Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.vote > #5150

Re: Call for volunteers and GR draft: tag2upload key installation

From Ian Jackson <ijackson@chiark.greenend.org.uk>
Newsgroups linux.debian.vote
Subject Re: Call for volunteers and GR draft: tag2upload key installation
Date 2025-04-07 16:40 +0200
Message-ID <KyVNL-bOAw-7@gated-at.bofh.it> (permalink)
References <KxLdL-aZjQ-19@gated-at.bofh.it> <KySdb-bM32-5@gated-at.bofh.it> <KyVNL-bOAw-9@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Micha Lenk writes ("Re: Call for volunteers and GR draft: tag2upload key installation"):
> Am 7. April 2025 16:17:27 GMT+05:30 schrieb Ian Jackson <ijackson@chiark.greenend.org.uk>:
> >But I have my doubts that Debian Developers will find the technical
> >wording of the draft GR digestible.
> 
> It still isn't better digestable to me.

Thanks for the reply.

> >   1. tag2upload allows DDs and DMs to upload simply by using the
> >      git-debpush(1) script to push a signed git tag.
> >
> >   2. tag2upload has been fully implemented and deployed, and ready
> >      for immediate operation, since the 15th of March 2025.
> >
> >   3. However, the Debian FTP Archive does not trust its signing key,
> >      so tag2upload cannot be put into service.
> 
> In my eyes 2. can only be true if 3. is true. So, what version of
> dak contains the code changes to trust tag2upload's signing key?

The required change (to deploy tag2upload according to our design) is
a configuration change, not a code change.

It is true that our agreement with ftpmaster in July 2024 is
predicated on them making code changes in dak.  But they haven't done
that.  That's fine.  As I say, people not doing things that only they
want isn't a blocker.

> When did it get backported to oldstable for use on
> fasolo.debian.org? I haven't seen it in the oldbackports-new queue
> yet.

Since you ask:

dak is not in the archive.  #535986.  I'm not sure *precisely* what
code is running on fasolo but it seems very likely to be close to
https://salsa.debian.org/ftp-team/dak#master.

Here is my attempt at the minimal necessary configuration change:
  https://salsa.debian.org/iwj/dak/-/commits/t2u-minimal

I think anyone who tries to deploy that is likely to discover that it
doesn't work as intended.  That's in the nature of configuration
changes, especially when preapred by an outsider.  But it shouldn't be
hard to iterate and get working.

But, since this apparently-missing piece seemed like a blocker, here
it is.  I havne't made an MR of it because I don't anticipate it being
well-received.

> I was under the impression a (NMU for a) dak code changes doesn't
> need that. Or, what am I missing?

The only piece that is both necessary and missing is configuration,
not code.

ftpmaster don't want to make that configuration change now.  They want
there to be additional checks.  That was our 2024 agreement.  We've
done our part to support those additional checks, but they haven't
done theirs - and it's been 8 months so far.

So we think that the configuration change should be made now.
They can implement the extra checks at their leisure.

Ian.

-- 
Ian Jackson <ijackson@chiark.greenend.org.uk>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.

