Robin Candau pushed to branch main at Arch Linux / Packaging / Packages / 
discord


Commits:
90962a2b by Robin Candau at 2025-03-21T20:47:21+01:00
upgpkg: 0.0.88-2: Set license files checksum to SKIP for reproducible builds + 
add README to document the manual intervention it implies on version upgrade

- - - - -


3 changed files:

- .SRCINFO
- PKGBUILD
- + README.md


Changes:

=====================================
.SRCINFO
=====================================
@@ -1,7 +1,7 @@
 pkgbase = discord
        pkgdesc = All-in-one voice and text chat for gamers
        pkgver = 0.0.88
-       pkgrel = 1
+       pkgrel = 2
        url = https://discord.com
        arch = x86_64
        license = custom
@@ -14,8 +14,8 @@ pkgbase = discord
        source = LICENSE-0.0.88.html::https://discordapp.com/terms
        source = OSS-LICENSES-0.0.88.html::https://discordapp.com/licenses
        sha512sums = 
e15beb272ed7856167bc963810799dc2637cd765a551f576498e6c380d1840635303c0d19b1130fc1e7269053cd66b5e5d88182364b97bbdbd83b67507cf980f
-       sha512sums = 
7f39614a479735244732b73ea254d934a9735012e02ffc873b11813bb2587794b4f39de6a7857734b908b7c0d08b1f52e2e27df1bde57ee5a8752c50d68f7d6c
-       sha512sums = 
7d8f36553dafd5b92dcfea13b072597dde5e036fe098013b493ed0d339fce2d6c0705c648a52e81fe71a2414aa6815a44a1616e2819ba1119485ddd6e1aef144
+       sha512sums = SKIP
+       sha512sums = SKIP
 
 pkgname = discord
        depends = libnotify


=====================================
PKGBUILD
=====================================
@@ -6,7 +6,7 @@
 pkgname=discord
 _pkgname=Discord
 pkgver=0.0.88
-pkgrel=1
+pkgrel=2
 pkgdesc="All-in-one voice and text chat for gamers"
 arch=('x86_64')
 url='https://discord.com'
@@ -19,8 +19,8 @@ 
source=("https://dl.discordapp.net/apps/linux/$pkgver/$pkgname-$pkgver.tar.gz";
         "LICENSE-$pkgver.html::https://discordapp.com/terms";
         "OSS-LICENSES-$pkgver.html::https://discordapp.com/licenses";)
 
sha512sums=('e15beb272ed7856167bc963810799dc2637cd765a551f576498e6c380d1840635303c0d19b1130fc1e7269053cd66b5e5d88182364b97bbdbd83b67507cf980f'
-            
'7f39614a479735244732b73ea254d934a9735012e02ffc873b11813bb2587794b4f39de6a7857734b908b7c0d08b1f52e2e27df1bde57ee5a8752c50d68f7d6c'
-            
'7d8f36553dafd5b92dcfea13b072597dde5e036fe098013b493ed0d339fce2d6c0705c648a52e81fe71a2414aa6815a44a1616e2819ba1119485ddd6e1aef144')
+            'SKIP'
+            'SKIP')
 
 prepare() {
   cd $_pkgname


=====================================
README.md
=====================================
@@ -0,0 +1,8 @@
+# Discord
+
+## Unstable license files hash and `updpkgsums` / `pkgctl version upgrade` bug 
requiring manual action on PKGBUILD upgrade
+
+The license files included in the PKGBUILD's source array have an [unstable 
hash which changes each time the files are 
fetched](https://gitlab.archlinux.org/archlinux/packaging/packages/discord/-/issues/2),
 preventing reproducible builds.  
+As such, we set the checksum to `SKIP` for those.
+
+However, due to [an `updpkgsums` 
bug](https://gitlab.archlinux.org/pacman/pacman-contrib/-/issues/119) 
overwriting checksum entries that are set to `SKIP` (which also occurs when 
using `pkgctl version upgrade`), the checksum for the license files have to 
*manually* be set back to `SKIP` on version upgrade when using either 
`updpkgsums` or `pkgctl verion upgrade` (otherwise, the package will become 
unreproducible).



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/discord/-/commit/90962a2bdbfb856b010ce723415894944c39565f

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/discord/-/commit/90962a2bdbfb856b010ce723415894944c39565f
You're receiving this email because of your account on gitlab.archlinux.org.


Reply via email to