Hi,

On Mon, 09 May 2016 21:07:40 +0200 Johannes Schauer <jo...@debian.org> wrote:
> The main disadvantage of the current srebuild implementation is, that it will
> only make use of a single snapshot.d.o timestamp. This makes it impossible to
> reproduce situations where packages are not built in a clean chroot, in a
> partially updated chroot or in a chroot mixing different suites. To assemble
> a chroot with the right package versions, sbuild could retrieve the exact
> right debs from snapshot.d.o.
> 
> Snapshot.d.o provides the
> /mr/package/<package>/<version>/binfiles/<binpkg>/<binversion> API to retrieve
> hashes of .deb packages of the right architecture. With that hash, srebuild 
> can
> retrieve the right dependencies.

this API function requires the source package name and version which we don't
have from a buildinfo file. Luckily, there is also
/mr/binary/<binpkg>/<binversion>/binfiles

See: http://anonscm.debian.org/cgit/mirror/snapshot.debian.org.git/plain/API

> It would be simpler if the .buildinfo files would already contain the right
> hashes such that less API queries would be necessary.

This conclusion still holds.

cheers, josch

Attachment: signature.asc
Description: signature

Reply via email to