#329: add md5sums for spkgs
---------------------------+------------------------------------------------
   Reporter:  was          |       Owner:  pdenapo     
       Type:  enhancement  |      Status:  needs_review
   Priority:  minor        |   Milestone:  sage-4.3.3  
  Component:  packages     |    Keywords:              
     Author:               |    Upstream:  N/A         
   Reviewer:               |      Merged:              
Work_issues:               |  
---------------------------+------------------------------------------------
Changes (by ddrake):

  * status:  new => needs_review


Comment:

 I've uploaded two patches which add in support for using cksum to do spkg
 integrity verification. There's a new sage-spkg-integrity-check script
 which gets called by sage-spkg, and a convenience script, sage-add-
 integrity-check-to-spkg, which can be used to easily add the required
 cksum file to a spkg. Once you have a built spkg, you can just do
 {{{
 sage-add-integrity-check-to-spkg foo.spkg
 }}}
 and the correct file gets added in.

 I've done some simple testing and it seems to work properly. One test is
 to apply these patches, make a source tarball, and then deliberately
 truncate the file and see if things fail. (I think an aborted download is
 a common way to get invalid spkg files.) One can also corrupt a spkg file
 to see if it's detected.

 Once these scripts are in, we can easily go through all the spkgs in the
 optional and experimental repos and add in integrity checks for them.

 Right now, a missing cksum file is not considered an error, but that can
 be changed easily. Doing cksum verifications for every spkg in
 4.3.4.alpha0 takes a bit under 6 minutes on my computer. If that seems too
 long, it would be easy to add in an environment variable (and document it!
 See #8263) that would turn these verifications off.

 Please review!

-- 
Ticket URL: <http://trac.sagemath.org/sage_trac/ticket/329#comment:10>
Sage <http://www.sagemath.org>
Sage: Creating a Viable Open Source Alternative to Magma, Maple, Mathematica, 
and MATLAB

-- 
You received this message because you are subscribed to the Google Groups 
"sage-trac" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/sage-trac?hl=en.

Reply via email to