-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160
John Davidorff Pell wrote:
Which is a huge problem to begin with, how about we fix that?!First of all, I have to concur with all the "PROBLEMS" mentioned by Max. There is no single reason why we would _want_ to use a public compile farm. As the one person who watches over our public image I would be the first to scream "Murder" and I would do anything to keep this from happening. The chance that we end up in a situation where a compromised distribution is sent out to thousands of users is simply too big. Fink is no longer your everyday, small open source project. Even though we might not match up with Apache, KDE, GNOME and the like we are still a big player on our own turf.
The problem is not, in my humble opnion, that we would nto find enough supporters to roll our own compile farm, the issues is, as stated before, that we simply lack the infrastructure within fink yet, to automate the process completely.
I am working very hard on a system that involves GnuPG to ensure, that we can trust what is put into Fink, but since this is a rather complex issue, it also takes time.
For me it is not only about technical probabilities, it is also about avoiding a public desaster where Fink ends up running bad press. That is the last thing we need or want.
- -d
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (Darwin)
iD8DBQE/2wzvPMoaMn4kKR4RAz6mAJ9H8zor5k4VRmKmUjbaLicdPyMULQCdH5EJ FmMO1qpEXE9rs4owfAaTKoc= =X8Kc -----END PGP SIGNATURE-----
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Fink-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/fink-devel
