-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 20/09/15 19:41, Robin H. Johnson wrote: > On Fri, Sep 18, 2015 at 10:58:22AM +0200, Justin (jlec) wrote: >> Hello, >> >> there are quite a number of Manifest still not containing one or >> more of the three hashes. I would like to update them as far as >> we can download the sources. > 540 of 17841 Manifest files have the problem, about 3%. Quick way > to find them: find -name Manifest |xargs egrep -v '^DIST .* [0-9]+ > (SHA256|SHA512|WHIRLPOOL)' |cut -d: -f1|uniq > >> Procedure would be: 1. Download package 2. verify current hashes >> match 3. Calculate new 4. commit >> >> Following question need to be answered first: >> >> Does anybody have any general objections, remarks or ideas on >> that? > Good luck finding some of them; there are fetch-restricted packages > in that set. >
yeah, I know. I will try what I can get and will put some information up on the remaining packages. When we have an overview, we can act. >> 2. Any suggestion how to do this? repoman has a manifest-check >> function but that is not functioning (bug filed). Any other tool >> around? Perhaps using pkgcheck? >> >> Ugly hack would be, tampering the downloaded sources and run >> repoman manifest which would redownload the tarball and check >> again. > I tested, and this worked: ebuild ... fetch ebuild ... manifest > tested with dev-scheme/hop/hop-2.0.1.ebuild. > > The distfile was downloaded, verified, and the Manifest got > updated correctly. thanks for confirming. I will do an extra check that the present sha256 sum didn't change. thanks for the comment, Justin -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0 iQJ8BAEBCgBmBQJV/vY1XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ0QUU0N0I4NzFERUI0MTJFN0EyODE0NUFF OTQwMkE3OUIwMzUyOUEyAAoJEOlAKnmwNSmiZb8QAKhAGKo1gKZxILFyhU+Az5l3 VsJeJF6F0ZnclgUQSDKaqY06VxTjsG1W9SUDx0VYrqfJcSkIODZ55RjCio22f+tP 6DA5z6sTwcBOcRIunWjjWD4rHrSgHj/HodzShFnTdSt8R6hzFumZWRaFXfN1DUj8 nibH3n1o6flAm8eV7ZxbypZ5Y1QOtFqxJc6fuHLeeSsJwu1iph/OnNagdx3ZCU29 RsiKxIjjWDLtew2BWCSSNTD7ORLNmogTis5xRAuQXevvwZ+wtXGhUNQmb9tlWkHW O0ndCVtH3+yiEPn+s+2TRbnYE0KE2Ce4vnGsmq1zuf0zzwXhKmgPNBLVihHU83nF M0bWPvqM7bdIGKZmdhfG4HOY0TE/9HZ7SHgr7u3OTgy+cqvouDoQf3XROKO9cgRQ iVMsNwjWJe4wZs5LAfgq0ancNZKHN0iorp0nDbE/cvkMUf5MkB/v3fz/C7XnYcFg 54f7uluO2NQDv6852iGE4usYECQByHdZ+eU0ZPyPw/elrGbhaaBN+h4SBoVd6G4d vgpUTBCO1pVSZV2Rwx2AeDEin0An9r4+s2wHi0IXI/p0yQbLQ+rHCQpOpK72HrdH 5O8dVr7zNiI96Qd5iN04Q0gNyTrmaSAevsNdhnLxouwlclKhtRY7tirlcEZQ7t4V Tlv5pykl8ITH9g5IS1yf =dwyV -----END PGP SIGNATURE-----
