Sharing this with the mailing list... Ken is working on a Story for this, to be reviewed with the Build sub-project team. brucej -----Original Message----- From: Wold, Saul Sent: Wednesday, September 26, 2018 11:21 AM To: Jones, Bruce E <bruce.e.jones@intel.com>; Troyer, Dean <dean.troyer@intel.com>; Rodriguez Bahena, Victor <victor.rodriguez.bahena@intel.com> Subject: Initial Thoughts on Cengn Just jotting some notes down, not sure where they should go yet, I want to wait for the Cengn deal to be more solid. Dean and I talked about a couple of these things: 1) Need to ensure GPL requirements are met even for Binary RPMs downloaded from REHL or Centos, they need to provide the corresponding SRPM. It would be best to just mirror all SRPMs. 2) What Mechanism to use to provide the mirror: - Yum Repo - HTTPS - rsync 3) What mechanism should a community member use - Proxy to check local source before checking Remote - ideally with yum repo, but maybe HTTPS - yumdownloader - rsync - https 4) Mirror package manamaget - when to deprecate a package - when we EOL support for a given release + 1year? 5) CI/CD - Nightly Build - Testing? 6) Whatever else I have forgotten or overlooked Sau!