Received: from makus.postgresql.org (makus.postgresql.org [98.129.198.125]) by mail.postgresql.org (Postfix) with ESMTP id 76FD116FA500 for ; Mon, 9 Jul 2012 08:26:17 -0300 (ADT) Received: from outmail149113.authsmtp.com ([62.13.149.113]) by makus.postgresql.org with esmtp (Exim 4.72) (envelope-from ) id 1SoC6a-0007gY-DO for pgsql-www@postgresql.org; Mon, 09 Jul 2012 11:26:17 +0000 Received: from mail-c194.authsmtp.com (mail-c194.authsmtp.com [62.13.128.121]) by punt5.authsmtp.com (8.14.2/8.14.2/Kp) with ESMTP id q69BQ3R6056749 for ; Mon, 9 Jul 2012 12:26:03 +0100 (BST) Received: from mail-ob0-f174.google.com (mail-ob0-f174.google.com [209.85.214.174]) (authenticated bits=0) by mail.authsmtp.com (8.14.2/8.14.2) with ESMTP id q69BPrn3028384 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=FAIL) for ; Mon, 9 Jul 2012 12:25:54 +0100 (BST) Received: by obbuo13 with SMTP id uo13so20401727obb.19 for ; Mon, 09 Jul 2012 04:25:34 -0700 (PDT) MIME-Version: 1.0 Received: by 10.60.28.101 with SMTP id a5mr40972252oeh.69.1341833134023; Mon, 09 Jul 2012 04:25:34 -0700 (PDT) Received: by 10.60.115.69 with HTTP; Mon, 9 Jul 2012 04:25:33 -0700 (PDT) In-Reply-To: References: <1341692590.1122.1.camel@lenovo01-laptop03.gunduz.org> <2476F91B-A1B2-45DA-96EB-8F33C79A0E05@openscg.com> <1341781012.3451.0.camel@lenovo01-laptop03.gunduz.org> Date: Mon, 9 Jul 2012 12:25:33 +0100 Message-ID: Subject: Re: Linux Downloads page change From: Simon Riggs To: Dave Page Cc: Magnus Hagander , =?ISO-8859-1?Q?Devrim_G=DCND=DCZ?= , Scott Mead , "pgsql-www@postgresql.org" Content-Type: text/plain; charset=ISO-8859-1 X-Server-Quench: d8c11945-c9b8-11e1-80b9-0022640b883e X-AuthReport-Spam: If SPAM / abuse - report it at: http://www.authsmtp.com/abuse X-AuthRoute: OCdxZQATClZOTQEd DAteCiN5VAwpPBRK HVkIKg5MOFUSTAAU LVlFBkJUK0ETX1xC QjoVBBYDHl14Rhkw NxVTbQRfcktMVQdv Wk1NDFBSHRtgBAID BxoAUx52aABOf2Fx KwdkVwI7Hhp5dUR1 QUZQW2sCY2EuPGhM UUFRcwZJIwoYdgJE awV+SXsNM2waZnpi RVFvZzphbW5SPh5Y EEk+NV0JWEJOASEj clgmHDMyDQUpQDo1 KxsvJkVUBE8ePw05 MVInVl9w X-Authentic-SMTP: 61633235383639.1015:706 X-AuthFastPath: 0 (Was 255) X-AuthSMTP-Origin: 209.85.214.174/587 X-AuthVirus-Status: No virus detected - but ensure you scan with your own anti-virus system. X-Pg-Spam-Score: -2.6 (--) X-Archive-Number: 201207/50 X-Sequence-Number: 20799 On 9 July 2012 12:21, Dave Page wrote: > On Mon, Jul 9, 2012 at 12:19 PM, Simon Riggs wrote: >> On 9 July 2012 10:44, Dave Page wrote: >> >>> It gets pushed periodically when I remember to do it (or someone >>> reminds me), which I guess you've forgotten given that we've had this >>> exact same discussion before. >> >> That highlights a key flaw. >> >> If we distribute RPMs then the SRPMs should exactly match. If they >> don't, that's a pretty serious set of bugs we're introducing. >> >> Can I suggest that the process be changed? Push the SRPM code, then >> generate RPMs from the released SRPM code. That way there is no >> opportunity to forget anything. This is a substantial security >> concern, not just a forgotten task. >> >> Perhaps it would be useful to have a "build farm" that builds the RPMs >> from SRPMs automatically, then we will have no need for manually >> updating the RPMs at all. (And I mean build all binaries from publicly >> available build scripts). > > We're not talking about RPMs here. I am discussing the relationship of SRPMs and RPMs, which is a valid point on this thread given the point that the RPMs and SRPMs have been mismatched for some time and that the current process calls for manual rather than automatic synchronisation. -- Simon Riggs http://www.2ndQuadrant.com/ PostgreSQL Development, 24x7 Support, Training & Services