[Buildroot] [PATCH 1/3 v2] package: add hashes for SourceForge-hosted packages
thomas.petazzoni at free-electrons.com
Sun Dec 28 21:34:21 UTC 2014
Dear Yann E. MORIN,
On Sun, 28 Dec 2014 13:19:29 +0100, Yann E. MORIN wrote:
> Since SourceForge sometimes serves us faulty tarballs, we can tons of
> autobuild failures:
> Fix that by adding hash files for all SourceForge-hosted packages (thos
> etht did not already have it).
> We normally prefer to use hashes published by upstream, but hunting them
> all one by one is a tedious task, so those hashes were all locally
> computed with a script that searched for SF-hosted packages, downloades
> the associated tarball, computed the hash, and stored it in the
> corresponding .hash file.
> Also, SF publishes sha1 hashes, while I used the stronger sha256, since
> sha1 is now considered to be relatively weak.
> Signed-off-by: "Yann E. MORIN" <yann.morin.1998 at free.fr>
> Cc: Peter Korsgaard <jacmet at uclibc.org>
> Cc: Thomas Petazzoni <thomas.petazzoni at free-electrons.com>
> Cc: Maxime Hadjinlian <maxime.hadjinlian at gmail.com>
> Cc: Richard Braun <rbraun at sceen.net>
> Cc: Nathaniel Roach <nroach44 at gmail.com>
Applied, thanks. I've verified that the hashes were matching here by
make $(git show | grep "^+++" | sed 's%.*package/\([^/]*\)/.*%\1-extract%' | sed 's/scons-extract/host-scons-extract/' | sed 's/swig-extract/host-swig-extract/' | sed 's/upx-extract/host-upx-extract/' | tr "\n" " ")
which ended successfully.
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
More information about the buildroot