[aur-general] Dynamically evaluating md5sum value in PKGBUILD

older
Re: [aur-general] Forgotten AUR...

Maciej Sitarz

27 Oct 2011 27 Oct '11

1:36 p.m.

Hi all, I'm maintaining hunspell-pl AUR package (https://aur.archlinux.org/packages.php?ID=44331). The problem with the package is that the maintainer of the source provides only the latest(daily) tarball snapshot. The md5sum of the tarball changes daily and the old files are removed. The packages is very often marked as 'outdated' and I'm asked to update it, both via comments and email. Some users propose to use dynamic values for pkgver= and md5sum=, but I think it's not a good way. Current PKGBUILD is: https://aur.archlinux.org/packages/hu/hunspell-pl/PKGBUILD Proposed PKGBUILD: http://pastebin.com/bQCafYGt What would you suggest to do? I think the best way would be to include the package in extra, but I'm not sure if it has enough votes. Thanks Best regards -- Maciej Sitarz

Show replies by date

Peter Lewis

27 Oct 27 Oct

1:55 p.m.

On Thu, 27 Oct 2011, Maciej Sitarz wrote:

...

I'm maintaining hunspell-pl AUR package (https://aur.archlinux.org/packages.php?ID=44331). The problem with the package is that the maintainer of the source provides only the latest(daily) tarball snapshot. The md5sum of the tarball changes daily and the old files are removed.

The packages is very often marked as 'outdated' and I'm asked to update it, both via comments and email.

Sounds like it might be a candidate to recast as a -vcs package, if upstream makes the contents of the tarball available over some vcs system... Pete.

Maciej Sitarz

3:46 p.m.

W dniu 27.10.2011 15:55, Peter Lewis pisze:

...

Sounds like it might be a candidate to recast as a -vcs package, if upstream makes the contents of the tarball available over some vcs system...

Only tar.bz2 is available on the project website. -- Maciej Sitarz

chrislcenter-mamoru＠yahoo.com.mx

4:01 p.m.

ok, how about this: you create a bash script, run from cron every single day, and what it does is it downloads the latest tar.bz2, creates a pkgbuild (pretty much changing to the latest md5 and version number only) and install it on your system, then you manually try the package on your system.If everything works fine, then you upload it. you can make that your daily morning rutine or something and using scripts is not gonna be really time consuming or annoying. --- El jue 27-oct-11, Maciej Sitarz escribió: De: Maciej Sitarz Asunto: Re: [aur-general] Dynamically evaluating md5sum value in PKGBUILD A: aur-general@archlinux.org Fecha: jueves, 27 de octubre de 2011, 10:46 W dniu 27.10.2011 15:55, Peter Lewis pisze:

...

Sounds like it might be a candidate to recast as a -vcs package, if upstream makes the contents of the tarball available over some vcs system...

Only tar.bz2 is available on the project website. -- Maciej Sitarz

Xyne

5:19 p.m.

chrislcenter-mamoru@yahoo.com.mx wrote:

...

ok, how about this: you create a bash script, run from cron every single day, and what it does is it downloads the latest tar.bz2, creates a pkgbuild (pretty much changing to the latest md5 and version number only) and install it on your system, then you manually try the package on your system.If everything works fine, then you upload it. you can make that your daily morning rutine or something and using scripts is not gonna be really time consuming or annoying.

this Write a script to generate the PKGBUILD, make a source package, and upload it to the AUR (you can use e.g. aurploader for the upload). You can then cron it and forget about it. Of course, the checksum might not mean much after that if no one inspects the file, but it's only a wordlist so all the PKGBUILD should do is move it to the pkgdir. You could also ask upstream to leave archives on the server for a month. They can't take that much space, and I can't believe that the living language changes so quickly that if you use yesterday's spelling you will be shunned by everyone.* * Yeah yeah, he's probably actively compiling the list by adding a few words every day, not changing what's already there. Still, the mental image of some irate Hungarian man screaming "No no no, yesterday's spellings are all wrong! UNACCEPTABLE! WE MUST DELETE THE ARCHIVES!" makes me smile.

Maciej Sitarz

9:15 p.m.

W dniu 27.10.2011 19:19, Xyne pisze:

...

Write a script to generate the PKGBUILD, make a source package, and upload it to the AUR (you can use e.g. aurploader for the upload). You can then cron it and forget about it.

Of course, the checksum might not mean much after that if no one inspects the file, but it's only a wordlist so all the PKGBUILD should do is move it to the pkgdir.

I could easily fully automate the process, but it's not the case. If it would be automated, then I wouldn't give any guarantee it even still works. I think I'll use Fedora rawhide mirrored RPM source file as proposed in other emails.

...

You could also ask upstream to leave archives on the server for a month. They can't take that much space, and I can't believe that the living language changes so quickly that if you use yesterday's spelling you will be shunned by everyone.*

I already asked upstream, there's no way they can keep more then the latest tarball. No idea why. Regards -- Maciej Sitarz

Bartłomiej Piotrowski

3:11 p.m.

The question is, do you really need to update it often? I had similiar doubts about aspell-pl in [community], but one update for a months is enough for me. And I think not only for me - nobody set it out-of-date during 7 months. Bartłomiej Piotrowski

Kwpolska

3:17 p.m.

On Thu, Oct 27, 2011 at 5:11 PM, Bartłomiej Piotrowski wrote:

...

The question is, do you really need to update it often? I had similiar doubts about aspell-pl in [community], but one update for a months is enough for me. And I think not only for me - nobody set it out-of-date during 7 months.

