• Bug#1110269: tag2upload (and dgit?) should deposit upstream tags

    From Ian Jackson@21:1/5 to All on Sat Aug 2 16:40:02 2025
    Package: dgit-infrastructure
    Version: 13.3

    We should be archiving upstream git tags, especially since they might
    be signed, in our git depository. There is a difficulty, which is
    that their names are abitrary so we think they need to be namespaced.

    Here is a sketch we just came up with:

    1. Change dgit-repos-server to accept pushes of a tag object
    to refs/dgit-upstream-tags/UPSTREAM-VERSION-NUMBER-DEP14
    when it is pusedh alongside a normal push. (ref name TBD.)

    2. Change t2u builder dgit push-source to push this tag too
    to that ref name.

    3. The tag can be fetched with git fetch and git-update-ref'd
    to its real name (present in the git header) and verified.
    (This is bad UX and not like git)

    4. Somehow arrange that there is a view of dgit-repos that overlays
    the upstream tags, with their actual normal refs/tags/ ref names,
    alongside the refs/heads/* etc. view. We're not quite sure how to
    do that. It probably needs to look like a separate repo.

    5. Maybe do something in dgit push-source for it to also archive
    these tags.

    We can do 1 and 2 right away and we should, so that we archive as many
    of these tags as possible for posterity.

    The rest need more thought.

    Ian.

    --
    Ian Jackson <[email protected]> These opinions are my own.

    Pronouns: they/he. If I emailed you from @fyvzl.net or @evade.org.uk,
    that is a private address which bypasses my fierce spamfilter.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)