source.uri.contains("ubuntu") && !source.components.contains(&"universe".to_string()) {
-            source.components.push("universe".to_string());
-            modified = true;
-        }
-    }
-    if modified {
-        apt::sources::save_legacy(None, sources, "/etc/apt/sources.list")?;
-    }
-
     // Update package lists
-    log::debug!("Updating package lists for local build...");
     let status = ctx
         .command("apt-get")
         .envs(env.clone())
@@ -58,7 +42,6 @@ pub fn build(
     }
 
     // Install essential packages
-    log::debug!("Installing essential packages for local build...");
     let mut cmd = ctx.command("apt-get");
 
     cmd.envs(env.clone())
@@ -80,16 +63,9 @@ pub fn build(
         return Err("Could not install essential packages for the build".into());
     }
 
-    // Find the actual package directory
-    let package_dir = crate::deb::find_package_directory(Path::new(build_root), package, version)?;
-    let package_dir_str = package_dir
-        .to_str()
-        .ok_or("Invalid package directory path")?;
-
     // Install build dependencies
-    log::debug!("Installing build dependencies...");
     let mut cmd = ctx.command("apt-get");
-    cmd.current_dir(package_dir_str)
+    cmd.current_dir(format!("{build_root}/{package}"))
         .envs(env.clone())
         .arg("-y")
         .arg("build-dep");
@@ -105,10 +81,9 @@ pub fn build(
     }
 
     // Run the build step
-    log::debug!("Building (debian/rules build) package...");
     let status = ctx
         .command("debian/rules")
-        .current_dir(package_dir_str)
+        .current_dir(format!("{build_root}/{package}"))
         .envs(env.clone())
         .arg("build")
         .status()?;
@@ -119,7 +94,7 @@ pub fn build(
     // Run the 'binary' step to produce deb
     let status = ctx
         .command("fakeroot")
-        .current_dir(package_dir_str)
+        .current_dir(format!("{build_root}/{package}"))
         .envs(env.clone())
         .arg("debian/rules")
         .arg("binary")

src/deb/mod.rs

@@ -1,5 +1,4 @@
 mod cross;
-mod ephemeral;
 mod local;
 mod sbuild;
 
@@ -7,16 +6,12 @@ use crate::context;
 use std::error::Error;
 use std::path::{Path, PathBuf};
 
-/// Build mode for the binary build
 #[derive(PartialEq)]
 pub enum BuildMode {
-    /// Use `sbuild` for the build, configured in unshare mode
     Sbuild,
-    /// Local build, directly on the context
     Local,
 }
 
-/// Build package in 'cwd' to a .deb
 pub fn build_binary_package(
     arch: Option<&str>,
     series: Option<&str>,
@@ -43,13 +38,21 @@ pub fn build_binary_package(
     let mode = if let Some(m) = mode {
         m
     } else {
-        // By default, we use local build
+        // For cross-compilation, we use local with an ephemeral context
-        BuildMode::Local
+        // created by the cross-compilation handler (see below)
+        if cross {
+            BuildMode::Local
+        } else {
+            // By default, we use sbuild
+            BuildMode::Sbuild
+        }
     };
 
-    // Create an ephemeral unshare context for all Local builds
+    // Specific case: native cross-compilation, we don't allow that
-    let _guard = if mode == BuildMode::Local {
+    // instead this wraps to an automatic unshare chroot
-        Some(ephemeral::EphemeralContextGuard::new(series)?)
+    // using an ephemeral context
+    let _guard = if cross && mode == BuildMode::Local {
+        Some(cross::EphemeralContextGuard::new(series)?)
     } else {
         None
     };
@@ -85,87 +88,6 @@ pub fn build_binary_package(
     Ok(())
 }
 
