[oe] checksums situation

[Tom Rini]

On Fri, Feb 13, 2009 at 05:28:08PM +0100, Marcin Juszkiewicz wrote:
> 
> Hi
> 
> It is nearly two years since conf/checksums.ini was introduced. We 
> populated it with over 6000 entries during that time (mostly by 
> automatic fetching of all source on CELF and EWI machines). But there 
> are problems with it's format.
> 
> First problem is how to use it when overlays are used. Not every entry 
> of SRC_URI can be provided into public (NDA binaries etc) so people 
> starts to switch off checking of checksums which is not good idea. OE 
> reads only one copy of file. OK, such users can copy it to their overlay 
> and extend with own entries which will work with properly created value 
> of BBPATH variable. But this does not sound as solution.

People with overlays already need to setup BBPATH correctly, so I don't
think this part is an issue.

[snip]
> Other was to use filename as key and add "url[0-xx]" fields which will 
> list alternative locations. This one looks better but still does not 
> solve situation when someone use DEBIAN_MIRROR which is not present in 
> checksums.ini file.

Could we perhaps have a literal:
['${DEBIAN_MIRROR}/...']
md5sum:...
sha256:...

format instead?

-- 
Tom Rini