|
From: | Maxim Cournoyer |
Subject: | bug#28745: [PATCH] tarballs generated on github are generated on demand (leading to different hash sums) |
Date: | Sun, 15 Oct 2017 23:10:43 -0400 |
User-agent: | Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux) |
Hello, I could finish a script that helped me finding all of our affected packages, verify that only the hash but not the content of the archives had changed, as well as automate the hash update for those safe to update. Attached is the patch and the scripts I used. I think we might want to reuse some of it to extend guix lint to warn packagers that archives coming from .*github.*archives URL are not guaranteed to be stable and that it would be better, if available, to use manually uploaded releases archives. Thanks! Maxim PS: I've also uploaded the scripts here: https://notabug.org/apteryx/fiasco for ease of cloning. Any comments about my nascent (ab)use of Scheme are welcome!
0001-gnu-packages-Fix-the-hashes-of-mutated-GitHub-archiv.patch
Description: Text Data
txtDKYpKzGuyf.txt
Description: (fiasco finder) module
txtXKiC7Yjkhm.txt
Description: fiasco runner
txtBgqVBpur3b.txt
Description: (fiasco fixer) module
[Prev in Thread] | Current Thread | [Next in Thread] |