[PKG-Openstack-devel] python-glance-store_0.4.0-2_amd64.changes REJECTED

[James Page]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Thomas

On 12/06/15 11:26, Debian FTP Masters wrote:
> python-glance-store_0.4.0-2.dsc: Invalid md5sum hash for
> python-glance-store_0.4.0.orig.tar.xz: According to the control
> file the md5sum hash should be a96f28b558bef034f0a61007f45090ad, 
> but python-glance-store_0.4.0.orig.tar.xz has
> 8d4f08177ccda479327569941bcd8fbf.

This is exactly the issue we'll continue to run into generating the
orig.tar.xz using a tag from upstream branches, with no pristine-tar
data - there is no guarantee that we'll all generate exactly the same
data, as the current approach does not always produce the same result.

Moving to an upstream + pristine-tar branch setup and switching to
consume upstream release artefacts from pypi would resolve this.

Any thoughts? this is an important consideration when we're talking
about upstreaming packaging and having a broader set of collaborators.

Cheers

James

- -- 
James Page
Ubuntu and Debian Developer
james.page at ubuntu.com
jamespage at debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=ZUlm
-----END PGP SIGNATURE-----