[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to include information about a source package ?

On Monday 01 May 2006 22:05, Don Armstrong wrote:
> On Mon, 01 May 2006, George Danchev wrote:
> > 1) Since debian/copyright already contains the upstream URL I would
> > add also the hashes against it in a machine parsable way:
> >
> > It was downloaded from ftp://ftp.coolsite.org/dir/file-1.2.tar.gz
> > md5sum: paranoiccyphers
> > sha1sum: extraparanoiccyphers
> That's not useful; far better to look at the original .dsc. Finally,
> changing it automatically will just end up with it being the same as
> the orig.tar.gz put in the .dsc... 

We won't have .dsc at that stage at all. The sponsor could checkout my debian/ 
directory from a scm repo we both have access to or I can send it to him gpg 
signed and he can start off the reviewing and building process from there. 
That's all.

> the copyright file isn't designed 
> to have that information in it in the first place.

I do not see why it is not. File uri along a digest(s) is the only way to 
strictly declare which upstream tarball we are talking about.

pub 4096R/0E4BD0AB 2003-03-18 <people.fccf.net/danchev/key pgp.mit.edu>
fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB 

Reply to: