Linux: Verify checksums when downloading Debian Packages.bz2 files in the sysroot script.

Linux: Verify checksums when downloading Debian Packages.bz2 files in the sysroot script. 

BUG=314766
NOTRY=true

Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=233546

[Sam Clegg, 2013-11-06 18:14:00]

Shouldn't these be some kind of verification step during
the actual downloading and building of the sysroot?

Or is this already done?

[Lei Zhang, 2013-11-06 18:21:19]

On 2013/11/06 18:14:00, Sam Clegg wrote:
> Shouldn't these be some kind of verification step during
> the actual downloading and building of the sysroot?
> 
> Or is this already done?

That's the next round after this. I got tired yesterday and figured this was a
good stopping point.

[Sam Clegg, 2013-11-06 18:25:12]

lgtm

[Michael Moss, 2013-11-06 18:32:45]

lgtm

https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
File chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh
(right):

https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh:473:
--keyring /etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg \
Where do these keyrings come from? Is it safe to assume they're installed (they
aren't on my goobuntu box)?

[Lei Zhang, 2013-11-06 18:55:09]

On 2013/11/06 18:32:45, Michael Moss wrote:
> lgtm
> 
>
https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
> File chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh
> (right):
> 
>
https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
> chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh:473:
> --keyring /etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg \
> Where do these keyrings come from? Is it safe to assume they're installed
(they
> aren't on my goobuntu box)?

They are in debian-archive-keyring. I'll add a check for their existence.

[Lei Zhang, 2013-11-06 19:58:45]

On 2013/11/06 18:55:09, Lei Zhang wrote:
> On 2013/11/06 18:32:45, Michael Moss wrote:
> > lgtm
> > 
> >
>
https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
> > File chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh
> > (right):
> > 
> >
>
https://codereview.chromium.org/61493002/diff/1/chrome/installer/linux/sysroo...
> > chrome/installer/linux/sysroot_scripts/sysroot-creator-debian.wheezy.sh:473:
> > --keyring /etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg \
> > Where do these keyrings come from? Is it safe to assume they're installed
> (they
> > aren't on my goobuntu box)?
> 
> They are in debian-archive-keyring. I'll add a check for their existence.

See patch set 2.

[Michael Moss, 2013-11-06 19:59:31]

lgtm

[commit-bot: I haz the power, 2013-11-06 20:09:13]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/thestig@chromium.org/61493002/100001

[commit-bot: I haz the power, 2013-11-07 08:16:28]

Change committed as 233546