* Lukas Fleischer <lfleischer@archlinux.org> (Mon, 01 Jun 2015 00:28:56 +0200):
On Mon, 01 Jun 2015 at 00:07:58, Marcel Korpel wrote:
Isn't there a check of checksums before files are added to the index (through mksrcinfo/makepkg)? If that's not the case, I stand corrected.
Right, I forgot about that. So the two possibilities left are
(a) Build the package using the original files, replace with dummy files before committing.
(b) Use "SKIP" for the checksums.
I realize that (a) might be a bit cumbersome but then again, users currently need to fix their source tarballs manually after running `makepkg --source` (and remove some source files) which is cumbersome as well.
I slept over it and thought that (a) is the best way to go, as maintainers have to do something like that now (and it's only an edge case that doesn't occur too much). Skipping integrity checks is really awful, especially when binaries are downloaded, like in https://aur.archlinux.org/packages/mathematica (but the maintainer of that package uses the file: protocol, also a clever workaround, I think; perhaps that's a thing that could be added to the wiki?).