Bug#744113: don't include uploaded binary packages (build on developer machines) in the archive

2014-04-10 Thread martin f krafft
also sprach Holger Levsen  [2014-04-10 12:19 +0200]:
> Since some time (=years) there is broad agreement that we shouldn't do this - 

AFAICT, we're going to turn 10 in September!

https://lists.debian.org/debian-security/2004/09/msg00014.html

-- 
 .''`.   martin f. krafft   Related projects:
: :'  :  proud Debian developer   http://debiansystem.info
`. `'`   http://people.debian.org/~madduckhttp://vcs-pkg.org
  `-  Debian - when you have better things to do than fixing systems


digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)


Bug#744113: don't include uploaded binary packages (build on developer machines) in the archive

2014-04-10 Thread Holger Levsen
package: ftp.debian.org

Hi,

this bug is for tracking this drama. Please don't close it, maybe reassign it 
to a more fitting package. (And as a last ressort, assign it to "general" 
please.)

Since some time (=years) there is broad agreement that we shouldn't do this - 
where "this" is pushing binaries build on some random developers random 
machine into the archive, yet we still do it and don't even have a clear idea 
what the status and plan is to fix this. 

I've had a discussion about this with some buildd admins and ftpmasters a few 
months ago, so if the current status does not "magically appear" in this bug 
report, I will dig that up and update the report... for now I hope for 
magic^wyour update.


cheers,
Holger

P.S.: yes, for bootstraping an architecture it might occasionally be useful to 
be able to upload whatever .debs - but that's clearly an exception and should 
be handled as such.


signature.asc
Description: This is a digitally signed message part.