Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [incubation] (no subject)

Am 18.02.2016 um 11:28 schrieb Jens Reimann:
On 02/18/2016 09:10 AM, Eike Stepper wrote:
Am 17.02.2016 um 18:03 schrieb Henrik Rentz-Reichert:
RE: [incubation] (no subject)

Hi Christoph Daniel,

the nightly build on our eTrice HIPP  [1] is configured as readable
by anonymous. If you login with your Eclipse credentials you should
be able to access it.

The last build step is a shell execution and does the promotion to
our download area.

That probably means that your build server has write access to your
downloads area. I've heard that this can be dangerous in combination
with your Gerrit verification job. The build script or the tests could
be modified in any way and be executed before you get a chance to
review the changes. I wish there was a central promotion service which
would run under a different user id and decouple the build process
from access to the downloads area.
Maybe this is something that we could add to Package Drone [1]?!

My apologies, but unfortunately I know next to nothing about Package Drone. Maybe you can elaborate a bit and explain how it would address the issue?

Please note that there's this old bugzilla: Provide a central promotion/download service,





incubation mailing list
To change your delivery options, retrieve your password, or
unsubscribe from this list, visit

Back to the top