[Qa-debsources] patch-tracker DB schema

Orestis Ioannou orestis at oioannou.com
Thu Apr 14 21:27:04 UTC 2016


Heya,

Thanks for the review :)

On 04/13/2016 05:10 PM, Stefano Zacchiroli wrote:
> On Sat, Mar 19, 2016 at 09:54:41PM +0100, Orestis Ioannou wrote:
>> Looking at the policy I understood that the checksums in the .dsc are
>> included in the .changes. So i guess we will only parse that one right
>> ?
> 
> We don't have the actual .changes files, they're by products of the
> archive processing software that are not stored as-is in mirrors. (BTW,
> you can look at what we have in /srv/debian-mirror on
> sources.debian.net.) But we do have Sources files (e.g.,
> /srv/debian-mirror/dists/stable/main/source/Sources.bz2) and they keep
> all the checksum associated to any component of a source package, pretty
> much in the same format of .changes file. Source files can be parsed
> easily with python-debian (deb822 module).
> 

Yes great! i started parsing this on my own and the result wasn't pretty!

> 
>> {
>>     orig.tar.gz: {
>>         sha1: 'a0ed1456fad61116f868b1855530dbe948e20f06',
>>         sha256: '0d123be7f51e61c4bf15e5c492b484054be7e90f3081608a5517007bfb1fd128',
>>         md5: 'c6f698f19f2a2aa07dbb9bbda90a2754',
>>     },
>>     debian.tar.gz: {
>>         sha1: '5e86ecf0671e113b63388dac81dd8d00e00ef298',
>>         sha256': 'f54ae966a5f580571ae7d9ef5e1df0bd42d63e27cb505b27957351a495bc6288',
>>         md5: '938512f08422f3509ff36f125f5873ba',
>>     },
>>     dsc: {
>>         sha1: '1f418afaa01464e63cc1ee8a66a05f0848bd155c',
>>         sha256': 'ac9d57254f7e835bed299926fd51bf6f534597cc3fcc52db01c4bffedae81272',
>>         md5: '4c31ab7bfc40d3cf49d7811987390357',
>>     },
> 
> As per my comment above, we need to keep open the possibility of having
> more top-level entries here, but that shouldn't be a problem, as it's a
> dictionary and the file names are not supposed to collide. OTOH we might
> want to had an extra field to the inner dictionaries to easily find out
> which files are the dsc, which the debian tarball, and which form the
> multiple orig tarballs.
> 

I don't undestand the extra field you suggest. Maybe an example would do
it but i can't see what you are trying to explain me :)


Cheers,

Orestis

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/qa-debsources/attachments/20160414/96c50483/attachment.sig>


More information about the Qa-debsources mailing list