Hi Sean
On 2024/03/30 12:43, Sean Whitton wrote:
On 2024-03-30 08:02:04, Gioele Barabucci wrote:
Now it is time to take a step forward:
1. new upstream release;
2. the DD/DM merges the upstream release VCS into the Debian VCS;
3. the buildd is notified of the new release;
4. the buildd creates and uploads the non-reviewed-in-practice blobs "source
deb" and "binary deb" to unstable.
This change would have three advantages:
I think everyone fully agrees this is a good thing, no need to list the
advantages.
>
It is also already fully implemented as tag2upload, and is merely as yet
undeployed, for social reasons.
My understanding is that DSA aren't quite comfortable with it, since it
would need to archive GPG signing key (or a keypair trusted by DAK)?
I did enjoy the tag2upload talk that was given earlier this year at
miniDebConf Campridge:
https://peertube.debian.social/w/pav68XBWdurWzfTYvDgWRM
One of the things I like most about it is that it doesn't break any
existing workflow or technical implementation. And it seems like
something most people would reasonably want to see implemented.
So I think it boils down to finding some constructive way to engage with
ftpmasters to find a solution that they are content with, because
without that, nothing is going to happen. I'm not 100% sure that I would
classify that as a social reason, DSA/ftpmaster is careful out of necessity.
Any chance we can convince both ftpmaster members and tag2upload team to
join at DebConf24 in Busan so that an attempt can be made to hash this
out in person? I'm not sure everyone involved will be motivated enough
to join a sprint just to work on this, but it tends to work so much
better when people work on problems together in person rather than
emails where people want to reply thoughtfully and then end up taking
weeks to do so.
I think it's not so much a question of *if* the Debian would ever switch
to a git-based workflow, but *when*. And tag2upload's opt-in nature
provides a great bridge to that future, there's clearly been a lot of
good thought put into it, and there's really no alternative that even
comes close in either design or being so close to being ready for
implementation. However, I think it can only happen if you get all the
right people in the same room to address the remaining concerns.
-Jonathan
