You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@mesos.apache.org by Andrew Schwartzmeyer <an...@schwartzmeyer.com> on 2017/05/24 19:12:41 UTC
Review Request 59536: CMake: Add SHA256 hash verification for 3rdparty
downloads.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/
-----------------------------------------------------------
Review request for mesos, Aaron Wood and Joseph Wu.
Repository: mesos
Description
-------
The `ExternalProject_Add` uses this hash to verify the tarballs
automatically. This removes the following warning:
File will not be verified since no URL_HASH specified
Diffs
-----
3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
Diff: https://reviews.apache.org/r/59536/diff/1/
Testing
-------
make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
Thanks,
Andrew Schwartzmeyer
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Aaron Wood via Review Board <no...@reviews.apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review175985
-----------------------------------------------------------
Ship it!
Ship It!
- Aaron Wood
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Andrew Schwartzmeyer <an...@schwartzmeyer.com>.
> On May 24, 2017, 7:47 p.m., Aaron Wood wrote:
> > Are these hashes checked anywhere? I didn't seen anything that's verifying the hashes.
Yes, the `URL_HASH` argument to the `ExternalProject_Add` [macro](https://cmake.org/cmake/help/v3.8/module/ExternalProject.html) performs automatic verification given the hash for the URL.
- Andrew
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review175979
-----------------------------------------------------------
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Aaron Wood via Review Board <no...@reviews.apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review175979
-----------------------------------------------------------
Are these hashes checked anywhere? I didn't seen anything that's verifying the hashes.
- Aaron Wood
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Mesos Reviewbot <re...@mesos.apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review176117
-----------------------------------------------------------
Patch looks great!
Reviews applied: [59536]
Passed command: export OS='ubuntu:14.04' BUILDTOOL='autotools' COMPILER='gcc' CONFIGURATION='--verbose' ENVIRONMENT='GLOG_v=1 MESOS_VERBOSE=1'; ./support/docker-build.sh
- Mesos Reviewbot
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Andrew Schwartzmeyer <an...@schwartzmeyer.com>.
> On May 26, 2017, 4:52 p.m., Zhitao Li wrote:
> > 3rdparty/cmake/Versions.cmake
> > Lines 30 (patched)
> > <https://reviews.apache.org/r/59536/diff/1/?file=1731925#file1731925line30>
> >
> > Can you explain how is these hashes geneareted and used?
> >
> > I'm working on upgrading protobuf library to 3.3.0 so this hash would change, but I don't know how I can generate a correct value from here...
>
> Joseph Wu wrote:
> You can use any SHA-generating utility to get these hashes, like:
> ```
> shasum -a 256 <file>
> openssl sha -sha256 <file>
> ```
Or even `Get-FileHash -Algorithm SHA256 <file>` in PowerShell ;)
- Andrew
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review176208
-----------------------------------------------------------
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Joseph Wu <jo...@mesosphere.io>.
> On May 26, 2017, 9:52 a.m., Zhitao Li wrote:
> > 3rdparty/cmake/Versions.cmake
> > Lines 30 (patched)
> > <https://reviews.apache.org/r/59536/diff/1/?file=1731925#file1731925line30>
> >
> > Can you explain how is these hashes geneareted and used?
> >
> > I'm working on upgrading protobuf library to 3.3.0 so this hash would change, but I don't know how I can generate a correct value from here...
You can use any SHA-generating utility to get these hashes, like:
```
shasum -a 256 <file>
openssl sha -sha256 <file>
```
- Joseph
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review176208
-----------------------------------------------------------
On May 24, 2017, 12:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 12:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Zhitao Li <zh...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review176208
-----------------------------------------------------------
3rdparty/cmake/Versions.cmake
Lines 30 (patched)
<https://reviews.apache.org/r/59536/#comment249555>
Can you explain how is these hashes geneareted and used?
I'm working on upgrading protobuf library to 3.3.0 so this hash would change, but I don't know how I can generate a correct value from here...
- Zhitao Li
On May 24, 2017, 7:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 7:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Joseph Wu <jo...@mesosphere.io>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/#review176133
-----------------------------------------------------------
Ship it!
Ship It!
- Joseph Wu
On May 24, 2017, 12:13 p.m., Andrew Schwartzmeyer wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/59536/
> -----------------------------------------------------------
>
> (Updated May 24, 2017, 12:13 p.m.)
>
>
> Review request for mesos, Aaron Wood and Joseph Wu.
>
>
> Repository: mesos
>
>
> Description
> -------
>
> The `ExternalProject_Add` uses this hash to verify the tarballs
> automatically. This removes the following warning:
>
> File will not be verified since no URL_HASH specified
>
>
> Diffs
> -----
>
> 3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
> 3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
>
>
> Diff: https://reviews.apache.org/r/59536/diff/1/
>
>
> Testing
> -------
>
> make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
>
>
> Thanks,
>
> Andrew Schwartzmeyer
>
>
Re: Review Request 59536: CMake: Added SHA256 hashes for 3rdparty
downloads.
Posted by Andrew Schwartzmeyer <an...@schwartzmeyer.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59536/
-----------------------------------------------------------
(Updated May 24, 2017, 7:13 p.m.)
Review request for mesos, Aaron Wood and Joseph Wu.
Summary (updated)
-----------------
CMake: Added SHA256 hashes for 3rdparty downloads.
Repository: mesos
Description
-------
The `ExternalProject_Add` uses this hash to verify the tarballs
automatically. This removes the following warning:
File will not be verified since no URL_HASH specified
Diffs
-----
3rdparty/CMakeLists.txt 03f314fdbb8216ca21abed3108e6986d037b2019
3rdparty/cmake/Versions.cmake d3f572c0b54fe8888a4494fee033c549fa47c301
Diff: https://reviews.apache.org/r/59536/diff/1/
Testing
-------
make check on Linux, cmake --build . --target mesos-tests and stout-tests on Windows.
Thanks,
Andrew Schwartzmeyer