Re: tag2upload (git-debpush) service architecture - draft

[Ian Jackson <ijackson@chiark.greenend.org.uk>]

Marco d'Itri writes ("Re: tag2upload (git-debpush) service architecture - draft"):
> On Aug 02, Sam Hartman <hartmans@debian.org> wrote:
> > In effect, ftpmaster is saying they are uncomfortable trusting
> > tag2upload  very much.
> 
> A simple solution to this concern would be for ftpmaster to take over 
> the operations of tag2upload once it will be ready.

Indeed.

I still think it wants to run on a separate host to dak.  It doesn't
seem to me to be a good idea for security reasons for the dak host to
grow an internet facing webhook service, nor for it to perform complex
git-to-source-package transformations.

Ian.

-- 
Ian Jackson <ijackson@chiark.greenend.org.uk>   These opinions are my own.

If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.