Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:114225 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 84700 invoked from network); 28 Apr 2021 05:29:01 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 28 Apr 2021 05:29:01 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 6EC081804BD for ; Tue, 27 Apr 2021 22:33:28 -0700 (PDT) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM,HTML_MESSAGE, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.2 X-Spam-Virus: No X-Envelope-From: Received: from mail-oi1-f173.google.com (mail-oi1-f173.google.com [209.85.167.173]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Tue, 27 Apr 2021 22:33:27 -0700 (PDT) Received: by mail-oi1-f173.google.com with SMTP id u80so28359700oia.0 for ; Tue, 27 Apr 2021 22:33:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wTaIN78F01P9QmNywt3DbzaLQUWl281Hm/LKUUfNee0=; b=ZcN2BZp1gQ02xGh/J8xkG3D1DtCkN+4i7apVi/fBLABUXbt8ZEmHN836BVHikUyxwN xPNRA7EAFC9HMo3Bm1qgL9vMoXtpzk6aiD1LtB//i6wWGy0lZzQ/gnEQvB30L91iV42m ZZf5k9qjBF47fkvkQLuVpSdYke/nM7OhSk9nWk5J3LN7OVkT/pzWyIfHB9Mb/Qt2h1HN nvuLcTakFDDwAq1HMXOAXDsyotYYfIWdFhY8sr2oV4C/AUYaaqH2mS85m9OvrmkZohzE fOkPNd6XOtrwS0pPsK+7ivjKHQZXX7G2jY6I+YHkmTFf+yhy+YGb+Dqmfc8HhBs/jjqr lDHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wTaIN78F01P9QmNywt3DbzaLQUWl281Hm/LKUUfNee0=; b=MGmV7PuMZ60eQubGm6415cEPFrf41cnDCpvjoS5ZMjKa53olAOZk12KFnZ10/btKzx Hb+rPdWq3fmL8o7sCIGjlFaH5HZPMM1T89J6KdpxlIFAVBGmsOQCxg6eA8o5Fl+2wtEJ G9v6a64txphDSR9+mQ9SDsPAs/aE8paadp4xOjQHwVPDly5aEMdUwncQHAM/q0nwMVKH WuS6/G0wgoEMFpYBXBOhvb+0fZTO3H/9BuRBQrDKQv5jBNNFkxJzAXC8yU/zv7q+wNn6 xgAbPnijQCgcNGHLrrclzZvth8C2fyTs8N12Ox/1AUd4Tqeugb9utJJ1HmtIajXHAXbO zOpg== X-Gm-Message-State: AOAM532Mpvm0Cyjd6p7DHa+ihm+d2zDPVmeVSCyzFkH3y+7fZ1fcNh/0 W0BxszzVK8jqifYA2ZqlRqSZDsbmsBGPbS7fwOs= X-Google-Smtp-Source: ABdhPJySdV/t2AbaGzxdCRekR4XrbyhIyTiMfHcVFsiKyjGcXdPIjFkc/RbzszRH4lCNjflLrfnW9VcB/1CAVdSTj94= X-Received: by 2002:aca:30d7:: with SMTP id w206mr2281306oiw.163.1619588007347; Tue, 27 Apr 2021 22:33:27 -0700 (PDT) MIME-Version: 1.0 References: <1fadb99e-8880-b491-9db6-a9923c4d02d2@gmx.de> In-Reply-To: Date: Wed, 28 Apr 2021 07:33:16 +0200 Message-ID: To: Patrick Allaert Cc: ben@benramsey.com, PHP internals Content-Type: multipart/alternative; boundary="000000000000dc4b9a05c101b70b" Subject: Re: [PHP-DEV] Retire distributions repo in favor of something more suitable From: krakjoe@gmail.com (Joe Watkins) --000000000000dc4b9a05c101b70b Content-Type: text/plain; charset="UTF-8" Morning all, I'd be very up for that ... The "alternative workflow" in this document seems reasonable for us to use (or modify for use): https://wiki.debian.org/Creating%20signed%20GitHub%20releases RE vendor lock-in: Any provider we may move to in the future is going to have to be based on git, and are going to have similar features to github with regard to providing signatures. If there's anything I can do to help, holla. Cheers Joe On Tue, 27 Apr 2021 at 17:11, Patrick Allaert wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > On 2021-04-27 at 15:00, ben@benramsey.com wrote: > > > On Apr 27, 2021, at 09:41, Christoph M. Becker > wrote: > > > > > > Hi all, > > > > > > the distributions repo[1] is huge (current ~ 26GiB), and it will grow > > > further over time; that causes issues when trying to check it out[2], > > > and frankly, I don't see why were having the tarballs in a VCS at all. > > > > > > Wouldn't it be more suitable to make the tarballs available somewhere > > > else? Since we're using Github anyway, an appropriate place could be > > > the tags, where it is already possible to add attachments. > > > > > > From what I can tell, that would require some modifications to web-php > > > and web-qa, so that the proper download links would be available there, > > > but otherwise shouldn't be a big issue. > > > > > > Thoughts? > > > > > > Co-signed. I tried downloading it yesterday to add my key to the > > keyring, but I canceled when I realized that my laptop might run out of > > space. ;-) > > > > Cheers, > > Ben > > Huge +1 from my side. > > Cheers, > Patrick > -----BEGIN PGP SIGNATURE----- > Version: FlowCrypt Email Encryption 8.0.4 > Comment: Seamlessly send and receive encrypted email > > wsFzBAEBCgAGBQJgiCmXACEJEBmfnf72/7r9FiEE8faSI4+8FmblpczUGZ+d > /vb/uv0qSBAAmgZZx4a8x3dxgWGkeDLn+HDYw5gCVa4pGNfz+HLr5jwSP9c5 > GTHqp3Ew3b7DmPta+nhvXT7oWfdaZFGk2zjkHYsc8ye4usdQvS8JO4epmwLx > v2TTChW1Pcwv6GzAAUH4iWI3kwe6lNU2qJxMxUtihk/aWrUerTVh+oWt0Gm+ > bXtHyHqHaytvCyEaTJ52psUV7hT5G05xzsLhAq5pI2VZKZciJYK2UA1ysORp > 30ithS42gG40TpxyZG/sJwd8XO+iikvVhazqqylvhnKW11ORyqnXWU5FskVL > VlRYv8qFaB5dsgne867U9rqxBXueG3HdTOpah5ydcSuVoxNcEtMkGQpp/Ptj > eEysRYRq1mYiqI9fRfj9JVYDVC4VyZ8pMtJ+9nnTMjywsZDEvfF+qKDjkEc5 > UgmK4riSoEgzwwSMMpHQQ3+RFeAipEUV4IhOXnp0/toGFKVODTp9m1kMVsN9 > nQym25gEFI2S+2KUTmSy7byKSYt1F8FL88GeenuV/iKl1HiigChgJ/Am7OFX > 1TxnXtMtogCZVaOtLPELumA8ZFp6ONc6g5tl8rwOj5KZz0nbZD8p79tNBmPd > 45g69y25Xcex20tt6uB64x7qUAcg/3XmZy59/KAoYUD816qqtlzURXFxKi9F > 0+/SY9HoL2BMZVZsRzCJu9yKWd6E8r+28ZY= > =BYAn > -----END PGP SIGNATURE----- > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: https://www.php.net/unsub.php --000000000000dc4b9a05c101b70b--