Hello, On Thu 28 Nov 2024 at 10:29am -10, Theodore Ts'o wrote:
> *) As much as possible, we want to be able to use the unmodified > source files are officially released by upstream. Which might be a > tarball and/or a signed git tag. I ignore this completely, and I'm not the only one. Even for traditionally maintained software like Emacs, Rob and I push upstream-signed git tags to dgit.debian.org instead, and use 'git archive' to generate a tarball to satisfy dak. -- Sean Whitton
signature.asc
Description: PGP signature
