On Fri, Mar 16, 2018 at 12:00:47PM +0100, Ulrich Mueller wrote: > >>>>> On Fri, 16 Mar 2018, Martin Vaeth wrote: > > > Ulrich Mueller <u...@gentoo.org> wrote: > >> > >> I think the conclusion is that github generates tarballs on the > >> fly, and therefore we cannot rely on them being invariant over a > >> long time. > > > So I would not worry too much about it: It is not worth the cost of > > hosting a huge number of tarballs permanently > > I agree, because hosting tarballs of upstream packages is not a task > for us as a distro. > > > (or to convince upstream to let them be hosted by github for every > > single version, only because one cannot theoretically exclude that a > > similar thing won't ever happen again). [...] > > In the first place, upstream should make proper releases, which > includes creating a pristine tarball and permanently hosting it. > So, yell at them if they don't. And no, a git tag is not a release. > > Ulrich
Yelling at an upstream might get you somewhere, but you can't force them, and in this case, they might tell you to create the pristine tarball yourself using "git archive" if you want one. I am in the same camp as Martin and James. I would rather see the issues fixed for the specific packages involved than us try to host tarballs for every package that doesn't create them. William
signature.asc
Description: Digital signature
