Re: automated release building service

2024-04-01 Thread Jacob Bachmeyer
Bruno Haible wrote: Jacob Bachmeyer wrote: Essentially, this would be an automated release building service: upon request, make a Git checkout, run autogen.sh or equivalent, make dist, and publish or hash the result. The problem is that an attacker who manages to gain commit access

Re: automated release building service

2024-04-01 Thread Alfred M. Szmidt
* Such an automated release building service is a piece of SaaSS. CI is not SaaSS, how is it different? I can hardly imagine how we at GNU tell people "SaaSS is as bad as, or worse than, proprietary software" and at the same time advocate the use of such

Re: automated release building service

2024-04-01 Thread Tomas Volf
I am not arguing for the building service, but: On 2024-04-01 14:40:20 +0200, Bruno Haible wrote: > * Such an automated release building service is a piece of SaaSS. I can > hardly imagine how we at GNU tell people "SaaSS is as bad as, or worse > than, proprietary software&qu

Re: automated release building service

2024-04-01 Thread Bruno Haible
Jacob Bachmeyer wrote: > >> Essentially, this would be an automated release building service: upon > >> request, make a Git checkout, run autogen.sh or equivalent, make dist, > >> and publish or hash the result. The problem is that an attacker who > &g