[aur-dev] [PATCH] git-update: Check for missing install and source files

Marcel Korpel marcel.korpel at gmail.com
Mon Jun 1 15:49:19 UTC 2015


* Lukas Fleischer <lfleischer at archlinux.org> (Mon, 01 Jun 2015 00:28:56
+0200):
> On Mon, 01 Jun 2015 at 00:07:58, Marcel Korpel wrote:
>> Isn't there a check of checksums before files are added to the index
>> (through mksrcinfo/makepkg)? If that's not the case, I stand
>> corrected.
> 
> Right, I forgot about that. So the two possibilities left are
> 
> (a) Build the package using the original files, replace with dummy
> files before committing.
> 
> (b) Use "SKIP" for the checksums.
> 
> I realize that (a) might be a bit cumbersome but then again, users
> currently need to fix their source tarballs manually after running
> `makepkg --source` (and remove some source files) which is cumbersome
> as well.

I slept over it and thought that (a) is the best way to go, as
maintainers have to do something like that now (and it's only an edge
case that doesn't occur too much). Skipping integrity checks is really
awful, especially when binaries are downloaded, like in
https://aur.archlinux.org/packages/mathematica (but the maintainer of
that package uses the file: protocol, also a clever workaround, I
think; perhaps that's a thing that could be added to the wiki?).


More information about the aur-dev mailing list