From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 4024E138B39 for ; Wed, 20 Feb 2013 12:02:58 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 86D3121C004; Wed, 20 Feb 2013 12:02:54 +0000 (UTC) Received: from mail-ie0-f178.google.com (mail-ie0-f178.google.com [209.85.223.178]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 94B46E050C for ; Wed, 20 Feb 2013 12:02:53 +0000 (UTC) Received: by mail-ie0-f178.google.com with SMTP id c13so9585954ieb.23 for ; Wed, 20 Feb 2013 04:02:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type; bh=e2bcSP4gwBtBEEi/7cTIAcc2qS8IdshQQ3stcBjeJaI=; b=nIqId9K2p4pLUD8YNWO38fXwG9P3iHn3yCwW6iF2ZyAB1/RqPgI4TWwDXsj/JveTtt eNV9lSRwpRA/yZF0Bd8b/ozcPYcqbDjM93DcS6f9qU2jKKPxNmJOhA1wne8aYrWoTMVE Lp4igt4CaffRi7RfxyBhUYxRPYDAKOIBtpiW++lYNRw3+gyY3R0qP0Lw4XVPET4C2DmM JJxo7bEgckhIbrPW1i4XgkiC+LQ3PbV3ZEXcpRjOsCWF+QIIyn0aU2uhzJIg4HA8tixg MiPTrUOqGzJlsilrTF4Kq0ATbGubEw1C4rAdy8TCYx47Mk087x2yTHKvVIEDSQWmUuM5 mhnA== Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 X-Received: by 10.50.219.228 with SMTP id pr4mr10813688igc.40.1361361772752; Wed, 20 Feb 2013 04:02:52 -0800 (PST) Sender: freemanrich@gmail.com Received: by 10.64.21.98 with HTTP; Wed, 20 Feb 2013 04:02:52 -0800 (PST) In-Reply-To: References: <1361020086.1920.51.camel@belkin4> <511F8D2E.1080006@flameeyes.eu> <511F9A9F.8040206@gentoo.org> <511F9ADE.2050503@flameeyes.eu> <20767.41371.270947.851486@a1i15.kph.uni-mainz.de> <5120654B.6050406@gentoo.org> <20768.43798.568305.561675@a1i15.kph.uni-mainz.de> <512389BF.9090504@gentoo.org> Date: Wed, 20 Feb 2013 07:02:52 -0500 X-Google-Sender-Auth: -8fUosuJuM7t4o45-p9VmIhvcgg Message-ID: Subject: Re: [gentoo-dev] Re: linux-firmware From: Rich Freeman To: gentoo-dev Content-Type: text/plain; charset=ISO-8859-1 X-Archives-Salt: 4f04419c-72e9-4132-a712-9d616a239767 X-Archives-Hash: a6c586cafe23cebfa010ad8dc8d43ce2 On Tue, Feb 19, 2013 at 11:43 PM, Duncan <1i5t5.duncan@cox.net> wrote: > If all upstream has is a git tarball, what about git-snapshot builds? > Use the git2 eclass and set a commit number, thus allowing testing and > stabilization of a specific commit, but the checkout would be directly > from upstream, so (for the general case, live-image case discussed below) > gentoo wouldn't be distributing anything but the ebuild. There is a current QA policy that anything using an scm to download sources cannot be stabilized, because there is no way to verify the manifest. I'm actually wondering if that makes sense with git when a specific commit is referenced, since everything is content-hashed anyway. Perhaps we just need to confirm that git actually checks the hash. Rich