[meta-virtualization] [meta-openstack][PATCH v2] python-dogpile: core: update SRC_URI* sums

Bruce Ashfield bruce.ashfield at gmail.com
Mon Feb 10 08:23:33 PST 2014


On Mon, Feb 10, 2014 at 9:55 AM, Mark Asselstine
<mark.asselstine at windriver.com> wrote:
> Attempting to build openstack-image-controller I was getting
>
>   'Fetcher failure ... /dogpile.core-0.4.1.tar.gz'. Checksum mismatch!
>
> Update the sums to match the expected values.
>
> Unfortunately upstream repackaged the tarball after updating some of
> the python egg files without bumping the package version or providing
> any details about the updates. The new tarball matches the md5 listed
> on the upstream website (https://pypi.python.org/pypi/dogpile.core) so
> the update does not seem to be malicious.

Simple enough, no sense waiting on this, so I've pulled and merged the
change.

Bruce

>
> Signed-off-by: Mark Asselstine <mark.asselstine at windriver.com>
> ---
>
> v2:
>  * Updated commit log with details about the tarball update
>
>  meta-openstack/recipes-devtools/python/python-dogpile.core_0.4.1.bb | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/meta-openstack/recipes-devtools/python/python-dogpile.core_0.4.1.bb b/meta-openstack/recipes-devtools/python/python-dogpile.core_0.4.1.bb
> index 3079c39..0b33455 100644
> --- a/meta-openstack/recipes-devtools/python/python-dogpile.core_0.4.1.bb
> +++ b/meta-openstack/recipes-devtools/python/python-dogpile.core_0.4.1.bb
> @@ -9,8 +9,8 @@ SRCNAME = "dogpile.core"
>
>  SRC_URI = "https://pypi.python.org/packages/source/d/${SRCNAME}/${SRCNAME}-${PV}.tar.gz"
>
> -SRC_URI[md5sum] = "5f76cce023d505a5375b07e094c3260f"
> -SRC_URI[sha256sum] = "af2555702811d56846778d39451cf822b04b3f13347080c121a4977fefdfcbff"
> +SRC_URI[md5sum] = "01cb19f52bba3e95c9b560f39341f045"
> +SRC_URI[sha256sum] = "be652fb11a8eaf66f7e5c94d418d2eaa60a2fe81dae500f3743a863cc9dbed76"
>
>  S = "${WORKDIR}/${SRCNAME}-${PV}"
>
> --
> 1.8.3.2
>
> _______________________________________________
> meta-virtualization mailing list
> meta-virtualization at yoctoproject.org
> https://lists.yoctoproject.org/listinfo/meta-virtualization



-- 
"Thou shalt not follow the NULL pointer, for chaos and madness await
thee at its end"


More information about the meta-virtualization mailing list