Package: dgit-infrastructure
Version: 13.3
We should be archiving upstream git tags, especially since they might
be signed, in our git depository. There is a difficulty, which is
that their names are abitrary so we think they need to be namespaced.
Here is a sketch we just came up with:
1. Change dgit-repos-server to accept pushes of a tag object
to refs/dgit-upstream-tags/UPSTREAM-VERSION-NUMBER-DEP14
when it is pusedh alongside a normal push. (ref name TBD.)
2. Change t2u builder dgit push-source to push this tag too
to that ref name.
3. The tag can be fetched with git fetch and git-update-ref'd
to its real name (present in the git header) and verified.
(This is bad UX and not like git)
4. Somehow arrange that there is a view of dgit-repos that overlays
the upstream tags, with their actual normal refs/tags/ ref names,
alongside the refs/heads/* etc. view. We're not quite sure how to
do that. It probably needs to look like a separate repo.
5. Maybe do something in dgit push-source for it to also archive
these tags.
We can do 1 and 2 right away and we should, so that we archive as many
of these tags as possible for posterity.
The rest need more thought.
Ian.
--
Ian Jackson <[email protected]> These opinions are my own.
Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.