-/// Find the current package directory by trying both patterns:
-/// - package/package
-/// - package/package-origversion
-pub(crate) fn find_package_directory(
-    parent_dir: &Path,
-    package: &str,
-    version: &str,
-) -> Result<PathBuf, Box<dyn Error>> {
-    let ctx = context::current();
-
-    // Try package/package pattern first
-    let package_dir = parent_dir.join(package).join(package);
-    if ctx.exists(&package_dir)? {
-        return Ok(package_dir);
-    }
-
-    // Compute origversion from version: remove everything after first '-', after stripping epoch
-    let version_without_epoch = version.split_once(':').map(|(_, v)| v).unwrap_or(version);
-    let origversion = version_without_epoch
-        .split_once('-')
-        .map(|(v, _)| v)
-        .unwrap_or(version);
-
-    // Try package/package-origversion pattern
-    let package_dir = parent_dir
-        .join(package)
-        .join(format!("{}-{}", package, origversion));
-    if ctx.exists(&package_dir)? {
-        return Ok(package_dir);
-    }
-
-    // Try 'package' only
-    let package_dir = parent_dir.join(package);
-    if ctx.exists(&package_dir)? {
-        return Ok(package_dir);
-    }
-
-    // Try package-origversion only
-    let package_dir = parent_dir.join(format!("{}-{}", package, origversion));
-    if ctx.exists(&package_dir)? {
-        return Ok(package_dir);
-    }
-
-    // List all directories under 'package/' and log them
-    let package_parent = parent_dir;
-    if ctx.exists(package_parent)? {
-        log::debug!(
-            "Listing all directories under '{}':",
-            package_parent.display()
-        );
-        let entries = ctx.list_files(package_parent)?;
-        let mut found_dirs = Vec::new();
-        for entry in entries {
-            if entry.is_dir() {
-                if let Some(file_name) = entry.file_name() {
-                    found_dirs.push(file_name.to_string_lossy().into_owned());
-                }
-                log::debug!("  - {}", entry.display());
-            }
-        }
-
-        // If we found directories but none matched our patterns, provide helpful error
-        if !found_dirs.is_empty() {
-            return Err(format!(
-                "Could not find package directory for {} in {}. Found directories: {}",
-                package,
-                parent_dir.display(),
-                found_dirs.join(", ")
-            )
-            .into());
-        }
-    }
-
-    Err(format!(
-        "Could not find package directory for {} in {}",
-        package,
-        parent_dir.display()
-    )
-    .into())
-}
-
 fn find_dsc_file(
     build_root: &str,
     package: &str,
@@ -176,9 +98,7 @@ fn find_dsc_file(
     let dsc_name = format!("{}_{}.dsc", package, version_without_epoch);
     let dsc_path = PathBuf::from(build_root).join(&dsc_name);
 
-    // Check if the .dsc file exists in current context
+    if !dsc_path.exists() {
-    let ctx = context::current();
-    if !ctx.exists(&dsc_path)? {
         return Err(format!("Could not find .dsc file at {}", dsc_path.display()).into());
     }
     Ok(dsc_path)
@@ -186,14 +106,7 @@ fn find_dsc_file(
 
 #[cfg(test)]
 mod tests {
-    use serial_test::serial;
+    async fn test_build_end_to_end(package: &str, series: &str, arch: Option<&str>, cross: bool) {
-    async fn test_build_end_to_end(
-        package: &str,
-        series: &str,
-        dist: Option<&str>,
-        arch: Option<&str>,
-        cross: bool,
-    ) {
         log::info!(
             "Starting end-to-end test for package: {} (series: {}, arch: {:?}, cross: {})",
             package,
@@ -206,18 +119,23 @@ mod tests {
         let cwd = temp_dir.path();
         log::debug!("Created temporary directory: {}", cwd.display());
 
-        log::info!("Pulling package {} from {}...", package, series);
+        log::info!("Pulling package {} from Ubuntu {}...", package, series);
-        let package_info = crate::package_info::lookup(package, None, Some(series), "", dist, None)
+        crate::pull::pull(
-            .await
+            package,
-            .expect("Cannot lookup package information");
+            "",
-        crate::pull::pull(&package_info, Some(cwd), None, true)
+            Some(series),
-            .await
+            "",
-            .expect("Cannot pull package");
+            "",
+            Some("ubuntu"),
+            Some(cwd),
+            None,
+        )
+        .await
+        .expect("Cannot pull package");
         log::info!("Successfully pulled package {}", package);
 
         // Change directory to the package directory
-        let cwd = crate::deb::find_package_directory(cwd, package, &package_info.stanza.version)
+        let cwd = cwd.join(package).join(package);
-            .expect("Cannot find package directory");
         log::debug!("Package directory: {}", cwd.display());
 
         log::info!("Starting binary package build...");
@@ -245,25 +163,15 @@ mod tests {
         );
     }
 
-    // Tests below will be marked 'serial'
-    // As builds are using ephemeral contexts, tests running on the same
-    // process could use the ephemeral context of another thread and
-    // interfere with each other.
-    // FIXME: This is not ideal. In the future, we might want to
-    // either explicitely pass context (instead of shared state) or
-    // fork for building?
     #[tokio::test]
-    #[test_log::test]
-    #[serial]
     async fn test_deb_hello_ubuntu_end_to_end() {
-        test_build_end_to_end("hello", "noble", None, None, false).await;
+        test_build_end_to_end("hello", "noble", None, false).await;
     }
 
     #[tokio::test]
     #[test_log::test]
     #[cfg(target_arch = "x86_64")]
-    #[serial]
     async fn test_deb_hello_ubuntu_cross_end_to_end() {
-        test_build_end_to_end("hello", "noble", None, Some("riscv64"), true).await;
+        test_build_end_to_end("hello", "noble", Some("riscv64"), true).await;
     }
 }

src/deb/sbuild.rs

@@ -2,28 +2,19 @@
 /// Call 'sbuild' with the dsc file to build the package with unshare
 use crate::context;
 use std::error::Error;
-use std::path::Path;
 
 pub fn build(
     package: &str,
-    version: &str,
+    _version: &str,
     arch: &str,
     series: &str,
     build_root: &str,
     cross: bool,
 ) -> Result<(), Box<dyn Error>> {
     let ctx = context::current();
-
-    // Find the actual package directory
-    let package_dir = crate::deb::find_package_directory(Path::new(build_root), package, version)?;
-    let package_dir_str = package_dir
-        .to_str()
-        .ok_or("Invalid package directory path")?;
-
     let mut cmd = ctx.command("sbuild");
-    cmd.current_dir(package_dir_str);
+    cmd.current_dir(format!("{}/{}", build_root, package));
     cmd.arg("--chroot-mode=unshare");
-    cmd.arg("--no-clean-source");
 
     if cross {
         cmd.arg(format!("--host={}", arch));

src/lib.rs

@@ -1,32 +1,10 @@
-//! pkh: Debian packaging helper
-//!
-//! pkh allows working with Debian packages, with multiple actions/submodules
-#![deny(missing_docs)]
-
-/// Handle apt data (apt sources)
-pub mod apt;
-/// Build a Debian source package (into a .dsc)
 pub mod build;
-/// Parse or edit a Debian changelog of a source package
 pub mod changelog;
-/// Build a Debian package into a binary (.deb)
+pub mod context;
 pub mod deb;
-/// Obtain information about one or multiple packages
 pub mod package_info;
-/// Download a source package locally
 pub mod pull;
 
-/// Handle context for .deb building: locally, over ssh, in a chroot...
-pub mod context;
-
-/// Utility functions
-pub(crate) mod utils;
-
-/// Optional callback function (taking 4 arguments)
-/// - Name of the current main operation (e.g. pulling package)
-/// - Name of the current nested operation (e.g. cloning git repo)
-/// - Progress, position, index of current operation (e.g. amount of data downloaded)
-/// - Total amount for current operation (e.g. size of the file to download)
 pub type ProgressCallback<'a> = Option<&'a dyn Fn(&str, &str, usize, usize)>;
 
 /// Returns the architecture of current CPU, debian-compatible

src/main.rs

@@ -7,6 +7,8 @@ use pkh::context::ContextConfig;
 
 extern crate flate2;
 
+use pkh::pull::pull;
+
 use pkh::changelog::generate_entry;
 
 use indicatif_log_bridge::LogWrapper;
@@ -37,7 +39,6 @@ fn main() {
                         .required(false),
                 )
                 .arg(arg!(-v --version <version> "Target package version").required(false))
-                .arg(arg!(--archive "Only use the archive to download package source, not git").required(false))
                 .arg(arg!(--ppa <ppa> "Download the package from a specific PPA").required(false))
                 .arg(arg!(<package> "Target package")),
         )
@@ -48,10 +49,10 @@ fn main() {
                 .arg(arg!(--backport "This changelog is for a backport entry").required(false))
                 .arg(arg!(-v --version <version> "Target version").required(false)),
         )
-        .subcommand(Command::new("build").about("Build the source package (into a .dsc)"))
+        .subcommand(Command::new("build").about("Build the source package"))
         .subcommand(
             Command::new("deb")
-                .about("Build the source package into binary package (.deb)")
+                .about("Build the binary package")
                 .arg(arg!(-s --series <series> "Target distribution series").required(false))
                 .arg(arg!(-a --arch <arch> "Target architecture").required(false))
                 .arg(arg!(--cross "Cross-compile for target architecture (instead of qemu-binfmt)")
@@ -93,28 +94,28 @@ fn main() {
             let package = sub_matches.get_one::<String>("package").expect("required");
             let series = sub_matches.get_one::<String>("series").map(|s| s.as_str());
             let dist = sub_matches.get_one::<String>("dist").map(|s| s.as_str());
-            let version = sub_matches.get_one::<String>("version").map(|s| s.as_str());
+            let version = sub_matches
-            let _ppa = sub_matches
+                .get_one::<String>("version")
+                .map(|s| s.as_str())
+                .unwrap_or("");
+            let ppa = sub_matches
                 .get_one::<String>("ppa")
                 .map(|s| s.as_str())
                 .unwrap_or("");
-            let archive = sub_matches.get_one::<bool>("archive").unwrap_or(&false);
-
-            let (pb, progress_callback) = ui::create_progress_bar(&multi);
 
             // Since pull is async, we need to block on it
-            if let Err(e) = rt.block_on(async {
+            let (pb, progress_callback) = ui::create_progress_bar(&multi);
-                let package_info = pkh::package_info::lookup(
+
-                    package,
+            if let Err(e) = rt.block_on(pull(
-                    version,
+                package,
-                    series,
+                version,
-                    "",
+                series,
-                    dist,
+                "",
-                    Some(&progress_callback),
+                ppa,
-                )
+                dist,
-                .await?;
+                None,
-                pkh::pull::pull(&package_info, None, Some(&progress_callback), *archive).await
+                Some(&progress_callback),
-            }) {
+            )) {
                 pb.finish_and_clear();
                 error!("{}", e);
                 std::process::exit(1);

src/package_info.rs

@@ -56,8 +56,7 @@ fn parse_series_csv(content: &str) -> Result<Vec<String>, Box<dyn Error>> {
     Ok(entries.into_iter().map(|(s, _)| s).collect())
 }
 
-/// Get time-ordered list of series for a distribution, development series first
+async fn get_ordered_series(dist: &str) -> Result<Vec<String>, Box<dyn Error>> {
-pub async fn get_ordered_series(dist: &str) -> Result<Vec<String>, Box<dyn Error>> {
     let content = if Path::new(format!("/usr/share/distro-info/{dist}.csv").as_str()).exists() {
         std::fs::read_to_string(format!("/usr/share/distro-info/{dist}.csv"))?
     } else {
@@ -72,8 +71,9 @@ pub async fn get_ordered_series(dist: &str) -> Result<Vec<String>, Box<dyn Error
 
     let mut series = parse_series_csv(&content)?;
 
-    // For Debian, ensure 'sid' is first if it's not
+    // For Debian, ensure 'sid' is first if it's not (it usually doesn't have a date or is very old/new depending on file)
-    // We want to try 'sid' (unstable) first for Debian.
+    // Actually in the file sid has 1993 date.
+    // But we want to try 'sid' (unstable) first for Debian.
     if dist == "debian" {
         series.retain(|s| s != "sid");
         series.insert(0, "sid".to_string());
@@ -93,7 +93,6 @@ fn get_series_from_file(path: &str) -> Result<Vec<String>, Box<dyn Error>> {
     parse_series_csv(&content)
 }
 
-/// Obtain a list of series from a distribution
 pub async fn get_dist_series(dist: &str) -> Result<Vec<String>, Box<dyn Error>> {
     if Path::new(format!("/usr/share/distro-info/{dist}.csv").as_str()).exists() {
         get_series_from_file(format!("/usr/share/distro-info/{dist}.csv").as_str())
@@ -106,7 +105,6 @@ pub async fn get_dist_series(dist: &str) -> Result<Vec<String>, Box<dyn Error>>
     }
 }
 
-/// Obtain the distribution (eg. debian, ubuntu) from a distribution series (eg. noble, bookworm)
 pub async fn get_dist_from_series(series: &str) -> Result<String, Box<dyn Error>> {
     let debian_series = get_dist_series("debian").await?;
     if debian_series.contains(&series.to_string()) {
@@ -119,55 +117,34 @@ pub async fn get_dist_from_series(series: &str) -> Result<String, Box<dyn Error>
     Err(format!("Unknown series: {}", series).into())
 }
 
-/// A File used in a source package
 #[derive(Debug, Clone)]
 pub struct FileEntry {
-    /// Name of the file
     pub name: String,
-    /// Size of the file
     pub size: u64,
-    /// SHA256 hash for the file
     pub sha256: String,
 }
 
-/// A package 'stanza' as found is 'Sources.gz' files, containing basic information about a source package
 #[derive(Debug)]
 pub struct PackageStanza {
-    /// Name of the package
     pub package: String,
-    /// Version number for the package
     pub version: String,
-    /// Directory field in the stanza
     pub directory: String,
-    /// Source package format (e.g. '3.0 (quilt)')
     pub format: String,
-    /// Vcs-Git field in the stanza
     pub vcs_git: Option<String>,
-    /// Vcs-Browser field in the stanza
     pub vcs_browser: Option<String>,
-    /// Files present in the source package
     pub files: Vec<FileEntry>,
 }
 
-/// Source package information
 #[derive(Debug)]
 pub struct PackageInfo {
-    /// Source 'stanza' for the package, containing basic information
-    pub stanza: PackageStanza,
-    /// Distribution for the package
     pub dist: String,
-    /// Distribution series for the package
     pub series: String,
-    /// Preferred VCS for the source package
+    pub stanza: PackageStanza,
-    ///
-    /// Should be Launchpad on Ubuntu, and Salsa on Debian
     pub preferred_vcs: Option<String>,
-    /// URL for the files of the source package
     pub archive_url: String,
 }
 
 impl PackageInfo {
-    /// Returns true if the package is a Debian native package (no orig)
     pub fn is_native(&self) -> bool {
         self.stanza.format.contains("(native)")
     }
@@ -198,7 +175,9 @@ fn get_base_url(dist: &str) -> &str {
     }
 }
 
-/// Obtain the URL for the 'Release' file of a distribution series
+/*
+* Obtain the URL for the 'Release' file of a distribution series
+*/
 fn get_release_url(base_url: &str, series: &str, pocket: &str) -> String {
     let pocket_full = if pocket.is_empty() {
         String::new()
@@ -208,7 +187,9 @@ fn get_release_url(base_url: &str, series: &str, pocket: &str) -> String {
     format!("{base_url}/dists/{series}{pocket_full}/Release")
 }
 
-/// Obtain the components of a distribution series by parsing the 'Release' file
+/*
+* Obtain the components of a distribution series by parsing the 'Release' file
+*/
 async fn get_components(
     base_url: &str,
     series: &str,
@@ -233,32 +214,20 @@ async fn get_components(
     Err("Components not found.".into())
 }
 
-struct DebianSources {
+/*
-    splitted_sources: std::str::Split<'static, &'static str>,
+* Parse a 'Sources.gz' debian package file data, to look for a target package and
-}
+* return the data for that package stanza
-impl DebianSources {
+*/
-    fn new(data: &[u8]) -> Result<DebianSources, Box<dyn Error>> {
+fn parse_sources(
-        // Gz-decode 'Sources.gz' file into a string, and split it on stanzas
+    data: &[u8],
-        let mut d = GzDecoder::new(data);
+    target_package: &str,
-        let mut s = String::new();
+    target_version: Option<&str>,
-        d.read_to_string(&mut s)?;
+) -> Result<Option<PackageStanza>, Box<dyn Error>> {
+    let mut d = GzDecoder::new(data);
+    let mut s = String::new();
+    d.read_to_string(&mut s)?;
 
-        // Convert the string to a static lifetime by leaking it
+    for stanza in s.split("\n\n") {
-        let static_str = Box::leak(s.into_boxed_str());
-        let splitted = static_str.split("\n\n");
-
-        Ok(DebianSources {
-            splitted_sources: splitted,
-        })
-    }
-}
-impl Iterator for DebianSources {
-    type Item = PackageStanza;
-
-    fn next(&mut self) -> Option<Self::Item> {
-        let stanza = self.splitted_sources.next()?;
-
-        // Parse stanza into a hashmap of strings, the fields
         let mut fields: HashMap<String, String> = HashMap::new();
         let mut current_key = String::new();
 
@@ -279,60 +248,53 @@ impl Iterator for DebianSources {
             }
         }
 
