make force-tag gone

Jon Masters jonathan at jonmasters.org
Wed Sep 10 13:51:56 UTC 2008


On Wed, 2008-09-10 at 14:49 +0200, Denis Leroy wrote:
> Matt Domsch wrote:
> > The question is - can an automated tool, given a binary RPM, request
> > of CVS the corresponding source code for it?  Yes, unless people can
> > arbitrarily re-tag after the packages have been published.  Then there
> > is no guarantee that what is tagged in CVS matches the source code for
> > a given package.

Indeed. I got the point :) But like others, I'm saying it's a
non-problem until the package has ever been made available.

> I think we all agree that re-tagging after packages have been built is 
> plain wrong.

Hmm...actually, I'd prefer it to be an issue only after you've released
those packages, but I suppose the argument will be that once a package
is there in koji someone might download it.

> However this doesn't invalidate the various uses of 
> force-tag that have been discussed in this thread. All we need is a 
> mechanism such that a successful koji build automatically renders the 
> associated tag immutable.

Or we could trust people to do the right thing ;)

Jon.





More information about the fedora-devel-list mailing list