Pristine source (was: Re: Bug#39299: PROPOSAL]...)
Jason Gunthorpe wrote:
>To implement a proposal like this we need to do a number of things, first
>off we need to include the original upstream authors digital signature in
>the upload (maybe a .sig.bz2 file?) so that we have available tracability.
>Secondly we need dpkg-source and all other related friends to have a
>pluggable source archive mechanism. I can see the need to support at least
>.tar.gz, .tar.bz2 and .jar (.jar.gz and .jar.bz2) and .zip in the future.
It will also be necessary to make dpkg et al cope with binaries in source
packages. At the moment, it is not possible to build a package if an
upstream binary changes. (Examples: included images, subsidiary tar.gz,
and mistakenly included executables.)
--
Vote against SPAM: http://www.politik-digital.de/spam/
========================================
Oliver Elphick Oliver.Elphick@lfix.co.uk
Isle of Wight http://www.lfix.co.uk/oliver
PGP key from public servers; key ID 32B8FAA1
========================================
"Then said Jesus, Father, forgive them; for they know
not what they do..." Luke 23:34
Reply to: