Control: clone 736859 -2
Control: retitle -2 ftp.debian.org
Control: severity -2 wishlist
Control: retitle -2 Please grant DMs sftp/scpb access to ssh.upload.debian.org

On Sun 2019-02-10 18:38:48 +1100, Ben Finney wrote:
> On 27-Nov-2018, Daniel Kahn Gillmor wrote:
>> On 2018-11-27, Paride Legovini wrote:
>>> On Mon, 27 Jan 2014 Micah Anderson <mi...@debian.org> wrote:>
>>>
>>>> It would be nice if ssh-upload were the default transport for
>>>> uploading files in debian. Is there a particular reason why it isn't
>>>> set as the default now?
>>>
>>>  While ssh-upload is clearly better than FTP and I would like to see it
>>> as the default upload method too, it still has two important shortcomings:
>>>
>>> 1. Only Debian Developers can use it, as DM do not have an account;
>
>> We surely have ssh keys for most DMs these days, via gitlab,
>> monkeysphere, or some other mechanism.  Maybe we could we grant those
>> DMs access?
>
> If I understand this suggestion, it seems out of scope for this bug
> report. Would you re-post that suggestion for discussion where it
> might result in action?

The default dupload target for debian is described this way in
/etc/dupload.conf:

$cfg{'ftp-master'} = {
    fqdn => 'ssh.upload.debian.org',
    method => 'scpb',
    incoming => '/srv/upload.debian.org/UploadQueue/',
    distblacklist => qr/^(?:UNRELEASED|.*-security$)/,
    # Files pass on to dinstall on ftp-master which sends emails itself.
    dinstall_runs => 1,
};

According to Paride above, DMs cannot use this useful queue because
debian doesn't know about their ssh keys.

Please enable scpb access to ssh.upload.debian.org for Debian
Maintainers based on ssh keys that we know about for them -- either by
pulling them from salsa, from monkeysphere, or some other mechanism.

Thanks for maintaining the debian upload queues!

        --dkg

Attachment: signature.asc
Description: PGP signature

Reply via email to