[Buildroot] Buildroot 2016.08-rc1 released

[Peter Korsgaard]

>>>>> "Thomas" == Thomas Petazzoni <thomas.petazzoni at free-electrons.com> writes:

 > Hello,
 > On Sat, 06 Aug 2016 12:22:18 +0200, Peter Korsgaard wrote:

 >> > Are you sure? According to http://autobuild.buildroot.net/stats/, there
 >> > are still 90 packages without hashes. Moreover, the hashes are
 >> > currently not checked for packages not sourced from http/ftp.  
 >> 
 >> A quick check of package/ seemed to show that the only ones missing were
 >> people with custom _SITE_METHOD, but I didn't check the other dirs.

 > Hum, quick example: the slirp package doesn't have a custom
 > _SITE_METHOD, it's just using Git. And it doesn't have a hash file.
 > Same psplash, and many other packages.

Yes, I meant packages not using the wget download method, E.G. packages
with implicit git/hg/svn/.. SITE_METHOD from geturischeme and packages
explicitly setting SITE_METHOD.

 >> So for the packages where we currently can check hashes, we are now
 >> doing it. I might clarify the description for the final release mail.

 > This is not completely correct: thanks to Yann's work, the tarballs we
 > produce locally when fetching from Git are reproducible. So technically
 > speaking, all packages fetched from Git could and should now have a
 > hash file.

True, but we haven't started doing that yet (and the git hashes
basically do the same thing). I do think it makes sense to add explicit
hash files in the future, but we have to be careful if we ever change
the way we create tarballs in the future (like our recent change for
submodules support).

-- 
Venlig hilsen,
Peter Korsgaard