[Exherbo-dev] Integrity checking

John Kallimanis johnkall007 at gmail.com
Fri Feb 20 14:11:46 UTC 2015


Hi,

As often DOWNLOADS are defined in exlibs and are dependent on package 
versions, revisions and other variable information, wouldn 't it be most 
sufficient to keep,
i.e. a "checksums" somewhere within the repository, which would contain 
hashes that can be automatically or manually generated? Then, the 
fetcher would compare the downloaded distfiles against the checksums, 
and, for instance, retry the download from somewhere else, abort, etc.

IMO, it shouldn 't be up to individual packages to check for distifiles 
integrity.

Best wishes,

John Kallimanis



More information about the Exherbo-dev mailing list