Re: Custom sha256 updaters ?

["Ludovic Courtès" <ludo@gnu.org>]

Hi,

Nicolas Graves <ngraves@ngraves.fr> skribis:

> Has there already been some discussion about custom hash updaters? I
> have written an import module for libreoffice, and we have access to the
> sha256 hash in for example
>
> https://download.documentfoundation.org/libreoffice/src/24.2.6/libreoffice-24.2.6.2.tar.xz.sha256
>
> which would make it trivial to update without having to download 267MiB
> of data twice.
>
> However, %method-updates doesn't seem to allow such a flexibility for
> now. Maybe a custom field for a function in <upstream-updater> could be
> possible? WDYT?

This hasn’t been discussed before, but allow me to be skeptical.  :-)

First because if you run ‘guix refresh -u’, surely you’ll want to
download the file (and note that it downloads it once, not twice,
because the file goes into the store).

Second because I think we want to encourage packagers to authenticate
source tarballs, and files containing lists of hashes are not helpful
for that.

Does that make sense?

Ludo’.