Re: Debusine repositories now in beta
On Thu, Dec 18, 2025 at 03:43:08PM +0530, Utkarsh Gupta wrote:
>...
> On Wed, Dec 17, 2025 at 5:06 PM Colin Watson <cjwatson@debian.org> wrote:
>...
> > [...] Repositories are signed
> > using per-repository keys held in Debusine's signing service, and
> > uploads to repositories are built against the current contents of that
> > repository as well as the corresponding base Debian release. All
> > repositories include automatic built-in snapshot capabilities.
>
> Can I copy the package from the "PPA" to the archive? If not already,
> d'you think that's something y'all can work on?
>
> I'd love to use these repositories as a playground, and then once I'm
> happy, I'd like to be able to just copy it over to the archive instead
> of having to re-upload it. Think like ./copy-package in Ubuntu. Would
> be extremely helpful during transitions.
All binary packages in main must be built by a DSA-maintained buildd.
The workflow you describe would also be incompatible with a git-based
tag2upload workflow, architecturally test rebuilds for transitions
should be in the Salsa CI.
> > Who can use this service?
> > -------------------------
> >
> > We've set up https://debusine.debian.net/ to allow using repositories.
> > All Debian Developers and Debian Maintainers can log in there and
> > publish packages to it. The resulting repositories are public by
> > default.
> >
> > debusine.debian.net only allows packages with licences that allow
> > distribution by Debian, and it is intended primarily for work that could
> > reasonably end up in Debian; Freexian reserves the right to remove
> > repositories from it.
>
> How d'you feel about extending this to cover various aspects of dak?
Nothing that could result in signing of arbitrary contents with a
key trusted for the archive happens in an environment where 1k DDs
have access.
> Or perhaps integrating with it? I'd like to see if we could
> potentially use Debusine for NEW review - accept|reject|prod|etc. All
> the existing checks & pipelines provided by Debusine could be pretty
> exciting to plug into the dak ecosystem (ideally, just let Debusine
> handle everything).
>...
What checks relevant for NEW cannot be lintian tags?
lintian results are already displayed for the NEW queue.
Salsa, dak and britney already use lintian, and each can reject packages
based on lintian tags.
> - u
cu
Adrian
Reply to: