With this change, the upload CGI script will start preferring uploads
hashed as sha512, but still accept md5 as a fallback.
The message emitted on fedmsg is unchanged, because doing so would break
it. We're going to fix that later though.
https://fedorahosted.org/rel-eng/ticket/5846
... as much as possible.
The point of this patch is to make it easier to move away from md5 in a
subsequent patch, without having one monster change which would be
impossible to review.
Some md5 stuff remains hardcoded, because changing it at this point
would break compatibility.
https://fedorahosted.org/rel-eng/ticket/5846
This will make it easier to move away from md5 for the source tarballs.
It shouldn't cause any problem anyway, as Fedora runs this on EL 6 in
production, and EL 7 in staging.
We are now setting up distgit (and possibily other things like
Fedora Hosted) to use a more elaborate system of update hooks.
This updates the checking script so it is capable of ensuring this set
up.
We have a gitolite/check_fedmsg_hooks role, which installs a script and
schedules it.
Turns out, this script does more than just checking the fedmsg hooks,
depending on the command-line arguments used when running it.
As such, it makes sense to separate it out into its own role, and make
the gitolite/check_fedmsg_hooks role (and any other one using the
script) depend on it.
For example, this script is used for Fedora Hosted (still in Puppet),
and will soon be used for a new distgit hook check.
We already use the update hook for gitolite.
This introduces a new update hook, which merely chains the gitolite one,
and a new one to block pushes to badly named branches.
The new hook was written originally by Till Maas.
https://fedorahosted.org/rel-eng/ticket/4071