Marco d'Itri writes ("Re: tag2upload (git-debpush) service architecture -
draft"):
> On Aug 02, Sam Hartman <hartm...@debian.org> wrote:
> > In effect, ftpmaster is saying they are uncomfortable trusting
> > tag2upload very much.
>
> A simple solution to this concern would be for ftpmaster to take over
> the operations of tag2upload once it will be ready.
Indeed.
I still think it wants to run on a separate host to dak. It doesn't
seem to me to be a good idea for security reasons for the dak host to
grow an internet facing webhook service, nor for it to perform complex
git-to-source-package transformations.
Ian.
--
Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own.
If I emailed you from an address @fyvzl.net or @evade.org.uk, that is
a private address which bypasses my fierce spamfilter.
