Re: Dockapps tar.gz generated on the fly prevent checksums

On 09/26/2015 03:09 PM, Colin Pitrat wrote:
> installing wmacpi from AUR on archlinux, the checksum failed.
> Checking why, I understood that the tar.gz is apparently generated at
> each download.
> As the time is included in the metadata, it means the tar.gz is
> constantly changing leading to different checksums.
>
> Is it intended ?

It's not ideal, but that's the way it works for now.  Rather hosting a 
bunch of different tarballs somewhere, the dockapps webpage points to 
repo.or.cz, the git host, and uses its "snapshot" feature to generate 
tarballs on the fly.

I know that both Debian and Gentoo host tarballs elsewhere to get around 
this (Debian does this for all packages anyway).

I suppose an ultimate fix would be a patch to gitweb to use the commit 
date instead of the current date when timestamping the tarball.

Doug


-- 
To unsubscribe, send mail to [email protected].