Re: [incubation] (no subject)

[Eike Stepper <stepper@xxxxxxxxxx>]

Am 18.02.2016 um 11:28 schrieb Jens Reimann:
> On 02/18/2016 09:10 AM, Eike Stepper wrote:
> > Am 17.02.2016 um 18:03 schrieb Henrik Rentz-Reichert:
> > > RE: [incubation] (no subject)
> > >
> > > Hi Christoph Daniel,
> > >
> > > the nightly build on our eTrice HIPP  [1] is configured as readable
> > > by anonymous. If you login with your Eclipse credentials you should
> > > be able to access it.
> > >
> > > The last build step is a shell execution and does the promotion to
> > > our download area.
> > That probably means that your build server has write access to your
> > downloads area. I've heard that this can be dangerous in combination
> > with your Gerrit verification job. The build script or the tests could
> > be modified in any way and be executed before you get a chance to
> > review the changes. I wish there was a central promotion service which
> > would run under a different user id and decouple the build process
> > from access to the downloads area.
> Maybe this is something that we could add to Package Drone [1]?!
>
> [1] https://www.eclipse.org/package-drone/
My apologies, but unfortunately I know next to nothing about Package Drone. Maybe you can elaborate a bit and explain 
how it would address the issue?

Please note that there's this old bugzilla: Provide a central promotion/download service, 
https://bugs.eclipse.org/bugs/show_bug.cgi?id=339472

Cheers
/Eike

----
http://www.esc-net.de
http://thegordian.blogspot.com
http://twitter.com/eikestepper


> > Cheers
> > /Eike
> >
> > ----
> > http://www.esc-net.de
> > http://thegordian.blogspot.com
> > http://twitter.com/eikestepper
> >
> >
> >
> > _______________________________________________
> > incubation mailing list
> > incubation@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or
> > unsubscribe from this list, visit
> > https://dev.eclipse.org/mailman/listinfo/incubation