Ruben Koster
Ruben Koster
Yes there is a weekly Foundational Infrastructure Working groups meeting (details can be found here: https://github.com/cloudfoundry/community/blob/main/toc/working-groups/WORKING-GROUPS.md). I don’t see why the release.MF would have to change, but yes the package...
@mdzhigarov during the FI working group meeting this PR was discussed and decided to put all related PRs back into draft state until the new spec based direction has been...
My bad, I was under the impression that you wanted to join the working group meeting because you wanted to discuss the implementation. I did not realize the work was...
Question why not just use the local provider and add a dev script to download the blobs. Given this feature won't work with final releases anyway.
The final release blobs will sill contain the packages and all there blobs dependencies. I do really like the idea of first class support for references to the original upstream...
Correct, the SHA is there to verify that, but sometimes it's difficult to know where a blob actually came from. Basically it would be great if a build system could...
Yeah some flag on `bosh create-release --final --validate-blob-origin`, which would validate that the blobs match their origins.
Great progress!! Yeah, it makes sense to start with a warning, once this feature has been adopted more broadly, we can always add another flag (like --expect-all-origins). At some point,...
Once this has been fixed revert: https://github.com/cloudfoundry/bosh-bootloader/pull/658
We are happy to review a PR addressing this issue.