lTheo Buehler <tb@theobuehler.org> wrote:

> On Mon, Nov 10, 2025 at 10:05:07AM -0700, Theo de Raadt wrote:
> > Uhm, the idea is that you use a seperate RELEASEDIR for X.
> 
> Why?

Because I have substantial additional snapshot and release tooling
which requires seperate these to be seperate directories.

> > I'm very surprised someone is using the same directory.
> 
> Why?

My tooling cannot handle this.  I merge releasedirs behind the scenes.

I have some good reasons :)

> > if you do this >> then building X twice in a row will collect
> > old hashes followed by new (different) hashes in the same file.
> > How is that desireable?
> 
> I never do that. I build full snapshots in the same release directory.

Well, the >> implies that the file is not emptied.

Your change will break my builds, since nothing will make the file empty.

With your change, on every build, the X DESTDIR/SHA256 will collect 4 more
lines... this means the combined SHA256 and SHA256.sig will collect 4
more lines, every build.  It will grow without bound.