From 55aaa36bf077909bdf825b30b5571747cd936f2c Mon Sep 17 00:00:00 2001 From: Jiri Popelka Date: Jul 07 2021 15:32:54 +0000 Subject: Meeting minutes 2021-07-07 --- diff --git a/meeting-minutes/2021-07-07.md b/meeting-minutes/2021-07-07.md new file mode 100644 index 0000000..8b4c606 --- /dev/null +++ b/meeting-minutes/2021-07-07.md @@ -0,0 +1,34 @@ +# Fedora Source-git SIG meeting 2021-07-07 + +## Agenda + +* [The devel thread](https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/U3CD3DOWJ3G27ZIRZTTYFGHCK55B24IU/#U3CD3DOWJ3G27ZIRZTTYFGHCK55B24IU) + + +## Notes + +* Signing upstream releases via signing git tags + * GitHub makes it hard to distribute pubkeys so that people can verify those signed git tags. + * We don't have this problem in the downstream since we have a good way to distribute pubkeys in the Fedora land. + * As an example: kernel signs releases in git while archives are no longer being signed. + * This is important but not right now since we still need to bring up the basic workflow +* There are upstream projects that **do** rebases so we need to cater for these + * One cannot force-push or rebase in src.fp.o +* Branching is the solution for tracking "parallel" streams + * E.g. Neal maintains upstream-dead projects in 2 branches, one for the public, the other one for datto + * Justin is doing something similar and has multiple branches when upstream rebases the main branch + * If tags are not overwritten, they could still be used as a stable point +* We should have 2 types of branches in source-git: there should be a convention for names of these branches + 1. protected: cannot force-push + 2. rebasing and force-pushing is allowed +* ark-latest branch is being rebased +* Neal says it was a big pain in debian when sources randomly disappeared + * Justin says the archive needs to be accessible (from legal PoV) + * Conditional patches suck :P +* Next step: star trying things + * Set up a namespace in src.stg.fp.o/src + * Alternatively create a namespace in pagure.io + * We can also do it on GitLab +* Dealing with additional downstreams + * While the default src-git -> package solution is pristine upstream tarball + fedora patches, we need a way to support derivatives. + * Pristine upstream tarball + fedora patches + (separate) downstream patches.