Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

How to verify that the installation packages attached to the releases have been assembled from the source code #183

Closed
vladimiry opened this issue Jul 6, 2019 · 2 comments
Closed

How to verify that the installation packages attached to the releases have been assembled from the source code #183

vladimiry opened this issue Jul 6, 2019 · 2 comments

Comments

@vladimiry
Copy link
Owner

  • Attached to the releases installation packages get automatically assembled from the source code with the help of the Continuous Integration systems (CI). So it's a completely reproducible process, ie anyone can fork the project and independently build the installation packages from the source code using the same CI systems.
  • Releases include the publicly available links to the CI build logs.
  • Those logs include the hash sums of the prepared installation packages (hash sums printed at the end of the log).
@vladimiry
Copy link
Owner Author

Referencing with #146.

@vladimiry vladimiry mentioned this issue Jan 28, 2020
Open
@vladimiry
Copy link
Owner Author

vladimiry commented Mar 11, 2020 •
edited
Loading

Printing hash-sums into the CI output log originally enabled in v2.0.0-beta.9.

vladimiry added a commit that referenced this issue Jul 16, 2020
@vladimiry
prefer "sha256" hash to "sha1" #183
d6ab7c3
vladimiry added a commit that referenced this issue Jul 18, 2020
@vladimiry
prefer "sha256" hash to "sha1" #183
70b1e90
@vladimiry vladimiry mentioned this issue Oct 16, 2020
Closed
@vladimiry vladimiry mentioned this issue Sep 7, 2021
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@vladimiry