Decide on & implement targets management for Rugged instance

Created on 21 March 2023, almost 2 years ago
Updated 22 July 2024, 5 months ago

Rugged, implementing the TUF spec, keeps a copy of everything signed, the targets. For Drupal.org, these are Composer metadata on packages.drupal.org, and zip file downloads on ftp.drupal.org. Hosting for these is remaining as-is and we are not making the TUF targets publicly accessible.

It appears that the targets can be safely removed once processing is complete by Rugged. To save disk, we could look at not keeping the targets directory. Potential solutions:

  • Not have rugged save targets
  • Empty targets on cron
  • Or set up some filesystem trick so files placed in targets go nowhere

The next steps are:

  • Determine if this is actually a problem, it might be okay to keep an extra copy of everything - it would be
  • Determine if Rugged needs the targets to remain in-place while processing; we don’t want them to disappear when needed
📌 Task
Status

Fixed

Component

Updates System

Created by

🇺🇸United States drumm NY, US

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024