From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id 6FL1EFAkvWGETQEAgWs5BA (envelope-from ) for ; Sat, 18 Dec 2021 00:59:12 +0100 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id mECxDFAkvWGsUQAA1q6Kng (envelope-from ) for ; Fri, 17 Dec 2021 23:59:12 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0D37814FE1 for ; Sat, 18 Dec 2021 00:59:12 +0100 (CET) Received: from localhost ([::1]:40270 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1myN83-0008GY-7S for larch@yhetil.org; Fri, 17 Dec 2021 18:59:11 -0500 Received: from eggs.gnu.org ([209.51.188.92]:56078) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1myN7u-0008G7-Gz for bug-guix@gnu.org; Fri, 17 Dec 2021 18:59:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:57565) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1myN7t-0002eN-VA for bug-guix@gnu.org; Fri, 17 Dec 2021 18:59:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1myN7t-0005B9-N3 for bug-guix@gnu.org; Fri, 17 Dec 2021 18:59:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#52591: downloading from software archives as default even if version is wrong Resent-From: Maxime Devos Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Fri, 17 Dec 2021 23:59:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 52591 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Andy Tai , 52591@debbugs.gnu.org Received: via spool by 52591-submit@debbugs.gnu.org id=B52591.163978550419854 (code B ref 52591); Fri, 17 Dec 2021 23:59:01 +0000 Received: (at 52591) by debbugs.gnu.org; 17 Dec 2021 23:58:24 +0000 Received: from localhost ([127.0.0.1]:40878 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1myN7H-0005AA-VP for submit@debbugs.gnu.org; Fri, 17 Dec 2021 18:58:24 -0500 Received: from andre.telenet-ops.be ([195.130.132.53]:45942) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1myN7G-0005A1-2v for 52591@debbugs.gnu.org; Fri, 17 Dec 2021 18:58:23 -0500 Received: from ptr-bvsjgyhxw7psv60dyze.18120a2.ip6.access.telenet.be ([IPv6:2a02:1811:8c09:9d00:3c5f:2eff:feb0:ba5a]) by andre.telenet-ops.be with bizsmtp id XbyL2600C4UW6Th01byLzh; Sat, 18 Dec 2021 00:58:20 +0100 Message-ID: <6c18852ca39e53a40cf6cdf0f3c661354d762907.camel@telenet.be> From: Maxime Devos Date: Fri, 17 Dec 2021 23:58:20 +0000 In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" User-Agent: Evolution 3.38.3-1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telenet.be; s=r21; t=1639785500; bh=rjC419LdtBZE/YyYYnMZrls6ORLEMflOQ22609/Zxeo=; h=Subject:From:To:Date:In-Reply-To:References; b=tJK65P9YqsZa+btVxhx8/VI9XzfFEFWLsZt3bXnEYvTkNUNXzrpk3fqhWT3la0ESP 7LtjOZnhmgHujYt9ioA9kXKRLJ179tHzV7tSwWzJdF6rqt9h/VMi1Q2MoqahUiX7jS tUql5/CiFIRlNcPV7g6FNydUOvJ+mHHyzYqGPsNKW08oFr5JArbJ+kfKJaRqg80keM eTYeBuqIQP9iXkYdZsuyw3urkRfaEDpxOlk2M2vQnzLWnqOAj5tr2TZw0ygXBj0rCo c58ZAYDhEmbF4sA0dmEnU843J6O2lBO1jhCMbpXvKWPd2kVtXKFQx6kUgWO356gEV7 jaZOqjUxEhqDA== X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1639785552; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=rjC419LdtBZE/YyYYnMZrls6ORLEMflOQ22609/Zxeo=; b=Du06o2ZqmUPuqxnztwdEtDxmh8Asf3hIxOB4zOhJCMBuVjRLOu/WiqZT9UQW9yjchUe1vc zls9V1pyb45+K0rvYyLfKVb6ix9IAQ5fVhO+9clm8U8/ULPYGWqAnZIou3SAXPmooZq4i9 EpoamOyDf16Qi6dT49Z1w+IecgP3ObWLemFO5HvvUvsye3B2iTabt5wWS5FU6dwPhIkX9v t6VdM8+Jk++V6QyZQL8+N5Ibp1Jl1pOTUySD0gjJ1Y3MqgoId6/FygivB6txvkCr7S2ov3 J8X0Sp+9XIwIJ/hRT7FYOSLpXpWBopDlnR+3R3LkQr/e66t+IuEXZTMFHuOg9Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1639785552; a=rsa-sha256; cv=none; b=bj19Gm3qB7lRihC4REfcx1In597b5ypL9A+5WwOVxUMjYhLwOmaR1f33sGlDkpexNTUK41 ARe0rzQOpNSf2tyYJRy93TTIFG9pEbLJ460wSn+YNxGjw0YNeE9lw84Etbhw+5PP5r8UN/ eiDDIZVdl6HAVhBb0QKwC4OGZwvnbZ3dPg1kQXEq8Rsd2iVf1Ta92+fCFH++esg60Bec3Z q9kisYdFK9B7283oaPe4VhSPPeWe8SPLQ3JqpshfxuASzMaKpLjw+gV5SsLabn/lKICE2q vOanluVtXrmwzYJk6E0uB0MpPFIpYWFflkvF4+bLXwc9ndRlqc7Fo6/JDeKFRg== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=tJK65P9Y; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.50 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=telenet.be header.s=r21 header.b=tJK65P9Y; dmarc=fail reason="SPF not aligned (relaxed)" header.from=telenet.be (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 0D37814FE1 X-Spam-Score: -2.50 X-Migadu-Scanner: scn0.migadu.com X-TUID: 5nnbiMv4jK0D Andy Tai schreef op vr 17-12-2021 om 15:40 [-0800]: > @@ -38,7 +38,7 @@ (define-module (gnu packages mono) >  (define-public mono >    (package >      (name "mono") > -    (version "4.4.1.0") > +    (version "4.8.1") >      (source (origin >                (method url-fetch) >                (uri (string-append > --end of patch-- You forgot to update the sha256 hash. You can use "guix download https://the-website/mono-4.8.1.tar.bz2" to determine the hash. Or toggle a single character & look at the hash mismatch line. Does that work for you? [...] > as seen above, somehow the old version was downloaded from a cached > copy at softwareheritage archives, and it proceeds to build. This > should not proceed but fail for wrong checksum. SWH isn't a cache, its an archive that keeps everything forever. Guix has no way to determine if upstream is doing unspeakable things to their tarballs (*) and hence needs to use SWH, or if someone forgot to change the hash on guix. This has been noticed in the past, without any ideas on how to somehow teach guix to determine the case. (*) e.g. in-place modification, which changes the hash Greetings, Maxime.