[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: Should we stop distributing source =?iso-8859-1?Q?tarballs=3F?=
From:       Heiko Becker <heiko.becker () kde ! org>
Date:       2024-04-04 15:49:43
Message-ID: 90ea6fd1-21c2-45a3-a818-103004ccf3ba () kde ! org
[Download RAW message or body]

On Thursday, 4 April 2024 13:26:57 CEST, Sune Vuorela wrote:
> On 2024-04-04, Ben Cooksley <bcooksley@kde.org> wrote:
>>> I do also think it is nice if we get someone else to verify that the
>>> tarball we ship actually matches the tag. I think some people in
>>> distributions have already started looking into verifying that.
>>> 
>> 
>> Hopefully they'll be gentle with tooling that does this?
>
> I have only seen 'starting to look into it', not actually yet figuring
> out what to do with it.
>
> But as an approximation, I would expect
>
> 'does the tarball content match the tag?'
> 'can we easily and automatically explain the difference?'
> 'does it use autotools?'
> 'can autogenerated docs and stuff be moved to build time instead?'
>
> and other such things that might flag it differently and probably for
> manual inspections.
>
> I think we have stopped injecting translations at tarball creation time
> and our tarballs should actually match the git tags?

Yes, that would be my expectation as well, tarballs should be identical to 
a checked out tag (minus the .git dir).


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic