Page MenuHomeSoftware Heritage

Use tarball checksum to check download integrity in package loaders
ClosedPublic

Authored by anlambert on Sep 30 2022, 6:48 PM.

Details

Summary

When one or multiple tarball checksums are available, either from listers
output or from Web APIs calls perfomed by some loaders, use them to check
integrity of downloaded tarballs.

Depends on D8594

Diff Detail

Repository
rDLDBASE Generic VCS/Package Loader
Branch
check-tarball-checksums
Lint
No Linters Available
Unit
No Unit Test Coverage
Build Status
Buildable 31995
Build 50087: Phabricator diff pipeline on jenkinsJenkins console · Jenkins
Build 50086: arc lint + arc unit

Event Timeline

Build is green

Patch application report for D8595 (id=31025)

Rebasing onto f774aba59e...

Current branch diff-target is up to date.
Changes applied before test
commit 5482a48ea1bdf454c903899b7d1476ae88b3a433
Author: Antoine Lambert <anlambert@softwareheritage.org>
Date:   Thu Sep 29 17:20:19 2022 +0200

    Use tarball checksum to check download integrity in package loaders
    
    When one or multiple tarball checksums are available, either from listers
    output or from Web APIs calls perfomed by some loaders, use them to check
    integrity of downloaded tarballs.

See https://jenkins.softwareheritage.org/job/DLDBASE/job/tests-on-diff/936/ for more details.

This revision is now accepted and ready to land.Sep 30 2022, 7:11 PM