Bug#863622: apt: warn when installing packages that are not reproducible

2017-05-29 Thread David Kalnischkies
On Mon, May 29, 2017 at 12:24:29PM +0100, Chris Lamb wrote: > Just to be clear, the patch is obviously an digusting hack and you > should not use it, hence the lack of a "patch" tag (!). Oh, no worries, we can manage. I mean, how hacky can it really be……… OH MY GOD, YOU ARE CALLING CURL!!111elf (

Bug#863622: apt: warn when installing packages that are not reproducible

2017-05-29 Thread Chris Lamb
Julian Andres Klode wrote: > We'd need some hash or something to add to the lookup (unless the > information comes from the same repo). Oh, absolutely :) In fact, my previous version of the patch did exactly this, querying buildinfo.debian.net by hash of the file. This is actually a lot cleaner

Bug#863622: apt: warn when installing packages that are not reproducible

2017-05-29 Thread Julian Andres Klode
On Mon, May 29, 2017 at 12:24:29PM +0100, Chris Lamb wrote: > Package: apt > Severity: wishlist > X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org > > Hi, > > APT should (eventually) warn when installing packages that are not > reproducible. > > Clearly, all the bits to make this work

Bug#863622: apt: warn when installing packages that are not reproducible

2017-05-29 Thread Chris Lamb
Package: apt Severity: wishlist X-Debbugs-CC: reproducible-bui...@lists.alioth.debian.org Hi, APT should (eventually) warn when installing packages that are not reproducible. Clearly, all the bits to make this work today are not in dak, APT, the mirrors, etc. However, I thought it was best to e