From: "Theo de Raadt" Subject: Re: xenocara release hashes To: Theo Buehler Cc: tech@openbsd.org Date: Mon, 10 Nov 2025 10:15:23 -0700 lTheo Buehler wrote: > On Mon, Nov 10, 2025 at 10:05:07AM -0700, Theo de Raadt wrote: > > Uhm, the idea is that you use a seperate RELEASEDIR for X. > > Why? Because I have substantial additional snapshot and release tooling which requires seperate these to be seperate directories. > > I'm very surprised someone is using the same directory. > > Why? My tooling cannot handle this. I merge releasedirs behind the scenes. I have some good reasons :) > > if you do this >> then building X twice in a row will collect > > old hashes followed by new (different) hashes in the same file. > > How is that desireable? > > I never do that. I build full snapshots in the same release directory. Well, the >> implies that the file is not emptied. Your change will break my builds, since nothing will make the file empty. With your change, on every build, the X DESTDIR/SHA256 will collect 4 more lines... this means the combined SHA256 and SHA256.sig will collect 4 more lines, every build. It will grow without bound.