* [Buildroot] [PATCH 1/7] core/pkg-infra: prepare for alternate default source archives
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 2/7] WIP: support/download: change format of archives generated from git Yann E. MORIN
` (6 subsequent siblings)
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
The .tar.gz default extension is historical, and we initially used to
only fetch tarballs from remote sites.
When we introduced downloads from VCS repositories, we kept that
extension, and kept compressing with gz, by lack of good reason to
switch to some other compression scheme.
However, nowadays, we will want to change the way we construct the
tarballs we generate from VCS. This will de facto change the hashes of
those tarballs.
If we were to keep the .tar.gz extension (and compression), then we'd
have a problem with older archives that would no longer match the newer
hashes (when someone uses s.b.o. for example), or the other way around
(if we updated the archives on s.b.o and someone uses an older
Buildroot).
So we will want that the archives we generate do not clash with the
existing ones, so needs another filename. So, we need a way to be able
to use a different extension, whatever we'll want to use when we
generate archives from VCS.
Note that we do not need to play the host-defaults-to-target-value
dance we do for the _SOURCE variable, because this is a purely internal
variable, not exposed to packages.
Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Cc: Vincent Fazio <vfazio@xes-inc.com>
---
package/pkg-generic.mk | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/package/pkg-generic.mk b/package/pkg-generic.mk
index 54de03da03..5fe1bfe0e2 100644
--- a/package/pkg-generic.mk
+++ b/package/pkg-generic.mk
@@ -514,11 +514,12 @@ ifneq ($$($(2)_OVERRIDE_SRCDIR),)
$(2)_VERSION = custom
endif
+$(2)_SOURCE_EXT = .tar.gz
ifndef $(2)_SOURCE
ifdef $(3)_SOURCE
$(2)_SOURCE = $$($(3)_SOURCE)
else ifdef $(2)_VERSION
- $(2)_SOURCE ?= $$($(2)_BASENAME_RAW).tar.gz
+ $(2)_SOURCE ?= $$($(2)_BASENAME_RAW)$$($(2)_SOURCE_EXT)
endif
endif
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 2/7] WIP: support/download: change format of archives generated from git
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 1/7] core/pkg-infra: prepare for alternate default source archives Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 3/7] WIP: boot+packages: update hash to new git-tarballs format Yann E. MORIN
` (5 subsequent siblings)
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
** WIP: needs an update to all the hashes.
Currently, our git archives are reproducible because we ensure that we
use one of the few tar versions that generate identical gnu-formatted
archives. However, than means that any tar version greater or equal
to 1.30 is not compatible. I.e. we're stuck in the past, forever.
However, thanks to some grunt work by Vincent, we now have a set of
options that we can pass tar, to generate reproducible archives back
from tar-1.27 and up through tar-1.32, the latest released version.
However, those archives are not identical to the previous ones generated
in the (now-broken) gnu format.
To avoid any clashing between old and new archives, and new and old
Buildroot versions, we need to name the new generated archives
differently from the existing ones. The only latitude we have is to
change the extension.
The .tar.gz extension is a historical accident, dating back to when we
introduced downloads from VCS, at which time we decided to use the same
compression as was used for the tarballs directly downloaded via wget.
We could switch over to use .tgz, which is just a shorter name for a
.tar.gz. But while at it, lets also switch the compression, from the
venerable gzip, to the not-so-new-nowadays xz. But since xz is quite
slower than xz, we add traces that something is going on, so users do
not wonder why there does not seem to be any progress.
Setting the _SOURCE_EXT needs _SITE_METHOD to be known, which only
happens later in the file, so we move it down. This is OK, as long as
the variable are set before they are used to generate dependency rules
(or other conditional code).
The --pax-option, to set specific PAX headers, does not accept RFC2822
timestamps which value diverge too much:
tar: Time stamp is out of allowed range
However, the same timestamps passed as strict compliant ISO 8601 is
accepted, so that's what we switch to as the date representation (%ci
has been supported by git back to 1.6.0, released August 2008).
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Vincent Fazio <vfazio@xes-inc.com>
Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
---
Here is a Makefile used to test all the versions of tar, along with a
set of options:
# Versions prior to 1.27 do not build on recent machines, because 'gets'
# got removed (rightfully so), so don't count them as candidates.
VERSIONS = 1.27 1.27.1 1.28 1.29 1.30 1.31 1.32
DATE = Thu 21 May 2020 06:44:11 PM CEST
TARS = \
$(patsubst %,test_gnu_%.tar,$(VERSIONS)) \
$(patsubst %,test_posix_%.tar,$(VERSIONS)) \
$(patsubst %,test_posix_paxoption_%.tar,$(VERSIONS))
all: $(TARS)
sha1sum $(^)
.INTERMEDIATE: test_%.tar
test_gnu_%.tar: tar.% list
./$(<) cf - -C test \
--transform="s#^\./#test-version/#" \
--numeric-owner --owner=0 --group=0 \
--mtime="$(DATE)" \
--format=gnu \
-T list \
>$(@)
test_posix_%.tar: tar.% list
./$(<) cf - -C test \
--transform="s#^\./#test-version/#" \
--numeric-owner --owner=0 --group=0 \
--mtime="$(DATE)" \
--format=posix \
-T list \
>$(@)
test_posix_paxoption_%.tar: tar.% list
./$(<) cf - -C test \
--transform="s#^\./#test-version/#" \
--numeric-owner --owner=0 --group=0 \
--mtime="$(DATE)" \
--format=posix \
--pax-option='delete=atime,delete=ctime,delete=mtime' \
--pax-option='exthdr.name=%d/PaxHeaders/%f,exthdr.mtime={$(DATE)}' \
-T list \
>$(@)
list: .FORCE
list: test
(cd test && find . -not -type d ) |LC_ALL=C sort >$(@)
LONG = L$$(for i in $$(seq 1 200); do printf 'o'; done)ng
test: .FORCE
test:
rm -rf test
mkdir -p test/bar
echo foo >test/Foo
echo bar >test/bar/Bar
ln -s bar/Bar test/buz
echo long >test/Very-$(LONG)-filename
ln test/Very-$(LONG)-filename \
test/short
.PRECIOUS: tar.%
tar.%: tar-%
cd $(<) && ./configure
$(MAKE) -C $(<)
install -m 0755 $(<)/src/tar $(@)
.PRECIOUS: tar-%
tar-%: tar-%.tar.gz
tar xzf $(<)
.PRECIOUS: tar-%.tar.gz
tar-%.tar.gz:
wget "https://ftp.gnu.org/gnu/tar/$(@)"
.FORCE:
clean:
rm -rf tar-* tar.* test_* test list
---
package/pkg-generic.mk | 8 +++++++-
support/download/git | 20 ++++++++++++++------
2 files changed, 21 insertions(+), 7 deletions(-)
diff --git a/package/pkg-generic.mk b/package/pkg-generic.mk
index 5fe1bfe0e2..115115a345 100644
--- a/package/pkg-generic.mk
+++ b/package/pkg-generic.mk
@@ -514,11 +514,11 @@ ifneq ($$($(2)_OVERRIDE_SRCDIR),)
$(2)_VERSION = custom
endif
-$(2)_SOURCE_EXT = .tar.gz
ifndef $(2)_SOURCE
ifdef $(3)_SOURCE
$(2)_SOURCE = $$($(3)_SOURCE)
else ifdef $(2)_VERSION
+ # _SOURCE_EXT is defined below, after we compute the _SITE_METHOD
$(2)_SOURCE ?= $$($(2)_BASENAME_RAW)$$($(2)_SOURCE_EXT)
endif
endif
@@ -564,6 +564,12 @@ ifndef $(2)_DL_OPTS
endif
endif
+ifneq ($$(filter git,$$($(2)_SITE_METHOD)),)
+$(2)_SOURCE_EXT = .tar.xz
+else
+$(2)_SOURCE_EXT = .tar.gz
+endif
+
ifneq ($$(filter bzr cvs hg,$$($(2)_SITE_METHOD)),)
BR_NO_CHECK_HASH_FOR += $$($(2)_SOURCE)
endif
diff --git a/support/download/git b/support/download/git
index 15d8c66e05..7bdc807ca7 100755
--- a/support/download/git
+++ b/support/download/git
@@ -170,8 +170,8 @@ _git checkout -f -q "'${cset}'"
_git clean -ffdx
# Get date of commit to generate a reproducible archive.
-# %cD is RFC2822, so it's fully qualified, with TZ and all.
-date="$( _git log -1 --pretty=format:%cD )"
+# %ci is ISO 8601, so it's fully qualified, with TZ and all.
+date="$( _git log -1 --pretty=format:%ci )"
# There might be submodules, so fetch them.
if [ ${recurse} -eq 1 ]; then
@@ -201,12 +201,20 @@ find . -not -type d \
-and -not -path "./.git/*" >"${output}.list"
LC_ALL=C sort <"${output}.list" >"${output}.list.sorted"
-# Create GNU-format tarballs, since that's the format of the tarballs on
-# sources.buildroot.org and used in the *.hash files
+# Explicit options to ensure reproducibility of the archive
+pax_options="delete=atime,delete=ctime,delete=mtime"
+pax_options+=",exthdr.name=%d/PaxHeaders/%f,exthdr.mtime={${date}}"
+
+# Create tarballs in the posix format, since that's the most
+# reproducible format
+printf 'Creating tarball (%d files)...\n' "$( cat "${output}.list.sorted" |wc -l )"
tar cf - --transform="s#^\./#${basename}/#" \
- --numeric-owner --owner=0 --group=0 --mtime="${date}" --format=gnu \
+ --numeric-owner --owner=0 --group=0 --mtime="${date}" \
+ --format=posix \
+ --pax-option="${pax_options}" \
-T "${output}.list.sorted" >"${output}.tar"
-gzip -6 -n <"${output}.tar" >"${output}"
+printf 'Compressing tarball (%d bytes)...\n' "$( stat -c %s "${output}.tar" )"
+xz -9 <"${output}.tar" >"${output}"
rm -f "${output}.list"
rm -f "${output}.list.sorted"
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax)
@ 2020-11-19 21:23 Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 1/7] core/pkg-infra: prepare for alternate default source archives Yann E. MORIN
` (7 more replies)
0 siblings, 8 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
Hello All!
This series fixes our download backends, git and svn, to generate
reproducible archives whatever the tar version, thus removing
the requirement for a maximum tar version.
This however changes the actual format of the generated archives,
and they are different from the existing ones. So we also change the
compression to avoid collision with existign archives on s.b.o, that
need to be read by older Buildroot versions.
A huge thank to Vincent for digging up the adequate set of options
that allows generating reproducible archives. Thanks! :-)
Note that this series contains commits marked "WIP": they are separate
commits for ease of review, but they should ultimately be squashed
together or the series would not be bisectable.
Regards,
Yann E. MORIN.
----------------------------------------------------------------
Yann E. MORIN (7):
core/pkg-infra: prepare for alternate default source archives
WIP: support/download: change format of archives generated from git
WIP: boot+packages: update hash to new git-tarballs format
WIP: support/testing: update git-hash checks with new archive format
support/download: change format of archives generated from svn
support/dependencies: drop check for maximal tar version
package/tar: drop specific version for host variant
boot/vexpress-firmware/vexpress-firmware.hash | 2 +-
package/aer-inject/aer-inject.hash | 2 +-
package/am33x-cm3/am33x-cm3.hash | 2 +-
package/armbian-firmware/armbian-firmware.hash | 2 +-
package/at/at.hash | 6 +-
package/bayer2rgb-neon/bayer2rgb-neon.hash | 4 +-
package/brickd/brickd.hash | 4 +-
package/c-capnproto/c-capnproto.hash | 2 +-
package/dbus-triggerd/dbus-triggerd.hash | 2 +-
package/dt-utils/dt-utils.hash | 4 +-
package/dtv-scan-tables/dtv-scan-tables.hash | 6 +-
package/flashbench/flashbench.hash | 2 +-
.../imx-alsa-plugins/imx-alsa-plugins.hash | 2 +-
package/freescale-imx/imx-lib/imx-lib.hash | 2 +-
package/google-breakpad/google-breakpad.hash | 2 +-
.../gstreamer1/gst1-interpipe/gst1-interpipe.hash | 2 +-
package/gstreamer1/gst1-shark/gst1-shark.hash | 4 +-
package/imx-mkimage/imx-mkimage.hash | 4 +-
package/kvm-unit-tests/kvm-unit-tests.hash | 2 +-
package/kvmtool/kvmtool.hash | 2 +-
package/libbroadvoice/libbroadvoice.hash | 4 +-
package/libclc/libclc.hash | 4 +-
package/libg7221/libg7221.hash | 4 +-
package/libilbc/libilbc.hash | 4 +-
package/libsilk/libsilk.hash | 4 +-
package/libsvgtiny/libsvgtiny.hash | 4 +-
package/libuci/libuci.hash | 2 +-
package/libyuv/libyuv.hash | 4 +-
package/linux-firmware/linux-firmware.hash | 68 +++++++++++-----------
.../linux-syscall-support.hash | 2 +-
package/minicom/minicom.hash | 4 +-
package/mmc-utils/mmc-utils.hash | 4 +-
package/net-tools/net-tools.hash | 2 +-
package/netcat-openbsd/netcat-openbsd.hash | 4 +-
.../netsurf-buildsystem/netsurf-buildsystem.hash | 2 +-
package/odhcp6c/odhcp6c.hash | 2 +-
package/opkg-utils/opkg-utils.hash | 2 +-
package/piglit/piglit.hash | 2 +-
package/pkg-generic.mk | 9 ++-
package/prelink-cross/prelink-cross.hash | 2 +-
package/psplash/psplash.hash | 4 +-
package/qt-webkit-kiosk/qt-webkit-kiosk.hash | 2 +-
package/rcw/rcw.hash | 4 +-
package/rtc-tools/rtc-tools.hash | 4 +-
package/rtmpdump/rtmpdump.hash | 4 +-
package/speexdsp/speexdsp.hash | 4 +-
package/stm32flash/stm32flash.hash | 4 +-
package/tar/tar.mk | 8 +--
package/ti-sgx-demos/ti-sgx-demos.hash | 4 +-
package/ti-sgx-km/ti-sgx-km.hash | 4 +-
package/ti-sgx-libgbm/ti-sgx-libgbm.hash | 4 +-
package/ti-sgx-um/ti-sgx-um.hash | 4 +-
package/trace-cmd/trace-cmd.hash | 6 +-
package/tremor/tremor.hash | 4 +-
package/ubus/ubus.hash | 2 +-
package/uemacs/uemacs.hash | 4 +-
package/uhttpd/uhttpd.hash | 2 +-
package/ustream-ssl/ustream-ssl.hash | 4 +-
package/vboot-utils/vboot-utils.hash | 2 +-
package/wilink-bt-firmware/wilink-bt-firmware.hash | 4 +-
.../xdriver_xf86-video-imx-viv.hash | 2 +-
.../xdriver_xf86-video-intel.hash | 1 +
support/dependencies/check-host-tar.sh | 14 +----
support/download/git | 20 +++++--
support/download/svn | 12 ++--
.../br2-external/git-hash/package/bad/bad.hash | 2 +-
.../br2-external/git-hash/package/good/good.hash | 2 +-
.../git-partial-sha1-branch-head.hash | 2 +-
.../git-partial-sha1-reachable-by-branch.hash | 2 +-
.../git-partial-sha1-reachable-by-tag.hash | 2 +-
.../git-partial-sha1-tag-itself.hash | 2 +-
.../git-partial-sha1-tag-points-to.hash | 2 +-
.../git-sha1-branch-head/git-sha1-branch-head.hash | 2 +-
.../git-sha1-reachable-by-branch.hash | 2 +-
.../git-sha1-reachable-by-tag.hash | 2 +-
.../git-sha1-tag-itself/git-sha1-tag-itself.hash | 2 +-
.../git-sha1-tag-points-to.hash | 2 +-
.../git-submodule-disabled.hash | 2 +-
.../git-submodule-enabled.hash | 2 +-
.../git-refs/package/git-tag/git-tag.hash | 2 +-
.../git-wrong-content/git-wrong-content.hash | 2 +-
81 files changed, 177 insertions(+), 173 deletions(-)
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 3/7] WIP: boot+packages: update hash to new git-tarballs format
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 1/7] core/pkg-infra: prepare for alternate default source archives Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 2/7] WIP: support/download: change format of archives generated from git Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 4/7] WIP: support/testing: update git-hash checks with new archive format Yann E. MORIN
` (4 subsequent siblings)
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
** WIP: should be squashed with the commit that updates the git backend
Of all the bootloaders that have a git download method, vexpress-firmware
is the only one to have a hash. Others have no hash files, or they have
explicitly set BR_NO_CHECK_HASH_FOR.
