package infra: do not check hashes when downloading from a repository
authorYann E. MORIN <yann.morin.1998@free.fr>
Tue, 31 Mar 2015 22:15:02 +0000 (00:15 +0200)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fri, 3 Apr 2015 12:08:00 +0000 (14:08 +0200)
When downloading from a repository, we have no way to ensure the
reproducibility of the generated archives, so we can't check the hashes.

Do not specifiy a hash file in those cases.

Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Reviewed-by: Samuel Martin <s.martin49@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
docs/manual/adding-packages-directory.txt
package/pkg-download.mk

index 1b34b41518d5d78454af71ba55ae03865500dc8f..01a1928e288f43185e69fa47dd1e878cbae63e63 100644 (file)
@@ -471,4 +471,10 @@ environment variable +BR2_ENFORCE_CHECK_HASH+ to a non-empty value, and
 there is no hash for a downloaded file, Buildroot considers this an
 error, deletes the downloaded file, and aborts.
 
+Sources that are downloaded from a version control system (git, subversion,
+etc...) can not have a hash, because the version control system and tar
+may not create exactly the same file (dates, files ordering...), so the
+hash could be wrong even for a valid download. Therefore, the hash check
+is entirely skipped for such sources.
+
 If the +.hash+ file is missing, then no check is done at all.
index 5e745195c1dbe0ae505c11f0d26fef99da0dffc1..e2747125151cfb8280c38b4ed97c133dba900f98 100644 (file)
@@ -87,7 +87,6 @@ github = https://github.com/$(1)/$(2)/archive/$(3)
 define DOWNLOAD_GIT
        $(EXTRA_ENV) $(DL_WRAPPER) -b git \
                -o $(DL_DIR)/$($(PKG)_SOURCE) \
-               -H $(PKGDIR)/$($(PKG)_RAWNAME).hash \
                $(QUIET) \
                -- \
                $($(PKG)_SITE) \
@@ -109,7 +108,6 @@ endef
 define DOWNLOAD_BZR
        $(EXTRA_ENV) $(DL_WRAPPER) -b bzr \
                -o $(DL_DIR)/$($(PKG)_SOURCE) \
-               -H $(PKGDIR)/$($(PKG)_RAWNAME).hash \
                $(QUIET) \
                -- \
                $($(PKG)_SITE) \
@@ -128,7 +126,6 @@ endef
 define DOWNLOAD_CVS
        $(EXTRA_ENV) $(DL_WRAPPER) -b cvs \
                -o $(DL_DIR)/$($(PKG)_SOURCE) \
-               -H $(PKGDIR)/$($(PKG)_RAWNAME).hash \
                $(QUIET) \
                -- \
                $(call stripurischeme,$(call qstrip,$($(PKG)_SITE))) \
@@ -149,7 +146,6 @@ endef
 define DOWNLOAD_SVN
        $(EXTRA_ENV) $(DL_WRAPPER) -b svn \
                -o $(DL_DIR)/$($(PKG)_SOURCE) \
-               -H $(PKGDIR)/$($(PKG)_RAWNAME).hash \
                $(QUIET) \
                -- \
                $($(PKG)_SITE) \
@@ -189,7 +185,6 @@ endef
 define DOWNLOAD_HG
        $(EXTRA_ENV) $(DL_WRAPPER) -b hg \
                -o $(DL_DIR)/$($(PKG)_SOURCE) \
-               -H $(PKGDIR)/$($(PKG)_RAWNAME).hash \
                $(QUIET) \
                -- \
                $($(PKG)_SITE) \