From owner-freebsd-security@freebsd.org  Sat Jul 21 21:48:17 2018
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 91F63102D899;
 Sat, 21 Jul 2018 21:48:17 +0000 (UTC)
 (envelope-from grarpamp@gmail.com)
Received: from mail-it0-x243.google.com (mail-it0-x243.google.com
 [IPv6:2607:f8b0:4001:c0b::243])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 29133795A4;
 Sat, 21 Jul 2018 21:48:17 +0000 (UTC)
 (envelope-from grarpamp@gmail.com)
Received: by mail-it0-x243.google.com with SMTP id w16-v6so19229948ita.0;
 Sat, 21 Jul 2018 14:48:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:from:date:message-id:subject:to:cc;
 bh=QovzE1ZzVmby/pJ7cV1Ht9wNnegBpQf0hBySDVDJAIE=;
 b=IdPsMwvWiFyZtsWPepupHOzsJuniDSVcHec3P31walla0aQUhHkwJzf+327jYz4PD/
 VMJ68/s5TsKnYeiNiQJ4Nn4RPoI91e7RhuqOG5bnKgwqcuqROTn12/Sjaw+AkLKQT/M7
 PnFAi1l7Q2OwZ9CiYhDDpF8eSsMbR3+eak7xaDwnLfx/fmGEhs+2oXKi4RCcam0EARL9
 a3g1zLp+lYSJmuF2fDN4lkOOvpBFPq9csjKLmZyNpg45bJud/l1syHPS3dr1leihFd2Y
 bGkbG7wQWJ3Yqefa/SS+tQCeQzhHOwQPZiVclV+YYPe2QcVjZq0/LMRYFZ8wu+KBZv8o
 HqEQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc;
 bh=QovzE1ZzVmby/pJ7cV1Ht9wNnegBpQf0hBySDVDJAIE=;
 b=TyamM0aCvI+GRgks54Htww3Bs5+0qXczrEdV+ODn/eVcrS3c+WVUG4oY4/lkyBGJub
 xII6rmFiKqKJq62kvD5mW1VadvZTrawn0CTPSDj8Oea5oAR9RTedE23S/p8/qGEXqkdP
 FYum5hXHOVGBiFbbKBOgys3so7pL0d1fUuNlYr2Mj2gZbHsL3E6IP7e6jvzN3QHKs02f
 +uTd+WFOpfYleZtMRVyvFtTwYCPJN6qgrNkb0Xd4jIBqYHjy8zr1fogI/88vWPEhUqSB
 5UeBcs+hdJ0mMUwOcbj1U6y7tGoW+3bFtEB5JkBC7+oVmL09QmMlwfSq8MkImPXWXFDA
 Orog==
X-Gm-Message-State: AOUpUlEiTjBm7T69rnp8FwLJ0nwLaCPqcpHyNSqxv5XQMoLBFmJxvJdK
 4OfTr1bx9fDedmLJYbxv3dy6YN40+3OPpiscY8g3YIDEyNwAnA==
X-Google-Smtp-Source: AAOMgpdduXFprFUWPtLORDZp6fPQewIA/yL/039Vu3O907ignAzhFgTUMhD28SbPFcOh2pp5hD68j/CJjHYAXEdOk+Y=
X-Received: by 2002:a24:1603:: with SMTP id
 a3-v6mr5887092ita.119.1532209696201; 
 Sat, 21 Jul 2018 14:48:16 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a02:7781:0:0:0:0:0 with HTTP; Sat, 21 Jul 2018 14:47:35
 -0700 (PDT)
From: grarpamp <grarpamp@gmail.com>
Date: Sat, 21 Jul 2018 17:47:35 -0400
Message-ID: <CAD2Ti293QyeefDiBQexAuKUQPMnZK1gnSwVLXQuc+Vz1WSYkJg@mail.gmail.com>
Subject: Archives of last quarterly package builds?
To: freebsd-ports@freebsd.org
Cc: freebsd-hubs@freebsd.org, freebsd-security@freebsd.org
Content-Type: text/plain; charset="UTF-8"
X-Mailman-Approved-At: Sun, 22 Jul 2018 01:50:45 +0000
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.27
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 21 Jul 2018 21:48:17 -0000

Packages are delivered via a single quarterly label here

https://pkg.freebsd.org/FreeBSD:11:amd64/quarterly/

which corresponds to the latest quarterly branch label here

https://svnweb.freebsd.org/ports/branches/?sortby=date#dirlist


However, similar to how the tags here

https://svnweb.freebsd.org/ports/tags/?sortby=date#dirlist

are archived here

https://pkg.freebsd.org/FreeBSD:11:amd64/
as these
https://pkg.freebsd.org/FreeBSD:11:amd64/release_[n]


The last "ie: final" builds of each quarterly branch before they
roll over should also be moved off into their own archived
quarterly directories as

https://pkg.freebsd.org/FreeBSD:11:amd64/yyyyQ[n]

For example /quarterly/ should be repointed from 2018Q2
to 2018Q3, leaving 2018Q2 as a live "pkg" accessible archive.


Eventually all such archives could be moved to historical
archive server under typical release support expiry periods.


This would also serve critical purpose as an independant
original remote repository for validating local package / file
signatures against compromise, corruption, loss.


For example, does the last 2018Q2 (or older ones) still exist
anywhere for users to reference and use?