[oe-users] static sources

[Koen Kooi]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

NZG schreef:
> On Thursday 01 November 2007 4:16:05 pm Koen Kooi wrote:
>> DISTRO="angstrom-2007.1" does all that, and more.
> That works, but still it seems a little dangerous since it only uses the 
> angstrom repository if the file versions can't be found through the standard 
> package SRC_URI's.
> 
> Of course, most of time, that will work fine, but it doesn't protect against 
> hacks (like what happened recently to tcpdump.org)

That is what conf/checksums.ini is for. The fetcher will compare the
downloaded md5 and sha256 sums against the ones stored (provided they
are present, see Marcin's latest addition in contrib).

> Is there an easy way to prioritze to use the angstrom repositories first?

Yes by changing them to PREMIRROR or something similar.

regards,

Koen

- --
koen at dominion.kabel.utwente.nl will go go away in december 2007, please
use k.kooi at student.utwente.nl instead.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFHK0AwMkyGM64RGpERAvS1AKCTRxz9b1/f7cwwsHyel8rWSTnTuACgt7WH
ShVVndBGcyteZcqD8M82rbQ=
=3RTW
-----END PGP SIGNATURE-----