Hi,

As often DOWNLOADS are defined in exlibs and are dependent on package versions, revisions and other variable information, wouldn 't it be most sufficient to keep, i.e. a "checksums" somewhere within the repository, which would contain hashes that can be automatically or manually generated? Then, the fetcher would compare the downloaded distfiles against the checksums, and, for instance, retry the download from somewhere else, abort, etc.

IMO, it shouldn 't be up to individual packages to check for distifiles integrity.

Best wishes,

John Kallimanis

_______________________________________________
Exherbo-dev mailing list
[email protected]
http://lists.exherbo.org/mailman/listinfo/exherbo-dev

Reply via email to