ab/1717d7ac0a8e017e93c93a485730aaa90f35f5

   1 Return-Path: <dkg@fifthhorseman.net>\r
   2 X-Original-To: notmuch@notmuchmail.org\r
   3 Delivered-To: notmuch@notmuchmail.org\r
   4 Received: from localhost (localhost [127.0.0.1])\r
   5         by olra.theworths.org (Postfix) with ESMTP id C8490431FBF\r
   6         for <notmuch@notmuchmail.org>; Fri,  9 May 2014 14:07:05 -0700 (PDT)\r
   7 X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
   8 X-Spam-Flag: NO\r
   9 X-Spam-Score: 0\r
  10 X-Spam-Level: \r
  11 X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]\r
  12         autolearn=disabled\r
  13 Received: from olra.theworths.org ([127.0.0.1])\r
  14         by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
  15         with ESMTP id 6xc31FNUT0yX for <notmuch@notmuchmail.org>;\r
  16         Fri,  9 May 2014 14:06:58 -0700 (PDT)\r
  17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
  18         by olra.theworths.org (Postfix) with ESMTP id 33BE2431FBC\r
  19         for <notmuch@notmuchmail.org>; Fri,  9 May 2014 14:06:58 -0700 (PDT)\r
  20 Received: from [10.9.1.250] (unknown [200.238.1.1])\r
  21         by che.mayfirst.org (Postfix) with ESMTPSA id A3636F984;\r
  22         Fri,  9 May 2014 17:06:53 -0400 (EDT)\r
  23 Message-ID: <536D26DD.1070309@fifthhorseman.net>\r
  24 Date: Fri, 09 May 2014 16:05:01 -0300\r
  25 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
  26 User-Agent: Mozilla/5.0 (X11; Linux x86_64;\r
  27         rv:24.0) Gecko/20100101 Icedove/24.5.0\r
  28 MIME-Version: 1.0\r
  29 To: "Wael M. Nasreddine" <wael.nasreddine@gmail.com>, notmuch@notmuchmail.org\r
  30 Subject: Re: [PATCH] Add Travis-CI config file.\r
  31 References: <1399645162-8653-1-git-send-email-wael.nasreddine@gmail.com>\r
  32 In-Reply-To: <1399645162-8653-1-git-send-email-wael.nasreddine@gmail.com>\r
  33 X-Enigmail-Version: 1.6+git0.20140323\r
  34 Content-Type: multipart/signed; micalg=pgp-sha512;\r
  35         protocol="application/pgp-signature";\r
  36         boundary="27xpMxQb1nj7cbfIiND1Su7vsccnhF480"\r
  37 X-BeenThere: notmuch@notmuchmail.org\r
  38 X-Mailman-Version: 2.1.13\r
  39 Precedence: list\r
  40 List-Id: "Use and development of the notmuch mail system."\r
  41         <notmuch.notmuchmail.org>\r
  42 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
  43         <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
  44 List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
  45 List-Post: <mailto:notmuch@notmuchmail.org>\r
  46 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
  47 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
  48         <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
  49 X-List-Received-Date: Fri, 09 May 2014 21:07:05 -0000\r
  50 \r
  51 This is an OpenPGP/MIME signed message (RFC 4880 and 3156)\r
  52 --27xpMxQb1nj7cbfIiND1Su7vsccnhF480\r
  53 Content-Type: text/plain; charset=UTF-8\r
