Re: [Lvfs-announce] Please upload a signed report before pushing to LVFS stable

Richard Hughes <[email protected]> Wed, 14 Jun 2023 13:01:28 +0100
Newsgroups dev.linux.lists.lvfs-announce
Message-ID <CAD2FfiEV0wmmG94RjgPYGwQ9E31eFGGV5Y8nC5raZHSkhgco6w@mail.gmail.com>
On Fri, 25 Nov 2022 at 09:47, Richard Hughes <[email protected]> wrote:
> As the LVFS edges towards 80 million firmware downloads

It's almost 90 million downloads now.

> I=E2=80=99m soon going to merge some new deliberately scary warning dialo=
gs for vendors that want to push firmware to the stable without proving the=
y tested the update by uploading a report.

We merged this a long time ago, and some QA teams with no uploaded
reports have been clicking this button for some time!

> I=E2=80=99m going to start enforcing this for newly added protocols and t=
hen
> in several months time also make this a hard requirement for existing
> protocols like UEFI capsules and NVMe.

It's now been over 6 months. I'll be enforcing the "testing required
before pushing" step for NVMe and USB firmware updates today, and also
UEFI firmware from next month. Please see
https://lvfs.readthedocs.io/en/latest/testing.html#signed-reports if
you're no longer able to push updates to testing and stable.

Richard.