Bug#736760: [Debian-med-packaging] debian/upstream vs. debian/upstream/signing-key.pgp

James McCoy jamessan at debian.org
Tue Feb 4 02:48:43 UTC 2014


On Sun, Feb 02, 2014 at 11:44:51AM +0900, Charles Plessy wrote:
> Le Thu, Jan 30, 2014 at 05:06:22PM +0100, Andreas Tille a écrit :
> > 
> > While I perfectly agree that it would have been the correct way to
> > discuss claiming parts of the namespace first (heck, even if you do
> > discuss changes for uscan at length like I did for Files-Excluded people
> > raise their hands afterwards that should be implemented differently) I
> > would volunteer to *help* (not lead) in a transition which means
> > 
> >   * reuploading files of Debian Med (and if needed of Debian Science
> >     and DebiChem)

Why does anything need to be reuploaded?  I thought part of the benefit
of the upstream metadata was that it could be pulled from VCS
repositories.  Therefore, only updating the VCS repository is required
and not an upload.

> >   * working on the needed changes for UDD machine readable files gatherer

Attached patch should allow that to work on both debian/upstream and
debian/upstream/metadata, which is a name I've heard suggested and what
first came to mind when the issue was initially raised.

> > However, my prefered solution for this problem would to start an open
> > discussion on debian-devel for opinions about a potential new name for
> > the signature file.  This would have two advantages:
> > 
> >   1. We might find some better consensus which could make a stressfull
> >      transition superfluous
> >   2. Readers of the list would hopefully *learn* about both things
> >      (the signature file as well as the metadata file)

The recent "Misc Developer News" mail mentioned the uscan feature and
Lintian has a pedantic/certain check for watch files that don't include
pgpsigurlmangle.

> Hello James,
> 
> what is your take on this ?  Will you start a discussion on debian-devel ?

If people think that's worthwhile, I can.  Unless I'm missing something,
it seems like just transitioning to debian/upstream/ would be easier.

Cheers,
-- 
James
GPG Key: 4096R/331BA3DB 2011-12-05 James McCoy <jamessan at debian.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-fetch-machine-readable-Support-debian-upstream-and-d.patch
Type: text/x-diff
Size: 4781 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/devscripts-devel/attachments/20140203/b1641c41/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/devscripts-devel/attachments/20140203/b1641c41/attachment.sig>


More information about the devscripts-devel mailing list