[yocto] [meta-raspberrypi][PATCH] firmware.inc: Fetch a zip instead of cloning a git repo
Nikolay Dimitrov
picmaster at mail.bg
Mon Jul 6 02:48:50 PDT 2015
Hi guys,
One issue with the regularly changing tarball checksums is that people
start to get used to thes changes (e.g. everything looks like false
positive). Currently the tarball checksums and SCM revisions are
probably the most important tool for builds traceability. If we get
used to think about these checksums as "unreliable", it will be much
easier to miss an important component change, which would otherwise
ring a bell.
Kind regards,
Nikolay
More information about the yocto
mailing list