ALP: Build Service Git-Packaging Workflow

Meeting Wednesdays at 08:00 UTC in

Next Meeting May 3rd

Attendees

SHA256 git repositories are now enabled on gitea.opensuse.org
- example use: https://gitea.opensuse.org/adamm/git_test
- libgit2 is not yet prepared for SHA256 (errors out immediately)
Which setup path to chose for ALP products in IBS
- Review in the smaller round (fred, rudi, jiri, adrian, dirk, stephan)
Maintenance in git workflow:
- expected to work
- git notes workflow to amend data for adding CVEs later
- channel handling:
  - can we store info about binary subpackages / product selection and supportstatus in git
  - currently data was product specific (same package source branch could be having different support status)
  - zypper lifecycle interface needs to remain
  - dont want to continue with patchinfo -> need new solution
  - dont want half-supported containers?

AI: snbarth: write up support level for ALP handling (with container native OS - do we still need it on a package by package level)

AI: dirk: write up status of prototype and share it with the group
AI adamm: look at how a git signature policy evaluation could be implemented based on adam’s multi-signature signing approach