Hi, On 29/08/2020 20:09, Ansgar wrote: > Hi, > > Clément Hermann writes: >> The original message on debian-go and debian-release is here: >> >> https://lists.debian.org/msgid-search/176455fa-4611-f2c1-9ca1-f855d7d99...@debian.org > > For the ftp-master side, I wanted to just import all sources from a > stable release into security-master (in a private archive). dak can > then use these when binNMUs arrive, for Built-Using, or when people > upload without the .orig.tar.gz included. The second part should > already work. > > There are currently two issues with this: > > - security-master.d.o should get more disk space. > Maybe we should get a (new) physical host for security-master that > provides this? It should probably be a physical host and not a VM to > allow using a YubiKey (or similar) for the signing key.
Is there a way one can help on this? > - Time. I currently don't have much to spend on Debian. > Are there more issues that ftp-master would have to deal with? As we discussed on IRC, once we (go team) have decided on the way to store the information about embedded packages, we might need a new ad-hoc request on dacweb. Other than that, I don't think there are, my understanding was that the missing orig.tar.gz when dealing with a lot of new packages in the security archive was the main blocker on ftp-master plate. But if anyone think about something, now would be a great time to chime in ;) Cheers, -- nodens
