[Pkg-clamav-devel] Processing of clamav_0.98.4+dfsg-1_i386.changes

Andreas Cadhalpun andreas.cadhalpun at googlemail.com
Wed Jul 2 19:03:36 UTC 2014


Hi Scott,

On 02.07.2014 20:05, Scott Kitterman wrote:
> On July 2, 2014 12:41:00 PM EDT, Andreas Cadhalpun <andreas.cadhalpun at googlemail.com> wrote:
>> Indeed, as the sf.net page doesn't work currently, I switched the watch
>> file now to github.com. The downsides are:
>>   * larger tarball containing more win32 and contrib files
>>   * no automatic verification of signatures, as the github tarballs
>>     aren't signed
>> When/If sf.net works again, we can switch back.
>>
>> I added a Files-Excluded field to debian/copyright so that uscan
>> automatically removes a lot of useless files. The split-tarball.sh
>> script is still needed to extract libclamunrar.
>
> Since upstream guitar is a copy of the 'real' private git repo, I wonder if we can be sure it'll always match the tarball?

Well, currently the tarball from github.com just contains some more 
files than the tarball from sourceforge.net, which doesn't do any harm.

And as long as sf.net doesn't work, I think this is better than 
effectively not having a watch file.

Best regards,
Andreas



More information about the Pkg-clamav-devel mailing list