Re: Streamlining d-i releases

Joerg Jaspert <[email protected]> (2023-04-09):
> > I realize that getting a sudo line on fasolo would mean increasing the
> > security risks quite a bunch for a limited gain. Since we already have
> > a mechanism to trigger changes in the archive via release team access,
> > that is /srv/release.debian.org/www/proposed-updates/*_comments (which
> > we can edit from coccia); maybe something similar could be done to
> > trigger dak copy-installer?
> 
> I put SSH trigger into the room, instead of sudo. You supply the version
> on the ssh cmdline, and if that exists in unstable, a copy-installer is
> run with that version.

That looks very good to me, thanks!

> Could even be extended to have source and target suite selectable too.

I think we only released the installer via tpu once, at least that I
could confirm by checking my sent box:

    dak copy-installer 20220917 -s bookworm-proposed-updates

but it could indeed be nice to be able to specify at least the source
suite, just in case we encounter some blocking bug in unstable again in
the future.


Cheers,
-- 
Cyril Brulebois ([email protected])            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

-----BEGIN PGP SIGNATURE-----
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=v4fZ
-----END PGP SIGNATURE-----