Savannah Administration - News: Download areas
Download areas
Item posted by James E. Blair <corvus> on Thu 15 Jan 2004 10:15:29 PM UTC.
Files that were in the download areas on Savannah before the
compromise can be downloaded from ftp://ftp.gnu.org/savannah/files.
We kindly ask project administrators to verify the integrity of those
files and use the following procedure to upload them to the new file
areas on Savannah.
Savannah has a new system to handle uploads of files to the download
area in a secure way. Project administrators are the only ones
allowed to upload files at this time.
To begin, please add your GPG key by logging in to Savannah and
visiting one of the following URLs:
https://savannah.gnu.org/account/change.php?item=gpgkey
https://savannah.nongnu.org/account/change.php?item=gpgkey
Within 2 hours the system should have updated the files necessary for
uploads.
After that time, use the following procedure to upload files:
For each upload destined for Savannah, two files need to be
uploaded via ftp to the site.
(1) File to distributed (eg. foo.tar.gz)
(2) Detached GPG binary signature for (1) (using gpg -b)
(eg. foo.tar.gz.sig)
The files should be uploaded via anonymous ftp to savannah.gnu.org.
and placed in the /incoming/savannah/<projectname> directory. For
example, to place foo.tar.gz in project bar's download area, upload
foo.tar.gz and foo.tar.gz.sig to:
ftp://savannah.gnu.org/incoming/savannah/bar
Uploads are processed every five minutes. Uploads that are in
progress when the upload processing script is running are handled
properly, so do not worry about the timing of your upload.
Currently there is no easy way to manipulate (move, rename, delete, or
work in subdirectories) with the new system. If you are an
experienced PHP programmer and would like to help add this
functionality, please contact us.
If you have questions about this process, please contact us at
<savannah-hackers@gnu.org>.
Thank you for your patience.
is it working ? (posted by Joachim Wolfgang Kaltz, Mon 19 Jan 2004 12:56:43 PM UTC) |
Hi,
|
RE: is it working ? (posted by Sylvain Beucler, Mon 19 Jan 2004 06:48:00 PM UTC) |
"It works for me." (tm)
|
RE: is it working ? (posted by Luca Saiu, Wed 21 Jan 2004 02:49:02 AM UTC) |
It works also for me.
|
RE: is it working ? (posted by Joachim Wolfgang Kaltz, Wed 21 Jan 2004 09:10:33 AM UTC) |
Hi guys, since it´s working for you, could you check if my steps were correct ? I am completely new at this gpg stuff, so it´s very possible I´m doing something wrong.
|
RE: is it working ? (posted by Sylvain Beucler, Wed 21 Jan 2004 01:39:09 PM UTC) |
I already used the same system to upload to alpha.gnu.org, and I had to send my public key to somewhere else. Since Luca Saiu is also a GNU maintainer, though there is no upload of GNU epsilon at alpha|ftp.gnu.org, maybe the uploading system does not check the right place for public keys. However, I think there would have been more comments or support requests in that case.
|
RE: is it working ? (posted by Luca Saiu, Mon 26 Jan 2004 10:11:09 PM UTC) |
Hi Beuc; sorry, I've seen your message late.
|
RE: is it working ? - It is! (posted by Kai Sterker, Wed 21 Jan 2004 08:34:19 PM UTC) |
I also had problems for a while, but it turned out that they were caused by a problem with the gpg keys. As I was told, some project keyrings had not been created correctly. That is apparently fixed now.
|
RE: is it working ? (posted by Jonathan Bartlett, Fri 23 Jan 2004 06:09:11 AM UTC) |
It looks like you did not use the "-b" option.
|
RE: is it working ? (posted by Sylvain Beucler, Fri 23 Jan 2004 10:05:48 AM UTC) |
-b <=> --detach-sig |
Previous Messages |
Powered by Savane 3.13-d3ae.
Corresponding source code