[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: Should we stop distributing source tarballs?
From:       Sune Vuorela <nospam () vuorela ! dk>
Date:       2024-04-04 9:47:50
Message-ID: uult06$893$1 () ciao ! gmane ! io
[Download RAW message or body]

On 2024-04-03, Albert Vaca Cintora <albertvaka@gmail.com> wrote:
> What's the advantage of providing tarballs?

I do think there is an advantage in being able to verify that the soure
tarball is the same across distributions. Using a checksum on the
tarball is an easy way of doing it. Different git invocations for git
archive, different tar options and so on can create different checksums
for the same content.

I do also think it is nice if we get someone else to verify that the
tarball we ship actually matches the tag. I think some people in
distributions have already started looking into verifying that.

Also, git tags can be moved.

/Sune

[prev in list] [next in list] [prev in thread] [next in thread]