Re: tag2upload - request for DPL action

Sean Whitton <[email protected]>
Newsgroups gmane.linux.debian.devel.vote
Message-ID <[email protected]>
[adding -vote to the CC]

Hello,

On Mon 12 May 2025 at 03:43pm +02, Philipp Kern wrote:

> On 2025-05-12 15:33, Sean Whitton wrote:
>> On Mon 12 May 2025 at 03:16pm +02, Andreas Tille wrote:
>>
>>> Given this update, I have a few questions for the teams involved:
>>> 1. Is a new delegation still needed, or can tests begin without further
>>>    formal steps? If the keyring was installed by DSA as part of their
>>>    normal responsibilities, the originally proposed delegation might no
>>>    longer be necessary--can someone confirm this?
>> All that has happened is that a copy of the public key is now present on
>> fasolo.  dak still does not trust the key.
>> Therefore the delegation is still required, until and unless the FTP
>> team merge and deploy their branch.
>
> AIUI the deployment has happened on Saturday. The merge definitely
> happened[1].
>
> Kind regards
> Philipp Kern
>
> [1] https://salsa.debian.org/ftp-team/dak/-/commits/master?ref_type=HEADS

Thanks.

So: tag2upload's key became ostensibly trusted by dak on Saturday, and
no-one on the FTP Team informed the tag2upload Delegates of this fact.

We found out because the DPL wrote saying "everything is done, right?"
two days later, and I replied saying "huh, don't think so?", and Philipp
kindly let me know that in fact a deployment had occurred.

This is a highly unprofessional way for FTP Team members to be
interacting with (or, failing to interact with) another delegated team.

We should have been invited to perform testing by the FTP Team.  Indeed,
I just tried a test upload of dgit-test-dummy, and it was REJECT'd with
a strange error message.

Should we file a bug against ftp.debian.org?  Just write an e-mail?
We have no open channel of communication, despite our best efforts.

Let me note, nevertheless, my thanks to Ansgar for the technical work
he's done over the past two weeks.

-- 
Sean Whitton
signature.asc (application/pgp-signature, 869 B)
-----BEGIN PGP SIGNATURE-----
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=n/k1
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.