On Thu, 2005-05-05 at 12:37 -0400, John Dennis wrote: > On Thu, 2005-05-05 at 18:03 +0200, Bernd Bartmann wrote: > > Again several updates/erratas for FC3 appeared on the download mirrors > > but were never announced. > > It's worthwhile to point out that the process for getting a new rpm > signed and pushed is entirely manual done via email requests. A > developer sends an email asking for the package to be pushed. It may > take between 1 hour and 2 days for the request to be honored. He cannot > generate the announcement until the sign/push occurs because the MD5 > sums won't be correct until the package is signed. So it is entirely > possible for a package to get signed while the developer is gone and he > may not be able to generate the announcement until he returns. Because > of the manual nature of the process and the inherent delays it is > entirely possible for several days to transpire between a package making > an appearance and the announcement. Why not have a template that the packager fills out partially with %summary, %description, etc., then have a place where the signer puts the md5sums. That way the packager doesn't have to worry about when the packages are signed, and the announcement can go out as soon as the updates are ready. -- Ignacio Vazquez-Abrams <ivazquez@xxxxxxxxxxxx> http://fedora.ivazquez.net/ gpg --keyserver hkp://subkeys.pgp.net --recv-key 38028b72
Attachment:
signature.asc
Description: This is a digitally signed message part