[yt-dev] Call for testing: SHA512 in the install_script instead of md5 on the server
Casey W. Stark
caseywstark at gmail.com
Thu Jan 26 11:03:39 PST 2012
Hey Matt.
Just ran the new version and it's verifying everything fine. I will let you
know if anything goes wrong with compilation, but otherwise looks great.
Best,
Casey
On Wed, Jan 25, 2012 at 3:08 PM, Matthew Turk <matthewturk at gmail.com> wrote:
> Hi Casey,
>
> Can you try the same thing with hash cc3c53c247df? I added a catch
> for OSX with shasum, but not sha512sum.
>
> -Matt
>
> On Wed, Jan 25, 2012 at 2:26 PM, Casey W. Stark <caseywstark at gmail.com>
> wrote:
> > Ah, so I found the discussion in IRC. It looks like you use sha512sum on
> > linux and shasum -a 512 on macs. Maybe the install script can try shasum,
> > then sha512sum, then bail on the sum?
> >
> > NERSC has shasum btw.
> >
> > Best,
> > Casey
> >
> >
> > On Wed, Jan 25, 2012 at 1:52 PM, Matthew Turk <matthewturk at gmail.com>
> wrote:
> >>
> >> Hi Casey,
> >>
> >> Rats! Is there an sha sum utility of any type? I thought some people
> >> in IRC found it on their mac.
> >>
> >> -Matt
> >>
> >> On Wed, Jan 25, 2012 at 1:46 PM, Casey W. Stark <caseywstark at gmail.com>
> >> wrote:
> >> > Hi Matt.
> >> >
> >> > I don't think macs have sha512sum. I get:
> >> >
> >> > Awesome! Here we go.
> >> >
> >> > Using wget
> >> > Downloading HDF5
> >> > Downloading hdf5-1.8.7.tar.gz from yt-project.org
> >> > 2012-01-25 13:22:51
> >> > URL:http://yt-project.org/dependencies/hdf5-1.8.7.tar.gz
> >> > [7827944/7827944] -> "hdf5-1.8.7.tar.gz" [1]
> >> > I am unable to locate sha512sum. FILE INTEGRITY NOT VERIFIED.
> >> > Downloading zlib-1.2.3.tar.bz2 from yt-project.org
> >> > ...
> >> >
> >> > Best,
> >> > Casey
> >> >
> >> >
> >> > On Wed, Jan 25, 2012 at 1:19 PM, Matthew Turk <matthewturk at gmail.com>
> >> > wrote:
> >> >>
> >> >> Hi all,
> >> >>
> >> >> Currently to verify file integrity with the install script we
> download
> >> >> sidecar md5 file from yt-project.org. These aren't versioned, and
> md5
> >> >> itself is largely deprecated for this.
> >> >>
> >> >> I've created a new sha512-using version of the install script, which
> >> >> uses sha512 hashes stored *in the install script* to verify file
> >> >> integrity. This way any time these change we will be notified of
> >> >> them. I'd like it if a few people could test this -- I have -- on
> >> >> pristine systems. It changes both how the files are downloaded and
> it
> >> >> now uses sha512sum, which should be available on most systems
> >> >> (according to Kacper :).
> >> >>
> >> >> You can do this by:
> >> >>
> >> >> wget
> >> >>
> >> >>
> https://bitbucket.org/MatthewTurk/yt/raw/367ea3bfff2e/doc/install_script.sh
> >> >>
> >> >> and then running it, but maybe supplying an alternate directory
> rather
> >> >> than the default.
> >> >>
> >> >> Thanks for any feedback.
> >> >>
> >> >> -Matt
> >> >> _______________________________________________
> >> >> yt-dev mailing list
> >> >> yt-dev at lists.spacepope.org
> >> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
> >> >
> >> >
> >> >
> >> > _______________________________________________
> >> > yt-dev mailing list
> >> > yt-dev at lists.spacepope.org
> >> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
> >> >
> >> _______________________________________________
> >> yt-dev mailing list
> >> yt-dev at lists.spacepope.org
> >> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
> >
> >
> >
> > _______________________________________________
> > yt-dev mailing list
> > yt-dev at lists.spacepope.org
> > http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
> >
> _______________________________________________
> yt-dev mailing list
> yt-dev at lists.spacepope.org
> http://lists.spacepope.org/listinfo.cgi/yt-dev-spacepope.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.spacepope.org/pipermail/yt-dev-spacepope.org/attachments/20120126/48ca5cba/attachment.html>
More information about the yt-dev
mailing list