For the packages, linux-headers is the special snowflake, as the git
download is only for custom git tree, so it is excluded from the hash
verification with BR_NO_CHECK_HASH_FOR.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Vincent Fazio <vfazio@xes-inc.com>
---
boot/vexpress-firmware/vexpress-firmware.hash | 2 +-
package/aer-inject/aer-inject.hash | 2 +-
package/am33x-cm3/am33x-cm3.hash | 2 +-
.../armbian-firmware/armbian-firmware.hash | 2 +-
package/at/at.hash | 6 +-
package/bayer2rgb-neon/bayer2rgb-neon.hash | 4 +-
package/brickd/brickd.hash | 4 +-
package/c-capnproto/c-capnproto.hash | 2 +-
package/dbus-triggerd/dbus-triggerd.hash | 2 +-
package/dt-utils/dt-utils.hash | 4 +-
package/dtv-scan-tables/dtv-scan-tables.hash | 6 +-
package/flashbench/flashbench.hash | 2 +-
.../imx-alsa-plugins/imx-alsa-plugins.hash | 2 +-
package/freescale-imx/imx-lib/imx-lib.hash | 2 +-
package/google-breakpad/google-breakpad.hash | 2 +-
.../gst1-interpipe/gst1-interpipe.hash | 2 +-
package/gstreamer1/gst1-shark/gst1-shark.hash | 4 +-
package/imx-mkimage/imx-mkimage.hash | 4 +-
package/kvm-unit-tests/kvm-unit-tests.hash | 2 +-
package/kvmtool/kvmtool.hash | 2 +-
package/libbroadvoice/libbroadvoice.hash | 4 +-
package/libclc/libclc.hash | 4 +-
package/libg7221/libg7221.hash | 4 +-
package/libilbc/libilbc.hash | 4 +-
package/libsilk/libsilk.hash | 4 +-
package/libsvgtiny/libsvgtiny.hash | 4 +-
package/libuci/libuci.hash | 2 +-
package/libyuv/libyuv.hash | 4 +-
package/linux-firmware/linux-firmware.hash | 68 +++++++++----------
.../linux-syscall-support.hash | 2 +-
package/minicom/minicom.hash | 4 +-
package/mmc-utils/mmc-utils.hash | 4 +-
package/net-tools/net-tools.hash | 2 +-
package/netcat-openbsd/netcat-openbsd.hash | 4 +-
.../netsurf-buildsystem.hash | 2 +-
package/odhcp6c/odhcp6c.hash | 2 +-
package/opkg-utils/opkg-utils.hash | 2 +-
package/piglit/piglit.hash | 2 +-
package/prelink-cross/prelink-cross.hash | 2 +-
package/psplash/psplash.hash | 4 +-
package/qt-webkit-kiosk/qt-webkit-kiosk.hash | 2 +-
package/rcw/rcw.hash | 4 +-
package/rtc-tools/rtc-tools.hash | 4 +-
package/rtmpdump/rtmpdump.hash | 4 +-
package/speexdsp/speexdsp.hash | 4 +-
package/stm32flash/stm32flash.hash | 4 +-
package/ti-sgx-demos/ti-sgx-demos.hash | 4 +-
package/ti-sgx-km/ti-sgx-km.hash | 4 +-
package/ti-sgx-libgbm/ti-sgx-libgbm.hash | 4 +-
package/ti-sgx-um/ti-sgx-um.hash | 4 +-
package/trace-cmd/trace-cmd.hash | 6 +-
package/tremor/tremor.hash | 4 +-
package/ubus/ubus.hash | 2 +-
package/uemacs/uemacs.hash | 4 +-
package/uhttpd/uhttpd.hash | 2 +-
package/ustream-ssl/ustream-ssl.hash | 4 +-
package/vboot-utils/vboot-utils.hash | 2 +-
.../wilink-bt-firmware.hash | 4 +-
.../xdriver_xf86-video-imx-viv.hash | 2 +-
.../xdriver_xf86-video-intel.hash | 1 +
60 files changed, 128 insertions(+), 127 deletions(-)
diff --git a/boot/vexpress-firmware/vexpress-firmware.hash b/boot/vexpress-firmware/vexpress-firmware.hash
index 40f64c7528..54ad3035a5 100644
--- a/boot/vexpress-firmware/vexpress-firmware.hash
+++ b/boot/vexpress-firmware/vexpress-firmware.hash
@@ -1,2 +1,2 @@
# Locally calculated
-sha256 def599c86ab3606f7f67c0190e9b237fbc0cf934a951ffb1c5fb0c47d8a8f3d2 vexpress-firmware-901f81977c3b367a2e0bf3d6444be302822d97a3.tar.gz
+sha256 6ac672584c4b4b4980597f799a000e753d2f515054dc0564f6f93183788291c1 vexpress-firmware-901f81977c3b367a2e0bf3d6444be302822d97a3.tar.xz
diff --git a/package/aer-inject/aer-inject.hash b/package/aer-inject/aer-inject.hash
index ee097c873a..a693ed9038 100644
--- a/package/aer-inject/aer-inject.hash
+++ b/package/aer-inject/aer-inject.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 49a44b7a9e3983dc15fdc5bacd0e095df650296024f43f9d6c080ad54de0b07f aer-inject-9bd5e2c7886fca72f139cd8402488a2235957d41.tar.gz
+sha256 92333be36da0106fa26fb3d4f5fe95f6a16e769eb105cafcba8c2d8ac57cadcd aer-inject-9bd5e2c7886fca72f139cd8402488a2235957d41.tar.xz
sha256 659a191d8775e05c6c6a9a4ba66b3577c577342bb83f20d393135eb6633c8973 README
diff --git a/package/am33x-cm3/am33x-cm3.hash b/package/am33x-cm3/am33x-cm3.hash
index a63ba64a3c..15e6a8d9a7 100644
--- a/package/am33x-cm3/am33x-cm3.hash
+++ b/package/am33x-cm3/am33x-cm3.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 a722098b362f58f4dfb2a7c30afd604424d435b3d5ebe6ebf5d76ad942f796d0 am33x-cm3-11107db2f1e9e58ee75d4fe9cc38423c9a6e4365.tar.gz
+sha256 fb1826b5320c3b9fe969386f8ec7ca439e093be77fb57cfea19a1d09b8c39a2f am33x-cm3-11107db2f1e9e58ee75d4fe9cc38423c9a6e4365.tar.xz
sha256 e136e6949a1d3ca144374375af8b9387faa11d2eee7debff8cf22ca8fe7bf7e9 License.txt
diff --git a/package/armbian-firmware/armbian-firmware.hash b/package/armbian-firmware/armbian-firmware.hash
index edbc9c8282..ddabef310d 100644
--- a/package/armbian-firmware/armbian-firmware.hash
+++ b/package/armbian-firmware/armbian-firmware.hash
@@ -1,2 +1,2 @@
# Locally calculated
-sha256 975bc377728496006f058317cccc88e2d3c4ab172ee3df08cfd085cf13221752 armbian-firmware-70a08503ac9e765f5d1ccf4fa3e825db0751e53e.tar.gz
+sha256 578f97ae308c5fbf4f7af43b69fe31dcfd465491386c57d5f25c39c5aaaf3441 armbian-firmware-70a08503ac9e765f5d1ccf4fa3e825db0751e53e.tar.xz
diff --git a/package/at/at.hash b/package/at/at.hash
index e20c00b3cd..689a45817a 100644
--- a/package/at/at.hash
+++ b/package/at/at.hash
@@ -1,5 +1,5 @@
# Locally calculated
-sha256 9ae5761a1fb897cda3a6f14439bed33cda33c0eedfcee6866e3d2ebad67fbd2f at-7c74fa1aece6bc6db351763dc012193d5d634b7e.tar.gz
+sha256 6ba9130735e1ab2a8483e5c0d4184b10193df871757d1d86191b45089d90789f at-7c74fa1aece6bc6db351763dc012193d5d634b7e.tar.xz
-sha256 01dccc0975aa9ba1a9f83e7c5e04f16077353d3c72a0a759b8846ee7a5b2b616 Copyright
-sha256 c38aee9e3c8c4d5d594ff548a1be05453023016d6286931f6512db215ec1fd42 COPYING
+sha256 01dccc0975aa9ba1a9f83e7c5e04f16077353d3c72a0a759b8846ee7a5b2b616 Copyright
+sha256 c38aee9e3c8c4d5d594ff548a1be05453023016d6286931f6512db215ec1fd42 COPYING
diff --git a/package/bayer2rgb-neon/bayer2rgb-neon.hash b/package/bayer2rgb-neon/bayer2rgb-neon.hash
index 1f4f5f33b3..58b54626ac 100644
--- a/package/bayer2rgb-neon/bayer2rgb-neon.hash
+++ b/package/bayer2rgb-neon/bayer2rgb-neon.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 1a84dcf6557c2017ebe258502f60575e0971511c548fc88aee5ab68ca0bb268a bayer2rgb-neon-bef3ecafe290d61a50fd27da3e5d0df6f4b88045.tar.gz
-sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING
+sha256 b6be54da895880ffef3535505982c0b2462307ff5ce616777545e8a46aef0ad6 bayer2rgb-neon-bef3ecafe290d61a50fd27da3e5d0df6f4b88045.tar.xz
+sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 COPYING
diff --git a/package/brickd/brickd.hash b/package/brickd/brickd.hash
index 8de57a9b82..e91d72c7a2 100644
--- a/package/brickd/brickd.hash
+++ b/package/brickd/brickd.hash
@@ -1,5 +1,5 @@
# Locally computed hash
-sha256 0b79f1ccd6fa644d7ecb2e17b19f9ffbf6374702ae9ac536b2c4a0b8b2cfe160 brickd-ev3dev-stretch_1.2.1.tar.gz
+sha256 820ba722ce0d5aa1423754e8519d38659620bb336f0bed82e81cb556c5ebb975 brickd-ev3dev-stretch_1.2.1.tar.xz
# Hashes for license files:
-sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 LICENSE.txt
+sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 LICENSE.txt
diff --git a/package/c-capnproto/c-capnproto.hash b/package/c-capnproto/c-capnproto.hash
index 75edaebf91..a571fb5c90 100644
--- a/package/c-capnproto/c-capnproto.hash
+++ b/package/c-capnproto/c-capnproto.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 88c454f4f4bad87c9b60cd739c7da5605c1085c0e92b317dd72d547bbb804279 c-capnproto-9053ebe6eeb2ae762655b982e27c341cb568366d.tar.gz
+sha256 4734c2ca73c9a91ff735755ac1e72aa934d2281abb713f2d1f99f3da16c51f92 c-capnproto-9053ebe6eeb2ae762655b982e27c341cb568366d.tar.xz
sha256 27797e6c7dce96675d79ed250584d157b7a86405db6eb6fba9644e6d96d42c57 COPYING
diff --git a/package/dbus-triggerd/dbus-triggerd.hash b/package/dbus-triggerd/dbus-triggerd.hash
index b7ed89abf7..84550dc842 100644
--- a/package/dbus-triggerd/dbus-triggerd.hash
+++ b/package/dbus-triggerd/dbus-triggerd.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 3c6d865427bf1b93b16323c796ed6957ce6b2b6fd53f518b1b082d03b939102c dbus-triggerd-ba3dbec805cb707c94c54de21666bf18b79bcc09.tar.gz
+sha256 cdabfc8bb252640ca2b5690201246cee3b071e7209cfd17b11e7f2533cade963 dbus-triggerd-ba3dbec805cb707c94c54de21666bf18b79bcc09.tar.xz
sha256 30d135650639af9019633690fc1aecbfc150aeeef9446347d4286a58338d10b0 dbus-triggerd.c
diff --git a/package/dt-utils/dt-utils.hash b/package/dt-utils/dt-utils.hash
index 3610fe164f..00c8698459 100644
--- a/package/dt-utils/dt-utils.hash
+++ b/package/dt-utils/dt-utils.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 61440ab222543268923175eb5c7425076d2b8bce4c1dfc177f2eb3873449af7c dt-utils-v2019.01.0.tar.gz
-sha256 a45932c79317d15116eadbf1c9c6fc59117ec3c4621db3a876066defa723963b COPYING
+sha256 bc7d28c53bf2f5eae5dd1d367fa2d0bf40788ba4b24e9b7ecae6182edc1c759a dt-utils-v2019.01.0.tar.xz
+sha256 a45932c79317d15116eadbf1c9c6fc59117ec3c4621db3a876066defa723963b COPYING
diff --git a/package/dtv-scan-tables/dtv-scan-tables.hash b/package/dtv-scan-tables/dtv-scan-tables.hash
index 73e0e7d19a..ebc6358892 100644
--- a/package/dtv-scan-tables/dtv-scan-tables.hash
+++ b/package/dtv-scan-tables/dtv-scan-tables.hash
@@ -1,4 +1,4 @@
# Locally computed
-sha256 76cb6131df1b35ed71b0f6c87cfafc188d614cfbd9973e7832a65ba63e85c504 dtv-scan-tables-6d019038cd04e837d9dd58701202c15924c1c654.tar.gz
-sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 COPYING
-sha256 4fd46f32582c29007657e2daad8d0a6d954cf4e9d2e47bae8f8d8c32765fc987 COPYING.LGPL
+sha256 688a4b7517e7864304c7862dbe8698769d44c9abd883a11bed288dbf8bb59bb8 dtv-scan-tables-6d019038cd04e837d9dd58701202c15924c1c654.tar.xz
+sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 COPYING
+sha256 4fd46f32582c29007657e2daad8d0a6d954cf4e9d2e47bae8f8d8c32765fc987 COPYING.LGPL
diff --git a/package/flashbench/flashbench.hash b/package/flashbench/flashbench.hash
index f82d7f0eed..a2712ad8a9 100644
--- a/package/flashbench/flashbench.hash
+++ b/package/flashbench/flashbench.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 12e2dcb6f041ef1a303fc5bc84642ed637c24d77ed6c667a2187f21d54555731 flashbench-2e30b1968a66147412f21002ea844122a0d5e2f0.tar.gz
+sha256 cc7e6ec0ecef12aa647dde2853e8352ae95a8f31a29a86bd7f1b1d65b486d432 flashbench-2e30b1968a66147412f21002ea844122a0d5e2f0.tar.xz
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
diff --git a/package/freescale-imx/imx-alsa-plugins/imx-alsa-plugins.hash b/package/freescale-imx/imx-alsa-plugins/imx-alsa-plugins.hash
index b0f47080ce..7f4bbe7044 100644
--- a/package/freescale-imx/imx-alsa-plugins/imx-alsa-plugins.hash
+++ b/package/freescale-imx/imx-alsa-plugins/imx-alsa-plugins.hash
@@ -1,3 +1,3 @@
# Locally calculated:
-sha256 e76a71e9166fbedeaa535fd7ebc07edc30a1e87f529ab2aa733e3603d3183ed0 imx-alsa-plugins-rel_imx_4.9.x_1.0.0_ga.tar.gz
+sha256 606d7f6d5a1d340ea02022b9188f60a62c4b25f35a4011b7e3ace3421a5d35e6 imx-alsa-plugins-rel_imx_4.9.x_1.0.0_ga.tar.xz
sha256 32b1062f7da84967e7019d01ab805935caa7ab7321a7ced0e30ebe75e5df1670 COPYING.GPL
diff --git a/package/freescale-imx/imx-lib/imx-lib.hash b/package/freescale-imx/imx-lib/imx-lib.hash
index c16dc7f9a9..510764c79f 100644
--- a/package/freescale-imx/imx-lib/imx-lib.hash
+++ b/package/freescale-imx/imx-lib/imx-lib.hash
@@ -1,3 +1,3 @@
# locally computed
-sha256 ced5ad0a179887ef1dd93e8103a9ab7372017cc1c241d28cded164cdece4b918 imx-lib-3f777974c0c146817e2ff5cb0340ca66a1f99e57.tar.gz
+sha256 c61a047e05b49013e94cabeb2da5e490a90bd222675ca534d15f463e7461dd52 imx-lib-3f777974c0c146817e2ff5cb0340ca66a1f99e57.tar.xz
sha256 5df07007198989c622f5d41de8d703e7bef3d0e79d62e24332ee739a452af62a COPYING-LGPL-2.1
diff --git a/package/google-breakpad/google-breakpad.hash b/package/google-breakpad/google-breakpad.hash
index 81715ec573..2f861315da 100644
--- a/package/google-breakpad/google-breakpad.hash
+++ b/package/google-breakpad/google-breakpad.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 6f444233e88957c30cc2d5497ee9d72d104122ce2c25a7ef7f6be3af1b3f7353 google-breakpad-7515ab13768c7edc09f0f2ec2354dc6c928239a6.tar.gz
+sha256 8b9b37d733e0c0faab2e64e2c68c5e6121682ae14f5cfe92327fe639087b3d85 google-breakpad-7515ab13768c7edc09f0f2ec2354dc6c928239a6.tar.xz
sha256 f9752a0a4ac5215eaa3a4f0ec29cd52563c883de5d7870525cc0bc3a21cb8e15 LICENSE
diff --git a/package/gstreamer1/gst1-interpipe/gst1-interpipe.hash b/package/gstreamer1/gst1-interpipe/gst1-interpipe.hash
index 4764611487..6f646b824b 100644
--- a/package/gstreamer1/gst1-interpipe/gst1-interpipe.hash
+++ b/package/gstreamer1/gst1-interpipe/gst1-interpipe.hash
@@ -1,5 +1,5 @@
# locally computed hash
-sha256 4b0d8c5fabe1705ba92ac8409d7d138429df5874ba196101cdd1871936719b1a gst1-interpipe-94dea528dc9e2d0df02fdf2114deecfef6a23740.tar.gz
+sha256 14948ab865147b451e7827d63323c68fe2b1a0fab4cde74b15af763dbf5513d5 gst1-interpipe-94dea528dc9e2d0df02fdf2114deecfef6a23740.tar.xz
# Hashes for license files:
sha256 16d7caa6cabbfd0ca47e064a7b48cb446d013e84ca88c854d6470851752136d5 COPYING
diff --git a/package/gstreamer1/gst1-shark/gst1-shark.hash b/package/gstreamer1/gst1-shark/gst1-shark.hash
index 6f8365cb16..4c1ff47621 100644
--- a/package/gstreamer1/gst1-shark/gst1-shark.hash
+++ b/package/gstreamer1/gst1-shark/gst1-shark.hash
@@ -1,5 +1,5 @@
# locally computed hash
-sha256 aec7f0bbb81775922da2c94a4f84b64b5efd38a616f0d07eb4c3ddb5770b728d gst1-shark-v0.7.1.tar.gz
+sha256 76ee873cd23be205fe8999fc5da45e88ec5708b87c032cde7709d2a6e1f0c743 gst1-shark-v0.7.1.tar.xz
# Hashes for license files:
-sha256 6d191b8f1fa03cabced18b8e48fddbf960a19f965bed8491e76ed62238f92f0b COPYING
+sha256 6d191b8f1fa03cabced18b8e48fddbf960a19f965bed8491e76ed62238f92f0b COPYING
diff --git a/package/imx-mkimage/imx-mkimage.hash b/package/imx-mkimage/imx-mkimage.hash
index 6d5a329ed5..a5d94030ea 100644
--- a/package/imx-mkimage/imx-mkimage.hash
+++ b/package/imx-mkimage/imx-mkimage.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 a7e4c1c45b0d36e088bd7891335aa3c726682750984b7ca072e3c6329def92cf imx-mkimage-rel_imx_4.19.35_1.1.0.tar.gz
-sha256 231f7edcc7352d7734a96eef0b8030f77982678c516876fcb81e25b32d68564c COPYING
+sha256 10f81ab895534aecbbebcd053ec613886b26367240d22ac69cf1ecb311c6dbdf imx-mkimage-rel_imx_4.19.35_1.1.0.tar.xz
+sha256 231f7edcc7352d7734a96eef0b8030f77982678c516876fcb81e25b32d68564c COPYING
diff --git a/package/kvm-unit-tests/kvm-unit-tests.hash b/package/kvm-unit-tests/kvm-unit-tests.hash
index 3458778937..ef0dd396a8 100644
--- a/package/kvm-unit-tests/kvm-unit-tests.hash
+++ b/package/kvm-unit-tests/kvm-unit-tests.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 346c543de9e953db283072e1c591cab9d0eb775f7fb1fff3d7560f38bdf6bdf2 kvm-unit-tests-kvm-unit-tests-20171020.tar.gz
+sha256 c2f2f2159c77a10c7f40c163865aac123145d1951b008359c9d668644a0f8d56 kvm-unit-tests-kvm-unit-tests-20171020.tar.xz
sha256 d9bbb60891710d248f01c8bdac50ef7ad39188de512610437872e83112b38a1b COPYRIGHT
diff --git a/package/kvmtool/kvmtool.hash b/package/kvmtool/kvmtool.hash
index fd841c354c..44175e17bd 100644
--- a/package/kvmtool/kvmtool.hash
+++ b/package/kvmtool/kvmtool.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 2d55e4521ac040b870db015e1f075d69b89f940242d7ce5708f7d7060d62c0cc kvmtool-f77d646ba01d04be5aad9449ac00719c043fe36e.tar.gz
+sha256 6feebce002ca573f83ef59134d5f8a454c49fde1509f9724f2c7def7696a5f7f kvmtool-f77d646ba01d04be5aad9449ac00719c043fe36e.tar.xz
sha256 0d5bf346df9e635a29dcdddf832dc5b002ca6cdc1c5c9c6c567d2a61bb0c5c15 COPYING
diff --git a/package/libbroadvoice/libbroadvoice.hash b/package/libbroadvoice/libbroadvoice.hash
index 6d5afa8dbe..3f6a015e78 100644
--- a/package/libbroadvoice/libbroadvoice.hash
+++ b/package/libbroadvoice/libbroadvoice.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 b68c91d5af6e493c3d4fc3be04825e109a7593fe4de8c18ec75546004eeb4749 libbroadvoice-f65b0f50c8c767229fbf1758370880abc0d78564.tar.gz
-sha256 2550586c993ce4a8c23c8b11968ea36192116a896a2504799cc65307d769c094 COPYING
+sha256 925207e16e5f8b4c0ea228a4e69277c546fb1f7776312e2573ba886c906cd1de libbroadvoice-f65b0f50c8c767229fbf1758370880abc0d78564.tar.xz
+sha256 2550586c993ce4a8c23c8b11968ea36192116a896a2504799cc65307d769c094 COPYING
diff --git a/package/libclc/libclc.hash b/package/libclc/libclc.hash
index 29728fbc76..55af32e548 100644
--- a/package/libclc/libclc.hash
+++ b/package/libclc/libclc.hash
@@ -1,3 +1,3 @@
# locally calculated
-sha256 5ea2cd2fa7fa1474d3e0580064e7a22014ef8d64dbbd7c546277fa4beb5acf86 libclc-d1cbc92e2ceee59963f5c3a576382e5bba31f060.tar.gz
-sha256 3c536c052db9afd997809e38785c9f2a9e54e2892330fa7c5b438e18a7413479 LICENSE.TXT
+sha256 4aa8cf492b0a6820e6b180dcfddccde12afb5c2d3758fc55b6d74568de1f0a3a libclc-d1cbc92e2ceee59963f5c3a576382e5bba31f060.tar.xz
+sha256 3c536c052db9afd997809e38785c9f2a9e54e2892330fa7c5b438e18a7413479 LICENSE.TXT
diff --git a/package/libg7221/libg7221.hash b/package/libg7221/libg7221.hash
index 09023f9543..c4badb403e 100644
--- a/package/libg7221/libg7221.hash
+++ b/package/libg7221/libg7221.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 330dafa58d37a585a866167bc33f8fbe06dbcfc9a69cad43fab0b6702ebf2393 libg7221-dbfc29d4806ecdace50379a2f4d68a992a6fec34.tar.gz
-sha256 26cc5f718279b45dbe34e25a2d29b2c8ca487bd9ab11b2d68c9318ff59d5c645 COPYING
+sha256 c0d694f65316b903b747d6d9778c82eb5210c462193ab283404f3f803d1732f4 libg7221-dbfc29d4806ecdace50379a2f4d68a992a6fec34.tar.xz
+sha256 26cc5f718279b45dbe34e25a2d29b2c8ca487bd9ab11b2d68c9318ff59d5c645 COPYING
diff --git a/package/libilbc/libilbc.hash b/package/libilbc/libilbc.hash
index 81a0c4e037..1792ab7133 100644
--- a/package/libilbc/libilbc.hash
+++ b/package/libilbc/libilbc.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 70cd6a4f6bbe6dcebfc4293eea7b6200f883d1bf0affa1efba819d44d274e35f libilbc-829b08c7902ceb87a261279fabb36b6d523c6e07.tar.gz
-sha256 b7f4cbb4a12cd11a3d1aeda9bd17c99f59b054de4b3ee53045531cd2fa74dd2a gips_iLBClicense.pdf
+sha256 ee2cf4ed5bced153c797928c54bc8b021bc10178b13c18605bb557658ea1cd5c libilbc-829b08c7902ceb87a261279fabb36b6d523c6e07.tar.xz
+sha256 b7f4cbb4a12cd11a3d1aeda9bd17c99f59b054de4b3ee53045531cd2fa74dd2a gips_iLBClicense.pdf
diff --git a/package/libsilk/libsilk.hash b/package/libsilk/libsilk.hash
index 6042096d82..e4a3ed0779 100644
--- a/package/libsilk/libsilk.hash
+++ b/package/libsilk/libsilk.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 01de52aa123f7bd20e500a076046f6b30d55f8e98c4029ab424bc51c46d7083d libsilk-4268a02240c35c6055b0f237c46b09b2dcf79e45.tar.gz
-sha256 62a5963f034024665641f4a9888b208f1e39aa7e29e87c9634fdcf07d3073baf COPYING
+sha256 c5666f8360673ce894540da576741f24ca2d6ee9a3b6e9bf21252517d3f938be libsilk-4268a02240c35c6055b0f237c46b09b2dcf79e45.tar.xz
+sha256 62a5963f034024665641f4a9888b208f1e39aa7e29e87c9634fdcf07d3073baf COPYING
diff --git a/package/libsvgtiny/libsvgtiny.hash b/package/libsvgtiny/libsvgtiny.hash
index 86096cef3b..ba6c125717 100644
--- a/package/libsvgtiny/libsvgtiny.hash
+++ b/package/libsvgtiny/libsvgtiny.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 082a2e8849f05e2364a942eec51a798d637c6eca44db8c73350a038ebd1fd268 libsvgtiny-ea9d99fc8b231c22d06168135e181d61f4eb2f06.tar.gz
-sha256 92b965c77be71661cae51425a6b40a5ca274f44cc13c723c90fb471a9a26a828 README
+sha256 680a0a5d9200f69ad13b0cfe41e69be2e2b29f0b4f9c51e5314e0e5e7d3a59dc libsvgtiny-ea9d99fc8b231c22d06168135e181d61f4eb2f06.tar.xz
+sha256 92b965c77be71661cae51425a6b40a5ca274f44cc13c723c90fb471a9a26a828 README
diff --git a/package/libuci/libuci.hash b/package/libuci/libuci.hash
index d4c839eb80..094e2036e3 100644
--- a/package/libuci/libuci.hash
+++ b/package/libuci/libuci.hash
@@ -1,2 +1,2 @@
# Locally computed
-sha256 bb9827863c6b7b6cf986a3de42b5716edb8a280e44b3ce39541de18062c3c00e libuci-49ec6efbdac4819033d34f08927d795f83a3932d.tar.gz
+sha256 c2513eb46b9d6b6c9130d9eeaa164d70983d18dc61596062a1bde293945521d4 libuci-49ec6efbdac4819033d34f08927d795f83a3932d.tar.xz
diff --git a/package/libyuv/libyuv.hash b/package/libyuv/libyuv.hash
index e0d4e57e1a..cd91e86c82 100644
--- a/package/libyuv/libyuv.hash
+++ b/package/libyuv/libyuv.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 395075bed7e048f5f7d4fe9cb9255ce0afcee3f8f093741a7af1a2b1c579d089 libyuv-413a8d8041f1cc5a350a47c0d81cc721e64f9fd0.tar.gz
-sha256 2b2cc1180c7e6988328ad2033b04b80117419db9c4c584918bbb3cfec7e9364f LICENSE
+sha256 545853a2c936135b3ef333e03bfa26f9ccb282c351671d78ad23c55e465e19b3 libyuv-413a8d8041f1cc5a350a47c0d81cc721e64f9fd0.tar.xz
+sha256 2b2cc1180c7e6988328ad2033b04b80117419db9c4c584918bbb3cfec7e9364f LICENSE
diff --git a/package/linux-firmware/linux-firmware.hash b/package/linux-firmware/linux-firmware.hash
index 2ebd11365f..666885a9ff 100644
--- a/package/linux-firmware/linux-firmware.hash
+++ b/package/linux-firmware/linux-firmware.hash
@@ -1,35 +1,35 @@
# Locally calculated
-sha256 83646c58fc4e3ee9a73f4fa74213c849109f48c719322346393f3e5b0fa55044 linux-firmware-20200122.tar.gz
-sha256 8116433f4004fc0c24d72b3d9e497808b724aa0e5e1cd63fc1bf66b715b1e2e9 LICENCE.Abilis
-sha256 8d5847d2971241d4d6a51c16e206379de53a6d4e203fa6f8e1c1e9279c7c4ad0 LICENSE.amdgpu
-sha256 2d6062d63b91eb750bf741498691604f75184b9fee97608ec537cd09bd6a42b4 LICENCE.Marvell
-sha256 802b7014b26c606cf6248ae8b0ab1ce6d2d1b0db236d38dd269e676cd70710f2 LICENCE.atheros_firmware
-sha256 3b5eb392b2d9d8c46d6aae26d06c187e5ea3029b12d13bc2b8deb8b3ce6bfa53 ath10k/QCA6174/hw3.0/notice_ath10k_firmware-4.txt
-sha256 631065703055d11b099477c508508f20a80b202aad548a7726564bfa59a96c91 ath10k/QCA6174/hw2.1/notice_ath10k_firmware-5.txt
-sha256 8ce5c6ea0542bf4aac31fc3ae16a39792ad22d0eae4543063fac56fb3380f021 ath10k/QCA6174/hw3.0/notice_ath10k_firmware-6.txt
-sha256 b16056fc91b82a0e3e8de8f86c2dac98201aa9dc3cbd33e8d38f1b087fcec30d LICENCE.broadcom_bcm43xx
-sha256 a5777f9e80aca0603b0648454de996168b1c530322550ccda94d6d78bcf6c061 LICENCE.chelsio_firmware
-sha256 60fbc9cccb455e1a3306c97db942d6f24fa93664be61d54c497637e6d0e2ae83 LICENCE.fw_sst_0f28
-sha256 5181b0b51efc79d5acb2c9bb92042878fdbad97a92114d4ab5e32e2b5b52fce4 LICENCE.ibt_firmware
-sha256 0e0c11073ba3c832097da38e0905da36b8a3526f219407977b13b71c6675be7d LICENCE.it913x
-sha256 e295020afd7597dc1b3bbe50a84a7e432d9cb92bc053c1c5e657b50d2517627b LICENCE.iwlwifi_firmware
-sha256 0fc67bd715b3395f3f2af464781910e9e69c4ba23da304352229b42dc9e986c3 LICENCE.microchip
-sha256 2051d5bf0755a0668f8c3d9a0d1c41d4b8cc411aba70f720fda71ae9e3b4d25c LICENCE.qat_firmware
-sha256 4071a11d878dbc0ac6d9e71203d03b151638f9d7a8bc47a54c3cb964100d5822 LICENCE.qla2xxx
-sha256 d7bec70668ddd4aae8fb4aa32870e54b49fcdb0b9b007aa9f54b53a1ac7461bd LICENCE.ralink-firmware.txt
-sha256 8568352b57f3574f9d5b2753cdb7c6e5eb2b79e82fbb9c9ba6566947467ef508 LICENCE.ralink_a_mediatek_company_firmware
-sha256 a61351665b4f264f6c631364f85b907d8f8f41f8b369533ef4021765f9f3b62e LICENCE.rtlwifi_firmware.txt
-sha256 106bef96470001e877fcf7ba0337fa6766a317650eb47fcaeb743eeebd62c4ff LICENCE.ti-connectivity
-sha256 8ea9f4aee5f53ad877041ff089e8c95d34d615ce19a3111e5e1ea70d990ed7ff LICENCE.xc4000
-sha256 30ec8a66503dc73f83937564ae70ca23aa03259e64727ff4195b5b6f695e782f LICENCE.xc5000
-sha256 f8822049f32fef2e90a197bd8cf259f476db75d549456bdca8567616a9c07ace LICENCE.xc5000c
-sha256 a064cbf83e10d72579d236a1e36032681adb8e442943ff75b57020a82992a5ed LICENSE.QualcommAtheros_ar3k
-sha256 337a55102138d7baa143ee4a4c6c91693e0113fece35d380b2a12109e8c23b3f LICENSE.QualcommAtheros_ath10k
-sha256 630fd46c95d3ac6544590c2265ba7348fbc930fb386261a1c04dcd9f403645b8 LICENSE.dib0700
-sha256 8542aeabf2761935122d693561e16766ce1bcc2b0d003204f9040b7d6d929f2e LICENSE.i915
-sha256 be904cd28cb292b80cdb6cf412ab0d9159d431671e987ad433c1f62e0988a9bc LICENSE.qcom
-sha256 fc6223d4bfe9f2f9e2eddc44b9fe5721d0caf49f01cb08d602906add686d8c6f LICENSE.radeon
-sha256 2bdd2e716f05d9737d3f9a20f9a3a3c0caee0e866100ddb0673f1178e42f92b9 LICENSE.sdma_firmware
-sha256 74d203d2fd433b73b63e8e31d8928e3817f6eaf3407c9e607802c20a5c02e6c4 WHENCE
-sha256 fa43e1b9a13b341a07adca9dbe73d0f9072d7966fdfe811c01f0dd2872d7309a qcom/NOTICE.txt
-sha256 bef9c828e84f21e7835b4de7daf954a327e1ff777871b58e116039b684c0d604 LICENCE.e100
+sha256 b668640cb407887c7b683d28e7d0db6e3921a1155ee9dae52adee9f327a8e4c3 linux-firmware-20200122.tar.xz
+sha256 8116433f4004fc0c24d72b3d9e497808b724aa0e5e1cd63fc1bf66b715b1e2e9 LICENCE.Abilis
+sha256 8d5847d2971241d4d6a51c16e206379de53a6d4e203fa6f8e1c1e9279c7c4ad0 LICENSE.amdgpu
+sha256 2d6062d63b91eb750bf741498691604f75184b9fee97608ec537cd09bd6a42b4 LICENCE.Marvell
+sha256 802b7014b26c606cf6248ae8b0ab1ce6d2d1b0db236d38dd269e676cd70710f2 LICENCE.atheros_firmware
+sha256 3b5eb392b2d9d8c46d6aae26d06c187e5ea3029b12d13bc2b8deb8b3ce6bfa53 ath10k/QCA6174/hw3.0/notice_ath10k_firmware-4.txt
+sha256 631065703055d11b099477c508508f20a80b202aad548a7726564bfa59a96c91 ath10k/QCA6174/hw2.1/notice_ath10k_firmware-5.txt
+sha256 8ce5c6ea0542bf4aac31fc3ae16a39792ad22d0eae4543063fac56fb3380f021 ath10k/QCA6174/hw3.0/notice_ath10k_firmware-6.txt
+sha256 b16056fc91b82a0e3e8de8f86c2dac98201aa9dc3cbd33e8d38f1b087fcec30d LICENCE.broadcom_bcm43xx
+sha256 a5777f9e80aca0603b0648454de996168b1c530322550ccda94d6d78bcf6c061 LICENCE.chelsio_firmware
+sha256 60fbc9cccb455e1a3306c97db942d6f24fa93664be61d54c497637e6d0e2ae83 LICENCE.fw_sst_0f28
+sha256 5181b0b51efc79d5acb2c9bb92042878fdbad97a92114d4ab5e32e2b5b52fce4 LICENCE.ibt_firmware
+sha256 0e0c11073ba3c832097da38e0905da36b8a3526f219407977b13b71c6675be7d LICENCE.it913x
+sha256 e295020afd7597dc1b3bbe50a84a7e432d9cb92bc053c1c5e657b50d2517627b LICENCE.iwlwifi_firmware
+sha256 0fc67bd715b3395f3f2af464781910e9e69c4ba23da304352229b42dc9e986c3 LICENCE.microchip
+sha256 2051d5bf0755a0668f8c3d9a0d1c41d4b8cc411aba70f720fda71ae9e3b4d25c LICENCE.qat_firmware
+sha256 4071a11d878dbc0ac6d9e71203d03b151638f9d7a8bc47a54c3cb964100d5822 LICENCE.qla2xxx
+sha256 d7bec70668ddd4aae8fb4aa32870e54b49fcdb0b9b007aa9f54b53a1ac7461bd LICENCE.ralink-firmware.txt
+sha256 8568352b57f3574f9d5b2753cdb7c6e5eb2b79e82fbb9c9ba6566947467ef508 LICENCE.ralink_a_mediatek_company_firmware
+sha256 a61351665b4f264f6c631364f85b907d8f8f41f8b369533ef4021765f9f3b62e LICENCE.rtlwifi_firmware.txt
+sha256 106bef96470001e877fcf7ba0337fa6766a317650eb47fcaeb743eeebd62c4ff LICENCE.ti-connectivity
+sha256 8ea9f4aee5f53ad877041ff089e8c95d34d615ce19a3111e5e1ea70d990ed7ff LICENCE.xc4000
+sha256 30ec8a66503dc73f83937564ae70ca23aa03259e64727ff4195b5b6f695e782f LICENCE.xc5000
+sha256 f8822049f32fef2e90a197bd8cf259f476db75d549456bdca8567616a9c07ace LICENCE.xc5000c
+sha256 a064cbf83e10d72579d236a1e36032681adb8e442943ff75b57020a82992a5ed LICENSE.QualcommAtheros_ar3k
+sha256 337a55102138d7baa143ee4a4c6c91693e0113fece35d380b2a12109e8c23b3f LICENSE.QualcommAtheros_ath10k
+sha256 630fd46c95d3ac6544590c2265ba7348fbc930fb386261a1c04dcd9f403645b8 LICENSE.dib0700
+sha256 8542aeabf2761935122d693561e16766ce1bcc2b0d003204f9040b7d6d929f2e LICENSE.i915
+sha256 be904cd28cb292b80cdb6cf412ab0d9159d431671e987ad433c1f62e0988a9bc LICENSE.qcom
+sha256 fc6223d4bfe9f2f9e2eddc44b9fe5721d0caf49f01cb08d602906add686d8c6f LICENSE.radeon
+sha256 2bdd2e716f05d9737d3f9a20f9a3a3c0caee0e866100ddb0673f1178e42f92b9 LICENSE.sdma_firmware
+sha256 74d203d2fd433b73b63e8e31d8928e3817f6eaf3407c9e607802c20a5c02e6c4 WHENCE
+sha256 fa43e1b9a13b341a07adca9dbe73d0f9072d7966fdfe811c01f0dd2872d7309a qcom/NOTICE.txt
+sha256 bef9c828e84f21e7835b4de7daf954a327e1ff777871b58e116039b684c0d604 LICENCE.e100
diff --git a/package/linux-syscall-support/linux-syscall-support.hash b/package/linux-syscall-support/linux-syscall-support.hash
index 2371dffb12..2e1d567863 100644
--- a/package/linux-syscall-support/linux-syscall-support.hash
+++ b/package/linux-syscall-support/linux-syscall-support.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 e5088b81011e30b567b6bde6bb7c22ad529c4ee8890cc5e93d58b21f2c4df56a linux-syscall-support-3f6478ac95edf86cd3da300c2c0d34a438f5dbeb.tar.gz
+sha256 ed59aa0b6851c91eadb669c5536333f3232360db08e3a7ac75743ab576d8b735 linux-syscall-support-3f6478ac95edf86cd3da300c2c0d34a438f5dbeb.tar.xz
sha256 4c1fc9acc9f3867e5c81b5d5f57c52fb9a932662bd4e2e5e43b3fe95390035f5 linux_syscall_support.h
diff --git a/package/minicom/minicom.hash b/package/minicom/minicom.hash
index dafc9da4f4..c7f641e589 100644
--- a/package/minicom/minicom.hash
+++ b/package/minicom/minicom.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 66af38ae98cdf965b9a591013df4256773f18338613ec22bbb83440968289a8a minicom-23292150e07ec264827fb6cf237ddb0ac9fc043b.tar.gz
-sha256 cf80a758014eefbf068afffe3d462fc34ff4f528527524d8e100329c42094e15 COPYING
+sha256 0ccfcabd3a96d0bb863ed7e79f2e0ec54cadb16181199d9ae7d1d5939b636616 minicom-23292150e07ec264827fb6cf237ddb0ac9fc043b.tar.xz
+sha256 cf80a758014eefbf068afffe3d462fc34ff4f528527524d8e100329c42094e15 COPYING
diff --git a/package/mmc-utils/mmc-utils.hash b/package/mmc-utils/mmc-utils.hash
index 86c644f774..81016ca12e 100644
--- a/package/mmc-utils/mmc-utils.hash
+++ b/package/mmc-utils/mmc-utils.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 df8876e0e671f502bb8872cecca3cc6d1055253fa314f3544d22829e129e024e mmc-utils-d40ec535b9d4e4c974e8c2fbfb422cd0348cc5e8.tar.gz
-sha256 c3165393bcd710624e2909327a6fbeb736c47bdbe66de1c1a364ac7324d3e4d6 mmc.h
+sha256 2cbcc2eb76e9f8a4c377b7aa66d3733e9145eef13e9d61727f4401a4ece5b807 mmc-utils-d40ec535b9d4e4c974e8c2fbfb422cd0348cc5e8.tar.xz
+sha256 c3165393bcd710624e2909327a6fbeb736c47bdbe66de1c1a364ac7324d3e4d6 mmc.h
diff --git a/package/net-tools/net-tools.hash b/package/net-tools/net-tools.hash
index 510cac3659..e35db5a1c2 100644
--- a/package/net-tools/net-tools.hash
+++ b/package/net-tools/net-tools.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 f7cfe9e73825bac9ab1a6f99d1fc7f54bfd9d33a6f62ba58d28a566905c4e86c net-tools-479bb4a7e11a4084e2935c0a576388f92469225b.tar.gz
+sha256 c23fba7f3bbdd0f5b3eee578bba8d73314bc273466eb648b2b731e65359b844f net-tools-479bb4a7e11a4084e2935c0a576388f92469225b.tar.xz
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 COPYING
diff --git a/package/netcat-openbsd/netcat-openbsd.hash b/package/netcat-openbsd/netcat-openbsd.hash
index cfa65ee24b..597b3f6698 100644
--- a/package/netcat-openbsd/netcat-openbsd.hash
+++ b/package/netcat-openbsd/netcat-openbsd.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 b46c11f83f66c41ad8f413e842c51a9fb2c495e9a2ed836e6ee75bc314545c30 netcat-openbsd-debian_1.195-2.tar.gz
-sha256 e2e86d58c38f044a49f51e45515747585db58a2305419c73323eaad88fcaef5c debian/copyright
+sha256 38e95b4b786fff7e83fe4ac11642f1eadcdd15339e06033a525d05556179accc netcat-openbsd-debian_1.195-2.tar.xz
+sha256 e2e86d58c38f044a49f51e45515747585db58a2305419c73323eaad88fcaef5c debian/copyright
diff --git a/package/netsurf-buildsystem/netsurf-buildsystem.hash b/package/netsurf-buildsystem/netsurf-buildsystem.hash
index 8e3bbabf05..2c7e75fd7f 100644
--- a/package/netsurf-buildsystem/netsurf-buildsystem.hash
+++ b/package/netsurf-buildsystem/netsurf-buildsystem.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 2e2d93e25623761c5de39c8c94750c982335acc1c2da4439b1a2088ecd4455c9 netsurf-buildsystem-7574b41345968b5f7e9ca5875faccb1478ce0555.tar.gz
+sha256 839d0f169ab5b50c7fc824aee8ed900880cc51ef551dbfb5c2914554702cae02 netsurf-buildsystem-7574b41345968b5f7e9ca5875faccb1478ce0555.tar.xz
sha256 b2ddc1d607332423f6cf415b2ac619a1c03dd565facdc39a571282a520929a65 llvm/LICENSE.TXT
diff --git a/package/odhcp6c/odhcp6c.hash b/package/odhcp6c/odhcp6c.hash
index 2ac4a68219..2b8e8cc750 100644
--- a/package/odhcp6c/odhcp6c.hash
+++ b/package/odhcp6c/odhcp6c.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 e715c1408982152306c65f1c3ce7c58fb6f15fa8f9626c266819119239f32418 odhcp6c-f575351cbb3defc0bf52680c9082912a6c264374.tar.gz
+sha256 7f8b51028c3b931f2c0f71e76ef259af0e1c9039122c2f0b5d89bf681277b61c odhcp6c-f575351cbb3defc0bf52680c9082912a6c264374.tar.xz
sha256 e6d6a009505e345fe949e1310334fcb0747f28dae2856759de102ab66b722cb4 COPYING
diff --git a/package/opkg-utils/opkg-utils.hash b/package/opkg-utils/opkg-utils.hash
index 471ce4c2fa..a541ff9df6 100644
--- a/package/opkg-utils/opkg-utils.hash
+++ b/package/opkg-utils/opkg-utils.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 acb208fe32f93f7fc0f7fdf9f870c07e40a016bcb7fa07ada6c99503e033dafd opkg-utils-0.4.3.tar.gz
+sha256 1413c6408b66fea158ab1f78a5bbc21b08078d0a5a51c55a7144e96e9ae57ac5 opkg-utils-0.4.3.tar.xz
sha256 32b1062f7da84967e7019d01ab805935caa7ab7321a7ced0e30ebe75e5df1670 COPYING
diff --git a/package/piglit/piglit.hash b/package/piglit/piglit.hash
index 1a0011850e..3ab8c825aa 100644
--- a/package/piglit/piglit.hash
+++ b/package/piglit/piglit.hash
@@ -1,5 +1,5 @@
# Locally calculated
-sha256 0d42dc46295a6b3ecfeb379887bd78128ce7938242ae56d58d5e9b3dea8c98b6 piglit-2affee53f3ad7a96f5b397a2b6d6408af8a374b0.tar.gz
+sha256 9d1737e9bdf9264c132c8cfa9b742de4eb73e067825aaf2a3a8ebea8eb9c6ed5 piglit-2affee53f3ad7a96f5b397a2b6d6408af8a374b0.tar.xz
sha256 dcc398730859aee7cc1d6aa57f526f8d181b47bb3a49830e85b5723d5bc2c3bc COPYING
sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 licences/GPL-2
sha256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903 licences/GPL-3
diff --git a/package/prelink-cross/prelink-cross.hash b/package/prelink-cross/prelink-cross.hash
index 3ac33ac3d0..f81ba0531a 100644
--- a/package/prelink-cross/prelink-cross.hash
+++ b/package/prelink-cross/prelink-cross.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 cb3f5d833cd74b7e90e38465c9c948b0f4138c017509cb91e391b0931063429e prelink-cross-a853a5d715d84eec93aa68e8f2df26b7d860f5b2.tar.gz
+sha256 cac595b68980c684f8c81065ce4789aa588c5b86fa7fa351293b39d147b81592 prelink-cross-a853a5d715d84eec93aa68e8f2df26b7d860f5b2.tar.xz
sha256 b8a2f73f743dc1a51aff23f1aacbca4b868564db52496fa3c0caba755bfd1eaf COPYING
diff --git a/package/psplash/psplash.hash b/package/psplash/psplash.hash
index 46d5e12ceb..5cc7102d5a 100644
--- a/package/psplash/psplash.hash
+++ b/package/psplash/psplash.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 0042192bf94be4f5792d9ff6b7a2ddff77c79e51274745180d14be5815b3a0f4 psplash-fd33a9b3d68c89fa22ff6873f4f9fd28bd85830c.tar.gz
-sha256 f9c375a1be4a41f7b70301dd83c91cb89e41567478859b77eef375a52d782505 COPYING
+sha256 c9d99a2a4bc0aceb958dfa166b41bae62aa591d050f55e45bf17ef4bdadc3cb6 psplash-fd33a9b3d68c89fa22ff6873f4f9fd28bd85830c.tar.xz
+sha256 f9c375a1be4a41f7b70301dd83c91cb89e41567478859b77eef375a52d782505 COPYING
diff --git a/package/qt-webkit-kiosk/qt-webkit-kiosk.hash b/package/qt-webkit-kiosk/qt-webkit-kiosk.hash
index 1e56b4eba7..c57c6db311 100644
--- a/package/qt-webkit-kiosk/qt-webkit-kiosk.hash
+++ b/package/qt-webkit-kiosk/qt-webkit-kiosk.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 07fbc3f5053f55e4ef6566a15b42b74895314b48a0dfd46f0984f96f0fbb3e02 qt-webkit-kiosk-a7720e50f2bd70aad99e0b465f5c4a57aca48127.tar.gz
+sha256 6110c3c4982fcd1d14d24e0f218a77685160364e3dcc2375ae6544016dc5753d qt-webkit-kiosk-a7720e50f2bd70aad99e0b465f5c4a57aca48127.tar.xz
sha256 de59ec6c939f4c4def79c0a996b3bd5626895fcbd1ae108e7bddb1dac8218381 doc/lgpl.html
diff --git a/package/rcw/rcw.hash b/package/rcw/rcw.hash
index 76b6373942..589c4f9e7e 100644
--- a/package/rcw/rcw.hash
+++ b/package/rcw/rcw.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 b69a6a8b187ba794e0af716a509ced2bbac83da0f6e94b5c7331a34619db21b1 rcw-LSDK-19.09.tar.gz
-sha256 a531b3146425e592db17a51ff39c4801cb01fb4055ffdaada0572decc0655bcd LICENSE
+sha256 b1fcd5485872264b989dad175ca003eb6dbaf46c8bf08bd2ebb4438adfc10cdd rcw-LSDK-19.09.tar.xz
+sha256 a531b3146425e592db17a51ff39c4801cb01fb4055ffdaada0572decc0655bcd LICENSE
diff --git a/package/rtc-tools/rtc-tools.hash b/package/rtc-tools/rtc-tools.hash
index 81be1afe4e..1304c386c6 100644
--- a/package/rtc-tools/rtc-tools.hash
+++ b/package/rtc-tools/rtc-tools.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 152d8455bae5ad672e99bb91dfbed5b8b4bd8b0325146d1cf1c4d80b6e0d8a16 rtc-tools-33ef4aa1c92b0c92a351284d93d1ac5570de9cc7.tar.gz
-sha256 7ae50a5344af14d6231aff6814632a220b3127da4099aea2c6070fd79c407c1a COPYING
+sha256 d9d7422eb487f7576212785e5c41ea056bc2027c1d0028cbdeb3176a9e0cf44d rtc-tools-33ef4aa1c92b0c92a351284d93d1ac5570de9cc7.tar.xz
+sha256 7ae50a5344af14d6231aff6814632a220b3127da4099aea2c6070fd79c407c1a COPYING
diff --git a/package/rtmpdump/rtmpdump.hash b/package/rtmpdump/rtmpdump.hash
index 6e85a58419..f4d19b828e 100644
--- a/package/rtmpdump/rtmpdump.hash
+++ b/package/rtmpdump/rtmpdump.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 b98fceba5155c5a1ee3f26550ea94144c72d8b8c5a050c213bb55dab330ad6ff rtmpdump-c5f04a58fc2aeea6296ca7c44ee4734c18401aa3.tar.gz
-sha256 03fe7ca91cc28e99b4003d5b3bd4ce3b084d4c475fdf9975cf0e7fdf4dc739cd librtmp/COPYING
+sha256 1268ae69525486eb6d2e8eea100f291fe64c620b10944b458dbc14aeb5afa53b rtmpdump-c5f04a58fc2aeea6296ca7c44ee4734c18401aa3.tar.xz
+sha256 03fe7ca91cc28e99b4003d5b3bd4ce3b084d4c475fdf9975cf0e7fdf4dc739cd librtmp/COPYING
diff --git a/package/speexdsp/speexdsp.hash b/package/speexdsp/speexdsp.hash
index 955c4c0a0c..6c192342af 100644
--- a/package/speexdsp/speexdsp.hash
+++ b/package/speexdsp/speexdsp.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 3f3997997f3af3e7382b44abc9d2a55db5bd8754b22e798e2d16ac309cd6474a speexdsp-SpeexDSP-1.2.0.tar.gz
-sha256 671bb5d8fd3c6b05a2e831d90f978ac27965c92bd8ea6d16b3df76e3440c0e9f COPYING
+sha256 b15f098f58aa6787e270b69aac66e8e25fd1597e05cce8fc53c27f288e095906 speexdsp-SpeexDSP-1.2.0.tar.xz
+sha256 671bb5d8fd3c6b05a2e831d90f978ac27965c92bd8ea6d16b3df76e3440c0e9f COPYING
diff --git a/package/stm32flash/stm32flash.hash b/package/stm32flash/stm32flash.hash
index 3adcb96d31..e57fc43e5b 100644
--- a/package/stm32flash/stm32flash.hash
+++ b/package/stm32flash/stm32flash.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 58788826b80f16f2084632299340f9a3155b326936210e5f7a58f9dbd1b18bdd stm32flash-3cebf121f7b32b9edfcb0d49f0fb43ccf33e5650.tar.gz
-sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 gpl-2.0.txt
+sha256 c79d3e6b177ba0fa481f3eaf2ee0d9236be316c2f8c0d6a37fe9719836fe96a6 stm32flash-3cebf121f7b32b9edfcb0d49f0fb43ccf33e5650.tar.xz
+sha256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643 gpl-2.0.txt
diff --git a/package/ti-sgx-demos/ti-sgx-demos.hash b/package/ti-sgx-demos/ti-sgx-demos.hash
index 31044e9e3f..90884b69af 100644
--- a/package/ti-sgx-demos/ti-sgx-demos.hash
+++ b/package/ti-sgx-demos/ti-sgx-demos.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 1324115da376bc8108923c596a3c4d8df24a968395461df11e0b715764a942d4 ti-sgx-demos-bb8b74cdd1323e76697b3eb2258f863b15fee287.tar.gz
-sha256 052741ea66a4a48e0ef8cab259d2dc136e7cf52fda694af8d1fe9bd28abe333b LegalNotice.txt
+sha256 d0fec2304114fc99692f48ccc6520b9554b32a83ae4461c7f8616365a7e3012e ti-sgx-demos-bb8b74cdd1323e76697b3eb2258f863b15fee287.tar.xz
+sha256 052741ea66a4a48e0ef8cab259d2dc136e7cf52fda694af8d1fe9bd28abe333b LegalNotice.txt
diff --git a/package/ti-sgx-km/ti-sgx-km.hash b/package/ti-sgx-km/ti-sgx-km.hash
index 1fd07d7467..9b990ef1c6 100644
--- a/package/ti-sgx-km/ti-sgx-km.hash
+++ b/package/ti-sgx-km/ti-sgx-km.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 f1505f38f9e82f958673bb1755e65090bdbc513a68d41640561d9d491bc4b0e3 ti-sgx-km-4519ed3b83d1d72207ddc2874c7eb5e5a7f20d8d.tar.gz
-sha256 e9d660547691b2a9232850fd43aac16d40fd063023166fd27162020c30dc2bd4 eurasia_km/GPL-COPYING
+sha256 6eaec6250eef399bb849d924451094c57ab635b8ff9aedca83ecad7b1ca275fb ti-sgx-km-4519ed3b83d1d72207ddc2874c7eb5e5a7f20d8d.tar.xz
+sha256 e9d660547691b2a9232850fd43aac16d40fd063023166fd27162020c30dc2bd4 eurasia_km/GPL-COPYING
diff --git a/package/ti-sgx-libgbm/ti-sgx-libgbm.hash b/package/ti-sgx-libgbm/ti-sgx-libgbm.hash
index 32af5ad5ae..9ecb94a7b5 100644
--- a/package/ti-sgx-libgbm/ti-sgx-libgbm.hash
+++ b/package/ti-sgx-libgbm/ti-sgx-libgbm.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 85e3eafcd06caccd8c4cea3081b1406ae51c07e19541ac19b9c33a5b41fec82d ti-sgx-libgbm-c5ddc6a37bb78ac753b317b17d890d1f7338dea6.tar.gz
-sha256 58fe00de76ae5d533e1c562950e1848682c03155a653d76870cf0a3c59be8b4c gbm.h
+sha256 8f0222c36214108790b0960da47deec1fbf3a28f9afa132e6464d38dc2eadf9c ti-sgx-libgbm-c5ddc6a37bb78ac753b317b17d890d1f7338dea6.tar.xz
+sha256 58fe00de76ae5d533e1c562950e1848682c03155a653d76870cf0a3c59be8b4c gbm.h
diff --git a/package/ti-sgx-um/ti-sgx-um.hash b/package/ti-sgx-um/ti-sgx-um.hash
index ff54ecbd6d..4abf40897a 100644
--- a/package/ti-sgx-um/ti-sgx-um.hash
+++ b/package/ti-sgx-um/ti-sgx-um.hash
@@ -1,3 +1,3 @@
# Locally computed:
-sha256 cb1373a6335af3d3741c6b11cf217afc8bdbe182642229df359c38e3ccfc5866 ti-sgx-um-2a2e5bb090ced870d73ed4edbc54793e952cc6d8.tar.gz
-sha256 368c306246c9130b5c90a6fef2f80085f70b6225b3f552654a288c0f39fc1531 TI-Linux-Graphics-DDK-UM-Manifest.doc
+sha256 cf8c63b4e0dab53f730d7436ca2c6000f1406e10f20a3c1d6a738e051c671196 ti-sgx-um-2a2e5bb090ced870d73ed4edbc54793e952cc6d8.tar.xz
+sha256 368c306246c9130b5c90a6fef2f80085f70b6225b3f552654a288c0f39fc1531 TI-Linux-Graphics-DDK-UM-Manifest.doc
diff --git a/package/trace-cmd/trace-cmd.hash b/package/trace-cmd/trace-cmd.hash
index c6447f34d4..b126d5ea82 100644
--- a/package/trace-cmd/trace-cmd.hash
+++ b/package/trace-cmd/trace-cmd.hash
@@ -1,4 +1,4 @@
# Locally computed
-sha256 3b3f564cc6ee30341051ccb7589b42f3abe4e676a21c029c7c127c7edf5bdcf0 trace-cmd-trace-cmd-v2.7.tar.gz
-sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 COPYING
-sha256 70f297763149e72306919c924e164f83041d5e512868d4c8c1826c171b3e49f9 COPYING.LIB
+sha256 61790975f1ddf0c9d6fd977da6696274daa48fca7f7b8790d41f9caee0d3c105 trace-cmd-trace-cmd-v2.7.tar.xz
+sha256 ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6 COPYING
+sha256 70f297763149e72306919c924e164f83041d5e512868d4c8c1826c171b3e49f9 COPYING.LIB
diff --git a/package/tremor/tremor.hash b/package/tremor/tremor.hash
index 89661a64cd..d7845020d0 100644
--- a/package/tremor/tremor.hash
+++ b/package/tremor/tremor.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 ba94cfdf886399c550f76908285bfa9e322f24085de6f1810c2abea565c13a15 tremor-7c30a66346199f3f09017a09567c6c8a3a0eedc8.tar.gz
-sha256 d2ab5758336489da61c12cc5bb757da5339c4ae9001f9bb0562b4370249af814 COPYING
+sha256 29ea1a5d39b4ed0565934282140fa07a02f5bab05226571d6f6d72f134211c0f tremor-7c30a66346199f3f09017a09567c6c8a3a0eedc8.tar.xz
+sha256 d2ab5758336489da61c12cc5bb757da5339c4ae9001f9bb0562b4370249af814 COPYING
diff --git a/package/ubus/ubus.hash b/package/ubus/ubus.hash
index bda58bc30c..c72ce8af1e 100644
--- a/package/ubus/ubus.hash
+++ b/package/ubus/ubus.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 93ef2612853641ca8d16d07527115c72ed03f8eaa1c727a01b069a4e814247c0 ubus-34c6e818e431cc53478a0f7c7c1eca07d194d692.tar.gz
+sha256 b769bf502f178e4da4f63148975fd52288e8b78d55bb95fee038058b1053c885 ubus-34c6e818e431cc53478a0f7c7c1eca07d194d692.tar.xz
sha256 f53187f011575f6ec6c529136fd4658d67e674227c80b7b72c99b3654454ae7f ubusd_acl.h
diff --git a/package/uemacs/uemacs.hash b/package/uemacs/uemacs.hash
index 7dcbba926e..8ca6b61c1b 100644
--- a/package/uemacs/uemacs.hash
+++ b/package/uemacs/uemacs.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 9b4a849f65edb482f59bc40f646e7cd79915b3030ea9bd825868347217db3c96 uemacs-1cdcf9df88144049750116e36fe20c8c39fa2517.tar.gz
-sha256 6e2a4cf41ec8d4379c154923349733bc0d3935c6fa72c4337cf1bc137b98b90a README
+sha256 731e2703af6777739f1902d31d9fbac01bba1f40a84042c55454fdcacde650ad uemacs-1cdcf9df88144049750116e36fe20c8c39fa2517.tar.xz
+sha256 6e2a4cf41ec8d4379c154923349733bc0d3935c6fa72c4337cf1bc137b98b90a README
diff --git a/package/uhttpd/uhttpd.hash b/package/uhttpd/uhttpd.hash
index e8bdb0bb6b..24a6f03445 100644
--- a/package/uhttpd/uhttpd.hash
+++ b/package/uhttpd/uhttpd.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 9325c95c9bb1c51bf135700a65738884fa9cd548ff8166c8b61fdbf99825cd6d uhttpd-a8bf9c00842224edb394e79909053f7628ee6a82.tar.gz
+sha256 8efd4f8adb01c728a7e4322c30369181ef0946f303f93b1a76c13556634e7a01 uhttpd-a8bf9c00842224edb394e79909053f7628ee6a82.tar.xz
sha256 2a61a8a690e7646a4bfe4261bf77c49f47588db5fc234b3cc66809dcc0cb3985 uhttpd.h
diff --git a/package/ustream-ssl/ustream-ssl.hash b/package/ustream-ssl/ustream-ssl.hash
index ba315f88dc..83396395f5 100644
--- a/package/ustream-ssl/ustream-ssl.hash
+++ b/package/ustream-ssl/ustream-ssl.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 63ecc9d78ef83020a4539a89c8a3690657e7bbe7580ae02cc0e7b4267ffea5cd ustream-ssl-23a3f2830341acd1db149175baf7315a33bd0edb.tar.gz
-sha256 90dd1590cf400a548438e2575e1ff46d8fb8cebae7d09f544aae7e059e30b6c5 ustream-ssl.h
+sha256 a5400aa8f8d4eaa14db3ab4d91d2a8e98c10593f71c7149db68e1fb1fb0e3f2a ustream-ssl-23a3f2830341acd1db149175baf7315a33bd0edb.tar.xz
+sha256 90dd1590cf400a548438e2575e1ff46d8fb8cebae7d09f544aae7e059e30b6c5 ustream-ssl.h
diff --git a/package/vboot-utils/vboot-utils.hash b/package/vboot-utils/vboot-utils.hash
index e2ddf77734..ab2cd94239 100644
--- a/package/vboot-utils/vboot-utils.hash
+++ b/package/vboot-utils/vboot-utils.hash
@@ -1,3 +1,3 @@
# Locally computed
-sha256 d95b64b1f1de4a3ffa5c2e446d7c8e92aa197aee10de24206b2ea2deb5a8b947 vboot-utils-bbdd62f9b030db7ad8eef789aaf58a7ff9a25656.tar.gz
+sha256 1dd1142509bd3fd911758fdbd824d234c75b01475d1a3a1384f19ef36e37b3ed vboot-utils-bbdd62f9b030db7ad8eef789aaf58a7ff9a25656.tar.xz
sha256 cb9dc8e96aedf9120b6757a60387db10f3c1a8e3fd97bb9d0f11327be5a7ed4d LICENSE
diff --git a/package/wilink-bt-firmware/wilink-bt-firmware.hash b/package/wilink-bt-firmware/wilink-bt-firmware.hash
index 7adcc86037..4aaa372020 100644
--- a/package/wilink-bt-firmware/wilink-bt-firmware.hash
+++ b/package/wilink-bt-firmware/wilink-bt-firmware.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 9e3c3e8aa19e6cf59a72f235391a095d6d953c325b669d8a7815e32616c232df wilink-bt-firmware-43fca73c6a98c63fcb98f82af5bf83761778e005.tar.gz
-sha256 21fd99ce784dc33b39ec0b4a383a9a9b8dafea261d73ad4548683c4eecd87f37 LICENSE
+sha256 27bbfa58fdc9bdb9d87469fcc857d83f91612f8c493ab810335db8f4c22c2f85 wilink-bt-firmware-43fca73c6a98c63fcb98f82af5bf83761778e005.tar.xz
+sha256 21fd99ce784dc33b39ec0b4a383a9a9b8dafea261d73ad4548683c4eecd87f37 LICENSE
diff --git a/package/x11r7/xdriver_xf86-video-imx-viv/xdriver_xf86-video-imx-viv.hash b/package/x11r7/xdriver_xf86-video-imx-viv/xdriver_xf86-video-imx-viv.hash
index e5d46c86f3..2c3f2c0438 100644
--- a/package/x11r7/xdriver_xf86-video-imx-viv/xdriver_xf86-video-imx-viv.hash
+++ b/package/x11r7/xdriver_xf86-video-imx-viv/xdriver_xf86-video-imx-viv.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 61b3a7a22f80d1cbc797c329615e1699f3906c9261de7eabcf0de2bf2399de55 xdriver_xf86-video-imx-viv-rel_imx_4.9.x_1.0.0_ga.tar.gz
+sha256 3b92ea930e24d514f39d61fa289bb332c26ac2595122c16b3994c050c417fe6c xdriver_xf86-video-imx-viv-rel_imx_4.9.x_1.0.0_ga.tar.xz
sha256 9d3e373f0440cc0c58853e963636a7c1ffda9308ec5f30ebe9adfb9c16a8a1e4 COPYING-MIT
diff --git a/package/x11r7/xdriver_xf86-video-intel/xdriver_xf86-video-intel.hash b/package/x11r7/xdriver_xf86-video-intel/xdriver_xf86-video-intel.hash
index 321ae5b606..8ea8564a3e 100644
--- a/package/x11r7/xdriver_xf86-video-intel/xdriver_xf86-video-intel.hash
+++ b/package/x11r7/xdriver_xf86-video-intel/xdriver_xf86-video-intel.hash
@@ -1,3 +1,4 @@
# Locally computed
sha256 029afa61e785f6e0fb18d2c2f1619e97af8b6f19c7fa0ba9923eea03ccf78626 xdriver_xf86-video-intel-5ca3ac1a90af177eb111a965e9b4dd8a27cc58fc.tar.gz
+sha256 a0070d42d99fd0d1b0a72be1cf96c2af3cbfbcd339fac46235a1d128ff82c347 xdriver_xf86-video-intel-f66d39544bb8339130c96d282a80f87ca1606caf.tar.xz
sha256 5808e89f4b9a30afc59f335bfa8219ecf2dacb89a81d16b322bc6d92993a48fa COPYING
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 4/7] WIP: support/testing: update git-hash checks with new archive format
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
` (2 preceding siblings ...)
