[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server

Matthew Turk matthewturk at gmail.com
Thu Jan 26 16:26:44 PST 2012


Cool!  I have issued a PR.  Thanks!

On Thu, Jan 26, 2012 at 1:03 PM, Casey W. Stark <caseywstark at gmail.com> wrote:
> Hey Matt.
>
> Just ran the new version and it's verifying everything fine. I will let you
> know if anything goes wrong with compilation, but otherwise looks great.
>
> Best,
> Casey
>
>
> On Wed, Jan 25, 2012 at 3:08 PM, Matthew Turk <matthewturk at gmail.com> wrote:
>>
>> Hi Casey,
>>
>> Can you try the same thing with hash cc3c53c247df?  I added a catch
>> for OSX with shasum, but not sha512sum.
>>
>> -Matt
>>
>> On Wed, Jan 25, 2012 at 2:26 PM, Casey W. Stark <caseywstark at gmail.com>
>> wrote:
>> > Ah, so I found the discussion in IRC. It looks like you use sha512sum on
>> > linux and shasum -a 512 on macs. Maybe the install script can try
>> > shasum,
>> > then sha512sum, then bail on the sum?
>> >
>> > NERSC has shasum btw.
>> >
>> > Best,
>> > Casey
>> >
>> >
>> > On Wed, Jan 25, 2012 at 1:52 PM, Matthew Turk <matthewturk at gmail.com>
>> > wrote:
>> >>
>> >> Hi Casey,
>> >>
>> >> Rats!  Is there an sha sum utility of any type?  I thought some people
>> >> in IRC found it on their mac.
>> >>
>> >> -Matt
>> >>
>> >> On Wed, Jan 25, 2012 at 1:46 PM, Casey W. Stark <caseywstark at gmail.com>
>> >> wrote:
>> >> > Hi Matt.
>> >> >
>> >> > I don't think macs have sha512sum. I get:
>> >> >
>> >> > Awesome!  Here we go.
>> >> >
>> >> > Using wget
>> >> > Downloading HDF5
>> >> > Downloading hdf5-1.8.7.tar.gz from yt-project.org
>> >> > 2012-01-25 13:22:51
>> >> > URL:http://yt-project.org/dependencies/hdf5-1.8.7.tar.gz
>> >> > [7827944/7827944] -> "hdf5-1.8.7.tar.gz" [1]
>> >> > I am unable to locate sha512sum.  FILE INTEGRITY NOT VERIFIED.
>> >> > Downloading zlib-1.2.3.tar.bz2 from yt-project.org
>> >> > ...
>> >> >
>> >> > Best,
>> >> > Casey
>> >> >
>> >> >
>> >> > On Wed, Jan 25, 2012 at 1:19 PM, Matthew Turk <matthewturk at gmail.com>
>> >> > wrote:
>> >> >>
>> >> >> Hi all,
>> >> >>
>> >> >> Currently to verify file integrity with the install script we
>> >> >> download
>> >> >> sidecar md5 file from yt-project.org.  These aren't versioned, and
>> >> >> md5
>> >> >> itself is largely deprecated for this.
>> >> >>
>> >> >> I've created a new sha512-using version of the install script, which
>> >> >> uses sha512 hashes stored *in the install script* to verify file
>> >> >> integrity.  This way any time these change we will be notified of
>> >> >> them.  I'd like it if a few people could test this -- I have -- on
>> >> >> pristine systems.  It changes both how the files are downloaded and
>> >> >> it
>> >> >> now uses sha512sum, which should be available on most systems
>> >> >> (according to Kacper :).
>> >> >>
>> >> >> You can do this by:
>> >> >>
>> >> >> wget
>> >> >>
>> >> >>
>> >> >> https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
>> >> >>
>> >> >> and then running it, but maybe supplying an alternate directory
>> >> >> rather
>> >> >> than the default.
>> >> >>
>> >> >> Thanks for any feedback.
>> >> >>
>> >> >> -Matt
>> >> >> _______________________________________________
>> >> >> yt-dev mailing list
>> >> >> yt-dev at lists.spacepope.org
>> >> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>> >> >
>> >> >
>> >> >
>> >> > _______________________________________________
>> >> > yt-dev mailing list
>> >> > yt-dev at lists.spacepope.org
>> >> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>> >> >
>> >> _______________________________________________
>> >> yt-dev mailing list
>> >> yt-dev at lists.spacepope.org
>> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>> >
>> >
>> >
>> > _______________________________________________
>> > yt-dev mailing list
>> > yt-dev at lists.spacepope.org
>> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>> >
>> _______________________________________________
>> yt-dev mailing list
>> yt-dev at lists.spacepope.org
>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>
>
>
> _______________________________________________
> yt-dev mailing list
> yt-dev at lists.spacepope.org
> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>



More information about the yt-dev mailing list