[Exherbo-dev] [Exherbo Security] Package Distfile Signing Proposal

Ciaran McCreesh ciaran.mccreesh at googlemail.com
Thu May 10 15:09:39 UTC 2012


On Thu, 10 May 2012 03:08:21 +0200
"Jason A. Donenfeld" <Jason at zx2c4.com> wrote:
> We add a global variable like DOWNLOADS to exheres called CHECKSUMS:
> 
> CHECKSUMS="foobar-1.2.tar.gz -
> sha1:aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d barhaz-0.8.tar.bz2 -
> sha1:254c83b354a04b5c06bcb18671f2dcb340ce3165 floradora.patch.xz -
> md5:5d41402abc4b2a76b9719d911017c592 "

Incidentally, if this syntax is taken (which in turn means it can't be
created by a tool, which in turn means some people are going to hate
you), it's better done as an annotations on DOWNLOADS than as a new
variable.

-- 
Ciaran McCreesh
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.exherbo.org/pipermail/exherbo-dev/attachments/20120510/76fcc19d/attachment-0001.asc>


More information about the Exherbo-dev mailing list