From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS22989 209.51.188.0/24 X-Spam-Status: No, score=-3.7 required=3.0 tests=AWL,BAYES_00,DKIM_INVALID, DKIM_SIGNED,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id B8A101F4C0 for ; Sun, 13 Oct 2019 21:40:58 +0000 (UTC) Received: from localhost ([::1]:42612 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iJlbl-0001Kd-9X for normalperson@yhbt.net; Sun, 13 Oct 2019 17:40:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:47788) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iJlbg-0001KO-DZ for bug-gnulib@gnu.org; Sun, 13 Oct 2019 17:40:53 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iJlbf-0000kR-9h for bug-gnulib@gnu.org; Sun, 13 Oct 2019 17:40:52 -0400 Received: from mo6-p00-ob.smtp.rzone.de ([2a01:238:20a:202:5300::10]:36876) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1iJlbe-0000gv-Js for bug-gnulib@gnu.org; Sun, 13 Oct 2019 17:40:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1571002846; s=strato-dkim-0002; d=clisp.org; h=References:In-Reply-To:Message-ID:Date:Subject:Cc:To:From: X-RZG-CLASS-ID:X-RZG-AUTH:From:Subject:Sender; bh=sQOtL5kF9/xjgeJNvYbHhdzI/8WZj1hnr5pgrTdlScM=; b=l3Id/E4ROYRRG0JM+zazTR3EM3rQmHeHDP6lio3gyY1HyoCY0f6xLhvbhOrRAq4IWa N7bRqvqRGhb74uNROgMQ6md08X+j18oy8a09Sy7CsushJZjiRAU1u5GFpoW5tZTpwBox pFCeRrCqyjVZ4pkNDIMTmLAuvyNK61Uwf8Z0IP1S0CHmJfjtrvexIb452xQVdNr5t0Wo h2CxvSDkH0IYM/5+cUwqvWKFM1u+9Opun6o4G3/lJTZ6X47xZC0W/VSa0/WenyGiP9q+ yCqSksxMkqyKzH9KsNzbbEkJ4pHG+DDfONLQ+piFRhEXXThD1mvmf8YRmGKJB9hrH6AD H+jw== X-RZG-AUTH: ":Ln4Re0+Ic/6oZXR1YgKryK8brlshOcZlIWs+iCP5vnk6shH+AHjwLuWOGaf0zJZW" X-RZG-CLASS-ID: mo00 Received: from bruno.haible.de by smtp.strato.de (RZmta 44.28.0 DYNA|AUTH) with ESMTPSA id N06099v9DLejorY (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (curve secp521r1 with 521 ECDH bits, eq. 15360 bits RSA)) (Client did not present a certificate); Sun, 13 Oct 2019 23:40:45 +0200 (CEST) From: Bruno Haible To: Assaf Gordon Subject: Re: git-version-gen: allow 'snapshot' as .tarball-version contents Date: Sun, 13 Oct 2019 23:40:45 +0200 Message-ID: <2809758.jsJ0OXQSap@omega> User-Agent: KMail/5.1.3 (Linux/4.4.0-165-generic; KDE/5.18.0; x86_64; ; ) In-Reply-To: <6a1182de-6289-2085-ca53-a5861b2ade24@gmail.com> References: <4073770.ak1ocBl5qt@omega> <19900474.xWVKHPivcp@omega> <6a1182de-6289-2085-ca53-a5861b2ade24@gmail.com> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2a01:238:20a:202:5300::10 X-BeenThere: bug-gnulib@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Gnulib discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: bug-gnulib@gnu.org Errors-To: bug-gnulib-bounces+normalperson=yhbt.net@gnu.org Sender: "bug-gnulib" Hello Assaf, > >> I wonder how users of these tarballs would be able to identify > >> snapshots if there is no version information. > > > > I find that for CI tarballs a > > stable URL is the more important feature. > > > > Somewhat related: > > If you're posting the tarballs to ftp.gnu.org or alpha.gnu.org , > the upload script (build-aux/gnupload) can create symlinks, > and even provide examples of symlinking a "-latest.tar.gz" to a > versioned one: > ---- > $ gnupload --help > [...] > 4. Create a symbolic link foobar-latest.tar.gz -> foobar-1.0.tar.gz > and likewise for the corresponding .sig file: > gnupload --to ftp.gnu.org:foobar \ > --symlink foobar-1.0.tar.gz foobar-latest.tar.gz \ > foobar-1.0.tar.gz.sig foobar-latest.tar.gz.sig > ---- > > Would that help with a stable URL for testing? Yes, symlinks like this solve the problem. However, the continuous integration happens on non-GNU machines, and I'm not sure I would want to upload the secret part of my (or anyone else's) GPG key to a cloud platform, for security reasons. It could/would compromise the trust people have in the gnu-keyring.gpg. Bruno