[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server

[Matthew Turk]

Anybody have a chance to look at the PR?

https://bitbucket.org/yt_analysis/yt/pull-request/76/sha-sums-instead-of-md5

On Thu, Jan 26, 2012 at 7:26 PM, Matthew Turk <matthewturk at gmail.com> wrote:
> Cool!  I have issued a PR.  Thanks!
>
> On Thu, Jan 26, 2012 at 1:03 PM, Casey W. Stark <caseywstark at gmail.com> wrote:
>> Hey Matt.
>>
>> Just ran the new version and it's verifying everything fine. I will let you
>> know if anything goes wrong with compilation, but otherwise looks great.
>>
>> Best,
>> Casey
>>
>>
>> On Wed, Jan 25, 2012 at 3:08 PM, Matthew Turk <matthewturk at gmail.com> wrote:
>>>
>>> Hi Casey,
>>>
>>> Can you try the same thing with hash cc3c53c247df?  I added a catch
>>> for OSX with shasum, but not sha512sum.
>>>
>>> -Matt
>>>
>>> On Wed, Jan 25, 2012 at 2:26 PM, Casey W. Stark <caseywstark at gmail.com>
>>> wrote:
>>> > Ah, so I found the discussion in IRC. It looks like you use sha512sum on
>>> > linux and shasum -a 512 on macs. Maybe the install script can try
>>> > shasum,
>>> > then sha512sum, then bail on the sum?
>>> >
>>> > NERSC has shasum btw.
>>> >
>>> > Best,
>>> > Casey
>>> >
>>> >
>>> > On Wed, Jan 25, 2012 at 1:52 PM, Matthew Turk <matthewturk at gmail.com>
>>> > wrote:
>>> >>
>>> >> Hi Casey,
>>> >>
>>> >> Rats!  Is there an sha sum utility of any type?  I thought some people
>>> >> in IRC found it on their mac.
>>> >>
>>> >> -Matt
>>> >>
>>> >> On Wed, Jan 25, 2012 at 1:46 PM, Casey W. Stark <caseywstark at gmail.com>
>>> >> wrote:
>>> >> > Hi Matt.
>>> >> >
>>> >> > I don't think macs have sha512sum. I get:
>>> >> >
>>> >> > Awesome!  Here we go.
>>> >> >
>>> >> > Using wget
>>> >> > Downloading HDF5
>>> >> > Downloading hdf5-1.8.7.tar.gz from yt-project.org
>>> >> > 2012-01-25 13:22:51
>>> >> > URL:http://yt-project.org/dependencies/hdf5-1.8.7.tar.gz
>>> >> > [7827944/7827944] -> "hdf5-1.8.7.tar.gz" [1]
>>> >> > I am unable to locate sha512sum.  FILE INTEGRITY NOT VERIFIED.
>>> >> > Downloading zlib-1.2.3.tar.bz2 from yt-project.org
>>> >> > ...
>>> >> >
>>> >> > Best,
>>> >> > Casey
>>> >> >
>>> >> >
>>> >> > On Wed, Jan 25, 2012 at 1:19 PM, Matthew Turk <matthewturk at gmail.com>
>>> >> > wrote:
>>> >> >>
>>> >> >> Hi all,
>>> >> >>
>>> >> >> Currently to verify file integrity with the install script we
>>> >> >> download
>>> >> >> sidecar md5 file from yt-project.org.  These aren't versioned, and
>>> >> >> md5
>>> >> >> itself is largely deprecated for this.
>>> >> >>
>>> >> >> I've created a new sha512-using version of the install script, which
>>> >> >> uses sha512 hashes stored *in the install script* to verify file
>>> >> >> integrity.  This way any time these change we will be notified of
>>> >> >> them.  I'd like it if a few people could test this -- I have -- on
>>> >> >> pristine systems.  It changes both how the files are downloaded and
>>> >> >> it
>>> >> >> now uses sha512sum, which should be available on most systems
>>> >> >> (according to Kacper :).
>>> >> >>
>>> >> >> You can do this by:
>>> >> >>
>>> >> >> wget
>>> >> >>
>>> >> >>
>>> >> >> https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
>>> >> >>
>>> >> >> and then running it, but maybe supplying an alternate directory
>>> >> >> rather
>>> >> >> than the default.
>>> >> >>
>>> >> >> Thanks for any feedback.
>>> >> >>
>>> >> >> -Matt
>>> >> >> _______________________________________________
>>> >> >> yt-dev mailing list
>>> >> >> yt-dev at lists.spacepope.org
>>> >> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>> >> >
>>> >> >
>>> >> >
>>> >> > _______________________________________________
>>> >> > yt-dev mailing list
>>> >> > yt-dev at lists.spacepope.org
>>> >> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>> >> >
>>> >> _______________________________________________
>>> >> yt-dev mailing list
>>> >> yt-dev at lists.spacepope.org
>>> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>> >
>>> >
>>> >
>>> > _______________________________________________
>>> > yt-dev mailing list
>>> > yt-dev at lists.spacepope.org
>>> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>> >
>>> _______________________________________________
>>> yt-dev mailing list
>>> yt-dev at lists.spacepope.org
>>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>
>>
>>
>> _______________________________________________
>> yt-dev mailing list
>> yt-dev at lists.spacepope.org
>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>