Re: maybe a (long-term) solution to the translations problem and others
>>"Simon" == Simon Richter <sjr@debian.org> writes:
Simon> The logical consequence (and yes, it's a technical solution to
Simon> a social problem) for me is that we should give up the idea
Simon> that a .deb has a single uploader. Since a .deb is an ar
Simon> archive, it could be put together from various sources when it
Simon> is being installed into the archives, where each source signs
Simon> their parts of the file. For example, I could think of the
Simon> following:
Simon> $ ar tv foo.deb
Simon> control.tar.gz # signed by the maintainer
Simon> control.tar.gz.gpg
Simon> control-de.tar.gz # signed by the translation team
Simon> control-de.tar.gz.gpg
Simon> data.tar.gz # signed by the maintainer
Simon> data.tar.gz.gpg
And what version number is this incrementally updated .deb
file going to have? Remember, the control.tar.gz file has the version
encoded (as does the changelog in the data.tar,gz). And what about
the MD5Sum in the dsc file? If I get the dsc file from one archive,
the md5sum won't match the .deb from a site where someone has added
another translation to the package.
I think this needs way more thinking through.
manoj
--
When my fist clenches crack it open, Before I use it and lose my
cool. When I smile tell me some bad news, Before I laugh and act like
a fool. And if I swallow anything evil, Put you finger down my
throat. And if I shiver please give me a blanket, Keep me warm let me
wear your coat No one knows what it's like to be the bad man, to be
the sad man. Behind blue eyes. No one knows what its like to be
hated, to be fated, To telling only lies. The Who
Manoj Srivastava <srivasta@debian.org> <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05 CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C
Reply to: