Bug#774415: srebuild wrapper needs hashes in buildinfo files to query snapshot.d.o

2016-07-27 Thread Johannes Schauer
Hi,

On Mon, 09 May 2016 21:07:40 +0200 Johannes Schauer  wrote:
> The main disadvantage of the current srebuild implementation is, that it will
> only make use of a single snapshot.d.o timestamp. This makes it impossible to
> reproduce situations where packages are not built in a clean chroot, in a
> partially updated chroot or in a chroot mixing different suites. To assemble
> a chroot with the right package versions, sbuild could retrieve the exact
> right debs from snapshot.d.o.
> 
> Snapshot.d.o provides the
> /mr/package///binfiles// API to retrieve
> hashes of .deb packages of the right architecture. With that hash, srebuild 
> can
> retrieve the right dependencies.

this API function requires the source package name and version which we don't
have from a buildinfo file. Luckily, there is also
/mr/binary///binfiles

See: http://anonscm.debian.org/cgit/mirror/snapshot.debian.org.git/plain/API

> It would be simpler if the .buildinfo files would already contain the right
> hashes such that less API queries would be necessary.

This conclusion still holds.

cheers, josch


signature.asc
Description: signature


Bug#774415: srebuild wrapper needs hashes in buildinfo files to query snapshot.d.o

2016-05-09 Thread Johannes Schauer
Control: block -1 by 802241

The main disadvantage of the current srebuild implementation is, that it will
only make use of a single snapshot.d.o timestamp. This makes it impossible to
reproduce situations where packages are not built in a clean chroot, in a
partially updated chroot or in a chroot mixing different suites. To assemble a
chroot with the right package versions, sbuild could retrieve the exact right
debs from snapshot.d.o.

Snapshot.d.o provides the
/mr/package///binfiles// API to retrieve
hashes of .deb packages of the right architecture. With that hash, srebuild can
retrieve the right dependencies.

It would be simpler if the .buildinfo files would already contain the right
hashes such that less API queries would be necessary.

Thus, blocking this bug by #802241.

Thanks!

cheers, josch


signature.asc
Description: signature