Updates and delays in signing packages

Josh Boyer jwboyer at gmail.com
Sat Jul 18 01:26:59 UTC 2009


On Sat, Jul 18, 2009 at 06:10:49AM +0530, Rahul Sundaram wrote:
>On 07/18/2009 05:27 AM, Josh Boyer wrote:
>
>> 
>> I can understand your concern with a very active package like that.  At the
>> moment, we can't do anything we aren't already trying to do to get official
>> updates out faster.  Have patience.
>
>The question wasn't about why there was delays but how I can handle it
>within my workflow (I thought of just running my own repo but that
>doesn't seem ideal) but it is good to know more of the inside details on

It might not be ideal, but given that you're waiting for pushes to get your
builds into repos it might also be the most convenient for the people that
want those builds.  Putting repos on a fedorapeople page is not unheard of.

>why there are delays in the first place. On a related point, do we have
>good documentation on the entire process? If there is a need for more to

No.  I think our documentation of the entire push process doesn't exist.
Some of it we don't want to exist, like how to get onto the signing machine.
Some of it really can't be documented because it's dealing with issues as
they come up in one form or another and there is no "common" error scenario.
Other parts are changing at a somewhat rapid pace as we introduce new fixes
and features.

I think the best way to start is to get better documentation on the various
software components involved first.  Those would be bodhi, mash, createrepo,
and deltarpm for the most part.  Bodhi and mash would be good (and daunting)
places to start.

>help with signing the packages, I can volunteer (assuming you let me).

Signing is not the hurdle.  Adding more people to help there won't really
make anything faster.  We're also toying with making koji do auto-signing at
build time, which makes it basically go away.  I do appreciate the offer
though.

josh




More information about the fedora-devel-list mailing list