Hello,

Please correct me if I'm wrong: ptxdist doesn't have a checksum
mechanism to verify that a downloaded file (e.g. a tarball from
upstream) is the same as it was when the package has been created.

Some other build systems like OpenEmbedded or desktop build systems like
ABS (Arch Linux) / Gentoo store a md5sum (or sha1 or something else)
in the package description file.

Is it planned to add such a feature to ptxdist? Would a patch that adds
the feature get accepted or do you think that it's too much effort to
maintain?


Regards,
Bernhard

-- 
ptxdist mailing list
ptxdist@pengutronix.de

Reply via email to