[dput-ng-maint] Bug#807887: dput-ng: strip .deb files from non-NEW .changes files and re-sign before uploads to ftp-master

Paul Wise pabs at debian.org
Mon Dec 14 06:00:39 UTC 2015


Source: dput-ng
Severity: wishlist

Now that Debian supports source-only uploads for both arch-dependent
and arch-independent binary packages, we should stop uploading binary
packages where possible. The Debian archive still requires .deb files
for NEW binary packages. Eventually the Debian archive will support
reproducible builds and that will need .deb checksums in the .changes
files but for now, I think that by default for the ftp-master upload
hosts, dput-ng should strip all .deb files for non-NEW binary packages
from the .changes files and re-sign them before uploading.

Once reproducible builds infra is in place this will need changing.

-- 
bye,
pabs

https://wiki.debian.org/PaulWise


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/dput-ng-maint/attachments/20151214/85885299/attachment.sig>


More information about the dput-ng-maint mailing list