Revert "manual: Add notes about GitHub and hashes"
PATCH 1/1 Revert "manual: Add notes about GitHub and hashes"
This note is no longer needed, so remove it.
Tarballs generated by GitHub are always the same, so hashes can be checked.
This reverts commit 9474cc2594c8643301164500ce6eb62546da2b8f.
--- docs/manual/adding-packages-directory.txt | 7 ------- 1 file changed, 7 deletions(-)
docs/manual/adding-packages-directory.txt +0 -7
@@ -449,13 +449,6 @@ strong hash yourself (preferably +sha256+, but not +md5+), and mention this in a comment line above the hashes. .Note -If +libfoo+ is from GitHub (see xref:github-download-url[] for details), we -can only accept a +.hash+ file if the package is a released (e.g. uploaded -by the maintainer) tarball. Otherwise, the automatically generated tarball -may change over time, and thus its hashes may be different each time it is -downloaded, causing a +.hash+ mismatch for that tarball. - -.Note The number of spaces does not matter, so one can use spaces (or tabs) to properly align the different fields.
Signature · 1 line
2.6.1
PATCH 1/1 Revert "manual: Add notes about GitHub and hashes"
Hi Samuel, all
Quoted 37 lines · Samuel Martin
This note is no longer needed, so remove it.
Tarballs generated by GitHub are always the same, so hashes can be checked.
This reverts commit
9474cc2594c8643301164500ce6eb62546da2b8f.Cc Maxime Hadjinlian <[email protected]>Signed-off-by Samuel Martin <[email protected]>--- docs/manual/adding-packages-directory.txt | 7 ------- 1 file changed, 7 deletions(-)docs/manual/adding-packages-directory.txt +1
-1@@ -449,13 +449,6 @@ strong hash yourself (preferably +sha256+, but not +md5+), and mention this in a comment line above the hashes. .Note -If +libfoo+ is from GitHub (see xref:github-download-url[] for details),we
docs/manual/adding-packages-directory.txt +0
-7-can only accept a +.hash+ file if the package is a released (e.g. uploaded -by the maintainer) tarball. Otherwise, the automatically generated tarball -may change over time, and thus its hashes may be different each time it is -downloaded, causing a +.hash+ mismatch for that tarball. - -.Note The number of spaces does not matter, so one can use spaces (or tabs) to properly align the different fields. --2.6.1
Quoted 1 line
I am all in favor for this, just a quick question:
Should we wait FOSDEM where we said that if there was not any problem we would simply add all the missing hashes for GitHub packages ? Or we go back on what we said and we do it now ?
And so, should we apply this now, or wait a bit ?
Samuel: There's a sentence two lines lower, that references the fact that
the 'none' type for the hashes is usefull for Github, it should go too
(haven't checked if there's more, but I don't think so)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20151018/2156fb07/attachment.html>
PATCH 1/1 Revert "manual: Add notes about GitHub and hashes"
Dear Maxime Hadjinlian,
Quoted 4 lines · Maxime Hadjinlian
Should we wait FOSDEM where we said that if there was not any problem we would simply add all the missing hashes for GitHub packages ? Or we go back on what we said and we do it now ?
And so, should we apply this now, or wait a bit ?
We are now requesting people adding new packages fetched from Github to use the hash file, so our documentation should reflect that.
Adding "all" the missing hashes is not necessarily something we have to do right now. We can wait to gain a bit of knowledge/experience using the hashes on newly added packages (or existing packages when they are bumped), and if it continues to work fine, we'll add all hashes at some point in the future.
I.e, please don't send a 200 patches patch series adding hashes for all github downloaded packages.
Thanks!
Thomas
Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons Embedded Linux, Kernel and Android engineering http://free-electrons.com
PATCH 1/1 Revert "manual: Add notes about GitHub and hashes"
In reply to Samuel MartinDear Samuel Martin,
Quoted 5 lines · Samuel Martin
This note is no longer needed, so remove it.
Tarballs generated by GitHub are always the same, so hashes can be checked.
Quoted 7 lines
This reverts commit
9474cc2594c8643301164500ce6eb62546da2b8f.Cc Maxime Hadjinlian <[email protected]>Signed-off-by Samuel Martin <[email protected]>--- docs/manual/adding-packages-directory.txt | 7 ------- 1 file changed, 7 deletions(-)
Applied after fixing two places where the "none" hash type was referred as being useful for github downloads.
Thanks,
Thomas
Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons Embedded Linux, Kernel and Android engineering http://free-electrons.com