[Opa] Add a stable tarball of source code available to download?

[Mathieu Baudet]

Hi Mezz,

Thanks for your feedbacks. This definitely sounds like something we should do in the next round of improvements of our integration platform.

Best,
-- Mathieu

Le 16 mars 2012 à 00:43, Jeremy Messenger a écrit :

> On Tue, Mar 13, 2012 at 9:55 AM, Frederic Ye <frederic.ye at mlstate.com> wrote:
>> Hello,
>> 
>> You can directly have the zip / tarball from github :
>> 
>> - https://github.com/MLstate/opalang/zipball/v1466
>> - https://github.com/MLstate/opalang/tarball/v1466
> 
> It lacks show the hash and version (which is 0.9.1?) of Opa. With the
> recently nasty hacked in github? It's not exactly a trust source to
> download because it does not provide hash/signed tarball. If you
> commit something in this tag and the tarball will be changed.
> 
>> Is it what you meant, or did you want an explicit link on opalang.org get.xmlt page allowing you to download the latest stable source?
> 
> I mean by an explicit link on opalang.org get.xmlt page like something
> opalang-0.9.1.tar.gz (or tar.bz2 or whatever).
> 
> Cheers,
> Mezz
> 
> 
>> On Mar 11, 2012, at 7:16 PM, Jeremy Messenger wrote:
>> 
>>> On Sun, Mar 11, 2012 at 8:15 AM, Mathieu Baudet
>>> <mathieu.baudet at mlstate.com> wrote:
>>>> Hi Jeremy,
>>>> 
>>>> I'm curious: what is you objection to git-cloning the repository from github?
>>> 
>>> - The git doesn't work in corporate firewalls.
>>> - The tarball is useful for people who aren't online 100%
>>>  of the time or behind unreliable connection.
>>> - The tarball provides a very simple better security for
>>>  signed tarball with always same hash.
>>> - The tarball is much easier to mirror.
>>> - There are many different DVCS/VCS, so not every systems
>>>  have all DVCS/VCS installed. The tarball is so much easier
>>>  to download and extract without have to install extra
>>>  packages.
>>> - If you change the DVCS/VCS and it changes while the tarball
>>>  will never change. It's like set stone.
>>> - The tarball can be downloaded from web browser, ftp, fetch,
>>>  wget, and tools.
>>> - It's kind of standard if you look at the other projects that
>>>  always provide the tarballs available to download for those
>>>  reasons.
>>> - FreeBSD ports, pkgsrc, Gentoo portage and other packagers
>>>  will need the tarball to be able download the source code
>>>  to create the package.
>>> 
>>> Cheers,
>>> Mezz
>>> 
>>> 
>>>> Best,
>>>> -- Mathieu
>>>> 
>>>> Le 11 mars 2012 à 00:07, Jeremy Messenger a écrit :
>>>> 
>>>>> Can one of you add a stable tarball of source code to download from
>>>>> http://www.opalang.org/get.xmlt ? Use zip, bzip2, gzip or whatever
>>>>> don't matter to me as long as you are using open source
>>>>> archiver/compressor.
>>>>> 
>>>>> Thanks,
>>>>> Mezz
>>> 
>>> 
>>> --
>>> mezz.freebsd at gmail.com - mezz at FreeBSD.org
>>> FreeBSD GNOME Team
>>> http://www.FreeBSD.org/gnome/ - gnome at FreeBSD.org
>>> _______________________________________________
>>> Opa mailing list
>>> Opa at lists.owasp.org
>>> https://lists.owasp.org/mailman/listinfo/opa
>> 
>> Frederic Ye.
>> 
> 
> 
> 
> -- 
> mezz.freebsd at gmail.com - mezz at FreeBSD.org
> FreeBSD GNOME Team
> http://www.FreeBSD.org/gnome/ - gnome at FreeBSD.org