This is the mail archive of the
cygwin-apps@cygwin.com
mailing list for the Cygwin project.
Maintainers doing it for themselves
- From: "Robert Collins" <robert dot collins at syncretize dot net>
- To: "'Cygwin-Apps'" <cygwin-apps at sources dot redhat dot com>
- Date: Thu, 11 Jul 2002 08:24:27 +1000
- Subject: Maintainers doing it for themselves
Chris,
Here's a simplistic idea, lifted from debian.
Each maintainer provides you with a gpg (it's in the distro now :})
public key.
You provide an anonymous upload only ftp site.
To provide a package, a maintainer uploads a minimum of three files:
A metadata file (say, packagename.hint)
The package (foobar.bz2)
A gpg signature file for the package and metadata.
The metadata includes the path (within the mirror tree) for the file to
go to.
If the signature doesn't checkout on your 'net release' keyring, then
it's not a maintainer uploading.
A cron job could scan for new files every <x> minutes.
Rob