* Lukas Fleischer <[email protected]> (Sun, 31 May 2015 22:49:19 +0200): > On Sun, 31 May 2015 at 22:09:19, Marcel Korpel wrote: >> Nevertheless, there are other cases I didn't think of, like >> https://aur.archlinux.org/packages/ttf-ms-win8/ where source files >> should be provided by the user. Providing zero-length dummy files >> looks like a solution, but isn't, as the checksums provided should >> be correct against those user-provided files, not the dummy ones. >> >> I can't think of a solution to this at the moment, perhaps someone >> else? > > Why are checksums an issue? You can use the checksum of the correct > file. It doesn't match the checksum of the dummy file but I don't see > how that is an issue (it is even good since the user immediately > notices that something is wrong with the dummy file). Another > possibility is to tell makepkg to skip the integrity check.
Isn't there a check of checksums before files are added to the index (through mksrcinfo/makepkg)? If that's not the case, I stand corrected.
