Re: Tagging in Salsa -> upload: status?

2020-08-21 Thread Bastian Blank
On Thu, Aug 20, 2020 at 10:24:18AM +0200, Bernd Zeimetz wrote: > On 8/19/20 7:28 PM, Ansgar wrote: > > Well, I can't fix it without creating dgit-ng (and setting up > > infrastructure for that) as dgit upstream won't accept patches from me. > That is just one of the reasons why I think that salsa

Re: Tagging in Salsa -> upload: status?

2020-08-20 Thread Bernd Zeimetz
On 8/19/20 7:28 PM, Ansgar wrote: > Well, I can't fix it without creating dgit-ng (and setting up > infrastructure for that) as dgit upstream won't accept patches from me. That is just one of the reasons why I think that salsa should be used for "official" services like tag2upload. --

Re: Tagging in Salsa -> upload: status?

2020-08-19 Thread Ansgar
On Wed, 2020-08-19 at 10:15 -0700, Sean Whitton wrote: > On Fri 14 Aug 2020 at 09:04AM +02, Ansgar wrote: > > There are also other issues such as the system seeming to accepting > > uploads from known-compromised keys last I looked at it, though > > maybe security experts disagree how much of an

Re: Tagging in Salsa -> upload: status?

2020-08-19 Thread Sean Whitton
Hello Ansgar, On Fri 14 Aug 2020 at 09:04AM +02, Ansgar wrote: > There are also other issues such as the system seeming to accepting > uploads from known-compromised keys last I looked at it, though maybe > security experts disagree how much of an issue this is in practice. If what you say

Re: Tagging in Salsa -> upload: status?

2020-08-19 Thread Sean Whitton
Hello Holger, On Thu 13 Aug 2020 at 10:27PM GMT, Holger Levsen wrote: > hi Sean, > > On Thu, Aug 13, 2020 at 02:22:15PM -0700, Sean Whitton wrote: >> (It's worth noting that unlike salsa tags, the tags on dgit.debian.org >> are immutable. The maintainer pushes a tag to salsa but tag2upload >>

Re: Tagging in Salsa -> upload: status?

2020-08-14 Thread Ansgar
Sean Whitton writes: > Ian and I implemented something along these lines last summer and it's > available to try from the archive; here is how: > > > As to the current status: FTP Team members objected to having > uploader-signed git tags on

Re: Tagging in Salsa -> upload: status?

2020-08-13 Thread Holger Levsen
hi Sean, On Thu, Aug 13, 2020 at 02:22:15PM -0700, Sean Whitton wrote: > (It's worth noting that unlike salsa tags, the tags on dgit.debian.org > are immutable. The maintainer pushes a tag to salsa but tag2upload > copies it to dgit.debian.org, where it becomes a permanent record.) how is that

Re: Tagging in Salsa -> upload: status?

2020-08-13 Thread Sean Whitton
Hello Thomas, On Thu 13 Aug 2020 at 10:36PM +02, Thomas Goirand wrote: > On 8/13/20 10:07 PM, Sean Whitton wrote: >> >> As to the current status: FTP Team members objected to having >> uploader-signed git tags on dgit.debian.org be the canonical record of >> an uploader's intended source package

Re: Tagging in Salsa -> upload: status?

2020-08-13 Thread Thomas Goirand
On 8/13/20 10:07 PM, Sean Whitton wrote: > Hello Didier, Christian, > > On Thu 13 Aug 2020 at 09:08PM +02, Didier 'OdyX' Raboud wrote: > >> Le jeudi, 13 août 2020, 11.19:59 h CEST Christian Kastner a écrit : >>> Unless I'm grievously misremembering something, there was a discussion a >>> while

Re: Tagging in Salsa -> upload: status?

2020-08-13 Thread Sean Whitton
Hello Didier, Christian, On Thu 13 Aug 2020 at 09:08PM +02, Didier 'OdyX' Raboud wrote: > Le jeudi, 13 août 2020, 11.19:59 h CEST Christian Kastner a écrit : >> Unless I'm grievously misremembering something, there was a discussion a >> while ago about automatically generating a source package

Re: Tagging in Salsa -> upload: status?

2020-08-13 Thread Didier 'OdyX' Raboud
Le jeudi, 13 août 2020, 11.19:59 h CEST Christian Kastner a écrit : > Unless I'm grievously misremembering something, there was a discussion a > while ago about automatically generating a source package and uploading > it whenever a Debian release is (signed-)tagged in Salsa. > > If I did

Tagging in Salsa -> upload: status?

2020-08-13 Thread Christian Kastner
Unless I'm grievously misremembering something, there was a discussion a while ago about automatically generating a source package and uploading it whenever a Debian release is (signed-)tagged in Salsa. If I did remember correctly: may I kindly inquire what the status on that is?