Bartłomiej Piotrowski

On Thu, Oct 27, 2011 at 3:36 PM, Maciej Sitarz wrote:

...

The problem with the package is that the maintainer of the source provides> only the latest(daily) tarball snapshot. The md5sum of the tarball changes> daily and the old files are removed. -- Kwpolska http://kwpolska.tk stop html mail | always bottom-post www.asciiribbon.org | www.netmeister.org/news/learn2quote.html GPG KEY: 5EAAEA16 | Arch Linux x86_64, zsh, mutt, vim. # vim:set textwidth=70:

Bartłomiej Piotrowski

3:35 p.m.

So you can use proposed PKGBUILD or use weekly archive from own server/hosting.

Massimiliano Torromeo

4:21 p.m.

On Thu, Oct 27, 2011 at 3:36 PM, Maciej Sitarz wrote:

...

What would you suggest to do? I think the best way would be to include the package in extra, but I'm not sure if it has enough votes

Maybe you could track the source package from some other distribution like fedora or something. A quick search show some src.rpm [1] I don't think there's a clean way to do this sanely. [1] http://rpm.pbone.net/index.php3/stat/3/srodzaj/2/search/hunspell-pl-0.201108...

Massimiliano Torromeo

4:23 p.m.

On Thu, Oct 27, 2011 at 6:21 PM, Massimiliano Torromeo wrote:

...

Maybe you could track the source package from some other distribution like fedora or something. A quick search show some src.rpm [1]

I don't think there's a clean way to do this sanely.

[1] http://rpm.pbone.net/index.php3/stat/3/srodzaj/2/search/hunspell-pl-0.201108...

Or just mirror the source somewhere. You could use dropbox for that.

Maciej Sitarz

9:19 p.m.

W dniu 27.10.2011 18:23, Massimiliano Torromeo pisze:

...

On Thu, Oct 27, 2011 at 6:21 PM, Massimiliano Torromeo wrote:

...
Maybe you could track the source package from some other distribution like fedora or something. A quick search show some src.rpm [1]

I don't think there's a clean way to do this sanely.

[1] http://rpm.pbone.net/index.php3/stat/3/srodzaj/2/search/hunspell-pl-0.201108...

Or just mirror the source somewhere. You could use dropbox for that.

I will use the Fedora Rawhide src RPM [1]. There's no need to garbage the internet with another few copies of the same file. Thanks everyone for help, I'll soon update the PKGBUILD. [1] http://download.fedora.redhat.com/pub/fedora/linux/development/rawhide/x86_6... -- Maciej Sitarz

rafael ff1

6:32 p.m.

2011/10/27 Maciej Sitarz :

...

Hi all,

I'm maintaining hunspell-pl AUR package (https://aur.archlinux.org/packages.php?ID=44331). The problem with the package is that the maintainer of the source provides only the latest(daily) tarball snapshot. The md5sum of the tarball changes daily and the old files are removed.

The packages is very often marked as 'outdated' and I'm asked to update it, both via comments and email. Some users propose to use dynamic values for pkgver= and md5sum=, but I think it's not a good way.

Current PKGBUILD is: https://aur.archlinux.org/packages/hu/hunspell-pl/PKGBUILD Proposed PKGBUILD: http://pastebin.com/bQCafYGt

What would you suggest to do? I think the best way would be to include the package in extra, but I'm not sure if it has enough votes.

Thanks

Best regards -- Maciej Sitarz

md5sum is important to verify if the file being download is the one you (maintainer) expected to provide to the user, according to its intergrity check. Having a dynamic md5sum generator doesn't seem to be interesting. I liked Massimiliano Torromeo's idea: uploading tarball to other mirror (ex: dropbox) would indeed allow you to have a real static non-daily source tarball to be used in the PKGBUILD. This way, you wouldn't need to upload that frequently and user would be able to use and update to software without problem. Cheers, -- Rafael

Dan Vratil

10:18 p.m.

On Thursday 27 October 2011 15:36:57 Maciej Sitarz wrote:

...

Hi all,

I'm maintaining hunspell-pl AUR package (https://aur.archlinux.org/packages.php?ID=44331). The problem with the package is that the maintainer of the source provides only the latest(daily) tarball snapshot. The md5sum of the tarball changes daily and the old files are removed.

The packages is very often marked as 'outdated' and I'm asked to update it, both via comments and email. Some users propose to use dynamic values for pkgver= and md5sum=, but I think it's not a good way.

Current PKGBUILD is: https://aur.archlinux.org/packages/hu/hunspell-pl/PKGBUILD Proposed PKGBUILD: http://pastebin.com/bQCafYGt

What would you suggest to do? I think the best way would be to include the package in extra, but I'm not sure if it has enough votes.

Thanks

Best regards

Hi, What about contacting the maintainer if he would be willing to provide md5 checksums together with the tarball? You would be able to wget the file and it's checksum from the build() function then. I know it's not the best solution, but it would solve your problems and it does not require any external hosting or further automation.... Regards Dan -- --- Dan Vrátil www.progdan.cz dan@progdan.cz Jabber: progdan@jabber.cz Tento email neobsahuje žádné viry, protože odesílatel nepoužívá Windows. / This email does not contain any viruses because the sender does not use Windows.

4566

Age (days ago)

4566

Last active (days ago)

List overview

Download

13 comments

9 participants

participants (9)

Bartłomiej Piotrowski
chrislcenter-mamoru＠yahoo.com.mx
Dan Vratil
Kwpolska
Maciej Sitarz
Massimiliano Torromeo
Peter Lewis
rafael ff1
Xyne