summaryrefslogtreecommitdiffstats
path: root/docs/manual/adding-packages-directory.txt
diff options
context:
space:
mode:
authorYann E. MORIN <yann.morin.1998@free.fr>2015-04-01 00:15:02 +0200
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>2015-04-03 14:08:00 +0200
commit1286222597d960b31567d30acdc01932c1f37afe (patch)
tree318b84e1f8dd420a4613df4ff9383f62f1de261a /docs/manual/adding-packages-directory.txt
parentc22fe04a789ef59add62612d1c5ceeadccd4e3ef (diff)
downloadbuildroot-1286222597d960b31567d30acdc01932c1f37afe.tar.gz
buildroot-1286222597d960b31567d30acdc01932c1f37afe.zip
package infra: do not check hashes when downloading from a repository
When downloading from a repository, we have no way to ensure the reproducibility of the generated archives, so we can't check the hashes. Do not specifiy a hash file in those cases. Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Reviewed-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Reviewed-by: Samuel Martin <s.martin49@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'docs/manual/adding-packages-directory.txt')
-rw-r--r--docs/manual/adding-packages-directory.txt6
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/manual/adding-packages-directory.txt b/docs/manual/adding-packages-directory.txt
index 1b34b41518..01a1928e28 100644
--- a/docs/manual/adding-packages-directory.txt
+++ b/docs/manual/adding-packages-directory.txt
@@ -471,4 +471,10 @@ environment variable +BR2_ENFORCE_CHECK_HASH+ to a non-empty value, and
there is no hash for a downloaded file, Buildroot considers this an
error, deletes the downloaded file, and aborts.
+Sources that are downloaded from a version control system (git, subversion,
+etc...) can not have a hash, because the version control system and tar
+may not create exactly the same file (dates, files ordering...), so the
+hash could be wrong even for a valid download. Therefore, the hash check
+is entirely skipped for such sources.
+
If the +.hash+ file is missing, then no check is done at all.
OpenPOWER on IntegriCloud