support/download: accept user-provided list of extra hash files (branch yem/multi-hash)

Hello All!

For packages where the version can be specified by the user (e.g. with a custom version string, a custom tarball location, a custom git tree and changeset...), Buildroot can't carry hashes for those, and thus does not check the integritiy of the downloads.

Add the possibility for users to provide hashes for those, by leveraging the global patch dir setting, to look up extra hash files in a way similar to how extra patches are looked up in there.

Users who provide such extra hashes will most probably be interested in ensuring that no download ever gets used without an actual integrity check, so also add an option the requires all downloads to have at least one valid hash (and no invalid ones, of course), rather than ignoring downloads for custom versions.

Changes v1 -> v2:
- restore legal-info (Peter K.)
- drop all.hash

Regards,
Yann E. MORIN.

----------------------------------------------------------------
Yann E. MORIN (3):
support/download: teach dl-wrapper to handle more than one hash file package/pkg-download: lookup hash files in global-patch-dir
pkg-download: add option to enforce hash checking

 Config.in                                  | 27 +++++++++++--
 Makefile                                   |  2 +-
 docs/manual/adding-packages-directory.adoc |  6 +++
 docs/manual/customize-patches.adoc         | 24 ++++++++++-
 package/pkg-download.mk                    |  7 ++--
 package/pkg-generic.mk                     | 14 ++++---
 package/pkg-utils.mk                       |  8 ++--
 support/download/check-hash                | 64 ++++++++++++++++--------------
 support/download/dl-wrapper                | 10 ++---
 9 files changed, 108 insertions(+), 54 deletions(-)

--
.-----------------.--------------------.------------------.--------------------.

|  Yann E. MORIN  | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software  Designer | \ / CAMPAIGN     |  ___               |
| +33 561 099 427 `------------.-------:  X  AGAINST      |  \e/  There is no  |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL    |   v   conspiracy.  |

'------------------------------^-------^------------------^--------------------'
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot