-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 4/13/11 2:47 PM, Jack Howarth wrote: > On Wed, Apr 13, 2011 at 11:33:46AM -0700, David R. Morrison wrote: >> The problem with this approach is that it short-circuits one of Fink's >> security features (the checking of MD5sum for source files) and it also >> short-circuits Fink's storage of source files in its own archive to guard >> against the day when the source file is no longer available from the >> original distributor. >> >> -- Dave > > Dave, > Considering the lack of resources for fink, jumping through the hoops to > get tarballs posted > is far more painful. MacPorts has supported this approach for quite some time > now with their > svn.url/svn.revision fields. I used that approach in the MacPorts pymol > package I maintain. > Jack > ps The posted packaging doesn't trigger any warnings with -m so I assumed it > was acceptable to > code that way. > >>
That'd be a gap in the validator module. The packaging manual isn't explicit about not accessing the network in the patch, build, or install phases; it's been a general consensus not to do that, however. >> >> On Apr 13, 2011, at 11:23 AM, Jack Howarth wrote: >> >>> Hanspeter, >>> The dragonegg-gcc.info posted at >>> http://sourceforge.net/tracker/?func=detail&aid=3281454&group_id=17203&atid=414256 >>> works well enough so far. I used... >>> >>> Source: none >>> >>> with the svn download in the PatchScript... >>> >>> PatchScript: << >>> #!/bin/bash -ev >>> svn co -r129359 http://llvm.org/svn/llvm-project/dragonegg/trunk/ . >>> patch -p1 < %{PatchFile} >>> << >>> >>> For now I am setting... >>> >>> Distribution: 10.5, 10.6 >>> >>> to avoid a dependency on the fink svn package. It would be nice if fink had >>> a >>> virtual system-svn package that would resolve to the system svn on 10.5 and >>> later >>> but resolve as the fink svn on 10.4. I hate to penalize the users of modern >>> systems >>> by forcing them to needlessly build svn to build the package. >>> Jack >>> One could do a BuildDepends: svn in a 10.4-only package description. But since closing out 10.4 is a high priority, there's probably not much need to worry about that. - -- Alexander Hansen, Ph.D. Fink User Liaison http://finkakh.wordpress.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk2l9J8ACgkQB8UpO3rKjQ8beACbBt+oTHUQaUOEJdvoGxRLG9UT ZLkAoIZpAcZ5PXq3ctqHlI9yupf/LJcc =Fws7 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Forrester Wave Report - Recovery time is now measured in hours and minutes not days. Key insights are discussed in the 2010 Forrester Wave Report as part of an in-depth evaluation of disaster recovery service providers. Forrester found the best-in-class provider in terms of services and vision. Read this report now! http://p.sf.net/sfu/ibm-webcastpromo _______________________________________________ Fink-devel mailing list Fink-devel@lists.sourceforge.net List archive: http://news.gmane.org/gmane.os.apple.fink.devel Subscription management: https://lists.sourceforge.net/lists/listinfo/fink-devel
