search

adoptium / temurin-build

Eclipse Temurin™ build scripts - common across all releases/versions
Apache License 2.0
1.02k stars 249 forks source link

[enhancement] Add Download Verification check for source tarballs #3801

Open adamfarley opened 5 months ago

adamfarley commented 5 months ago

Something went wrong with publishing source tarballs for the Jan 2024 update. See: https://github.com/adoptium/adoptium-support/issues/1003 we should make sure that it's there with some verification for any release.

Originally posted by @jerboaa in https://github.com/adoptium/temurin/issues/28#issuecomment-2010483145

sxa commented 5 months ago

We'll need to think about this a little more - there won't necessarily be one for a point release for example.

I guess we could check for it ONLY if the release contains Linux/x64 ..

jerboaa commented 5 months ago

Consider using the API and verifying that sources can get downloaded for the specific release. E.g. for 21.0.3:

$ curl -v https://api.adoptium.net/v3/binary/latest/21/ga/linux/x64/sources/hotspot/normal/eclipse 2>&1 | grep Location | grep 21.0.3
< Location: https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.3%2B9/OpenJDK21U-jdk-sources_21.0.3_9.tar.gz

This hard-codes x64, but that's fine for this check. It's only published for that arch.