Hi Lukas,
I've uploaded this now. Once it's passed NEW I'll take another look at
in-toto. I assume it's available on mentors as well?
On Mon, Aug 12, 2019 at 02:46:31PM +0200, Lukas Puehringer wrote:
> Thanks for the heads-up. Just applied and pushed your patch [1], re-built
> successfully, and re-uploaded to mentors [2].
cool, thanks!
> securesystemslib release that adds the tests also makes some minor but backwards
> incompatible API changes, so we'd also have to first make a new in-toto release,
> before we upload in-toto (it doesn't pin its securesystemslib dependency).
ok
> And since we are making good progress on the rebuilder setup [2], it would be
> very nice to test it with the real in-toto/securesystemslib debian packages soon.
indeed!
> Also, it feels like bumping the downstream release as soon as there is a new
> upstream release should be quite easy. Especially if the new releases add
> comprehensive testing. What do you think?
yes! :)
--
cheers,
Holger
-------------------------------------------------------------------------------
holger@(debian|reproducible-builds|layer-acht).org
PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C
Attachment:
signature.asc
Description: PGP signature