# The emulator this tree pairs with.
#
# A checkout with the submodule fetched builds it at `qemu/` and never reads this file. A published
# crate has no submodule, since 169 MB of emulator source is far past what a package may carry, so
# `build.rs` fetches the tarball named here and checks it against `sha256` before it unpacks a byte
# of it. So does a checkout whose submodule you haven't fetched.
#
# `commit` is the same commit the submodule points at, and `sha256` is what `ci/package-emulator.sh`
# produces from it. The `check` job checks both on every merge request and the release publishes the tarball
# from the same script, so one tag of this tree carries a whole release: the submodule already names
# the emulator exactly, and nothing has to be released in the fork first.
#
# The pipeline checks this file rather than writing it. A pipeline that rewrites a tracked file
# mid-build makes a checkout unreproducible and races the commit it came from.
#
# To move the emulator, in one merge request: bump the submodule, run `sh ci/package-emulator.sh out`
# and paste the commit and digest it prints. The script packs what git tracks with every source of
# variation nailed down, so the same commit gives the same bytes wherever it is packed. That's
# what makes pinning a digest honest rather than a guess about one machine.
#
# The URL names this project by id, 86154871, which is `rigless-labs/rigless`. An id rather than a
# URL-encoded path, because `%2F` in a path segment is the kind of thing a proxy or a client
# helpfully normalises and a build that fetches an emulator is not where that should be discovered.
commit = daff52c19b36eeea8d3b1d1c3f62987a94c1f5f2
url = https://gitlab.com/api/v4/projects/86154871/packages/generic/emulator/daff52c19b36eeea8d3b1d1c3f62987a94c1f5f2/qemu-daff52c19b36eeea8d3b1d1c3f62987a94c1f5f2.tar.gz
sha256 = d2d2a4f8cbcfbf9bb32fb7ef838c8b92c60293a5f5eb2e0e45298e08ed262b7f