distribution: gate producers by declared artifacts
This commit is contained in:
parent
482ad388d8
commit
a3ff22531f
3 changed files with 60 additions and 4 deletions
|
|
@ -19,8 +19,10 @@ its release lands. Those decisions live here, once.
|
|||
- The signed `edge` archive is one multi-producer archive. Its implementation
|
||||
currently lives in `souveraine/packaging/arch/publish-edge.sh`; this manifest
|
||||
names it so consumers do not grow their own publisher.
|
||||
- `../tools/validate-distribution.py` checks graph integrity without requiring
|
||||
a runner, a device, or a secret.
|
||||
- `../tools/validate-distribution.py` checks graph integrity and can verify a
|
||||
producer's complete emitted package/architecture set without requiring a
|
||||
device or a signing secret. A producer must fail rather than publish a
|
||||
package absent from this graph.
|
||||
- `.gitea/workflows/distribution.yml` makes that check a gate in the OS repo.
|
||||
|
||||
The manifest is deliberately honest about maturity. A profile marked `blocked`
|
||||
|
|
|
|||
Loading…
Reference in a new issue