Back to linux.debian.vote | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 11:10 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Holger Levsen <holger@layer-acht.org> - 2025-04-04 12:00 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 12:30 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2025-04-04 13:00 +0200
      Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 13:10 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation Philipp Kern <pkern@debian.org> - 2025-04-04 21:00 +0200
      Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 21:40 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 13:10 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Simon Josefsson <simon@josefsson.org> - 2025-04-04 13:10 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation Julian Andres Klode <jak@debian.org> - 2025-04-04 23:40 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation [and 1 more messages] Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-04 14:00 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Gunnar Wolf <gwolf@debian.org> - 2025-04-04 21:30 +0200
      Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Sean Whitton <spwhitton@spwhitton.name> - 2025-04-05 03:20 +0200
        Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Gunnar Wolf <gwolf@debian.org> - 2025-04-05 20:00 +0200
          Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Sean Whitton <spwhitton@spwhitton.name> - 2025-04-06 01:50 +0200
      Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-05 12:40 +0200
        Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-05 13:30 +0200
        Re: Call for volunteers and GR draft: tag2upload key installation  [and 1 more messages] Sean Whitton <spwhitton@spwhitton.name> - 2025-04-05 14:10 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Pierre-Elliott Bécue <peb@debian.org> - 2025-04-04 19:00 +0200
  Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Daniel Gröber <dxld@darkboxed.org> - 2025-04-05 12:50 +0200
    Re: Why Debian is dying Richard Lewis <richard.lewis.debian@googlemail.com> - 2025-04-05 14:00 +0200
    Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-05 21:50 +0200
      Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Brian May <bam@debian.org> - 2025-04-06 00:00 +0200
        Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Matthias Urlichs <matthias@urlichs.de> - 2025-04-06 09:40 +0200
        Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-06 12:10 +0200
        Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-06 12:30 +0200
          Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Joerg Jaspert <joerg@debian.org> - 2025-04-06 13:30 +0200
            Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Matthias Urlichs <matthias@urlichs.de> - 2025-04-06 14:40 +0200
              Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Holger Levsen <holger@layer-acht.org> - 2025-04-08 15:20 +0200
                Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-08 17:50 +0200
                Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Steve McIntyre <93sam@debian.org> - 2025-04-10 02:50 +0200
                Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Matthias Urlichs <matthias@urlichs.de> - 2025-04-08 19:30 +0200
                Re: Why Debian is dying Sean Whitton <spwhitton@spwhitton.name> - 2025-04-09 03:50 +0200
                Re: Why Debian is dying Matthias Urlichs <matthias@urlichs.de> - 2025-04-09 14:00 +0200
                Re: Why Debian is dying Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-09 16:20 +0200
                Proactiveness of DPLing (was Re: Why Debian is dying) Matthias Urlichs <matthias@urlichs.de> - 2025-04-09 17:00 +0200
                a Constitutional interpretation question (was: Why Debian is dying) "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2025-04-09 20:20 +0200
                Re: Why Debian is dying Bill Allombert <ballombe@debian.org> - 2025-04-11 00:40 +0200
                Re: Why Debian is dying Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-11 13:00 +0200
            Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-06 15:00 +0200
            on continuing to wait Sean Whitton <spwhitton@spwhitton.name> - 2025-04-07 06:20 +0200
              Re: on continuing to wait Joerg Jaspert <joerg@debian.org> - 2025-04-07 17:20 +0200
                Re: on continuing to wait Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-07 18:10 +0200
                Re: on continuing to wait Joerg Jaspert <joerg@debian.org> - 2025-04-07 22:40 +0200
                Re: on continuing to wait Sean Whitton <spwhitton@spwhitton.name> - 2025-04-08 04:20 +0200
            Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Bill Allombert <ballombe@debian.org> - 2025-04-07 10:10 +0200
              Re: Why Debian is dying Pierre-Elliott Bécue <peb@debian.org> - 2025-04-09 11:10 +0200
                Re: Why Debian is dying "G. Branden Robinson" <g.branden.robinson@gmail.com> - 2025-04-09 12:00 +0200
                Re: Why Debian is dying Pierre-Elliott Bécue <peb@debian.org> - 2025-04-09 16:40 +0200
                Re: Why Debian is dying Matthias Urlichs <matthias@urlichs.de> - 2025-04-09 17:00 +0200
          Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Andreas Tille <andreas@an3as.eu> - 2025-04-08 16:50 +0200
    Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Simon Richter <sjr@debian.org> - 2025-04-06 13:10 +0200
      Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Matthias Urlichs <matthias@urlichs.de> - 2025-04-06 14:40 +0200
      Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-06 15:30 +0200
    Re: Why Debian is dying (Was: Call for volunteers and GR draft:  tag2upload key installation) Bill Allombert <ballombe@debian.org> - 2025-04-07 22:30 +0200
    Debian's position in the AI Era (Was: Re: Why Debian is dying (Was:  Call for volunteers and GR draft: tag2upload key installation) "M. Zhou" <lumin@debian.org> - 2025-04-09 05:50 +0200
  Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-07 12:50 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-07 16:40 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation Sean Whitton <spwhitton@spwhitton.name> - 2025-04-08 04:30 +0200
    Re: Call for volunteers and GR draft: tag2upload key installation Sean Whitton <spwhitton@spwhitton.name> - 2025-04-26 05:30 +0200
      Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-04-26 11:30 +0200
        Re: Call for volunteers and GR draft: tag2upload key installation Tollef Fog Heen <tfheen@err.no> - 2025-05-04 22:30 +0200
          Re: Call for volunteers and GR draft: tag2upload key installation Ian Jackson <ijackson@chiark.greenend.org.uk> - 2025-05-05 14:30 +0200

csiph-web