Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update "Producing Consistent Snapshots" #75

Merged

Commits on Nov 25, 2019

  1. Update "Producing Consistent Snapshots"

    Following discussions with @dstufft and @trishankatdatadog
    regarding file uploads and simple index generation on PyPI (see
    secure-systems-lab#70) this commit once more refines the
    "producing consistent snapshots" section.
    
    It includes the following changes:
    
    - Remove the notion of *transaction processes* and instead talk
      about *uploads*.
      Background: Transaction processes are only relevant if multiple
      files of a project release need to be handled in a single
      transaction, which is not the case on PyPI, where each upload of
      a distribution file is self-contained.
      With this change, upload process just place files into a queue,
      without updating bin-n metadata (as transaction processes would
      have done in parallel), and all the metadata update/creation work
      is done by the snapshot process in strictly sequential manner.
    
    - Add a paragraph about simple index pages and how their hashes
      should be included in *bin-n* metadata, and how they need to
      remain stable if re-generated dynamically.
    lukpueh committed Nov 25, 2019
    Configuration menu
    Copy the full SHA
    bbbf843 View commit details
    Browse the repository at this point in the history