Ian Jackson writes ("Call for volunteers and GR draft: tag2upload key
installation"):
> We need to make an exceptional, short term delegation authorising
> the installation of tag2upload's signing key on ftp-master.
I have been thinking about this. I still think that this (an "NMU")
is the right approach to take, given that it still seems like this
situation will persist.
But I have my doubts that Debian Developers will find the technical
wording of the draft GR digestible. Perhaps we want something more
obvious. So here is an alternative.
It's based on the 2024 GR message from Sean. We'd probabloy want to
steal a lot of the background from Sean message in 2024 and my one
last week.
DRAFT GR RESOLUTION TEXT
1. tag2upload allows DDs and DMs to upload simply by using the
git-debpush(1) script to push a signed git tag.
2. tag2upload has been fully implemented and deployed, and ready
for immediate operation, since the 15th of March 2025.
3. However, the Debian FTP Archive does not trust its signing key,
so tag2upload cannot be put into service.
4. tag2upload, in the form designed and implemented by Sean Whitton and
Ian Jackson, and design reviewed by Jonathan McDowell and Russ
Allbery, should be fully operational by the 15th of May 2025.
5. The Project Leader should use all necessary means, including
the power of temporary delegation, to achieve this objective.
Ian.
--
Ian Jackson <ijack...@chiark.greenend.org.uk> These opinions are my own.
Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.
