Re: Decision on leaving upstream tar files untouched?
On 14 Mar 1997, Rob Browning wrote:
>
> What was the final word on building packages where we don't want to
> repackage the upstream source. It sounded like we needed some
> additional dpkg-{buildpackage,source} functionality to make this
> happen, but then someone posted something recently that made it sound
> like the changes had already been made.
It was my understanding that the discussion went to closure with the final
decission being:
Upstream source is packaged as <package>_<version>.tar.gz from the source
tree <package>-<version>/ and that the .dsc and .diff.gz files would be
used to build the debian source tree - <package>-<version>.debian/.
This matches the "defacto standard" for source packages on the net. There
was some additional discussion about dealing with other formats, that
seemed to be inconclusive.
It was also understood in the discussion that one of the rationals for
doing this was to allow the upstream author to provide an md5sum of the
tar.gz file, thus giving distributions like Debian the capability of
verifying that what the Debian Developer delivered to the archive site is,
in fact, the same source provided by the author, thus closing off a path
for trojans to enter the distribution.
>
> So, is it possible now, or are we waiting on additions to dpkg?
>
As far as I know, dpkg has not been modified to match these changes, and I
would recomment against doing so until after the release of 1.3, as it
will impact the source unpack code. In fact, the first several releases of
dpkg will need a switch of some kind so that you will still be able to
unpack the old "new source format" packages. Hopefully this transition
will go faster than the move to "new source format" did.
Luck,
Dwarf
------------ --------------
aka Dale Scheetz Phone: 1 (904) 656-9769
Flexible Software 11000 McCrackin Road
e-mail: dwarf@polaris.net Tallahassee, FL 32308
------------ If you don't see what you want, just ask --------------
Reply to: