-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NZG schreef: > On Thursday 01 November 2007 4:16:05 pm Koen Kooi wrote: >> DISTRO="angstrom-2007.1" does all that, and more. > That works, but still it seems a little dangerous since it only uses the > angstrom repository if the file versions can't be found through the standard > package SRC_URI's. > > Of course, most of time, that will work fine, but it doesn't protect against > hacks (like what happened recently to tcpdump.org)
That is what conf/checksums.ini is for. The fetcher will compare the downloaded md5 and sha256 sums against the ones stored (provided they are present, see Marcin's latest addition in contrib). > Is there an easy way to prioritze to use the angstrom repositories first? Yes by changing them to PREMIRROR or something similar. regards, Koen - -- [EMAIL PROTECTED] will go go away in december 2007, please use [EMAIL PROTECTED] instead. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) iD8DBQFHK0AwMkyGM64RGpERAvS1AKCTRxz9b1/f7cwwsHyel8rWSTnTuACgt7WH ShVVndBGcyteZcqD8M82rbQ= =3RTW -----END PGP SIGNATURE----- _______________________________________________ Openembedded-users mailing list [email protected] http://lists.linuxtogo.org/cgi-bin/mailman/listinfo/openembedded-users
