[Buildroot] [PATCH 01/16 v5] toolchain/external: add hashes for actual sources
Thomas Petazzoni
thomas.petazzoni at free-electrons.com
Sat Mar 19 15:31:34 UTC 2016
Hello,
On Fri, 11 Mar 2016 18:49:14 +0100, Yann E. MORIN wrote:
> As we currently download the actual sources as part of saving the
> legal-info, we do not check the hashes of those downloads.
>
> That's because, during legal-info, there is not package involved, and
> thus there's no path to an actual .hash file.
>
> However, this precludes legal-info from working in off-line mode. A
> subsequent patch will make it possible to do so, and actual sources will
> be downloaded as another classical package download.
>
> This will have two consequences:
>
> - first, we will be able to add hashes for actual sources, so we can
> ensure their integrity,
>
> - second, and as a direct consequence of the above, when a .hash file
> is present, it would have to list all the hashes for that package,
> or that would be treated as an error.
>
> Currently, the only package that falls in this case is the external-
> toolchain, for which we have means to retrieve the sources for some of
> the toolchains.
>
> So we just add hashes for those actual external-toolchain sources we may
> have to download.
>
> Those hashes are not used for now, but they'll come into play a few
> patches down.
>
> Signed-off-by: "Yann E. MORIN" <yann.morin.1998 at free.fr>
> ---
> toolchain/toolchain-external/toolchain-external.hash | 13 +++++++++++++
> 1 file changed, 13 insertions(+)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com
More information about the buildroot
mailing list