Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-scm
Navigation:
Lists: gentoo-scm: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-scm@g.o
From: Robert Buchholz <rbu@g.o>
Subject: Re: gentoo-x86 on git - Manifests
Date: Fri, 20 Feb 2009 11:50:07 +0100
On Friday 20 February 2009, Robin H. Johnson wrote:
> Remember that Portage will only verify hashes that exist in the file.
> If they aren't in the file, they don't get verified. The fix you
> describe is unneeded.

If you use FEATURES=-digest, Portage refuses to build when there are 
files missing in the Manifest:

# cat /usr/portage/media-libs/libpng/Manifest
DIST libpng-1.2.33.tar.lzma 513430 RMD160 
698d164edf37e5aab729dfe64b226ddcacf709dd SHA1 
a57e150ecc0746225b3aead1a2e1bc89be021584 SHA256 
4393786a311435012bde31f99177303d6caa83b0ee2847f8eb24ddc3fdd93888
DIST libpng-1.2.34.tar.lzma 514210 RMD160 
e30f07c97130f53b7a9f13f10c03c6667750c407 SHA1 
ac4cc4f136c08fdaa627391ea4d54ff192adfeb0 SHA256 
199052e53ee03c529db106c4f72ffeb741e6a539e6d969d33ba1543a2396792d
# emerge libpng
Calculating dependencies... done!

>>> Verifying ebuild manifests
!!! A file is not listed in the 
Manifest: '/usr/portage/media-libs/libpng/libpng-1.2.33.ebuild'


If you use FEATURES=digest, Portage ignores missing lines or errors in 
the Manifest completely. So either overlays must ship full Manifests or 
Portage would need a feature to fix slim Manifests.

However, this opens a bit of a conflict:
On the one hand, you want to recreate broken Manifests on as few file 
trees as possible, since this will shadow errors or manipulation[1], on 
the other hand you need to recreate it for overlays that are missing 
the entries.

This could be solved by adding a file to each tree that states whether 
it comes with slim or full Manifests and whether regeneration is needed 
or not. In case of signed trees, this file must be signed as well.
Repoman could even check the existence of that file and add or remove 
Manifest entries based on that so you could use this tool to work on 
new-style Manifest git repositories and old-style Manifest svn 
repositories.


Robert

[1] Just think you have a signed tree, but someone managed to sneak in a 
bash-4.0.ebuild and Portage just ignores the missing signed Manifest.
Attachment:
signature.asc (This is a digitally signed message part.)
Replies:
Re: gentoo-x86 on git - Manifests
-- Robin H. Johnson
References:
gentoo-x86 on git - Manifests
-- Maciej Mrozowski
Re: gentoo-x86 on git - Manifests
-- Maciej Mrozowski
Re: gentoo-x86 on git - Manifests
-- Robin H. Johnson
Navigation:
Lists: gentoo-scm: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: gentoo-x86 on git - Manifests
Next by thread:
Re: gentoo-x86 on git - Manifests
Previous by date:
Re: gentoo-x86 on git - Manifests
Next by date:
Re: gentoo-x86 on git - Manifests


Updated Jun 17, 2009

Summary: Archive of the gentoo-scm mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.