[pacman-dev] [PATCH] makepkg: rework --skip-integ

[Allan McRae]

Let reanimate this discussion.

For those who need a reminder, this is about two patches on my working 
branch:
[1] makepkg: allow skipping intergrity checks when making source package
[2] makepkg: rework --skip-integ

Currently the --skipinteg option results in makepkg outputting a warning 
when there are _no_ integrity checks in a PKGBUILD that has a source 
array.  In the case where integrity checks are present, it still checks 
them and results in an error if they are incorrect.

Patch [2] makes the --skipinteg option to cause makepkg to actually 
"skip integ"rity checks and so no error relating to integrity checks 
will be raised.  I believe this to be in line with the naming of the 
option and similar in spirit to options -a (to skip checking the arch 
field) and -d (skips checking deps).

Patch [1] extends the --skipinteg option allow the generation of a 
source tarball without requiring the checking of the integrity checks 
for the non-local sources (and hence requiring a download of the 
sources).  While this does allow someone to distribute a PKGBUILD with 
incorrect checksums, the users would have to manually specify the 
--skipinteg option (which has no short version), so that is a very 
conscious decision by the user.  Similarly, a user could distribute a 
PKGBUILD with wrong dependencies and we do not enforce the checking of 
those.

Do I sound convincing?  :P

Allan

[1] 
http://projects.archlinux.org/users/allan/pacman.git/commit/?h=working&id=636a9754
[2] 
http://projects.archlinux.org/users/allan/pacman.git/commit/?h=working&id=3d09cee3