Re: Updated Debian Developers Keyring
On 18/04/08 at 09:58 +0200, Andreas Tille wrote:
> On Fri, 18 Apr 2008, Anthony Towns wrote:
>
>> I don't see any evidence of it:
>>
>> ajt@raff:~$ ls -l /srv/keyring.debian.org/pub/keyrings/
>> total 28056
>> -rw-r--r-- 1 troup root 25393210 Apr 17 19:13 debian-keyring.gpg
>> -rw-r--r-- 1 troup root 949211 Apr 17 19:13 debian-keyring.pgp
>> -rw-r--r-- 1 troup root 4924 Apr 17 19:13 debian-role-keys.gpg
>> -rw-r--r-- 1 troup root 583785 Apr 17 19:13 emeritus-keyring.gpg
>> -rw-r--r-- 1 troup root 104871 Apr 17 19:13 emeritus-keyring.pgp
>> -rw-r--r-- 1 troup root 26468 Apr 17 19:13 extra-keys.pgp
>> -rw-r--r-- 1 troup root 1232873 Apr 17 19:13 removed-keys.gpg
>> -rw-r--r-- 1 troup root 366193 Apr 17 19:13 removed-keys.pgp
>>
>> ajt@raff:~$ groups joerg noodles
>> joerg : Debian webwml nm newmaint qa debadmin planet ftpteam
>> noodles : Debian keyring
>
> Hmmmm, what really concerns me is that I do not even see evidence
> that the fact stated in [1] is even implemented.
There's no such thing as a "full Debian Account Manager" group.
Currently, to create accounts, Joerg would basically need full DSA
(adm group) and keyring maintainers (keyring group) powers.
Regarding the adm group, I'm not sure it is necessary, since asking DSA
to create accounts once the keys have been added to the keyring seems to
work well (RT#628, which resulted in those accounts creations).
The keyring part isn't as easy. The problem is that the keyring isn't
maintained collaboratively. jetring has been developed for exactly this
use case, but I've heard (discussion on #debian-devel) that some people
considered jetring "a mess" (I don't have details about specific
problems though).
(all of the above is based on my understanding of the situation, but I
might be wrong. please correct me :-)
--
| Lucas Nussbaum
| lucas@lucas-nussbaum.net http://www.lucas-nussbaum.net/ |
| jabber: lucas@nussbaum.fr GPG: 1024D/023B3F4F |
Reply to: