Re: Bug#540215: Introduce dh_checksums
Wouter Verhelst <wouter@debian.org> writes:
> This is not true.
> wouter@merkel:/org/ftp.debian.org/queue/done$ ls *ges|wc -l
> 28969
> These are only the *active* changes files, though:
> wouter@merkel:/org/ftp.debian.org/queue/done$ find . -name 'nbd*ges'|wc -l
> 898
> ... since no .changes file is ever thrown away:
> wouter@merkel:/org/ftp.debian.org/queue/done$ du -sh .
> 7.1G
> They may not be visible on the mirrors, but they are there.
Ah, thank you. I didn't realize that we kept them at all.
Note, though, that if the concern is a cryptographically strong audit
trail, we could still retain a link from the original *.changes file to
the final package with a second (possibly signed) document archived with
the *.changes file listing the original and final checksums of the
now-signed packages.
--
Russ Allbery (rra@debian.org) <http://www.eyrie.org/~eagle/>
Reply to: