diff options
author | agc <agc@pkgsrc.org> | 2001-04-17 12:50:04 +0000 |
---|---|---|
committer | agc <agc@pkgsrc.org> | 2001-04-17 12:50:04 +0000 |
commit | 976ebfca1fc1af127c2e064d8c020c67dcdbbea4 (patch) | |
tree | dd5d6ce21196394099c89d3897b52e461a2453f5 | |
parent | da80229bf4fd4a8b543be6b5eb823a593dcefc55 (diff) | |
download | pkgsrc-976ebfca1fc1af127c2e064d8c020c67dcdbbea4.tar.gz |
Update for the distinfo changes.
-rw-r--r-- | Packages.txt | 58 |
1 files changed, 34 insertions, 24 deletions
diff --git a/Packages.txt b/Packages.txt index 883e56ba8c8..d83a4d1f9ce 100644 --- a/Packages.txt +++ b/Packages.txt @@ -1,4 +1,4 @@ -# $NetBSD: Packages.txt,v 1.150 2001/04/17 08:18:30 hubertf Exp $ +# $NetBSD: Packages.txt,v 1.151 2001/04/17 12:50:04 agc Exp $ ########################################################################### ========================== @@ -562,28 +562,29 @@ package from the FreeBSD ports collection: for you -- operator discretion is advised, though. - 4.2 files/* - =========== + 4.2 distinfo + ============ - * files/md5: - Most important, the mandatory md5 checksum of all the distfiles needed for - the package to compile, confirming they match the original file any patches - were generated against. This ensures that the distfile retrieved from the - Internet has not been corrupted during transfer or altered by a malign force - to introduce a security hole. It can be generated by hand using the md5(1) - command or by invoking "make makesum". +Most important, the mandatory message digest, or checksum, of all the +distfiles needed for the package to compile, confirming they match the +original file distributed by the author. This ensures that the +distfile retrieved from the Internet has not been corrupted during +transfer or altered by a malign force to introduce a security hole. +It is best generated using the "make makesum" command. The digest +algorithm used was, at one stage, md5, but that was felt lacking +compared to sha1, and so sha1 is now the default algorithm. The +distfile size is also generated and stored in new distinfo files. +The pkgsrc/pkgtools/digest utility calculates all of the digests +in the distinfo file, and it provides various different algorithms. +At the current time, the algorithms provided are: - * files/patch-sum: - The checksum file for all the official patches for the package, found in the - patches/ directory (see section 4.3). This checksum file includes an MD5 - checksum of all lines in the patch file except the NetBSD RCS Id. This file - is generated by invoking "make makepatchsum". + md5, rmd160, sha1, sha256, sha384 and sha512 -Besides that, if you have any files that you wish to be placed in the -package prior to configuration or building, you could place these files -here and use a ${CP} command in the pre-configure target to achieve this. -Alternatively, you could simply diff the file against /dev/null and use the -patch mechanism to manage the creation of this file. +The message digest/checksum for all the official patches found in the +patches/ directory (see section 4.3) for the package is also stored in +the distinfo file. This is a message digest/checksum of all lines in +the patch file except the NetBSD RCS Id. This file is generated by +invoking "make makepatchsum". 4.3 patches/* @@ -739,6 +740,15 @@ directory. It can be removed by typing at the shell prompt. Also, this directory is used to keep various timestamp files. + 4.6 files/* + =========== + +If you have any files that you wish to be placed in the package prior +to configuration or building, you could place these files here and use +a ${CP} command in the pre-configure target to achieve this. +Alternatively, you could simply diff the file against /dev/null and +use the patch mechanism to manage the creation of this file. + 5 PLIST* issues =============== @@ -1136,8 +1146,8 @@ The main targets used during the build process defined in bsd.pkg.mk are: them. * checksum: - After the distfile(s) are fetched, their MD5 checksum is generated and - compared with the checksums stored in the files/md5 file. If the + After the distfile(s) are fetched, their checksum is generated and + compared with the checksums stored in the distinfo file. If the checksums don't match, the build is aborted. This is to ensure the same distfile is used for building, and that the distfile wasn't changed, e.g. by some malign force, deliberately changed distfiles on the master @@ -1988,7 +1998,7 @@ directory of the package you wish to examine and execute "pkglint": > tron@lyssa:/usr/pkgsrc/devel/bison>pkglint > OK: checking pkg/DESCR. > OK: checking Makefile. -> OK: checking files/md5. +> OK: checking distinfo. > OK: checking patches/patch-aa. > looks fine. @@ -2024,7 +2034,7 @@ then continue with fetching the distfile: > Requesting ftp://ftp.freebsd.org/pub/FreeBSD/distfiles//bison-1.25.tar.gz (via ftp://orpheus.amdahl.com:80/) > Successfully retrieved file. -Generate the checksum of the distfile into files/md5: +Generate the checksum of the distfile into distinfo: > root@pumpy:/u/pkgsrc/lang/bison(1770)# make makesum |