5d36710e36
Currently, we expect and only use hash files that lie within the package directory, alongside the .mk file. Those hash files are thus bundled with Buildroot. This implies that only what's known to Buildroot can ever get into those hash files. For packages where the version is fixed (or a static choice), then we can carry hashes for those known versions. However, we do have a few packages for which the version is a free-form entry, where the user can provide a custom location and/or version. like a custom VCS tree and revision, or a custom tarball URL. This means that Buildroot has no way to be able to cary hashes for such custom versions. This means that there is no integrity check that what was downloaded is what was expected. For a sha1 in a git tree, this is a minor issue, because the sha1 by itself is already a hash of the expected content. But for custom tarballs URLs, or for a tag in a VCS, there is indeed no integrity check. Buildroot can't provide such hashes, but interested users may want to provide those, and currently there is no (easy) way to do so. We leverage the existing global-patch-dir mechanism to look for extra hash files. We use the same heuristic that is used for bundled hash files, and for each global patch directory <dir>, we use the first file to exist among: 1. look into <dir>/<package>/<version>/<package>.hash 2. look into <dir>/<package>/<package>.hash Reported-by: "Martin Zeiser (mzeiser)" <mzeiser@cisco.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> |
||
---|---|---|
.. | ||
adding-board-support.adoc | ||
adding-packages-asciidoc.adoc | ||
adding-packages-autotools.adoc | ||
adding-packages-cargo.adoc | ||
adding-packages-cmake.adoc | ||
adding-packages-conclusion.adoc | ||
adding-packages-directory.adoc | ||
adding-packages-generic.adoc | ||
adding-packages-gettext.adoc | ||
adding-packages-golang.adoc | ||
adding-packages-hooks.adoc | ||
adding-packages-kconfig.adoc | ||
adding-packages-kernel-module.adoc | ||
adding-packages-linux-kernel-spec-infra.adoc | ||
adding-packages-luarocks.adoc | ||
adding-packages-meson.adoc | ||
adding-packages-perl.adoc | ||
adding-packages-python.adoc | ||
adding-packages-qmake.adoc | ||
adding-packages-rebar.adoc | ||
adding-packages-tips.adoc | ||
adding-packages-virtual.adoc | ||
adding-packages-waf.adoc | ||
adding-packages.adoc | ||
advanced.adoc | ||
appendix.adoc | ||
beyond-buildroot.adoc | ||
ccache-support.adoc | ||
common-usage.adoc | ||
configure-other-components.adoc | ||
configure.adoc | ||
contribute.adoc | ||
customize-configuration.adoc | ||
customize-device-permission-tables.adoc | ||
customize-directory-structure.adoc | ||
customize-outside-br.adoc | ||
customize-packages.adoc | ||
customize-patches.adoc | ||
customize-post-image.adoc | ||
customize-quick-guide.adoc | ||
customize-rootfs.adoc | ||
customize-users-tables.adoc | ||
customize.adoc | ||
debugging-buildroot.adoc | ||
developers.adoc | ||
download-infra.adoc | ||
download-location.adoc | ||
faq-troubleshooting.adoc | ||
getting.adoc | ||
how-buildroot-works.adoc | ||
integration-selinux-support.adoc | ||
integration-systemd.adoc | ||
integration.adoc | ||
introduction.adoc | ||
known-issues.adoc | ||
legal-notice.adoc | ||
make-tips.adoc | ||
makedev-syntax.adoc | ||
makeusers-syntax.adoc | ||
manual.adoc | ||
manual.mk | ||
migrating.adoc | ||
package-make-target.adoc | ||
patch-policy.adoc | ||
prerequisite.adoc | ||
quickstart.adoc | ||
rebuilding-packages.adoc | ||
release-engineering.adoc | ||
resources.adoc | ||
using-buildroot-debugger.adoc | ||
using-buildroot-development.adoc | ||
using-buildroot-toolchain.adoc | ||
writing-rules.adoc |