[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [rb-general] reproducible .debs outside of the Debian archive

> reprepro unfortunately can't handle multiple version of a package in one
> repo. After a quick search it seems aptly is suitable.

reprepro has a `gensnapshot` command that might help to archive older
versions though.

> Before filling a wishlist bug, we should think about what the desired
> behavior is. Where should the .buildinfo be saved? How should they be
> indexed?

This is still pretty much in flux as we are still waiting for feedback
from the ftpmasters.

> IIRC the plan for dak was some separate tar-archive with all the
> .buildinfo files? Will it be signed?

The archive will not be signed directly, but its hash should be in the
Release file which is signed. The .buildinfo files themselves are signed
just like .dsc files.

> Is there some interface planed where I can get a single .buildinfo?

Maybe on <http://metadata.ftp-master.debian.org/>. Again, there are
still no definite answers at the moment. If you have suggestions, go

Lunar                                .''`. 
lunar@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 

Attachment: signature.asc
Description: Digital signature

Reply to: