On Wed 25 Feb 2009 at 12:39PM, Shawn Walker wrote:
> Danek Duvall wrote:
> >On Wed, Feb 25, 2009 at 08:35:07AM +0000, Padraig O'Briain wrote:
> >
> >>I checked out the IPS code this morning and attempted to build it.
> >>
> >>I got the error message below.
> >>
> >>It seems that session-r2062.py is no longer in the CherryPy-3.1.1.tar.gz.
> >>
> >>Is anyone else seeing this?
> >
> >Bart mentioned this to me last night, and I thought I responded on-list,
> >but I don't seem to have gotten my message.
> >
> >Yes, the file has disappeared from the tarball without the tarball having
> >been renamed, and I don't understand why. We need Shawn to evaluate
> >whether this is actually a problem for 3.1.1, and also whether the CherryPy
> >folks have a habit of modifying their tarballs without any notice.
>
> This is the first time I've hit this particular issue. I've posted a
> request on their mailing list that they please use new names if they're
> going to change tarballs.
For security and reliability purposes, we should probably store in
our gate the expected checksum of anything we download as part of the
build, and then check that as part of the build.
-dp
--
Daniel Price, Solaris Kernel Engineering http://blogs.sun.com/dp
_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
