Bug#1127616: developers-reference: should document using git-debpush to upload

Sean Whitton <[email protected]>
Newsgroups gmane.linux.debian.devel.policy
Message-ID <87ecmqmask.fsf__824.320111290433$1770897716$gmane$org@zephyr.silentflame.com>
Simon Josefsson [11/Feb  9:50pm +01] wrote:
>> > NEW uploads should be permitted to be source-only.
>>
>> This would be a significant improvement.  I think binaries needed for
>> review by the DFSG team should be autobuilt.
>
> DFSG Team: do you look at maintainer-uploaded binaries?  Why?
>
> They could be autobuilt, but I wonder what the real purpose of that is.
> Only to prove that the source code actually builds against build
> dependencies in Debian?  That would indeed be a good test.  But
> binaries aren't needed for that, just a build log from a trusted
> builder.

Back when I worked NEW: I very often wanted to see the list of files
installed by the package, and the full, expanded list of binary package
relationships.  Rarely, I would actually look inside the .deb.

These are real needs for NEW review.

I think one source of opposition for autobuilding packages before they
go into NEW is that the DFSG team won't yet has asserted/confirmed that
the license permits autobuilding.  But, well, we already have Salsa CI,
so I think that is not worth blocking on.

-- 
Sean Whitton
signature.asc (application/pgp-signature, 869 B)
-----BEGIN PGP SIGNATURE-----
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=S0jU
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.