Morning all, I'd be very up for that ...
The "alternative workflow" in this document seems reasonable for us to use (or modify for use): https://wiki.debian.org/Creating%20signed%20GitHub%20releases RE vendor lock-in: Any provider we may move to in the future is going to have to be based on git, and are going to have similar features to github with regard to providing signatures. If there's anything I can do to help, holla. Cheers Joe On Tue, 27 Apr 2021 at 17:11, Patrick Allaert <patrick.alla...@gmail.com> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > On 2021-04-27 at 15:00, b...@benramsey.com wrote: > > > On Apr 27, 2021, at 09:41, Christoph M. Becker <cmbecke...@gmx.de> > wrote: > > > > > > Hi all, > > > > > > the distributions repo[1] is huge (current ~ 26GiB), and it will grow > > > further over time; that causes issues when trying to check it out[2], > > > and frankly, I don't see why were having the tarballs in a VCS at all. > > > > > > Wouldn't it be more suitable to make the tarballs available somewhere > > > else? Since we're using Github anyway, an appropriate place could be > > > the tags, where it is already possible to add attachments. > > > > > > From what I can tell, that would require some modifications to web-php > > > and web-qa, so that the proper download links would be available there, > > > but otherwise shouldn't be a big issue. > > > > > > Thoughts? > > > > > > Co-signed. I tried downloading it yesterday to add my key to the > > keyring, but I canceled when I realized that my laptop might run out of > > space. ;-) > > > > Cheers, > > Ben > > Huge +1 from my side. > > Cheers, > Patrick > -----BEGIN PGP SIGNATURE----- > Version: FlowCrypt Email Encryption 8.0.4 > Comment: Seamlessly send and receive encrypted email > > wsFzBAEBCgAGBQJgiCmXACEJEBmfnf72/7r9FiEE8faSI4+8FmblpczUGZ+d > /vb/uv0qSBAAmgZZx4a8x3dxgWGkeDLn+HDYw5gCVa4pGNfz+HLr5jwSP9c5 > GTHqp3Ew3b7DmPta+nhvXT7oWfdaZFGk2zjkHYsc8ye4usdQvS8JO4epmwLx > v2TTChW1Pcwv6GzAAUH4iWI3kwe6lNU2qJxMxUtihk/aWrUerTVh+oWt0Gm+ > bXtHyHqHaytvCyEaTJ52psUV7hT5G05xzsLhAq5pI2VZKZciJYK2UA1ysORp > 30ithS42gG40TpxyZG/sJwd8XO+iikvVhazqqylvhnKW11ORyqnXWU5FskVL > VlRYv8qFaB5dsgne867U9rqxBXueG3HdTOpah5ydcSuVoxNcEtMkGQpp/Ptj > eEysRYRq1mYiqI9fRfj9JVYDVC4VyZ8pMtJ+9nnTMjywsZDEvfF+qKDjkEc5 > UgmK4riSoEgzwwSMMpHQQ3+RFeAipEUV4IhOXnp0/toGFKVODTp9m1kMVsN9 > nQym25gEFI2S+2KUTmSy7byKSYt1F8FL88GeenuV/iKl1HiigChgJ/Am7OFX > 1TxnXtMtogCZVaOtLPELumA8ZFp6ONc6g5tl8rwOj5KZz0nbZD8p79tNBmPd > 45g69y25Xcex20tt6uB64x7qUAcg/3XmZy59/KAoYUD816qqtlzURXFxKi9F > 0+/SY9HoL2BMZVZsRzCJu9yKWd6E8r+28ZY= > =BYAn > -----END PGP SIGNATURE----- > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: https://www.php.net/unsub.php
