commit | 68a8233dc35d61d39dd415cf1d6a49f838caf0c2 | [log] [tgz] |
---|---|---|
author | Petr Hosek <phosek@google.com> | Fri Sep 07 15:10:30 2018 -0700 |
committer | CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> | Thu Sep 20 06:22:47 2018 +0000 |
tree | 41c2a051988c89f370c10647774acd220c8cbe69 | |
parent | 2485c80217778655c7795617b247d732fc1327cc [diff] |
[prebuilt] Update CIPD client and enable the use of resolved versions This increases security by not relying on the server, instead we always check the package hash against the digests file. Change-Id: Ic2178e0b654224c420419d4553bcc2b35c6fcc94
This repository contains the hashes of a number of prebuilt tools that are used to build Fuchsia-related projects. The actual tools themselves are located in Google Storage.
In most cases, the jiri
tool will download the build tools automatically during its update
step. To download the tools manually, run update.sh
.
NOTE: These instructions are for Googlers only.
The tarballs are uploaded with the “gsutil” program. See https://cloud.google.com/storage/docs/gsutil
There's a link there to download and install the Google Cloud SDK: https://cloud.google.com/sdk/docs/
After installing the SDK you need to initialize/authenticate: https://cloud.google.com/storage/docs/gsutil_install#authenticate
One of the steps will ask you for a cloud project. Choose loas-fuchsia-team.
At this point you can use gsutil to upload/download tarballs, view cloud directory contents, and so on.
Tarballs must have the tool name as the top level directory. E.g.,
bash$ tar tvf qemu.tar.bz2 drwxr-xr-x ... qemu/ drwxr-xr-x ... qemu/libexec/ ...
The uploaded file name is the sha1 hash of the tarball. It could also be a sha1 hash of the tarball contents, avoiding unnecessary spurious differences in uploads.
To compute the latter, one can do something like:
bash$ LC_ALL=POSIX cat $(find qemu/ -type f | sort) | shasum -a1
The sha1 hash is checked into the buildtools repo and supports adding new tarballs or rolling back to a previous one. See the *.sha1 files in buildtools/{mac,linux64}.
There are separate directories for mac and linux tarballs. E.g.,
bash$ ./bin/gsutil ls gs://fuchsia-build/fuchsia/qemu/mac gs://fuchsia-build/fuchsia/qemu/mac/ gs://fuchsia-build/fuchsia/qemu/mac/10d77d7df5b39440148ac3aab1a401ff42337a76 ... bash$ ./bin/gsutil ls gs://fuchsia-build/fuchsia/qemu/linux64 gs://fuchsia-build/fuchsia/qemu/linux64/ gs://fuchsia-build/fuchsia/qemu/linux64/10d77d7df5b39440148ac3aab1a401ff42337a76 ...