On 04/04/2011 06:46 PM, Brian Mathis wrote:
Consider this: would you run packages that were built on $random site, with little or zero assurance of what, why and who has access to the machines ? I wont :)
I would certainly want the final builds done on an "official" build server, but there's no reason there can't be "extended" build servers that contributors could use to test build packages to find problems. Once problems are found, patches could be generated and then vetted, applied, and built on the official trusted servers.
given that plenty of mirrors already carry the stuff that peculates down from upstream, there should be no real issue for people to setup mock build environs and be doing private builds themselves anyway.
- KB