[Repositories-devel] Re: repositories.alioth.debian.org

[Graham Wilson]

--MGYHOYXEY6WxJCY8
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

[ Sorry for the delay. Please CC me on follow-ups. ]

On Fri, Oct 17, 2003 at 03:28:10PM +0100, Mark Howard wrote:
> The main development work I think needs doing for the project includes:
> - checking gpg signatures. Ability to specify keyrings per repository
>   (e.g. so some repositories can include NMs).

mini-dinstall does support checking PGP signatures. Additionally, if you
use a different config file for each repository, you can specify a
different keyring for each

> - Improving archive generation. AFAIK, mini-dinstall has a number of
>   flaws, including not deleting old files. You probably all know more
>   about this than me at the moment.

mini-dinstall supports removing old files: see the "keep_old" option in
the example configuration files.

Also, what other flaws do you think mini-dinstall has? I would be very
interested in hearing about them and (most likely) adding them to the
TODO list.

> - Upload announcements, web pages showing new uploads for each project.

This is (kind of) done in mini-dinstall. The mail functionality could be
expanded to trigger this kind of thing.

> - Package browser for each project similar to packages.d.o

This seems like an idea for a new project, either a CGI script that
dynamically reads Packages files, or a script that can generate static
HTML from Packages files.

> - Lint tests on new packages

This seems out of the scope of mini-dinstall, but as Joel said, could be
triggered by upload announcements or something.

> - Require repository manager approval for NEW uploads.=20

This could definitely be done in mini-dinstall. I'll add it to my TODO
list.

> - (hard) Automatic building of packages.

This also seems like the province of a new project (or maybe the
eventual packaging of the autobuilder software?).

--=20
gram

--MGYHOYXEY6WxJCY8
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: http://decoy.wox.org/~bob/public.asc

iQEVAwUBP5bHvi6fnYH5E4SWAQKpSwf/Um+pcx2VyCzJr4jED2zOTS3KnNLckGq9
sHXT86A5RdDjcozJc6NtVpj70Mc+tVDI1z2ncQxHvgRU6/rottspQ0A+Go6qYHpv
Kea4QnlIGUW5R1r15MllGF3nSoEpdb11+4hHrP+G0WehQ1/e91Nt9BROm3Xn6rVo
Fif5lU4aYUNFb3ILo5Z6mIkd9xQcE9oDcwXVr3EVD5R1m1Vaxpjr0m85KeeVtlhb
6Klo6EP85P3BgB+kI9HYNal0U/UcXlTLdg1u9kzolkb/rafCDUgiyPO1j4BUH6sJ
18gXEmDsATryCgdjvPgBiIlOdRW25d4d14sJn96cfeW+x9r1CXOdsg==
=0LbS
-----END PGP SIGNATURE-----

--MGYHOYXEY6WxJCY8--