From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 4AEAF138B39 for ; Wed, 20 Feb 2013 12:10:07 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3986B21C01A; Wed, 20 Feb 2013 12:10:04 +0000 (UTC) Received: from mail-oa0-f43.google.com (mail-oa0-f43.google.com [209.85.219.43]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 2D4C421C002 for ; Wed, 20 Feb 2013 12:10:02 +0000 (UTC) Received: by mail-oa0-f43.google.com with SMTP id l10so7956956oag.2 for ; Wed, 20 Feb 2013 04:10:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=dkHSGD8CxckqVFcsZ183rW+/dDDzb0hsaiki6TZBfdY=; b=WfXEKGCP1ciqGl6wJ5HlCNwN2cP7+ns1btk3ocOkMzYq9Z2J4dxKjWHmX3ebAT+JdV XzqITi/f35dD/jXGcVQBV0unezol34jwnMgkfMRh83l7Vi4jE8XNDq46gXp8UIrMHSfh GGxsYhVzW3ZHJ5MxhzxBSW+AdlKsvT3jf7gErVA5Xnm7GLaxw9WQuAkgr1gSegzaP0R8 deiC64Dk/f78Y8S1h/jhdg2zK+ZwVNH4hJfbiIWz/70TuvCHyUBZqCoxGnSPJiH5wjHK av0ykdSzGlYbGWKuT4D6t6PjYx0aeyoIeUiNwoxIPdFM0v/LhZXHRfqaRrvGaKMihQ4F hxfw== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.60.13.39 with SMTP id e7mr8828403oec.74.1361362202085; Wed, 20 Feb 2013 04:10:02 -0800 (PST) Received: by 10.182.106.33 with HTTP; Wed, 20 Feb 2013 04:10:01 -0800 (PST) In-Reply-To: References: <1361020086.1920.51.camel@belkin4> <511F8D2E.1080006@flameeyes.eu> <511F9A9F.8040206@gentoo.org> <511F9ADE.2050503@flameeyes.eu> <20767.41371.270947.851486@a1i15.kph.uni-mainz.de> <5120654B.6050406@gentoo.org> <20768.43798.568305.561675@a1i15.kph.uni-mainz.de> <512389BF.9090504@gentoo.org> Date: Wed, 20 Feb 2013 13:10:01 +0100 Message-ID: Subject: Re: [gentoo-dev] Re: linux-firmware From: =?UTF-8?B?VG9tw6HFoSBDaHbDoXRhbA==?= To: gentoo-dev@lists.gentoo.org Content-Type: text/plain; charset=UTF-8 X-Archives-Salt: a0607732-6947-4fb3-b14c-edeef4b2889a X-Archives-Hash: 5ccd7908cb9802043d51a96858e2dc8e 2013/2/20 Rich Freeman : > There is a current QA policy that anything using an scm to download > sources cannot be stabilized, because there is no way to verify the > manifest. > > I'm actually wondering if that makes sense with git when a specific > commit is referenced, since everything is content-hashed anyway. > Perhaps we just need to confirm that git actually checks the hash. > If you checkout some revision or tag just create the darn tarball yourself as it is much cleaner solution and you don't force user to install git or other scm tools unless they need them.