rsyslog/.github/debian-ci-policy.yml
Rainer Gerhards a49973fcba ci: publish Debian daily builds to package archive
Why:
Daily stable packages need durable multi-version retention without using
GitHub Pages as an ever-growing package store.

Impact:
Debian 13 amd64 package builds can publish to a future Spaces archive.

Before/After:
Before, staging replaced a Pages repository. After, Actions maintains an
append-only signed APT archive with at least five years of retained builds.

Technical Overview:
Build and verify Debian 13 packages in Actions, incrementally merge signed
APT indexes, and publish immutable packages and snapshots to an S3-compatible
archive. Scheduled publishing stays disabled until DigitalOcean is ready.

With the help of AI-Agents: Codex
2026-07-24 10:13:23 +02:00

46 lines
2.2 KiB
YAML

{
"allowed_patch_skips": [
{
"patch": "Fix-doc-version-for-sphinx-build.patch",
"reason": "Debian latest still carries a doc-version patch that no longer applies to upstream doc/source/conf.py."
},
{
"patch": "imfile-preserve-symlink-cleanup-notifications-with-deferr.patch",
"reason": "Debian latest still carries an imfile patch that is already effectively upstream and now applies in reverse."
},
{
"patch": "ratelimit-preserve-severity-sentinel-on-s390x.patch",
"reason": "Debian latest carries an s390x ratelimit severity-sentinel patch that is already effectively upstream and now applies in reverse."
},
{
"patch": "queue-quarantine-runtime-disk-corruption-safely.patch",
"reason": "Debian latest carries a queue disk-corruption quarantine patch that is already effectively upstream and now applies in reverse."
},
{
"patch": "config-keep-empty-include-globs-silent.patch",
"reason": "Debian latest carries the upstream empty IncludeConfig glob behavior from commit e0651c019 and the cherry-picked patch no longer applies."
},
{
"patch": "testbench-add-daemon-termination-oracle.patch",
"reason": "Debian latest carries the upstream daemon termination oracle from commit 37a624442 and the cherry-picked patch no longer applies."
},
{
"patch": "Revert-tests-keep-epoll-preload-helper-test-only.patch",
"reason": "The Debian revert conflicts with the current upstream test-only preload-helper layout; daily packages must not install the fault-injection helper."
},
{
"patch": "Use-check_LTLIBRARIES-to-generate-liboverride_-test-libra.patch",
"reason": "Current upstream already uses check_LTLIBRARIES and TEST_LIBOVERRIDE_LDFLAGS for the preload helpers, so the Debian patch applies in reverse."
}
],
"supplemental_build_deps": [],
"control_replacements": [
{
"pattern": "debhelper-compat\\s*\\(=\\s*14\\)",
"replacement": "debhelper-compat (= 13)",
"reason": "Debian latest currently targets debhelper compat 14, which is not available in the trixie staging build environment."
}
],
"not_installed_paths": []
}