-        let pkg = fields.get("Package");
+        if let Some(pkg) = fields.get("Package")
-        if pkg.is_none() {
+            && pkg == target_package
-            // Skip empty stanza
+        {
-            return self.next();
+            // Check version if requested
-        }
+            if let Some(ver) = target_version {
-
+                if let Some(pkg_ver) = fields.get("Version") {
-        // Parse package files
+                    if pkg_ver != ver {
-        let mut files = Vec::new();
+                        continue;
-        if let Some(checksums) = fields.get("Checksums-Sha256") {
+                    }
-            for line in checksums.lines() {
+                } else {
-                let parts: Vec<&str> = line.split_whitespace().collect();
+                    continue;
-                if parts.len() >= 3 {
-                    files.push(FileEntry {
-                        sha256: parts[0].to_string(),
-                        size: parts[1].parse().unwrap_or(0),
-                        name: parts[2].to_string(),
-                    });
                 }
             }
+
+            let mut files = Vec::new();
+            if let Some(checksums) = fields.get("Checksums-Sha256") {
+                for line in checksums.lines() {
+                    let parts: Vec<&str> = line.split_whitespace().collect();
+                    if parts.len() >= 3 {
+                        files.push(FileEntry {
+                            sha256: parts[0].to_string(),
+                            size: parts[1].parse().unwrap_or(0),
+                            name: parts[2].to_string(),
+                        });
+                    }
+                }
+            }
+
+            return Ok(Some(PackageStanza {
+                package: pkg.clone(),
+                version: fields.get("Version").cloned().unwrap_or_default(),
+                directory: fields.get("Directory").cloned().unwrap_or_default(),
+                format: fields
+                    .get("Format")
+                    .cloned()
+                    .unwrap_or_else(|| "1.0".to_string()),
+                vcs_git: fields.get("Vcs-Git").cloned(),
+                vcs_browser: fields.get("Vcs-Browser").cloned(),
+                files,
+            }));
         }
-
-        Some(PackageStanza {
-            package: fields.get("Package").unwrap().to_string(),
-            version: fields.get("Version").unwrap().to_string(),
-            directory: fields.get("Directory").cloned().unwrap_or_default(),
-            format: fields
-                .get("Format")
-                .cloned()
-                .unwrap_or_else(|| "1.0".to_string()),
-            vcs_git: fields.get("Vcs-Git").cloned(),
-            vcs_browser: fields.get("Vcs-Browser").cloned(),
-            files,
-        })
     }
+
+    Ok(None)
 }
 
-/// Parse a 'Sources.gz' debian package file data, to look for a target package and
+pub async fn get(
-/// return the data for that package stanza
-fn parse_sources(
-    data: &[u8],
-    target_package: &str,
-    target_version: Option<&str>,
-) -> Result<Option<PackageStanza>, Box<dyn Error>> {
-    let mut sources = DebianSources::new(data)?;
-
-    // Find the right package, with the right version if requested
-    Ok(sources.find(|s| {
-        s.package == target_package
-            && (target_version.is_none() || s.version == target_version.unwrap())
-    }))
-}
-
-/// Get package information from a package, distribution series, and pocket
-async fn get(
     package_name: &str,
     series: &str,
     pocket: &str,
@@ -405,8 +367,7 @@ async fn get(
     .into())
 }
 
-/// Try to find package information in a distribution, trying all series and pockets
+pub async fn find_package(
-async fn find_package(
     package_name: &str,
     dist: &str,
     pocket: &str,
@@ -452,58 +413,6 @@ async fn find_package(
     Err(format!("Package '{}' not found.", package_name).into())
 }
 
-/// Lookup package information for a source package
-///
-/// This function obtains package information either directly from a specific series
-/// or by searching across all series in a distribution.
-pub async fn lookup(
-    package: &str,
-    version: Option<&str>,
-    series: Option<&str>,
-    pocket: &str,
-    dist: Option<&str>,
-    progress: ProgressCallback<'_>,
-) -> Result<PackageInfo, Box<dyn Error>> {
-    // Obtain the package information, either directly in a series or with a search in all series
-    let package_info = if let Some(s) = series {
-        if let Some(cb) = progress {
-            cb(
-                &format!("Resolving package info for {}...", package),
-                "",
-                0,
-                0,
-            );
-        }
-
-        // Get the package information from that series and pocket
-        get(package, s, pocket, version).await?
-    } else {
-        let dist = dist.unwrap_or_else(||
-            // Use auto-detection to see if current distro is ubuntu, or fallback to debian by default
-            if std::process::Command::new("lsb_release").arg("-i").arg("-s").output()
-                .map(|o| String::from_utf8_lossy(&o.stdout).trim().to_lowercase()).unwrap_or_default() == "ubuntu" {
-                "ubuntu"
-            } else {
-                "debian"
-            }
-        );
-
-        if let Some(cb) = progress {
-            cb(
-                &format!("Searching for package {} in {}...", package, dist),
-                "",
-                0,
-                0,
-            );
-        }
-
-        // Try to find the package in all series from that dist
-        find_package(package, dist, pocket, version, progress).await?
-    };
-
-    Ok(package_info)
-}
-
 #[cfg(test)]
 mod tests {
     use super::*;

src/pull.rs

@@ -2,6 +2,7 @@ use std::cmp::min;
 use std::error::Error;
 use std::path::Path;
 
+use crate::package_info;
 use crate::package_info::PackageInfo;
 
 use std::process::Command;
@@ -90,26 +91,6 @@ use futures_util::StreamExt;
 use tar::Archive;
 use xz2::read::XzDecoder;
 
-fn copy_dir_all(src: &Path, dst: &Path) -> Result<(), Box<dyn Error>> {
-    if !dst.exists() {
-        std::fs::create_dir_all(dst)?;
-    }
-
-    for entry in std::fs::read_dir(src)? {
-        let entry = entry?;
-        let src_path = entry.path();
-        let dst_path = dst.join(entry.file_name());
-
-        if src_path.is_dir() {
-            copy_dir_all(&src_path, &dst_path)?;
-        } else {
-            std::fs::copy(&src_path, &dst_path)?;
-        }
-    }
-
-    Ok(())
-}
-
 fn extract_archive(path: &Path, dest: &Path) -> Result<(), Box<dyn Error>> {
     let file = File::open(path)?;
     let filename = path.file_name().unwrap().to_string_lossy();
@@ -349,73 +330,62 @@ async fn fetch_archive_sources(
         std::fs::remove_file(&path)?;
     }
 
-    // Extract the orig tarball if present and not native package
-    if !info.is_native()
-        && let Some(orig_file) = info
-            .stanza
-            .files
-            .iter()
-            .find(|f| f.name.contains(".orig.tar."))
-    {
-        let path = package_dir.join(&orig_file.name);
-        let extract_dir = package_dir;
-
-        if (orig_file.name.ends_with(".tar.xz") || orig_file.name.ends_with(".tar.gz"))
-            && let Err(e) = extract_archive(&path, extract_dir)
-        {
-            return Err(format!("Failed to extract {}: {}", orig_file.name, e).into());
-        }
-
-        // Rename from 'package-origversion' to 'package', merging with existing directory
-        let target_dir = package_dir.join(&info.stanza.package);
-        let entries = std::fs::read_dir(package_dir)?;
-        for entry in entries {
-            let entry = entry?;
-            let entry_path = entry.path();
-            if entry_path.is_dir() {
-                let dir_name = entry.file_name().to_string_lossy().to_string();
-                if dir_name.starts_with(&format!("{}-", info.stanza.package)) {
-                    // Found a directory like 'package-version', rename it to 'package'
-                    if target_dir.exists() {
-                        // Target exists, we need to merge contents
-                        for sub_entry in std::fs::read_dir(&entry_path)? {
-                            let sub_entry = sub_entry?;
-                            let sub_path = sub_entry.path();
-                            let target_path = target_dir.join(sub_entry.file_name());
-                            if sub_path.is_dir() {
-                                std::fs::create_dir_all(&target_path)?;
-                                // Recursively copy directory contents
-                                copy_dir_all(&sub_path, &target_path)?;
-                            } else {
-                                std::fs::copy(&sub_path, &target_path)?;
-                            }
-                        }
-                        std::fs::remove_dir_all(&entry_path)?;
-                    } else {
-                        std::fs::rename(&entry_path, &target_dir)?;
-                    }
-                    break;
-                }
-            }
-        }
-    }
-
     Ok(())
 }
 
-/// Pull a source package locally using pre-retrieved package information
-///
-/// This function takes a PackageInfo struct and downloads the package using the preferred method
-/// (either git or direct archive download), as well as orig tarball, inside 'package' directory.
-/// The source will be extracted under 'package/package'.
 pub async fn pull(
-    package_info: &PackageInfo,
+    package: &str,
+    _version: &str,
+    series: Option<&str>,
+    pocket: &str,
+    _ppa: &str,
+    dist: Option<&str>,
     cwd: Option<&Path>,
     progress: ProgressCallback<'_>,
-    force_archive: bool,
+) -> Result<PackageInfo, Box<dyn Error>> {
-) -> Result<(), Box<dyn Error>> {
+    let version_opt = if _version.is_empty() {
-    let package = &package_info.stanza.package;
+        None
-    let series = &package_info.series;
+    } else {
+        Some(_version)
+    };
+
+    /* Obtain the package information, either directly in a series or with a search in all series */
+    let package_info = if let Some(s) = series {
+        if let Some(cb) = progress {
+            cb(
+                &format!("Resolving package info for {}...", package),
+                "",
+                0,
+                0,
+            );
+        }
+
+        // Get the package information from that series and pocket
+        package_info::get(package, s, pocket, version_opt).await?
+    } else {
+        let dist = dist.unwrap_or_else(||
+            // Use auto-detection to see if current distro is ubuntu, or fallback to debian by default
+            if std::process::Command::new("lsb_release").arg("-i").arg("-s").output()
+                .map(|o| String::from_utf8_lossy(&o.stdout).trim().to_lowercase()).unwrap_or_default() == "ubuntu" {
+                "ubuntu"
+            } else {
+                "debian"
+            }
+        );
+
+        if let Some(cb) = progress {
+            cb(
+                &format!("Searching for package {} in {}...", package, dist),
+                "",
+                0,
+                0,
+            );
+        }
+
+        // Try to find the package in all series from that dist
+        package_info::find_package(package, dist, pocket, version_opt, progress).await?
+    };
+
     let package_dir = if let Some(path) = cwd {
         path.join(package)
     } else {
@@ -423,20 +393,15 @@ pub async fn pull(
     };
 
