Re: [Valgrind-users] Getting Valgrind securely

2019-03-14 Thread Adam Novak
In HPC/cluster environments, users often don't have root and can't use traditional package managers; I generally need to build and install software with a --prefix sent to the configure script. It's not that I don't want to build valgrind; I do want to build it from source. But I want to have some

Re: [Valgrind-users] Getting Valgrind securely

2019-03-14 Thread John Reiser
*And* I have to clone the whole git repo when really I just want to install the current release of the program That is by design. If *you* want to get the bits that way, then *you* must build valgrind. Besides, the repo is not large, and building it is not long. Someone whose email address end

[Valgrind-users] Getting Valgrind securely

2019-03-14 Thread Adam Novak
Hello, I'm looking for a secure way to download the Valgrind source tarballs, or to verify their hashes. Right now it looks like the whole Valgrind web site, including the official downloads, is only available over HTTP (yet is also available over IPv6). So downloads could be tampered with in tran