RFC: auto-generated packageset for Canonical OEM enablement metapackages

[Iain Lane]

Hey,

Just coming back to this now.

On Wed, Aug 12, 2020 at 05:02:00PM +0100, Robie Basak wrote:
> On Tue, Aug 11, 2020 at 03:44:44PM +0100, Iain Lane wrote:
> How about:
> 
>  * The script is owned by ~developer-membership-board who will review
>    MPs against it
>  * The script operates on the agreed glob pattern
>  * The script expands the glob using the union of the archive and a
>    staging PPA
>  * The script updates the packageset and emails changes made to
>    devel-permission@
>  * The staging PPA is owned by ~canonical-oem-metapackage-uploaders
>  * The packageset is owned by ~ubuntu-archive
>  * The existing bot arrangement running as ~ubuntu-archive-bot also runs
>    this script (archive admins will need to arrange this)
>  * Archive admins will probably want to pin the version of the script
>    run for security and manually review and bump it on the DMB's
>    request; I imagine that necessary updates will be rare

All sounds great. Together with FourDollars I've written a first version 
of the script, which is here:

  https://code.launchpad.net/~laney/+git/oem-meta-packageset-sync

As it's a new repository I don't have a good way to do this via a merge 
request (Launchpad can't create genuinely empty repositories AFAIK). So 
feel free to let me know what you think here and when everyone's happy 
you can push it to somewhere under ~developer-membership-board.

The only thing I haven't done from the list above here is mailing 
devel-permissions. I was thinking that I'd set cron up to do this via 
`MAILTO`, if that's acceptable.

Would someone be able to create a PPA under 
~canonical-oem-metapackage-uploaders, please? I was thinking it would be 
called "oem-metapackage-staging". Then I can update the script to look 
at the final location.

You can run it with `--debug --dry-run` to get a sense of what it's 
going to do. And also feel free to run without `--dry-run` too, to see 
if that works since I'm obviously unable to test that part.  It should 
be harmless to commit changes to this packageset since it currently has 
no uploaders beyond ~ubuntu-core-dev.

Finally, on IRC Robie asked for a bit of documentation about the archive 
team's role, to sit alongside the text on the DMB's knowledge base. I 
wrote something short:

  https://wiki.ubuntu.com/ArchiveAdministration#OEM_metapackages

and also some text in the header of the script itself.

Do also let me know if you'd like any clarifications there.

Cheers,

-- 
Iain Lane                                  [ iain at orangesquash.org.uk ]
Debian Developer                                   [ laney at debian.org ]
Ubuntu Developer                                   [ laney at ubuntu.com ]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/devel-permissions/attachments/20200914/fd3269d7/attachment.sig>