binutils snapshot builds

[Mark Wielaard]

Hi Frank,

On Sat, May 25, 2024 at 07:40:18PM +0200, Frank Scheiner wrote:
> On 24.05.24 01:15, Mark Wielaard wrote:
> >[...]
> >Do note that these snapshots are generated totally automatically, it
> >could right after a bad/accidental commit. Nobody double checks any of
> >the snapshots (except that they could be generated). So please don't
> >trust them even if some checksum (which would also be generated
> >automatically) matches.
> >
> >That said, we could generate sha512.sum files in each directory.
> >Like we do on https://sourceware.org/pub/binutils/releases/
> >
> >Would that be useful?
> 
> Sure. I'd like to be able to verify in some way that what I get is what
> you publish, especially if I get it from a mirror.

OK. There are sha512.sum files in each dir now (for new snapshots).

> >I think it is just noise though. It might make the snapshots look more
> >trustworthy than they really are.
> 
> Just for clarification: With "trustworthy" you mean that people could
> expect that the snapshots build and work correctly, right?
> 
> Well, I'd say that is for me or the build system to find out. The goal
> for these builds will be to find out early on when things break for ia64.

Right. I just want to make clear that the snapshot hasn't seen any
checking. Someone could have pushed a really bad commit right before
the snapshot was made. It could be boobytrapped.

Cheers,

Mark