X-Spam-Check-By:	sourceware.org
Message-ID:	<4627EFD7.3040803@aaronwl.com>
Date:	Thu, 19 Apr 2007 17:40:23 -0500
From:	"Aaron W. LaFramboise" <aaronpurpleleaf4 AT aaronwl DOT com>
User-Agent:	Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version:	1.0
To:	cygwin AT cygwin DOT com
Subject:	Re: Install problem on XP SP2
References:	<46259E88 DOT 9050200 AT aaronwl DOT com> <4626B121 DOT 8070206 AT aaronwl DOT com> <4e41f5c20704191012s6d562644oe288255b947a075f AT mail DOT gmail DOT com>
In-Reply-To:	<4e41f5c20704191012s6d562644oe288255b947a075f@mail.gmail.com>
X-IsSubscribed:	yes
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

Morgan Gangwere wrote:
> On 4/18/07, Aaron W. LaFramboise <aaronpurpleleaf4 AT aaronwl DOT com> wrote:
>> Aaron W. LaFramboise wrote:

>> Bug 1) Packages are silently not downloaded, when the user assumes that
>> they are.
> 
> it LOOKS like they are silently not downloaded. you have to hit
> package dependancies in the package, or the mirror is broken.

Then I am fundamentally misunderstanding something, because I can't 
understand the program in a way that I realize packages are not being 
installed--with respect to my point of view, at random.  But even if 
packages are silently not being selected, possibly due to my 
incompetence, if these are critical packages, I'd still appreciate some 
sort of error.

>> Bug 2) There is no md5sum for the entire repository, meaning there is no
>> way for the user to personally verify that a mirror has the correct
>> stuff, or that his download was correct.
> 
> there is. just read the mirror data where you put the cygwin temp
> stuff. last I checked, there was an MD5 hash for each entry.

Good point.

However, it can only verify the package I've downloaded isn't broken 
(and only then assuming the md5.sum hasn't been tampered with).  It 
cannot tell me that I somehow didn't get a package.

What I'd like is for sourceware to auto-generate an md5.sum that I could 
do this with, and be assured I got a correct and complete full download:

md5sum -b md5.sum

This is what many projects that use mirrors have, to give downloaders an 
assurance of mirror integrity and a "tamper-proof seal."

> you volunteering?

This needs to be done by one of the sourceware admins.  But I suspect 
they already have machinery in place that will do this, as other sources 
folders have it.

> * the package selection screen is SLOoW!

It used to be a lot slower, as I recall, to select a full install, 
something on the order of a several minute wait.  Now its only a few 
seconds.  Slowness I can tolerate; silently broken installations I cannot.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -