Skip to contentSkip to conversation

core/pkg-download: ignore hashes from mirror for VCS downloads

RFC PATCH New Yann E. MORIN 3 participants 3 messages Apr 17, 2016 – Apr 20, 2016

lore
Share & tools
lore
#0 lore raw

RFC PATCH 1/1 core/pkg-download: ignore hashes from mirror for VCS downloads

When a download via a VCS method fails, Buildroot attempts the download from the backup mirror (if any is set). Such a download is done with the wget helper.

Given a package that has a .hash file for relase tarballs, which also allows the user to use a random revision from a VCS, the normal download wrapper will not check for hashes, on the assumption that maybe they are not reproducible [*].

However, when the download fails (for any reason: network error, upstream removed the revision, old machine with incomplete set of CA certificates...), the backup download now proceeds over with http (or https) with the wget wrapper. The wget wrapper *always* checks for hashes, and when a .hash file is present but no hash is found for the download, this is considered an error.

However, when we download from the backup mirror for a main download that should have been done with git, we in this situation have no hash for the download. Thus, we should not fail on a missing hash for that download.

Add a test for the site-method in the backup mirror download; if it was either one of the VCS method, pass a one-off BR_NO_CHECK_HASH_FOR variable set to contain the tarball to download.

Fixes issues like those reported by the Travis build bots:

    https://travis-ci.org/buildroot/buildroot-defconfig-testing/jobs/123624879

---
Note: untested.

---
 package/pkg-download.mk | 1 +
 1 file changed, 1 insertion(+)
package/pkg-download.mk +1 -0
index 1332e66..d68b7bc 100644
@@ -235,6 +235,7 @@ define DOWNLOAD_INNER
 		esac ; \
 	fi ; \
 	if test -n "$(call qstrip,$(BR2_BACKUP_SITE))" ; then \
+		$(if $(filter bzr cvs git hg svn,$($(PKG)_SITE_METHOD)),BR_NO_CHECK_HASH_FOR=$(2)) \
 		$(call $(3)_WGET,$(BR2_BACKUP_SITE)/$(2),$(2)) && exit ; \
 	fi ; \
 	exit 1
Signature · 1 line
1.9.1
#1 lore raw

RFC PATCH 1/1 core/pkg-download: ignore hashes from mirror for VCS downloads

Quoted 16 lines · Yann E. MORIN

When a download via a VCS method fails, Buildroot attempts the download from the backup mirror (if any is set). Such a download is done with the wget helper.

Given a package that has a .hash file for relase tarballs, which also allows the user to use a random revision from a VCS, the normal download wrapper will not check for hashes, on the assumption that maybe they are not reproducible [*].

However, when the download fails (for any reason: network error, upstream removed the revision, old machine with incomplete set of CA certificates...), the backup download now proceeds over with http (or https) with the wget wrapper. The wget wrapper *always* checks for hashes, and when a .hash file is present but no hash is found for the download, this is considered an error.

Quoted 8 lines

However, when we download from the backup mirror for a main download that should have been done with git, we in this situation have no hash for the download. Thus, we should not fail on a missing hash for that download.

Add a test for the site-method in the backup mirror download; if it was either one of the VCS method, pass a one-off BR_NO_CHECK_HASH_FOR variable set to contain the tarball to download.

Even though this looks like a bit of a hack, I see no better way of handling
the situation.

However, the same should also be done for PRIMARY_SITE IMHO.

Regards,
Arnout

Quoted 26 lines

Fixes issues like those reported by the Travis build bots:

     https://travis-ci.org/buildroot/buildroot-defconfig-testing/jobs/123624879

---
Note: untested.

---
  package/pkg-download.mk | 1 +
  1 file changed, 1 insertion(+)
package/pkg-download.mk +1 -0
index 1332e66..d68b7bc 100644
@@ -235,6 +235,7 @@ define DOWNLOAD_INNER
  		esac ; \
  	fi ; \
  	if test -n "$(call qstrip,$(BR2_BACKUP_SITE))" ; then \
+		$(if $(filter bzr cvs git hg svn,$($(PKG)_SITE_METHOD)),BR_NO_CHECK_HASH_FOR=$(2)) \
  		$(call $(3)_WGET,$(BR2_BACKUP_SITE)/$(2),$(2)) && exit ; \
  	fi ; \
  	exit 1
Signature · 6 lines
Arnout Vandecappelle                          arnout at mind be
Senior Embedded Software Architect            +32-16-286500
Essensium/Mind                                http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium           BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint:  7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF
#2 lore raw

RFC PATCH 1/1 core/pkg-download: ignore hashes from mirror for VCS downloads

Quoted 24 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Arnout" == Arnout Vandecappelle <[email protected]> writes:

Quoted 21 lines · Yann E. MORIN

When a download via a VCS method fails, Buildroot attempts the download from the backup mirror (if any is set). Such a download is done with the wget helper.

Given a package that has a .hash file for relase tarballs, which also allows the user to use a random revision from a VCS, the normal download wrapper will not check for hashes, on the assumption that maybe they are not reproducible [*].

However, when the download fails (for any reason: network error, upstream removed the revision, old machine with incomplete set of CA certificates...), the backup download now proceeds over with http (or https) with the wget wrapper. The wget wrapper *always* checks for hashes, and when a .hash file is present but no hash is found for the download, this is considered an error.

However, when we download from the backup mirror for a main download that should have been done with git, we in this situation have no hash for the download. Thus, we should not fail on a missing hash for that download.

Quoted 8 lines
Quoted 3 lines

Add a test for the site-method in the backup mirror download; if it was either one of the VCS method, pass a one-off BR_NO_CHECK_HASH_FOR variable set to contain the tarball to download.

Even though this looks like a bit of a hack, I see no better way of
handling the situation.

However, the same should also be done for PRIMARY_SITE IMHO.

Agreed. I moved the variable handling to the beginning of DOWNLOAD_INNER so it is set when we handle BR2_PRIMARY_SITE as well and committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard