[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server
Kacper Kowalik
xarthisius.kk at gmail.com
Wed Jan 25 12:10:01 PST 2012
On 01/25/2012 08:52 PM, Matthew Turk wrote:
> Hi Casey,
>
> Rats! Is there an sha sum utility of any type? I thought some people
> in IRC found it on their mac.
I believe that on OSX you need to do it like this:
shasum -a 512 -p <FILE>
Kacper
>
> -Matt
>
> On Wed, Jan 25, 2012 at 1:46 PM, Casey W. Stark <caseywstark at gmail.com> wrote:
>> Hi Matt.
>>
>> I don't think macs have sha512sum. I get:
>>
>> Awesome! Here we go.
>>
>> Using wget
>> Downloading HDF5
>> Downloading hdf5-1.8.7.tar.gz from yt-project.org
>> 2012-01-25 13:22:51 URL:http://yt-project.org/dependencies/hdf5-1.8.7.tar.gz
>> [7827944/7827944] -> "hdf5-1.8.7.tar.gz" [1]
>> I am unable to locate sha512sum. FILE INTEGRITY NOT VERIFIED.
>> Downloading zlib-1.2.3.tar.bz2 from yt-project.org
>> ...
>>
>> Best,
>> Casey
>>
>>
>> On Wed, Jan 25, 2012 at 1:19 PM, Matthew Turk <matthewturk at gmail.com> wrote:
>>>
>>> Hi all,
>>>
>>> Currently to verify file integrity with the install script we download
>>> sidecar md5 file from yt-project.org. These aren't versioned, and md5
>>> itself is largely deprecated for this.
>>>
>>> I've created a new sha512-using version of the install script, which
>>> uses sha512 hashes stored *in the install script* to verify file
>>> integrity. This way any time these change we will be notified of
>>> them. I'd like it if a few people could test this -- I have -- on
>>> pristine systems. It changes both how the files are downloaded and it
>>> now uses sha512sum, which should be available on most systems
>>> (according to Kacper :).
>>>
>>> You can do this by:
>>>
>>> wget
>>> https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
>>>
>>> and then running it, but maybe supplying an alternate directory rather
>>> than the default.
>>>
>>> Thanks for any feedback.
>>>
>>> -Matt
>>> _______________________________________________
>>> yt-dev mailing list
>>> yt-dev at lists.spacepope.org
>>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>
>>
>>
>> _______________________________________________
>> yt-dev mailing list
>> yt-dev at lists.spacepope.org
>> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>>
> _______________________________________________
> yt-dev mailing list
> yt-dev at lists.spacepope.org
> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 900 bytes
Desc: OpenPGP digital signature
URL: <http://lists.spacepope.org/pipermail/yt-dev-spacepope.org/attachments/20120125/a3e8df67/attachment.sig>
More information about the yt-dev
mailing list