diff options
author | Joey Hess <joeyh@joeyh.name> | 2015-10-01 15:54:37 -0400 |
---|---|---|
committer | Joey Hess <joeyh@joeyh.name> | 2015-10-01 15:56:39 -0400 |
commit | b9fe55705f19fc39889da6157714039047aed4c9 (patch) | |
tree | 107888b257bfcf370353bce2969897046be3af33 /doc/todo/checksum_verification_on_transfer | |
parent | 55d635e356ecae2dd90d8cea355656faf3b24db1 (diff) |
Do verification of checksums of annex objects downloaded from remotes.
* When annex objects are received into git repositories, their checksums are
verified then too.
* To get the old, faster, behavior of not verifying checksums, set
annex.verify=false, or remote.<name>.annex-verify=false.
* setkey, rekey: These commands also now verify that the provided file
matches the key, unless annex.verify=false.
* reinject: Already verified content; this can now be disabled by
setting annex.verify=false.
recvkey and reinject already did verification, so removed now duplicate
code from them. fsck still does its own verification, which is ok since it
does not use getViaTmp, so verification doesn't happen twice when using fsck
--from.
Diffstat (limited to 'doc/todo/checksum_verification_on_transfer')
-rw-r--r-- | doc/todo/checksum_verification_on_transfer/comment_3_2fa9445619032a378264de8b59958c60._comment | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/doc/todo/checksum_verification_on_transfer/comment_3_2fa9445619032a378264de8b59958c60._comment b/doc/todo/checksum_verification_on_transfer/comment_3_2fa9445619032a378264de8b59958c60._comment new file mode 100644 index 000000000..b18e7dcb5 --- /dev/null +++ b/doc/todo/checksum_verification_on_transfer/comment_3_2fa9445619032a378264de8b59958c60._comment @@ -0,0 +1,17 @@ +[[!comment format=mdwn + username="joey" + subject="""status update""" + date="2015-10-01T19:17:38Z" + content=""" +Checksum verification is now done for all downloads, unless disabled via +annex.verify=false. + +When an object is uploaded to a regular git remote, checksum verification +also also done. (For a local directory, git-annex runs a download from the +perspective of the remote, so we get it for free, and when git-annex-shell +recvkey is used, it checksums the data it receives and compares it with the +key.) + +For uploads to special remotes, no checksum verification is done yet. +Leaving this todo item open because of that gap in the coverage. +"""]] |