2020-11-19 21:23 ` [Buildroot] [PATCH 3/7] WIP: boot+packages: update hash to new git-tarballs format Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 5/7] support/download: change format of archives generated from svn Yann E. MORIN
` (3 subsequent siblings)
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
** WIP: should be squashed into the commit that changes the git backend.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Vincent Fazio <vfazio@xes-inc.com>
---
.../tests/download/br2-external/git-hash/package/bad/bad.hash | 2 +-
.../tests/download/br2-external/git-hash/package/good/good.hash | 2 +-
.../git-partial-sha1-branch-head.hash | 2 +-
.../git-partial-sha1-reachable-by-branch.hash | 2 +-
.../git-partial-sha1-reachable-by-tag.hash | 2 +-
.../git-partial-sha1-tag-itself.hash | 2 +-
.../git-partial-sha1-tag-points-to.hash | 2 +-
.../package/git-sha1-branch-head/git-sha1-branch-head.hash | 2 +-
.../git-sha1-reachable-by-branch.hash | 2 +-
.../git-sha1-reachable-by-tag/git-sha1-reachable-by-tag.hash | 2 +-
.../package/git-sha1-tag-itself/git-sha1-tag-itself.hash | 2 +-
.../package/git-sha1-tag-points-to/git-sha1-tag-points-to.hash | 2 +-
.../package/git-submodule-disabled/git-submodule-disabled.hash | 2 +-
.../package/git-submodule-enabled/git-submodule-enabled.hash | 2 +-
.../download/br2-external/git-refs/package/git-tag/git-tag.hash | 2 +-
.../git-refs/package/git-wrong-content/git-wrong-content.hash | 2 +-
16 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/support/testing/tests/download/br2-external/git-hash/package/bad/bad.hash b/support/testing/tests/download/br2-external/git-hash/package/bad/bad.hash
index b9e1baec84..741d28a0cc 100644
--- a/support/testing/tests/download/br2-external/git-hash/package/bad/bad.hash
+++ b/support/testing/tests/download/br2-external/git-hash/package/bad/bad.hash
@@ -1 +1 @@
-sha256 0000000000000000000000000000000000000000000000000000000000000000 bad-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.gz
+sha256 0000000000000000000000000000000000000000000000000000000000000000 bad-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.xz
diff --git a/support/testing/tests/download/br2-external/git-hash/package/good/good.hash b/support/testing/tests/download/br2-external/git-hash/package/good/good.hash
index 9e92ab8ab9..4a5bcf48de 100644
--- a/support/testing/tests/download/br2-external/git-hash/package/good/good.hash
+++ b/support/testing/tests/download/br2-external/git-hash/package/good/good.hash
@@ -1 +1 @@
-sha256 d00ae598e9e770d607621a86766030b42eaa58156cb8d482b043969da7963c23 good-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.gz
+sha256 922c3f71d3a5639fa5fca6f05a253e9268e42aa5bf35e82653e3e578c1fd1e1f good-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.xz
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-branch-head/git-partial-sha1-branch-head.hash b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-branch-head/git-partial-sha1-branch-head.hash
index 648bcceca0..f99244d3bd 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-branch-head/git-partial-sha1-branch-head.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-branch-head/git-partial-sha1-branch-head.hash
@@ -1,2 +1,2 @@
-sha256 70b76187369e47db69dac02c5696e63b35199cd20490fa473d289dd377774613 git-partial-sha1-branch-head-68c197d0879d485f4f6c.tar.gz
+sha256 6de8f91e390aa4e4f0719bcd7388872c2a2979914f95a634d06df436018cfa41 git-partial-sha1-branch-head-68c197d0879d485f4f6c.tar.xz
sha256 2c1126513651b0d346a4e6d1bb75ac1c9999217e18026302d27bea47b06c7fb2 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-branch/git-partial-sha1-reachable-by-branch.hash b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-branch/git-partial-sha1-reachable-by-branch.hash
index d064362e2c..8b8531c0a5 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-branch/git-partial-sha1-reachable-by-branch.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-branch/git-partial-sha1-reachable-by-branch.hash
@@ -1,2 +1,2 @@
-sha256 9db079b9e215799d59975db7b2b26671eff1932ee6cf1075296f2ace3e2cb746 git-partial-sha1-reachable-by-branch-317406308d9259e2231b.tar.gz
+sha256 7610e7ec450d320818f7104b9cb365c7f12ead46628fcc10ec7f3cc1f3e0ecbb git-partial-sha1-reachable-by-branch-317406308d9259e2231b.tar.xz
sha256 fabbc65c442bacb5e69b7adfea6d14fbbfc1327134322efd12771dc84387d507 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-tag/git-partial-sha1-reachable-by-tag.hash b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-tag/git-partial-sha1-reachable-by-tag.hash
index 7696086690..21ef42b27d 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-tag/git-partial-sha1-reachable-by-tag.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-reachable-by-tag/git-partial-sha1-reachable-by-tag.hash
@@ -1,2 +1,2 @@
-sha256 f2ef9772f13a9ef9a2c7cde0795e179defb12320d1747fc8d2408748ef5844c2 git-partial-sha1-reachable-by-tag-46bae5b639e5a18e2cc4.tar.gz
+sha256 f4f46473c3184b8396ee49f05009eceb8e5882588b2cd574836f485bf5ff520d git-partial-sha1-reachable-by-tag-46bae5b639e5a18e2cc4.tar.xz
sha256 2de87d77a2f226813f2d9bda906e970e4195605cdba6680443c0c04d89c532b6 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-itself/git-partial-sha1-tag-itself.hash b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-itself/git-partial-sha1-tag-itself.hash
index e627caf91e..e60b5ce1a0 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-itself/git-partial-sha1-tag-itself.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-itself/git-partial-sha1-tag-itself.hash
@@ -1,2 +1,2 @@
-sha256 721143b41b8e56cfd9025833f1602e900a490627db2504e5b4907baa23e0019e git-partial-sha1-tag-itself-2b0e0d98a49c97da6a61.tar.gz
+sha256 e0423db97d8f7c9af20f0534915c8a9a539856fa6aa072b5b47830a4e116cc40 git-partial-sha1-tag-itself-2b0e0d98a49c97da6a61.tar.xz
sha256 6de8772a0a58fa62e2b8c58d4dae55c9db7534ad3b3918ecc849a9008d58f081 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-points-to/git-partial-sha1-tag-points-to.hash b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-points-to/git-partial-sha1-tag-points-to.hash
index f957a0e23c..96a9143344 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-points-to/git-partial-sha1-tag-points-to.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-partial-sha1-tag-points-to/git-partial-sha1-tag-points-to.hash
@@ -1,2 +1,2 @@
-sha256 0fbf7fe935f962ceaafcf8e0ffd25dd2a83752c3f0fd055a942a53f8c9235fa7 git-partial-sha1-tag-points-to-516c9c5f64ec66534d4d.tar.gz
+sha256 48c28bc7f36745f5e5027997541704415720cc94cddac3405edf8ce0d43b84ae git-partial-sha1-tag-points-to-516c9c5f64ec66534d4d.tar.xz
sha256 6de8772a0a58fa62e2b8c58d4dae55c9db7534ad3b3918ecc849a9008d58f081 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-branch-head/git-sha1-branch-head.hash b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-branch-head/git-sha1-branch-head.hash
index 3e8f76d31a..bebe0de985 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-branch-head/git-sha1-branch-head.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-branch-head/git-sha1-branch-head.hash
@@ -1,2 +1,2 @@
-sha256 a21a2507b6d94ad484e49e3a9ae698f672a57469aab8e1779da77df7c9d4d337 git-sha1-branch-head-68c197d0879d485f4f6cee85544722b79e68e59f.tar.gz
+sha256 16508d53698c19fbc8f448e2ab25f0fd718e307fb8ea31b6e47b40a6f0d0875b git-sha1-branch-head-68c197d0879d485f4f6cee85544722b79e68e59f.tar.xz
sha256 2c1126513651b0d346a4e6d1bb75ac1c9999217e18026302d27bea47b06c7fb2 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-branch/git-sha1-reachable-by-branch.hash b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-branch/git-sha1-reachable-by-branch.hash
index f8d7b5dc48..5c4975ea7e 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-branch/git-sha1-reachable-by-branch.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-branch/git-sha1-reachable-by-branch.hash
@@ -1,2 +1,2 @@
-sha256 8909e76d898e651af0bc23fae4103b87888bfe77448d71aaf1fbec3da97a3ce2 git-sha1-reachable-by-branch-317406308d9259e2231bd0d6ddad3de3832bce08.tar.gz
+sha256 e11a2e4509e883fed7f072bb64bf7babff30b3b3a9b1c8d45535aeea80fa2c89 git-sha1-reachable-by-branch-317406308d9259e2231bd0d6ddad3de3832bce08.tar.xz
sha256 fabbc65c442bacb5e69b7adfea6d14fbbfc1327134322efd12771dc84387d507 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-tag/git-sha1-reachable-by-tag.hash b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-tag/git-sha1-reachable-by-tag.hash
index 0eb0ca0917..ba4379454d 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-tag/git-sha1-reachable-by-tag.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-reachable-by-tag/git-sha1-reachable-by-tag.hash
@@ -1,2 +1,2 @@
-sha256 9b20256a3058221a8e91031f11700d9945ea84e8f328fa8e42e1cb9f7a30e3b2 git-sha1-reachable-by-tag-46bae5b639e5a18e2cc4dc508f080d566baeff59.tar.gz
+sha256 7b7ec0636ed5a5ece5c764acc765c471eaa5f9f805f7eb2fc3dab7745ee6fd03 git-sha1-reachable-by-tag-46bae5b639e5a18e2cc4dc508f080d566baeff59.tar.xz
sha256 2de87d77a2f226813f2d9bda906e970e4195605cdba6680443c0c04d89c532b6 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-itself/git-sha1-tag-itself.hash b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-itself/git-sha1-tag-itself.hash
index 48c1348538..ebe9bd4f4e 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-itself/git-sha1-tag-itself.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-itself/git-sha1-tag-itself.hash
@@ -1,2 +1,2 @@
-sha256 7d301c1a1054d6aee49193ca9e938f4da561ff73fb01719662865aa38bdc4361 git-sha1-tag-itself-2b0e0d98a49c97da6a618ab36337e2058eb733a2.tar.gz
+sha256 e001dda03fbee456a726a35c3224677017116ad3231c29a4523af8cb71fbe95c git-sha1-tag-itself-2b0e0d98a49c97da6a618ab36337e2058eb733a2.tar.xz
sha256 6de8772a0a58fa62e2b8c58d4dae55c9db7534ad3b3918ecc849a9008d58f081 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-points-to/git-sha1-tag-points-to.hash b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-points-to/git-sha1-tag-points-to.hash
index 3dcafc2094..9b799ff320 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-points-to/git-sha1-tag-points-to.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-sha1-tag-points-to/git-sha1-tag-points-to.hash
@@ -1,2 +1,2 @@
-sha256 c1f9f5734529a31140a71c031534460811f001b4db37d26833f386358150ab47 git-sha1-tag-points-to-516c9c5f64ec66534d4d069c2e408d9ae4dce023.tar.gz
+sha256 6852f682d022d0e0b35cb0903e61e563f17ce4240e9278a2f54585c9b1be56d6 git-sha1-tag-points-to-516c9c5f64ec66534d4d069c2e408d9ae4dce023.tar.xz
sha256 6de8772a0a58fa62e2b8c58d4dae55c9db7534ad3b3918ecc849a9008d58f081 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-submodule-disabled/git-submodule-disabled.hash b/support/testing/tests/download/br2-external/git-refs/package/git-submodule-disabled/git-submodule-disabled.hash
index 3bd0a44693..995f0adc43 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-submodule-disabled/git-submodule-disabled.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-submodule-disabled/git-submodule-disabled.hash
@@ -1,2 +1,2 @@
-sha256 f9d46ff8a1a344c6c31fa4211220f3085c446abd31626232540703158276f22c git-submodule-disabled-a9dbc1e23c45e8e1b88c0448763f54d714eb6f8f.tar.gz
+sha256 4ef1e4ad92b2806e5280b8f307952d74d8b5749b65169f9ede8d338f503cb85e git-submodule-disabled-a9dbc1e23c45e8e1b88c0448763f54d714eb6f8f.tar.xz
sha256 ba8b6ddc4726bfb6a05045ebfd8c43263c968ad1bc601bd46a25bc055008eddc file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-submodule-enabled/git-submodule-enabled.hash b/support/testing/tests/download/br2-external/git-refs/package/git-submodule-enabled/git-submodule-enabled.hash
index 7f92c652d3..cbc81276e7 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-submodule-enabled/git-submodule-enabled.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-submodule-enabled/git-submodule-enabled.hash
@@ -1 +1 @@
-sha256 139a34c3c844c844dee74b6746418cfa75fbcc4205794ac8c0b3cd7d55a76792 git-submodule-enabled-a9dbc1e23c45e8e1b88c0448763f54d714eb6f8f.tar.gz
+sha256 35fcd4d90e1da8bceb9c0ef96f63d98e4ccd6e6fab52b965d6a6339de4f630d7 git-submodule-enabled-a9dbc1e23c45e8e1b88c0448763f54d714eb6f8f.tar.xz
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-tag/git-tag.hash b/support/testing/tests/download/br2-external/git-refs/package/git-tag/git-tag.hash
index 1cd0b15f27..52ab26f26b 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-tag/git-tag.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-tag/git-tag.hash
@@ -1,2 +1,2 @@
-sha256 85dcb5bcf9bed496688d0eb01c7a3ce05c5b46b984cc1e9e76a6dbefd976e6b3 git-tag-mytag.tar.gz
+sha256 14af5fc1ddadb7fdb42a33f3c88ada4b34f103a4e25bffb8b5fc3dfe1f85b628 git-tag-mytag.tar.xz
sha256 6de8772a0a58fa62e2b8c58d4dae55c9db7534ad3b3918ecc849a9008d58f081 file
diff --git a/support/testing/tests/download/br2-external/git-refs/package/git-wrong-content/git-wrong-content.hash b/support/testing/tests/download/br2-external/git-refs/package/git-wrong-content/git-wrong-content.hash
index 47b2b8b7d7..05d1d6c8df 100644
--- a/support/testing/tests/download/br2-external/git-refs/package/git-wrong-content/git-wrong-content.hash
+++ b/support/testing/tests/download/br2-external/git-refs/package/git-wrong-content/git-wrong-content.hash
@@ -1,2 +1,2 @@
- sha256 04715901977503d1df650e0959f4d31d8e7b105e2ac99a2182e0652b8f13baa1 git-wrong-content-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.gz
+ sha256 cf3017e505b789498a95fd4429ac05aba9b1449a6a3bea3016b7938feaeaaeb0 git-wrong-content-a238b1dfcd825d47d834af3c5223417c8411d90d.tar.xz
sha256 0000000000000000000000000000000000000000000000000000000000000000 file
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 5/7] support/download: change format of archives generated from svn
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
` (3 preceding siblings ...)
