See http://www.chiark.greenend.org.uk/~cjwatson/blog/no-more-hash-sum-mismatch-errors.html It looks like that APT supports now clean atomic updates of all the indices by retrieving index files listed in the release file under an alternated path based on their checksums... https://wiki.debian.org/RepositoryFormat#indices_acquisition_via_hashsums_.28by-hash.29 I would love to see this implemented in reprepro as this is a frequent issue since interactive usage of reprepro means pushing out many versions of the meta-data. I frequently have jenkins job failing because they hit the archive at the wrong time... (this and keeping unreferenced files for X days are my two most important wishlist for reprepro, see #788105) Cheers,
Hi, Updated link: https://wiki.debian.org/DebianRepository/Format#indices_acquisition_via_hashsums_.28by-hash.29 Two years have passed and we're still lacking this important feature. Kali is willing to put money on the table if it can help to get this implemented. Bernhard, do you have plans to work on this? Would you be willing to review and merge a patch implementing this feature? If you have upfront requirements, please share them in this ticket. Anyone interested to be paid to implement this feature can contact me privately (including you Bernhard) and we will work out the details. Cheers,
I've also got a bit tired of waiting and started work on a proof-of-concept for this. My code so far is at: https://salsa.debian.org/bootc/reprepro/-/merge_requests/1 (It's an MR into my own repo because Bernhard has MRs disabled, but it might be handy for people to be able to comment on the code etc...) It's very much not ready yet and is lacking documentation, but in my brief testing it does appear to work. Please let me know what you think, and what it might take to get this in reprepro properly. Cheers, Chris
Hello, I believe that Bernhard has been mostly MIA. If we want anything to change for reprepro, it must likely be adopted/salvaged/forked by a new team. I know of Benjamin Drung who forked it for private needs already and who submitted a patch that was not reviewed and merged. We have 7 bugs with patch (most of them without any reply from Bernhard) so we could likely form a maintenance team by contacting all of them. I tried to help by offering to "sponsor" the work but he was not interested. But the offer could stand to help someone who would like to be paid for some initial "build-the-team / merge the patches" work. It could be part of https://salsa.debian.org/freexian-team/project-funding Cheers,