Wouter Verhelst <wou...@debian.org> writes:

> This is not true.

> wou...@merkel:/org/ftp.debian.org/queue/done$ ls *ges|wc -l
> 28969

> These are only the *active* changes files, though:

> wou...@merkel:/org/ftp.debian.org/queue/done$ find . -name 'nbd*ges'|wc -l
> 898

> ... since no .changes file is ever thrown away:

> wou...@merkel:/org/ftp.debian.org/queue/done$ du -sh .
> 7.1G

> They may not be visible on the mirrors, but they are there.

Ah, thank you.  I didn't realize that we kept them at all.

Note, though, that if the concern is a cryptographically strong audit
trail, we could still retain a link from the original *.changes file to
the final package with a second (possibly signed) document archived with
the *.changes file listing the original and final checksums of the
now-signed packages.

-- 
Russ Allbery (r...@debian.org)               <http://www.eyrie.org/~eagle/>


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87ljdqtudt....@windlord.stanford.edu

Reply via email to