Hello, On Fri 14 Jun 2024 at 02:13pm +02, Thomas Goirand wrote:
> On 6/14/24 12:01, Sean Whitton wrote: >> Well, to put it simply, because it's better to do things using only >> signed git tags than to do something highly Debian-specific. > > In what ways aren't we discussing debian-specific things anyways? I don't > understand this part. We we just type "push2upload" and it's doing some magic > behind, what's the issue? Moving the magic inside the CI is even more hiding > things than doing them in the local computer. My point is that it's not doing any magic. It's less than 500 lines of shell. >> It is better if new contributors don't have to learn about source >> packages and dput at all. It is also much more convenient for existing >> contributors. Take a look at how git-debpush works -- it's really very >> simple and lightweight. I think you'll like it. > > Here as well, I don't understand. If we have the necessary tools to do the way > Didier did, why would a new contributor need to learn about dput? The CI would > upload for them... If they are signing a .changes file with their own key then they are doing something Debian-specific. > As for "learn about source packages", I'm not sure what their would be > to learn, except having to configure a correct build environment. That > indeed is an impressive amount of things to learn, but: > > 1/ one has to learn how to build packages to be able to contribute Binary packages, yes. Source packages are truly a different beast. Binary packages are just like build artifacts for any project. -- Sean Whitton
signature.asc
Description: PGP signature
