[gentoo-dev] Updating all Manifest to contain SHA256 SHA512 WHIRLPOOL

[Justin (jlec)]

Hello,

there are quite a number of Manifest still not containing one or more of the
three hashes. I would like to update them as far as we can download the sources.

Procedure would be:
1. Download package
2. verify current hashes match
3. Calculate new
4. commit

Following question need to be answered first:

Does anybody have any general objections, remarks or ideas on that?

2.
Any suggestion how to do this? repoman has a manifest-check function but that is
not functioning (bug filed). Any other tool around? Perhaps using pkgcheck?

Ugly hack would be, tampering the downloaded sources and run repoman manifest
which would redownload the tarball and check again.

4.
What do you think is the best commit mode? PKG based, Cat based or repo based?


Thanks for your comments,
Justin