On Thu, 2026-07-30 at 11:10 +0200, Etienne Cordonnier via lists.openembedded.org wrote: > From: Etienne Cordonnier <[email protected]> > > WITH_SHA256=ON adds no external dependency: sha256.c is a self-contained > 528-line pure C implementation already present in the source tree. > > oe-core already generates SHA256Sum fields in the Packages index > (via --checksum sha256 in OpkgIndexer.write_index), but opkg silently > ignores them unless compiled with WITH_SHA256=ON. Enabling sha256 by > default makes those checksums actually verified at install time, > improving package integrity checking at zero dependency cost. > > Once SHA256 is universally available, --checksum md5 can also be > dropped from OpkgIndexer.write_index() -- MD5 is collision-prone and > should not be relied upon for integrity checking -- completing the > deprecation noted in > https://git.openembedded.org/openembedded-core/commit/?id=e462f47489f35902b6972f9837d9adfa542fc796 > (2019). > > AI-Generated: Claude Sonnet 4.6 > Signed-off-by: Etienne Cordonnier <[email protected]>
Hi, Claude likes to include irrelevant information in commit messages, please re-write this one to focus on the relevant bits. Otherwise this LGTM. Best regards, -- Paul Barker
signature.asc
Description: This is a digitally signed message part
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#242342): https://lists.openembedded.org/g/openembedded-core/message/242342 Mute This Topic: https://lists.openembedded.org/mt/120516146/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
