rpkg

#312 Detect lookaside hash from sources file
Closed by lsedlar. Opened by lsedlar.
lsedlar/rpkg detect-checksum  into  master

Download 312.patch

Try to see what is in the sources file and use it. Only if that fails we check the configuration.

This will allow deployments that are migrating to new checksum to use it only for some packages.

The question is how to actually force the migration. Assuming a package that currently has MD5 sources, one would have to delete the sources file and upload new ones with client configured to use SHA512. That is not a very obvious process.

rebased onto 7b33adfc1b3c23d15095498088925edf643762ae

I rebased on current master and updated the code to only check the file if config says to use md5. This should prevent fedpkg users from downgrading the hash.

rebased onto 51801280aba50ae5b7591218f02cd4bf9d74c606

rebased onto c0c73b9f429c79aa844e70b265dbff39b9802678

pretty please pagure-ci rebuild

Discussed with @cqi, and this would be better done in downstream as it's quite specific for that single deployment.

Pull-Request has been closed by lsedlar
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.