     /* Fetch the package: either via git (preferred VCS) or the archive */
-    if let Some(ref url) = package_info.preferred_vcs
+    if let Some(ref url) = package_info.preferred_vcs {
-        && !force_archive
-    {
         // We have found a preferred VCS (git repository) for the package, so
         // we fetch the package from that repo.
 
-        // Depending on target series, we pick target branch; if latest series is specified,
+        // Depending on target series, we pick target branch; if no series is specified,
         // we target the development branch, i.e. the default branch
-        let branch_name = if crate::package_info::get_ordered_series(package_info.dist.as_str())
+        let branch_name = if let Some(s) = series {
-            .await?[0]
-            != *series
-        {
             if package_info.dist == "ubuntu" {
-                Some(format!("{}/{}", package_info.dist, series))
+                Some(format!("{}/{}", package_info.dist, s))
             } else {
                 // Debian does not have reliable branch naming...
                 // For now, we skip that part and clone default
@@ -476,7 +441,7 @@ pub async fn pull(
             if let Some(cb) = progress {
                 cb("Fetching orig tarball...", "", 0, 0);
             }
-            fetch_orig_tarball(package_info, Some(&package_dir), progress).await?;
+            fetch_orig_tarball(&package_info, Some(&package_dir), progress).await?;
         } else {
             debug!("Native package, skipping orig tarball fetch.");
         }
@@ -484,16 +449,16 @@ pub async fn pull(
         if let Some(cb) = progress {
             cb("Fetching dsc file...", "", 0, 0);
         }
-        fetch_dsc_file(package_info, Some(&package_dir), progress).await?;
+        fetch_dsc_file(&package_info, Some(&package_dir), progress).await?;
     } else {
         // Fallback to archive fetching
         if let Some(cb) = progress {
             cb("Downloading from archive...", "", 0, 0);
         }
-        fetch_archive_sources(package_info, Some(&package_dir), progress).await?;
+        fetch_archive_sources(&package_info, Some(&package_dir), progress).await?;
     }
 
-    Ok(())
+    Ok(package_info)
 }
 
 #[cfg(test)]
@@ -505,17 +470,16 @@ mod tests {
 
         // For determinism, we require for tests that either a distro or series is specified,
         // as no distribution would mean fallback to system distro
-        assert!(dist.is_some() || series.is_some());
+        assert!(dist != None || series != None);
 
         // Use a temp directory as working directory
         let temp_dir = tempfile::tempdir().unwrap();
         let cwd = temp_dir.path();
 
         // Main 'pull' command: the one we want to test
-        let info = crate::package_info::lookup(package, None, series, "", dist, None)
+        let info = pull(package, "", series, "", "", dist, Some(cwd), None)
             .await
             .unwrap();
-        pull(&info, Some(cwd), None, false).await.unwrap();
 
         let package_dir = cwd.join(package);
         assert!(package_dir.exists());

src/utils/gpg.rs

@@ -1,32 +0,0 @@
-use gpgme::{Context, Protocol};
-
-/// Check if a GPG key matching 'email' exists
-/// Returns the key ID if found, None otherwise
-pub fn find_signing_key_for_email(
-    email: &str,
-) -> Result<Option<String>, Box<dyn std::error::Error>> {
-    // Create a new GPG context
-    let mut ctx = Context::from_protocol(Protocol::OpenPgp)?;
-
-    // List all secret keys
-    let keys = ctx.secret_keys()?;
-
-    // Find a key that matches the email and can sign
-    for key_result in keys {
-        let key = key_result?;
-        // Check if the key has signing capability
-        if key.can_sign() {
-            // Check user IDs for email match
-            for user_id in key.user_ids() {
-                if let Ok(userid_email) = user_id.email()
-                    && userid_email.eq_ignore_ascii_case(email)
-                    && let Ok(fingerprint) = key.fingerprint()
-                {
-                    return Ok(Some(fingerprint.to_string()));
-                }
-            }
-        }
-    }
-
-    Ok(None)
-}

src/utils/mod.rs

@@ -1 +0,0 @@
-pub mod gpg;