From: Maxime Hadjinlian Date: Sun, 3 May 2015 15:37:40 +0000 (+0200) Subject: manual: Add notes about GitHub and hashes X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=9474cc2594c8643301164500ce6eb62546da2b8f;p=buildroot.git manual: Add notes about GitHub and hashes We can't take hashes from GitHub, unless the tarball has been uploaded by the maintainer, otherwise it is generated and may change over time, which renders hash files useless. [Peter: slightly reword] Signed-off-by: Maxime Hadjinlian Signed-off-by: Yann E. MORIN Cc: Samuel Martin Cc: Thomas Petazzoni Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard --- diff --git a/docs/manual/adding-packages-directory.txt b/docs/manual/adding-packages-directory.txt index 6c478c2fda..3d0982feed 100644 --- a/docs/manual/adding-packages-directory.txt +++ b/docs/manual/adding-packages-directory.txt @@ -441,6 +441,13 @@ provide any hash, or only provides an +md5+ hash, then compute at least one strong hash yourself (preferably +sha256+, but not +md5+), and mention this in a comment line above the hashes. +.Note +If +libfoo+ is from GitHub (see xref:github-download-url[] for details), we +can only accept a +.hash+ file if the package is a released (e.g. uploaded +by the maintainer) tarball. Otherwise, the automatically generated tarball +may change over time, and thus its hashes may be different each time it is +downloaded, causing a +.hash+ mismatch for that tarball. + .Note The number of spaces does not matter, so one can use spaces (or tabs) to properly align the different fields.