This is the mail archive of the cygwin-apps@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Maintainers doing it for themselves


Chris,
Here's a simplistic idea, lifted from debian.

Each maintainer provides you with a gpg  (it's in the distro now :})
public key.

You provide an anonymous upload only ftp site.

To provide a package, a maintainer uploads a minimum of three files:
A metadata file (say, packagename.hint)
The package (foobar.bz2)
A gpg signature file for the package and metadata.

The metadata includes the path (within the mirror tree) for the file to
go to.

If the signature doesn't checkout on your 'net release' keyring, then
it's not a maintainer uploading.

A cron job could scan for new files every <x> minutes.

Rob


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]