Hi Ansgar, On 20-05-2019 09:06, Ansgar wrote: > I though about importing the full source to security-master already for > a different reason: `Built-Using` leads to a similar problem as binNMUs > in that uploads require source that is not already present in the > archive. > > It is not necessary to push all sources to the public mirrors.
Does this mean you think it is feasible to do/fix this in the near future? >> Another solution already raised by Shengjing is to merge the archives. I >> *guess* that is undesirable due to the fact that the security archive >> often has embargoed sources and binaries. Am I right there? > > That doesn't work as dak doesn't try to keep secrets. There are various > ways information would be leaked about embargoed issues (mails, > database, web interface (rmadison), ...). > > I personally also don't find it too bad to have a fallback: if one of > the hosts is broken at the same time we have to release a critical > update, we can still do so by publishing via the "wrong" archive. Regarding my other direction with wanna-build, I learned yesterday via another bug (#894441 binNMUs should be replaced by easy no-change uploads) that wanna-build is not in the place to fix this because uploads need to be signed. Paul
signature.asc
Description: OpenPGP digital signature
