[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: git-version-gen: allow 'snapshot' as .tarball-version contents

From: Bruno Haible
Subject: Re: git-version-gen: allow 'snapshot' as .tarball-version contents
Date: Sun, 13 Oct 2019 23:40:45 +0200
User-agent: KMail/5.1.3 (Linux/4.4.0-165-generic; KDE/5.18.0; x86_64; ; )

Hello Assaf,

> >> I wonder how users of these tarballs would be able to identify
> >> snapshots if there is no version information.
> > 
> > I find that for CI tarballs a
> > stable URL is the more important feature.
> > 
> Somewhat related:
> If you're posting the tarballs to ftp.gnu.org or alpha.gnu.org ,
> the upload script (build-aux/gnupload) can create symlinks,
> and even provide examples of symlinking a "-latest.tar.gz" to a 
> versioned one:
> ----
> $ gnupload --help
> [...]
> 4. Create a symbolic link foobar-latest.tar.gz -> foobar-1.0.tar.gz
>     and likewise for the corresponding .sig file:
>    gnupload --to ftp.gnu.org:foobar \
>             --symlink foobar-1.0.tar.gz     foobar-latest.tar.gz \
>                       foobar-1.0.tar.gz.sig foobar-latest.tar.gz.sig
> ----
> Would that help with a stable URL for testing?

Yes, symlinks like this solve the problem.

However, the continuous integration happens on non-GNU machines, and
I'm not sure I would want to upload the secret part of my (or anyone else's)
GPG key to a cloud platform, for security reasons. It could/would compromise
the trust people have in the gnu-keyring.gpg.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]