> Is there a reason not to verify authenticity and validity of the
> tarball with the gpg sig?
Nope, just laziness.
Darren
Yeah, we can make this change IMO.
Darren, note that my sungard.com address no longer finds me. Please use my a.o
or gmail.c address. ;)
> On Oct 24, 2013, at 5:43 PM, Darren Shepherd
> wrote:
>
> Chip,
>
> Do you care if we switch to GNU coreutils format for the hashes? The
> hash value i
On Thu, Oct 24, 2013 at 6:12 PM, Darren Shepherd
wrote:
> I ran into the issue while trying to write scripts to get CloudStack
> in docker. Here's my hack-tastic work around
>
> HASH=$(echo $(wget -O - -q
> http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.s
On Thu, Oct 24, 2013 at 5:43 PM, Darren Shepherd
wrote:
> Chip,
>
> Do you care if we switch to GNU coreutils format for the hashes? The
> hash value is the same it will just be in the format like
>
> file.tbz2 *12b12341b1234b1234b1b2341b234b
>
> And then you just run "sha512sum -c "
>
> Darren
>
I ran into the issue while trying to write scripts to get CloudStack
in docker. Here's my hack-tastic work around
HASH=$(echo $(wget -O - -q
http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.sha
|\
cut -f2 -d: ) | sed 's/ //g' | tr '[:upper:
Chip,
Do you care if we switch to GNU coreutils format for the hashes? The
hash value is the same it will just be in the format like
file.tbz2 *12b12341b1234b1234b1b2341b234b
And then you just run "sha512sum -c "
Darren
On Thu, Oct 24, 2013 at 2:34 PM, John Kinsella wrote:
> Instructions for
Instructions for testing the hash are in the release test page [1]. It is also
documented in the install guide.
It is the way it is I believe because Chip took the release build script from
CouchDB, as mentioned in the release build page.
1: https://cwiki.apache.org/confluence/display/CLOUDSTAC
But how does one validate it? I just wrote a dumb script to
concatenation, remove whitespace, lowercase and then pass to
"sha512sum -c." I've never seen anyone provide SHAs in that format.
I wouldn't expect many people to know how to use them. Why can't we
use the good old GNU coreutils style?
This is the output of gpg -v --print-md SHA512, generated as part of the
release procedure [1] by tools/build/build_asf.sh
1: https://cwiki.apache.org/confluence/display/CLOUDSTACK/Release+Procedure
On Oct 17, 2013, at 7:56 PM, Darren Shepherd
wrote:
> The hashes that are on c.a.o for the re
The hashes that are on c.a.o for the releases have a format like
http://www.apache.org/dist/cloudstack/releases/4.2.0/apache-cloudstack-4.2.0-src.tar.bz2.sha
apache-cloudstack-4.2.0-src.tar.bz2: CC487DF3 7E7B6800 F9DC05A3 5B72DEFD
684E0094 F1666F57 5D694916 CF
10 matches
Mail list logo