Hello,
I am an Apache CloudStack PMC/Committer.
One of the goals that we at CloudStack have is to automatically build
packages and update our mirrors whenever a new release is launched.
I worked as release manager for CloudStack 4.12.0.0 (non-LTS) and
assisted on 4.13.0.0 (LTS), In both cases
AIUI, you can automate everything except the verification and PGP signing. The
building and packaging doesn't have to be done on computers under the RM's
control, but before the RM applies his/her PGP signature, the RM must convince
themselves that the artifacts they are signing are correct and
