Snapshots mtime breaks digests

[dpmcgee at gmail.com (Dan McGee)]

On Fri, Apr 27, 2012 at 3:03 AM, Ferry Huberts <mailings at hupie.com> wrote:
> On 27-04-12 04:14, Adrian C. wrote:
>> I use cgit release 0.9.0.2 with Lighttpd frontend and snapshots enabled
>> on http://git.sysphere.org I presume the mtime changes when the original
>> tarball expires from the Cgit cache and I didn't find anything in the
>> cgitrc manual so far.
>>
>> Anyone knows of a workaround I can apply to keep these folks happy?
>> Thanks.
>>
>
> As you demonstrate perfectly here yourself, the _contents_ of the tarball
> must be checked, not the tarball itself because that is generated on the
> fly.
>
>
>> As defined here[1], byte which change are mtime field.
>>
>> [1]: http://tools.ietf.org/html/rfc1952#page-5

Use anything except gzip; it is the only one having a silly field like
this. xz did not make this same mistake. Note that the `gzip -n`
program option will prevent this from being included (and thus
changing); not sure if you could patch cgit to generate tarballs in
this fashion.

-Dan