Re: DSAing build daemons (was Re: arm not building for lenny-security)
On Mon, 13 Jun 2011, Aurelien Jarno wrote:
> > AFAICS also ia64 and hppa need to be converted to have full security
> > buildd autosigning.
> Basically we've got the request from the security team that all
> architectures do autosigning for the security suites. The ftpmasters
> require, among other things, that the buildd host doing autosigning
> are maintained by DSA .
> Both arm build daemons are not DSAed, and it seems to be the case (at
> least partially) for ia64 and hppa. What would be the required steps to
> make these machines maintained by DSA, and which information would you
> need first?
Which ia64 and hppa buildds that aren't debian.org machines are there,
and why aren't the debian.org machines sufficient for building security?
As for arm, I don't think it's worth taking the machines under DSA
maintenance, given that lenny support will end in about half a year or
so. Maybe ftpmaster could be convinced to make an exception for arm
| .''`. ** Debian **
Peter Palfrader | : :' : The universal
http://www.palfrader.org/ | `. `' Operating System
| `- http://www.debian.org/