From kde-devel Wed May 26 09:28:43 2010 From: Andreas Pakulat Date: Wed, 26 May 2010 09:28:43 +0000 To: kde-devel Subject: Re: digital signatures for kde sources? Message-Id: <20100526092843.GC18375 () barmbek> X-MARC-Message: https://marc.info/?l=kde-devel&m=127486619127268 On 26.05.10 11:04:34, Joanna Rutkowska wrote: > On 05/26/2010 10:54 AM, Andreas Pakulat wrote: > > On 26.05.10 02:50:18, Joanna Rutkowska wrote: > >> On 05/26/2010 02:31 AM, Michael Pyne wrote: > >>> As far as those who *do* package KDE (the Release Team) they have their own > >>> mailing list where this idea would be better brought up (release- > >>> team@kde.org). > >> > >> But I need the signature from the original authors > >> (commiters/release-managers). > > > > As was said, thats technically not feasible at the moment, let alone > > that it would increase the barrier of entry quite a bit for > > commit-access to KDE. We're very different here in comparison to the > > linux kernel as we have lots of people with access rights to the main > > repository, while in the case of the linux kernel basically only Linus > > merges stuff into the mainline repository. > > > > So signing the tarballs would be done with a KDE key by whoever does the > > release (thats one person usually right now). But this only covers the > > trunk/KDE/kde* modules, not any extragear and other apps as those are > > done by other people usually. > > > > Can you explain (or point me to an appropriate document) how is the > release process done in KDE project? Who decides that you're releasing a > particular version at a particular time? Who builds and uploads the > final stable tarball? Who hits the "Enter" button? This is all done by the already-mentioned release-team on the already mentioned release-team mailinglist. Someone proposes a release-schedule, its discussed and then put up on our techbase.kde.org server. Beyond that there's no "rules" who creates/uploads the tarballs, but most of the time its done by Dirk Mueller. This procedure however is only applicable for the main KDE modules (trunk/KDE/*), apps from extragear may have their own process. Andreas -- You can create your own opportunities this week. Blackmail a senior executive. >> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<