[rb-general] software release archive

[Eli Schwartz]

On 05/20/2018 07:39 AM, Mattia Rizzolo wrote:
> On alioth we used to have an archive with tarballs with all our
> software, that used to live in
> http://reproducible.alioth.debian.org/releases - now that alioth is
> shutting down, that url doesn't work anymore.
> 
> I took all of those files, and pushed them to a Git LFS repository at
> https://salsa.debian.org/reproducible-builds/reproducible-lfs - and set
> up jenkins to mirror it.
> 
> I figured how to properly expose only the diffoscope releases, on
> https://diffoscope.org/archive/ but I have no good ideas on how to
> decently link the others.
> 
> I remember there have bee discussions about making a sub-page for every
> tool on https://reproducible-builds.org/tools/ ; that would be IMHO the
> best place to do e.g. /tools/reprotest/archive/ URLs.  I would just set
> up apache with an Alias on the Git LFS checkout (that isn't otherwise
> exposed via HTTP).  Check out https://salsa.debian.org/qa/jenkins.debian.net/commit/c9156b7def7729fa34283e774ea1065b7a064252
> 
> 
> Other suggestions welcome.
IMHO the best solution is using the releases page like is common on
Github, but this is blocked by
https://gitlab.com/gitlab-org/gitlab-ce/issues/41766

Fortunately https://gitlab.com/gitlab-org/gitlab-ce/issues/38830 is
fixed, which means it is possible to retrieve the git-archive(1)
generated tag contents (also like Github). But this does not work for
signed sources...

-- 
Eli Schwartz
Bug Wrangler and Trusted User