Hi!

> gpg-agent forwarding over ssh?

Well, if that works then fine. I never tried it (actually didn't use the
agent that much at all) but why not.

> - Goto https://release.php.net/
> - Login with your master credentials (only allows logins for whitelisted 
> users).
> - White page suggest you are creating x.y.z+1 release from branch x_y
> - If yes; press "MAKE MAGIC"
> - If no; write the version number in input field, select branch from combobox
> - Press; "I KNOW WHAT IM DOING"

Looks good so far, except that I'd probably feel better doing the tag
manually. First because it can be moved around (forgot to update news,
last minute patch, made typo somewhere, added CVE, etc.), second again
because it's signed and I kind of feel more confident knowing I (or
other RM) is the guy who actually personally created that tag. It's not
a very important point, just a preference, at least for me. If other RMs
feel different then fine with it as is.

> ssh -R ~username/.gnupg/S.gpg-agent -o "StreamLocalBindUnlink=yes"
> release.php.net '/usr/local/bin/confirm x.y.z+1'
> 
> It'll sign the git tag (using your forwarded agent), push upstream,
> push archives to php-distribution.git

We need to sign the packages, not only tags. Creating tag is actually
not that big a deal manually, it's one git command. Packaging from it is
more involved. But if the agent works, yes, we can do it with scripts,
that's fine.

> Then. In the next release of the tool:
> - The whitepage extracts the NEWS entries and does the html/php
> formatting for phpweb
> - Gives you checkboxes to choose pick the highlights
> - The highlights will be used for the standard phpweb news xml.
> ....
> - Profit

I'm all for it. I know my RMship for 5.4 is will be done soon, so my
personal profit from it would be pretty low, but for the sake of next
RMs automating the dozen of manual tasks one has to do to roll the
release would be a nice thing. We just need to be careful with phpweb,
etc. patching given that we can have 3 branches being released in
parallel, sometime conflicts happen.

-- 
Stas Malyshev
smalys...@gmail.com

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to