On Thu, Feb 12, 2026 at 10:25:17AM +0000, Ian Jackson wrote:
Obviously, there are necessary points of standardisation, so that we
(and our computers) can all work together - and in particular so that
people can work on unfamiliar packages. These currently include the
BTS, and the archive, and since 2013 they also include *.dgit.d.o.
Thankfully you can still be an uploding DD without having understood
dgit. I hope this stays like this until somebody has written
documentation that a mortal can comprehend.
On the question of upstream tarballs vs upstream git, devref
definitely needs to mention both approaches. I'm firmly of the
opinion that upstream git should be the preferred recommendation.
I THINK that we should recommend including the form that upstream
publishes with their signature.
If they publish only signed tarballs, then we SHOULD use these.
If they publish only signed git tags, then we SHOULD use those.
If they publish both and their contents are identical, then we SHOULD
use the signed git tag if this makes it possible to have the
.orig.tar.gz in our archive to have the same checksum than the upstream
tarball.
If using the signed git tag would result in a different orig.tar.gz in
our archive then we SHOULD be sad (or improve our tools) and in the
mean time use their release tarball (while optionally keeping upstream
git history in our git).
If upstream publishes both signed tarballs and a signed release tag with
different contents, then we're stuck between a rock and a hard place. I
THINK then we should use the tarball to have the identical tarball in
the archive, and work on our tools to allow upstream git history in our
git.
SHOULD in capitals is the RFC2119 SHOULD, a lower case should a language
should.
"upstram git history in our git" means that upstream commits are visible
in git log on debian/latest.
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421
