From mboxrd@z Thu Jan 1 00:00:00 1970 From: Arnout Vandecappelle Date: Fri, 30 Jun 2017 19:07:47 +0200 Subject: [Buildroot] [PATCH] 2017.02.x: update hash file for libnl 3.2.27 patch In-Reply-To: <1498841436-24941-1-git-send-email-julien.boibessot@free.fr> References: <1498841436-24941-1-git-send-email-julien.boibessot@free.fr> Message-ID: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net On 30-06-17 18:50, julien.boibessot at free.fr wrote: > From: Julien BOIBESSOT > > Corresponding patch is generated on the fly by github. It seems like > generation method has changed, resulting to slightly different patch, > so update BR hash file accordingly. So this is problematic. While the tarballs generated by git(hub) are reproducible, the patch files are not. Makes sense, since it has abbreviated sha1s for the tree objects embedded in them and these will need to become longer over time. I see no better solution than to disable hashes for bit-downloaded patches entirely... Regards, Arnout > > Signed-off-by: Julien BOIBESSOT > --- > package/libnl/libnl.hash | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/package/libnl/libnl.hash b/package/libnl/libnl.hash > index eafba4a..9b6b512 100644 > --- a/package/libnl/libnl.hash > +++ b/package/libnl/libnl.hash > @@ -1,3 +1,4 @@ > # From https://github.com/thom311/libnl/releases/download/libnl3_2_27/libnl-3.2.27.tar.gz.sha256sum > sha256 4bbbf92b3c78a90f423cf96260bf419a28b75db8cced47051217a56795f58ec6 libnl-3.2.27.tar.gz > -sha256 b7bb929194eefc56c786a7e1ae5176b54713f9013ccec63760f232742ae80361 3e18948f17148e6a3c4255bdeaaf01ef6081ceeb.patch > +# Locally computed > +sha256 a308873157080f1e2e6693b2a151e15d8dfe77884b073ba3dc9bd42772dd1aef 3e18948f17148e6a3c4255bdeaaf01ef6081ceeb.patch > -- Arnout Vandecappelle arnout at mind be Senior Embedded Software Architect +32-16-286500 Essensium/Mind http://www.mind.be G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle GPG fingerprint: 7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF