Page MenuHomeSoftware Heritage

Use tarball checksum to check download integrity in package loaders
ClosedPublic

Authored by anlambert on Sep 30 2022, 6:48 PM.

Details

Summary

When one or multiple tarball checksums are available, either from listers
output or from Web APIs calls perfomed by some loaders, use them to check
integrity of downloaded tarballs.

Depends on D8594

Diff Detail

Repository
rDLDBASE Generic VCS/Package Loader
Lint
Automatic diff as part of commit; lint not applicable.
Unit
Automatic diff as part of commit; unit tests not applicable.

Event Timeline

Build is green

Patch application report for D8595 (id=31025)

Rebasing onto f774aba59e...

Current branch diff-target is up to date.
Changes applied before test
commit 5482a48ea1bdf454c903899b7d1476ae88b3a433
Author: Antoine Lambert <anlambert@softwareheritage.org>
Date:   Thu Sep 29 17:20:19 2022 +0200

    Use tarball checksum to check download integrity in package loaders
    
    When one or multiple tarball checksums are available, either from listers
    output or from Web APIs calls perfomed by some loaders, use them to check
    integrity of downloaded tarballs.

See https://jenkins.softwareheritage.org/job/DLDBASE/job/tests-on-diff/936/ for more details.

This revision is now accepted and ready to land.Sep 30 2022, 7:11 PM