[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug#28745: [PATCH] tarballs generated on github are generated on demand

From: Maxim Cournoyer
Subject: bug#28745: [PATCH] tarballs generated on github are generated on demand (leading to different hash sums)
Date: Sun, 15 Oct 2017 23:10:43 -0400
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux)


I could finish a script that helped me finding all of our affected
packages, verify that only the hash but not the content of the archives
had changed, as well as automate the hash update for those safe to

Attached is the patch and the scripts I used. I think we might
want to reuse some of it to extend guix lint to warn packagers that
archives coming from .*github.*archives URL are not guaranteed to be
stable and that it would be better, if available, to use manually
uploaded releases archives.



PS: I've also uploaded the scripts here:
https://notabug.org/apteryx/fiasco for ease of cloning. Any comments
about my nascent (ab)use of Scheme are welcome!

Attachment: 0001-gnu-packages-Fix-the-hashes-of-mutated-GitHub-archiv.patch
Description: Text Data

Attachment: txtDKYpKzGuyf.txt
Description: (fiasco finder) module

Attachment: txtXKiC7Yjkhm.txt
Description: fiasco runner

Attachment: txtBgqVBpur3b.txt
Description: (fiasco fixer) module

reply via email to

[Prev in Thread] Current Thread [Next in Thread]