[MacPorts] #38265: selfupdate should fetch tarball over HTTP

[MacPorts]

#38265: selfupdate should fetch tarball over HTTP
-------------------------+--------------------------------
 Reporter:  raimue@…     |      Owner:  macports-tickets@…
     Type:  enhancement  |     Status:  new
 Priority:  Normal       |  Milestone:  MacPorts Future
Component:  base         |    Version:  2.1.3
 Keywords:               |       Port:
-------------------------+--------------------------------
 The selfupdate method currently gets base.tar via rsync, checks the
 .rmd160 signature, extracts it and then compares the version. This has the
 drawback that it always downloads the base source code (at least once) and
 keeps it on disk. Furthermore rsync might not be available for users
 behind firewalls, making selfupdate impossible for them at the moment.

 Instead selfupdate should do the following:
   1. Download a single file indicating the latest version (similar to
 [https://svn.macports.org/repository/macports/trunk/base/config/
 macports_version])
   2. Compare the latest version available with the current installed
 version. If latest version is installed, goto end.
   3. Fetch the tarball and .rmd160 signature from
 [http://distfiles.macports.org/MacPorts a mirror] with the filenames
 MacPorts-${version}.tar.bz2{,.rmd160}
   4. Verify signature
   5. Extract source, build and install
   6. After successful installation, delete tarball, .rmd160 signature file
 and extracted source

 The advantages of this approach:
   * The version is compared before downloading any files
   * Tarballs are only downloaded if a newer version is available
   * Fetch works over HTTP and thus allows operation behind firewalls

-- 
Ticket URL: <https://trac.macports.org/ticket/38265>
MacPorts <http://www.macports.org/>
Ports system for Mac OS