[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: debsums for maintainer scripts (was: Re: Revival of the signed debs discussion)

On Mon, 01 Dec 2003, christophe barbe wrote:
> Before mass bug-filling, it would be necessary to make it mandatory
> which unfortunately is not the case right now afaik. 

Deployment plan for md5sums everywhere:

1. List packages that do not have a md5sum included.

For every package in the list:
  2. Download the thing, an add a dh_md5sum OR whatever is more in tune with
     the package build system (lots of packages do not use dh_*)
  2b. Use interdiff or something like that to make sure the only change
      you made was the md5sum thing, and no errors crept in the diff.
  3. Send patch to BTS
  4. Wait 1 month

After that one month:

For every package that the maintainer did not fix the md5sum thing himself:
  1. Upload NMU to biggest delay possible, send email to maintainer,
     and NMU patch to BTS

After the dust settles:

  Propose policy changes. Since well over 90% of the packages should have
  md5sums now, it will probably be accepted.

I am *MOST DEFINATELY NOT* going to do anything like the above. I am just
pointing out what people who _do_ care enough should do to get things fixed.

  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh

Reply to: