On 2022-01-05 08:31:51 +0100 (+0100), Matthias Runge wrote: [...]
So, previously, releases were uploaded to tarballs.opendev.org[3], which is not the case anymore.
To me it looks like publishing releases on tarballs.... would solve the immediate issue Pete pointed out. Also it would provide an alternate download option.
Is that doable?
It's definitely doable, as we do it for other projects outside the opendev Zuul tenant, e.g. those in the openstack Zuul tenant. And technically we do upload tarballs for git-review to the tarballs site, but currently only branch tip tarballs not release tarballs. Later this week or early next I hope to move the prior artifacts at that URL and set up a redirect to do open{stack->dev}/git-review there as a first step, since that's where any future tarballs would appear anyway. Once more of the OpenDev sysadmins are back from winter holidays, I'll make sure there aren't any objections to adding release tarball uploads for our Python-based tools (git-review, bindep, et cetera), and work out the most elegant solution from a job perspective. We can punt on the signing part initially, I expect, and separately decide what sor of solution and signing key we might want for that. -- Jeremy Stanley