2020-11-19 21:23 ` [Buildroot] [PATCH 4/7] WIP: support/testing: update git-hash checks with new archive format Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 6/7] support/dependencies: drop check for maximal tar version Yann E. MORIN
` (2 subsequent siblings)
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
Like we recently did for git, switch the archives generated from
subversion to be reproducible whatever the tar version. This implies
changing the compression to xz (and the extension accordingly).
We have no in-tree users of the svn backend, that also has hashes.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Vincent Fazio <vfazio@xes-inc.com>
---
package/pkg-generic.mk | 2 +-
support/download/svn | 12 ++++++++----
2 files changed, 9 insertions(+), 5 deletions(-)
diff --git a/package/pkg-generic.mk b/package/pkg-generic.mk
index 115115a345..af259766ab 100644
--- a/package/pkg-generic.mk
+++ b/package/pkg-generic.mk
@@ -564,7 +564,7 @@ ifndef $(2)_DL_OPTS
endif
endif
-ifneq ($$(filter git,$$($(2)_SITE_METHOD)),)
+ifneq ($$(filter git svn,$$($(2)_SITE_METHOD)),)
$(2)_SOURCE_EXT = .tar.xz
else
$(2)_SOURCE_EXT = .tar.gz
diff --git a/support/download/svn b/support/download/svn
index 012f286dd9..42307eb236 100755
--- a/support/download/svn
+++ b/support/download/svn
@@ -52,12 +52,16 @@ find "${basename}" -not -type d \
-and -not -path "./.svn/*" >"${output}.list"
LC_ALL=C sort <"${output}.list" >"${output}.list.sorted"
-# Create GNU-format tarballs, since that's the format of the tarballs on
-# sources.buildroot.org and used in the *.hash files
+pax_options="delete=atime,delete=ctime,delete=mtime"
+pax_options+=",exthdr.name=%d/PaxHeaders/%f,exthdr.mtime={${date}}"
+
+# Create POSIX tarballs, since that's the format the most reproducible
tar cf - --transform="s#^\./#${basename}/#" \
- --numeric-owner --owner=0 --group=0 --mtime="${date}" --format=gnu \
+ --numeric-owner --owner=0 --group=0 --mtime="${date}" \
+ --format=posix \
+ --pax-option="${pax_options}" \
-T "${output}.list.sorted" >"${output}.tar"
-gzip -6 -n <"${output}.tar" >"${output}"
+xz -9 <"${output}.tar" >"${output}"
rm -f "${output}.list"
rm -f "${output}.list.sorted"
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 6/7] support/dependencies: drop check for maximal tar version
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
` (4 preceding siblings ...)
2020-11-19 21:23 ` [Buildroot] [PATCH 5/7] support/download: change format of archives generated from svn Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 7/7] package/tar: drop specific version for host variant Yann E. MORIN
2020-11-19 21:53 ` [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Thomas Petazzoni
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
So far, we checked that the tar present on the host was at most tar
1.29, because tar 1.30 changed the way it generates archives.
Having a maximum tar version requirement meant that we would always have
to build our own host-tar, as distributions are updating the version they
use.
But now, we have found a way to generate reproducible archives starting
with tar 1.27 onward, so we no longer need the check for a maximum tar
version, so we can drop that requirement.
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
Cc: Vincent Fazio <vfazio@xes-inc.com>
---
support/dependencies/check-host-tar.sh | 14 +-------------
1 file changed, 1 insertion(+), 13 deletions(-)
diff --git a/support/dependencies/check-host-tar.sh b/support/dependencies/check-host-tar.sh
index 934cb61299..b7d607a47a 100755
--- a/support/dependencies/check-host-tar.sh
+++ b/support/dependencies/check-host-tar.sh
@@ -33,14 +33,7 @@ fi
major_min=1
minor_min=27
-# Maximal version = 1.29 (1.30 changed --numeric-owner output for
-# filenames > 100 characters). This is really a fix for a bug in
-# earlier tar versions regarding deterministic output so it is
-# unlikely to be reverted in later versions.
-major_max=1
-minor_max=29
-
-if [ $major -lt $major_min -o $major -gt $major_max ]; then
+if [ $major -lt $major_min ]; then
# echo nothing: no suitable tar found
exit 1
fi
@@ -50,10 +43,5 @@ if [ $major -eq $major_min -a $minor -lt $minor_min ]; then
exit 1
fi
-if [ $major -eq $major_max -a $minor -gt $minor_max ]; then
- # echo nothing: no suitable tar found
- exit 1
-fi
-
# valid
echo $tar
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 7/7] package/tar: drop specific version for host variant
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
` (5 preceding siblings ...)
2020-11-19 21:23 ` [Buildroot] [PATCH 6/7] support/dependencies: drop check for maximal tar version Yann E. MORIN
@ 2020-11-19 21:23 ` Yann E. MORIN
2020-11-19 21:53 ` [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Thomas Petazzoni
7 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 21:23 UTC (permalink / raw)
To: buildroot
Now we can generate reproducible archives, with all known tar versions
starting with 1.27, we don't need to clamp the host-tar version to the
old 1.29, and can now bump to any later version.
Drop the host-tar version, and use the same as the target variant.
Note that we still need the _SOURCE trick, to avoid depending on tar to
extract the tar tarball...
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
---
package/tar/tar.mk | 8 ++------
1 file changed, 2 insertions(+), 6 deletions(-)
diff --git a/package/tar/tar.mk b/package/tar/tar.mk
index 9e0a40e561..7822b1dada 100644
--- a/package/tar/tar.mk
+++ b/package/tar/tar.mk
@@ -29,14 +29,10 @@ endif
$(eval $(autotools-package))
-# host-tar is used to create the archives in the VCS download backends and tar
-# 1.30 and forward have changed the archive format. So archives generated with
-# earlier versions are not bit-for-bit reproducible and the hashes would not
-# match. Hence host-tar must be kept at version 1.29.
-HOST_TAR_VERSION = 1.29
# host-tar: use cpio.gz instead of tar.gz to prevent chicken-egg problem
# of needing tar to build tar.
-HOST_TAR_SOURCE = tar-$(HOST_TAR_VERSION).cpio.gz
+HOST_TAR_SOURCE = tar-$(TAR_VERSION).cpio.gz
+
define HOST_TAR_EXTRACT_CMDS
mkdir -p $(@D)
cd $(@D) && \
--
2.25.1
^ permalink raw reply related [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax)
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
` (6 preceding siblings ...)
2020-11-19 21:23 ` [Buildroot] [PATCH 7/7] package/tar: drop specific version for host variant Yann E. MORIN
@ 2020-11-19 21:53 ` Thomas Petazzoni
2020-11-19 22:25 ` Yann E. MORIN
7 siblings, 1 reply; 10+ messages in thread
From: Thomas Petazzoni @ 2020-11-19 21:53 UTC (permalink / raw)
To: buildroot
On Thu, 19 Nov 2020 22:23:47 +0100
"Yann E. MORIN" <yann.morin.1998@free.fr> wrote:
> Yann E. MORIN (7):
> core/pkg-infra: prepare for alternate default source archives
> WIP: support/download: change format of archives generated from git
> WIP: boot+packages: update hash to new git-tarballs format
> WIP: support/testing: update git-hash checks with new archive format
> support/download: change format of archives generated from svn
> support/dependencies: drop check for maximal tar version
> package/tar: drop specific version for host variant
I reviewed the series, and overall it looks good to me. Of course, I
haven't actually tested/verified that the new magic set of tar options
makes things reproducible, but it seems like the amount of research on
this has been significant.
The only thing that bothers me a bit is that this series uses the
one-time bullet of switching from .tar.gz to .tar.xz, and I'm wondering
if we will not have other situations like this, and we won't have much
solution as we would already be using .tar.xz.
Just in my Go/Cargo vendoring, I'm encountering a similar problem: due
to the vendoring, the tarballs are changing and so are their hashes.
Since only two packages are impacted, I'm using the trick of bumping
them at the same time as I enable vendoring for them. But perhaps it
would be better to have a mechanism to support having different
tarballs for the same package ? I'm not sure how that would work
really, I don't have any clear idea.
Best regards,
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
^ permalink raw reply [flat|nested] 10+ messages in thread
* [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax)
2020-11-19 21:53 ` [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Thomas Petazzoni
@ 2020-11-19 22:25 ` Yann E. MORIN
0 siblings, 0 replies; 10+ messages in thread
From: Yann E. MORIN @ 2020-11-19 22:25 UTC (permalink / raw)
To: buildroot
Thomas, All,
On 2020-11-19 22:53 +0100, Thomas Petazzoni spake thusly:
> On Thu, 19 Nov 2020 22:23:47 +0100
> "Yann E. MORIN" <yann.morin.1998@free.fr> wrote:
> > Yann E. MORIN (7):
> > core/pkg-infra: prepare for alternate default source archives
> > WIP: support/download: change format of archives generated from git
> > WIP: boot+packages: update hash to new git-tarballs format
> > WIP: support/testing: update git-hash checks with new archive format
> > support/download: change format of archives generated from svn
> > support/dependencies: drop check for maximal tar version
> > package/tar: drop specific version for host variant
>
> I reviewed the series, and overall it looks good to me. Of course, I
> haven't actually tested/verified that the new magic set of tar options
> makes things reproducible, but it seems like the amount of research on
> this has been significant.
There is a Makefile as a post-commit note in patch 2, that can be used to
reproduce the experiment.
I highly suggest anyone to test that in their own setup as well, to
gather more data points on reproducibility.
> The only thing that bothers me a bit is that this series uses the
> one-time bullet of switching from .tar.gz to .tar.xz, and I'm wondering
> if we will not have other situations like this, and we won't have much
> solution as we would already be using .tar.xz.
We could still switch to lzo, lz4, lz, bz2, tbz2, and closing the loop
with tgz, giving us 6 more extensions, and thus openning 6 more
switching opportunities!
(Just kidding.)
> Just in my Go/Cargo vendoring, I'm encountering a similar problem: due
> to the vendoring, the tarballs are changing and so are their hashes.
> Since only two packages are impacted, I'm using the trick of bumping
> them at the same time as I enable vendoring for them. But perhaps it
> would be better to have a mechanism to support having different
> tarballs for the same package ? I'm not sure how that would work
> really, I don't have any clear idea.
I am not so sure we would have such a big breakage in the near future.
Near, as in the next twwo to three years, that is (but heck, with those
package managers and the new cool kidz on the block, who knows what's
coming next month, even less soo next year...)
Alternatively, if we want to envision this, then we will have no
alternative than to add a post-version string, like most distribution
do, to add after the version and before the extension.
foo-1.2.3.tar.gz # Current state
foo-1.2.3_br-vendored.tar.gz # Cargo vendored
foo-1.2.3_br-vendored-fixed.tar.gz # We fixed a corner case in our cargo infra
foo-1.2.3_br-vendored-fixed-recursive.tar.gz # We extend our Cargo infra to recurse
# into vendored sub-modules located on
# the HTTP4 remote server over TOR with
# the distributed DOHoTOR name resolver
foo-1.2.3_4.tar.gz # We got lazy when further extending the infra.
You get the idea. ;-)
Regards,
Yann E. MORIN.
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2020-11-19 22:25 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-11-19 21:23 [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 1/7] core/pkg-infra: prepare for alternate default source archives Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 2/7] WIP: support/download: change format of archives generated from git Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 3/7] WIP: boot+packages: update hash to new git-tarballs format Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 4/7] WIP: support/testing: update git-hash checks with new archive format Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 5/7] support/download: change format of archives generated from svn Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 6/7] support/dependencies: drop check for maximal tar version Yann E. MORIN
2020-11-19 21:23 ` [Buildroot] [PATCH 7/7] package/tar: drop specific version for host variant Yann E. MORIN
2020-11-19 21:53 ` [Buildroot] [PATCH 0/7] support/download: reproducible archives whatever tar version (branch yem/dl-git-tar-pax) Thomas Petazzoni
2020-11-19 22:25 ` Yann E. MORIN
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.