Packaging Guidelines - creating tarball from VCS with script

[Thomas Moschny]

2012/5/14 Toshio Kuratomi <a.badger at gmail.com>:
> Automating of the package's checksum won't work for many VCS's .  git, for
> instance, does not preserve timestamps.  So the tarball created from a git
> snapshot will have a different checksum for each checkout.

While files' modification times in a checkout may be different,
archives created with 'git archive' are stable, because git uses the
datetime of the commit for each file in the archive.

So instead of cloning the repository and creating the archive locally,
the preferred method would imho be to use a download link (if present)
of the used git hosting service for directly preparing an archive, and
to file bugs for the respective hosting service if they do not
properly use this git functionality.

- Thomas