Package: dgit-infrastructure
Version: 13.3

We should be archiving upstream git tags, especially since they might
be signed, in our git depository.  There is a difficulty, which is
that their names are abitrary so we think they need to be namespaced.

Here is a sketch we just came up with:

 1. Change dgit-repos-server to accept pushes of a tag object
    to refs/dgit-upstream-tags/UPSTREAM-VERSION-NUMBER-DEP14
    when it is pusedh alongside a normal push.  (ref name TBD.)

 2. Change t2u builder dgit push-source to push this tag too
    to that ref name.

 3. The tag can be fetched with git fetch and git-update-ref'd
    to its real name (present in the git header) and verified.
    (This is bad UX and not like git)

 4. Somehow arrange that there is a view of dgit-repos that overlays
    the upstream tags, with their actual normal refs/tags/ ref names,
    alongside the refs/heads/* etc. view.  We're not quite sure how to
    do that.  It probably needs to look like a separate repo.

 5. Maybe do something in dgit push-source for it to also archive
    these tags.

We can do 1 and 2 right away and we should, so that we archive as many
of these tags as possible for posterity.

The rest need more thought.

Ian.

-- 
Ian Jackson <[email protected]>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.

Reply via email to