Comments (4)
alexbluesman
commented on July 19, 2024
Hello! Could you please describe your use-case? Am I right that you want to download binary files from recipe and do not want to manually hardcode checksums?
from isar.
Rondom
commented on July 19, 2024
Not specifying a checksum would make the build no longer reproducible, wouldn't it?
from isar.
alexbluesman
commented on July 19, 2024
On the one hand, yes, not specifying a checksum could mean non-reproducible build, but there are several other facts, like:
- AUTOREV in bitbake which means to pull head commit
- Upstream debian.org could be updated at any time
what can't gurantee reproducibility with fetching from the upstream.
Regarding specifying the checksum, I'd like to do this for binaries to handle broken downloads. For example:
- Bitbake is trying to download 'abc.conf' from the upstream
- File localtion in upstream had been changed, so 404 HTML page returned as payload for 'abc.conf'
- Due to 'abc.conf' does not participate in build, the problem could be detected only during image running
from isar.
alexbluesman
commented on July 19, 2024
No feedback for 1 month.
from isar.
Related Issues (20)
- Nanopi-neo fails to boot with isar-image-base-debian-bookworm-nanopi-neo.wic HOT 4
- How to increase disk space in /dev/sda1 HOT 2
- Add user with bash HOT 5
- Build isar image installer with empty target image HOT 1
- linux-libc-dev package with wrong arch headers directory HOT 1
- Run bitbake mc:qemuamd64-focal:isar-image-base, but can't generate wic image HOT 2
- linux-modules/modules.inc doesn't expand AUTOLOAD correctly HOT 2
- Use rootfs when cross-compiling HOT 7
- Enable non-root building - again HOT 2
- Support for buildchroot pooling for parallel builds HOT 2
- sstate-cache support HOT 2
- How to add a customized toolchain HOT 4
- libc dependency issue, HOT 4
- sstate always 0% match. HOT 3
- How to freeze builds? HOT 1
- how to build patched package as multilib (amd64 and i386) in same target HOT 1
- Help: how to use s3 as sstate_cache back end
- gpg-agent failed when using custom apt repository HOT 5
- Add Support for apt_auth.conf for PRODUCT_EXTRA_SOURCES HOT 1
- do_rootfs_quality_check reports warnings when adding >1 new users HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from isar.