Re: new hash algorithim for git and maybe a goal for Bullseye ?

From	Florian Weimer <fw@deneb.enyo.de>
Newsgroups	linux.debian.security
Subject	Re: new hash algorithim for git and maybe a goal for Bullseye ?
Date	2020-02-07 22:40 +0100
Message-ID	<zxjvX-7Ge-1@gated-at.bofh.it> (permalink)
References	<zwwvf-33a-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

* shirish शिरीष:

> I was shared this [1] and while it's important, it is equally
> important to point out that the work isn't complete atm.  From what
> little I know, almost all Debian's work is now using git (there may be
> some subversion, some mercurial repos) but most of the work has now
> been using gitlab/salsa [2] .

> 1. https://lwn.net/SubscriberLink/811068/cfeb6a67b8dfbe47/
> 2. salsa.debian.org

The Salsa service is not essential for package maintenance and is kept
at arm's length from the archive.  Debian does not build directly out
of Git, uploaders still have to create a self-contained source package
by an out-of-bands process.  Whether that is better than building from
essentially a SHA-1 hash (like building out of Git would be like in
some obvious implementations) in terms of the audit trail it provides
is difficult to decide.

Back to linux.debian.security | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

new hash algorithim for git and maybe a goal for Bullseye ? shirish शिरीष <shirishag75@gmail.com> - 2020-02-05 18:20 +0100
  Re: new hash algorithim for git and maybe a goal for Bullseye ? Gunnar Wolf <gwolf@debian.org> - 2020-02-06 05:40 +0100
  Re: new hash algorithim for git and maybe a goal for Bullseye ? Florian Weimer <fw@deneb.enyo.de> - 2020-02-07 22:40 +0100

csiph-web