  54 Content-Transfer-Encoding: quoted-printable\r
  55 \r
  56 On 05/09/2014 11:19 AM, Wael M. Nasreddine wrote:\r
  57 > ---\r
  58 >  .travis.yml | 10 ++++++++++\r
  59 >  1 file changed, 10 insertions(+)\r
  60 >  create mode 100644 .travis.yml\r
  61 >=20\r
  62 > diff --git a/.travis.yml b/.travis.yml\r
  63 > new file mode 100644\r
  64 > index 0000000..8d92cdc\r
  65 > --- /dev/null\r
  66 > +++ b/.travis.yml\r
  67 > @@ -0,0 +1,10 @@\r
  68 > +language: c\r
  69 > +before_install:\r
  70 > +  - sudo apt-get update -qq\r
  71 > +  - wget 'https://launchpad.net/ubuntu/+archive/primary/+files/zlib1g-=\r
  72 dev_1.2.8.dfsg-1ubuntu1_amd64.deb'\r
  73 > +  - wget 'https://launchpad.net/ubuntu/+archive/primary/+files/zlib1g_=\r
  74 1.2.8.dfsg-1ubuntu1_amd64.deb'\r
  75 > +  - sudo dpkg -i zlib1g-dev_1.2.8.dfsg-1ubuntu1_amd64.deb zlib1g_1.2.8=\r
  76 =2Edfsg-1ubuntu1_amd64.deb\r
  77 \r
  78 The above strikes me as a problem waiting to happen.\r
  79 \r
  80 If there are specific versions of zlib that need to be installed, and we\r
  81 know what the package is that needs to be installed, at the very least,\r
  82 the scripts to fetch each package should verify a strong cryptographic\r
  83 digest of the package before directly installing it from the network.\r
  84 \r
  85 if the digest doesn't match, then the script should abort with a\r
  86 failure, before installing the packages.\r
  87 \r
  88         --dkg\r
  89 \r
  90 \r
  91 \r
  92 --27xpMxQb1nj7cbfIiND1Su7vsccnhF480\r
  93 Content-Type: application/pgp-signature; name="signature.asc"\r
  94 Content-Description: OpenPGP digital signature\r
  95 Content-Disposition: attachment; filename="signature.asc"\r
  96 \r
  97 -----BEGIN PGP SIGNATURE-----\r
  98 Version: GnuPG v1\r
  99 Comment: Using GnuPG with Icedove - http://www.enigmail.net/\r
 100 \r
 101 iQJ8BAEBCgBmBQJTbSbdXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w\r
 102 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFQjk2OTEyODdBN0FEREUzNzU3RDkxMUVB\r
 103 NTI0MDFCMTFCRkRGQTVDAAoJEKUkAbEb/fpcG6UQAKnWeQaTn+9Xp3BVrmPJwJyE\r
 104 Ifmp08yuV4HNHsVXhp5xqpzDcljBTWbR4czJhzuuGoFTQUgemJ1VPC8gMV+N3q65\r
 105 GvePUNe8ITicUcna/01Vd8+J0YdNFlvNCbGvKEAojhos40RtiRc8cxAVc8JnVBCS\r
 106 YWbKCMb/XRpEazT4nQa5UWlSrxgbl46pprGMRw5f1M3yAUj35r+BU6dxhKdJUB/z\r
 107 vMHyzHko2O7AE8CdB1FkV2ED5cws4JwEGa4xL9SutMVSB1oBkgFE9HQXSvWX+z8N\r
 108 C97qgp4lPFBXyGeBhXv/aY5p4LR3T8L28DhxOAM9JUBKoqCzUSRYYGHjyE2eSvq/\r
 109 ex59fKoVm7SYfBgJL9a5R+ifsRe9nnL3NDk8hCtBB9HwEoWyhmgRbfk6KenwNL1c\r
 110 p/0OgJXb6YlZ6GUWmCV/1EjCP+ZJOYfSfnW3q4o1j0QuqeGosRVvmtkAgnHxU7h6\r
 111 nlGsB/wQJ/6kqB4tldZkDKwFa4o6t8V9DTRNR04xqUTbJGFsoghdS7k7IYhlXeiv\r
 112 8xeZuy+inhJE41gQFHXA9+XoByugWQRmDnujNnyuj71aAYFHW/dZuRJs4T4Ihzr0\r
 113 emEbKINwuukRWD7voFGAC40JoKIbywHHFNqqIxUTTMHCA6/EvsOgKVBO50kfxR/9\r
 114 PK5yI6/WmKVar59NPLuq\r
 115 =c0le\r
 116 -----END PGP SIGNATURE-----\r
 117 \r
 118 --27xpMxQb1nj7cbfIiND1Su7vsccnhF480--\r