Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

release tarballs with bundled git submodules #274

Open
klemensn opened this issue Jul 8, 2023 · 4 comments
Open

release tarballs with bundled git submodules #274

klemensn opened this issue Jul 8, 2023 · 4 comments

Comments

@klemensn
Copy link
Contributor

klemensn commented Jul 8, 2023

Would you consider uploading static assets for releases which contain all sources, i.e. submodules?

Systems like OpenBSD ports have no network access during package building, so additional sources submodules need to be fetched and moved into place manually.

A single tarball from upstream containing all neccessary upstream code would simplify that process.

Alternatively, package maintainers like me could checkout git sources recursively for a release and vendor tarballs for operating system package infrastructure to use, but albeit simplifying the ports/package process, it also adds yet another layer of indirection and trust.

@mrts
Copy link
Member

mrts commented Jul 13, 2023

Thanks, uploading static assets for releases which contain all sources, including submodules makes sense. Do you know if there is a way to do this automatically in GitHub?

@klemensn
Copy link
Contributor Author

Thanks, uploading static assets for releases which contain all sources, including submodules makes sense. Do you know if there is a way to do this automatically in GitHub?

I'm not familiar with GitHub, but expect it to be possible.
I'll read up on this.

@klemensn
Copy link
Contributor Author

Looking at documentation and searching for prior art on this platform yielded #279, but I don't know how to test it.

@mrts
Copy link
Member

mrts commented Jul 13, 2023

Thanks a lot, looks nice! I'll discuss this with my colleague just in case. I'm 90% sure we will merge this.

klemensn added a commit to klemensn/web-eid-app that referenced this issue Jul 16, 2023
Contrary to auto-generated release tarballs, this one includes all
submodules such that operating system infrastructure gets a complete
source tree wihtout having to fetch submodules themself.

Add "-full" between name and version to distinguish the two tarballs.

The token needs read/write permissions to clone the repository and
upload assets to existing releases, respectively.

Fixes web-eid#274

Signed-off-by: Klemens Nanni <[email protected]>
mrts pushed a commit to klemensn/web-eid-app that referenced this issue Sep 22, 2023
Contrary to auto-generated release tarballs, this one includes all
submodules such that operating system infrastructure gets a complete
source tree wihtout having to fetch submodules themself.

Add "-full" between name and version to distinguish the two tarballs.

The token needs read/write permissions to clone the repository and
upload assets to existing releases, respectively.

Fixes web-eid#274

Signed-off-by: Klemens Nanni <[email protected]>
mrts pushed a commit to klemensn/web-eid-app that referenced this issue Sep 29, 2023
Contrary to auto-generated release tarballs, this one includes all
submodules such that operating system infrastructure gets a complete
source tree wihtout having to fetch submodules themself.

Add "-full" between name and version to distinguish the two tarballs.

The token needs read/write permissions to clone the repository and
upload assets to existing releases, respectively.

Fixes web-eid#274

Signed-off-by: Klemens Nanni <[email protected]>
klemensn added a commit to klemensn/web-eid-app that referenced this issue Sep 29, 2023
Contrary to auto-generated release tarballs, this one includes all
submodules such that operating system infrastructure gets a complete
source tree wihtout having to fetch submodules themself.

Add "-full" between name and version to distinguish the two tarballs.

The token needs read/write permissions to clone the repository and
upload assets to existing releases, respectively.

Fixes web-eid#274

Signed-off-by: Klemens Nanni <[email protected]>
klemensn added a commit to klemensn/web-eid-app that referenced this issue Dec 29, 2023
Contrary to auto-generated release tarballs, this one includes all
submodules such that operating system infrastructure gets a complete
source tree wihtout having to fetch submodules themself.

Add "-full" between name and version to distinguish the two tarballs.

The token needs read/write permissions to clone the repository and
upload assets to existing releases, respectively.

Fixes web-eid#274

Signed-off-by: Klemens Nanni <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants