Markus Weissmann wrote:
This is why I've thought we should not support CVS/SVN fetching in any form -- No checksums, no guaranteed reproducibility.
Specifying a revision should be reproducible (not verifiably so but), but I'll switch to tarball snapshots...
Or delete the ports, whichever works. ("port not found" is guaranteed to be reproducible every single time)
Imho -- at least for "-devel" ports -- cvs/svn fetching is o.k. if at least a date -- in the past ;) -- is supplied. Avoid it if possible, but if it leads to you generating weekly snapshots from some repository, just use cvs/svn fetching.
Weekly ? No, these all have daily snapshot tarballs generated since they are under development. But I'm cool with moving the ports to my local overlay, as I won't have time to update them... --anders