[website] 01/04: Document uploads to mentors & ftp-master.

[Sebastiaan Couwenberg]

This is an automated email from the git hooks/post-receive script.

sebastic pushed a commit to branch master
in repository website.

commit 81681fada98b15037ce4c82ba001279147cc1749
Author: Bas Couwenberg <sebastic at xs4all.nl>
Date:   Thu Aug 6 14:25:04 2015 +0200

    Document uploads to mentors & ftp-master.
---
 policy.xml | 75 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 69 insertions(+), 6 deletions(-)

diff --git a/policy.xml b/policy.xml
index fd85743..71234ea 100644
--- a/policy.xml
+++ b/policy.xml
@@ -1479,16 +1479,79 @@ Cmnd_Alias PBUILDERS=/usr/sbin/pbuilder, /usr/sbin/cowbuilder
 <programlisting>
 <command>debsign</command> <filename>../<replaceable><package></replaceable>_<replaceable><version></replaceable>_<replaceable><architecture></replaceable>.changes</filename>
 </programlisting>
-
-
             If you are not a DD or lack the DM permissions to upload the
             package to <literal>ftp-master.debian.org</literal>, the package
             can be uploaded to
             <ulink url="http://mentors.debian.net/">mentors.debian.net</ulink>.
+            <warning id="security-uploads">
+              <para>
+                Security uploads <emphasis>must</emphasis> be coordinated with
+                the Security Team following the procedure documented in the
+                Debian Developer's Reference:
+                <ulink url="https://www.debian.org/doc/manuals/developers-reference/ch05.en.html#bug-security">Handling security-related bugs</ulink>
+              </para>
+              <para>
+                Do NOT upload to <literal>security-master</literal> or
+                <literal>proposed-updates</literal> without prior
+                authorization from the Security Team.
+              </para>
+            </warning>
           </para>
-          <para>
-            ...
-          </para>
+          <sect5 id="git-upload-mentors">
+            <title>Upload to mentors</title>
+            <para>
+              Before you can upload to <literal>mentors.debian.net</literal>
+              you need to create an account using the
+              <ulink url="https://mentors.debian.net/register/register">registration form</ulink>.
+            </para>
+            <para>
+              Follow the guidelines in the
+              <ulink url="https://mentors.debian.net/intro-maintainers">Introduction for maintainers</ulink>
+              to configure <filename>~/.dput.cf</filename> for HTTP uploads:
+<programlisting>
+[mentors]
+fqdn = mentors.debian.net
+incoming = /upload
+method = http
+allow_unsigned_uploads = 0
+progress_indicator = 2
+# Allow uploads for UNRELEASED packages
+allowed_distributions = .*
+</programlisting>
+            </para>
+            <para>
+              You can then upload the signed <filename>.changes</filename> to
+              <literal>mentors.debian.net</literal> using <command>dput</command>:
+<programlisting>
+<command>dput</command> <literal>mentors</literal> <filename>../<replaceable><package></replaceable>_<replaceable><version></replaceable>_<replaceable><architecture></replaceable>.changes</filename>
+</programlisting>
+            </para>
+          </sect5>
+          <sect5 id="git-upload-archive">
+            <title>Upload to ftp-master</title>
+            <para>
+              DDs and DMs (for specific packages) can upload to the archive
+              directly withouth going through
+              <link linkend="git-upload-mentors">mentors</link> first.
+            </para>
+            <para>
+              The default <command>dput</command> configuration in
+              <filename>/etc/dput.cf</filename> will upload to
+              <literal>ftp-master</literal> if no host is specified.
+            </para>
+            <para>
+              To upload the signed <filename>.changes</filename> to
+              <literal>ftp-master.debian.org</literal> you can use plain
+              <command>dput</command>:
+<programlisting>
+<command>dput</command> <filename>../<replaceable><package></replaceable>_<replaceable><version></replaceable>_<replaceable><architecture></replaceable>.changes</filename>
+</programlisting>
+              Or specify the host explicitly:
+<programlisting>
+<command>dput</command> <literal>ftp-master</literal> <filename>../<replaceable><package></replaceable>_<replaceable><version></replaceable>_<replaceable><architecture></replaceable>.changes</filename>
+</programlisting>
+            </para>
+          </sect5>
           <sect5 id="git-tag-release">
             <title>Tag a release</title>
             <para>
@@ -1504,7 +1567,7 @@ Cmnd_Alias PBUILDERS=/usr/sbin/pbuilder, /usr/sbin/cowbuilder
 <programlisting>
 <command>debcommit</command> <option>-ar</option>
 </programlisting>
-              The <option>-a</option> is used commit all changed files,
+              The <option>-a</option> is used to commit all changed files,
               and not only tag the release.
             </para>
             <para>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-grass/website.git