On Tue, Feb 19, 2013 at 11:43 PM, Duncan <1i5t5.dun...@cox.net> wrote: > If all upstream has is a git tarball, what about git-snapshot builds? > Use the git2 eclass and set a commit number, thus allowing testing and > stabilization of a specific commit, but the checkout would be directly > from upstream, so (for the general case, live-image case discussed below) > gentoo wouldn't be distributing anything but the ebuild.
There is a current QA policy that anything using an scm to download sources cannot be stabilized, because there is no way to verify the manifest. I'm actually wondering if that makes sense with git when a specific commit is referenced, since everything is content-hashed anyway. Perhaps we just need to confirm that git actually checks the hash. Rich
