Re: testing the repository
- To: debian-med@lists.debian.org
- Cc: Debian QA List <debian-qa@lists.debian.org>
- Subject: Re: testing the repository
- From: Andreas Tille <andreas@an3as.eu>
- Date: Thu, 1 Sep 2011 12:08:34 +0200
- Message-id: <[🔎] 20110901100834.GA7152@an3as.eu>
- Reply-to: Debian QA List <debian-qa@lists.debian.org>
- In-reply-to: <CA+7wUsx-S3J7-yvJ=fwnbZT=hwySHvB8jcCBHMr2JtxhXEW-PA@mail.gmail.com>
- References: <Pine.LNX.4.64.1108301855240.16590@tor.gallien.in-chemnitz.de> <782927543.26138.1314773214573.JavaMail.root@zmbs1.inria.fr> <CA+7wUsx=JOn1rh_bpWRF1UizRg0gj9bn-rVC290bSvX7TvBq+A@mail.gmail.com> <CA+7wUsw6VaXoZzXz5kQd811LjHX0KSrzSnsyt_vymkLcnMX71Q@mail.gmail.com> <Pine.LNX.4.64.1108311948550.21098@tor.gallien.in-chemnitz.de> <CA+7wUsx-S3J7-yvJ=fwnbZT=hwySHvB8jcCBHMr2JtxhXEW-PA@mail.gmail.com>
On Thu, Sep 01, 2011 at 11:57:52AM +0200, Mathieu Malaterre wrote:
> >> that the generated tarball actually match the one from debian archive.
> >> This should catch the missing --no-name GZIP error.
> >
> > Oops, can you please tell a bit more what kind of error this is?
>
> My point was simply that someone could have provided a nicely working
> get-orig-source (or watch file if you prefer), however there is no
> check that the orig tarball was actually generated using either
> method. The orig is simply the one uploaded during the first upload. I
> believe this /could/ be a good QA to check any discrepencies...
I perfectly agree with Mathieu and I would like to add the remark
that the "--no-name GZIP" which was refered to in the first place is
that *even* if you are using a (badly written) get-orig-source target
it might end up with not byte-identical orig.tar.gz because there is
no guarantee that if you just "tar -cx" get a byte identical archive
even if the content is identical.
Kind regards
Andreas.
--
http://fam-tille.de
Reply to: