[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [GR] DD should be allowed to perform binary-only uploads

This one time, at band camp, Wesley J. Landaker said:
> On Friday 09 February 2007 17:02, Stephen Gran wrote:
> > I am sure qemu is very good at what it does, but I do not have faith
> > that it can stand in for a real CPU in all the corner cases.  If
> > Aurelien builds a java package that had previously FTBFS'd, do we have
> > any guarantee that it will build natively?  How is the security team
> > supposed to support that?
> On the other hand, I can *currently* upload my own packages as src+bin with 
> a binary I built inside qemu and no one would ever be the wiser. 
> I don't see much difference in that respect, unless you are arguing for 
> src+bin uploads with sources autorebuild on *all* architectures (which 
> incidentally, I believe I would be all for).

Of course you can, and it would be difficult to prove unless something
really obvious and bizarre happened in the build.  I hope we can trust
most developers not to actively try to undermine the quality of the
distribution this way.

The 'autobuild for all arches' is a persuasive one, but it's not the
focus of this GR, so I'm going to let it go for now.  We have a long
flamewar ahead of us, and there's no need to rush it into new ground
before we've thoroughly beaten this horse to death.
|   ,''`.                                            Stephen Gran |
|  : :' :                                        sgran@debian.org |
|  `. `'                        Debian user, admin, and developer |
|    `-                                     http://www.debian.org |

Attachment: signature.asc
Description: Digital signature

Reply to: