Re: [arch-dev-public] new archweb release

[Sébastien Luttringer via arch-dev-public]

On Wed, 2019-09-11 at 21:37 +0200, Jelle van der Waa wrote:
> 
> - When enough signoffs are reached, archweb automatically sends a mail
>   to the packager that the package has reached the target signoffs! If
>   this is too spammy we can consider a "daily" report.
> 
So useful feature ! Thanks.

Regards,

-- 
Sébastien Luttringer


signature.asc
Description: This is a digitally signed message part

Re: [arch-dev-public] A contrib repository

[Morten Linderud via arch-dev-public]

On Wed, Mar 27, 2019 at 11:14:17PM +0100, Morten Linderud via arch-dev-public 
wrote:
> Going to try figure out the packaging bit through the weekend.

And one long weekend later and we have "archlinux-contrib" in [community]!

There are currently a few scripts available.

- checkservices
Originally writen by seblu, and commited to contrib by Giancarlo, it checks
which services needs to be restarted after packages have been updated.

- co-maintainers
It queries archweb and helps you figure out which of your packages has how
many co-maintainers. It's useful in the case where you are going on vacation
and want to produce a list of packages which currently only has you as the
maintainer.

- review 
Helps you download PKGBUILDs from an AUR maintainer. This is useful if you
want to review TU candidates.

- compose-asa
Aids security team members composing the advisory email locally.

- security-tracker-check
Checks stdin for CVEs and cross-checks with our security tracker if they
have been added or not. Useful if you are looking over oss-security emails
:)

svenstaro also wrote a `offline-build` tool that went into contrib. Eli polished
it and moved it to devtools after some work. Jelle also has a pull-request
working on "repo-sec-checker" checks if there are binaries in a package/repo
which does not have the appropriate security hardening applied.

It should be noted that all of this is currently being packaged to
`/usr/share/archlinux/contrib` as it seems like an better idea to not clutter
peoples paths with misc tools.

I'll be super happy if people contribute other misc scripts, and everyone that
wishes will be added to the github org and can handle pull-requests.

-- 
Morten Linderud
PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature

Re: [arch-dev-public] new archweb release

[Christian Hesse]

Jelle van der Waa  on Wed, 2019/09/11 21:37:
> - Signoff status has been moved up in the Developer Dashboard for more
>   attention

Thanks a lot! :D
-- 
main(a){char*c=/*Schoene Gruesse */"B?IJj;MEH"
"CX:;",b;for(a/*Best regards my address:*/=0;b=c[a++];)
putchar(b-1/(/*Chriscc -ox -xc - && ./x*/b/42*2-3)*42);}


pgpaSNSEEmxoH.pgp
Description: OpenPGP digital signature

[arch-dev-public] new archweb release

[Jelle van der Waa]

Hi all,

A new archweb release has been deployed on our server, with a couple of
notable changes:

- Signoff status has been moved up in the Developer Dashboard for more
  attention
- When enough signoffs are reached, archweb automatically sends a mail
  to the packager that the package has reached the target signoffs! If
  this is too spammy we can consider a "daily" report.

In the future release, I aim to improve onboarding of testers and
further investigate where the lack of signoffs comes from. So far it
seems we have around ~ 18 "active" testers.


signature.asc
Description: PGP signature