From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Wrong hashes for libgit2 archives Date: Sun, 8 Oct 2017 13:40:57 -0400 Message-ID: <20171008174057.GC26253@jasmine.lan> References: <7406420b-121a-29d8-5f23-d9233f4b148d@crazy-compilers.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="R+My9LyyhiUvIEro" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55778) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1e1FZa-0001Kw-Dt for guix-devel@gnu.org; Sun, 08 Oct 2017 13:41:10 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1e1FZW-0008Kn-1Z for guix-devel@gnu.org; Sun, 08 Oct 2017 13:41:06 -0400 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:44651) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1e1FZV-0008H2-SF for guix-devel@gnu.org; Sun, 08 Oct 2017 13:41:01 -0400 Content-Disposition: inline In-Reply-To: <7406420b-121a-29d8-5f23-d9233f4b148d@crazy-compilers.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Hartmut Goebel Cc: guix-devel --R+My9LyyhiUvIEro Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Oct 08, 2017 at 06:46:04PM +0200, Hartmut Goebel wrote: > Hi, >=20 > I'm currently stuck with building kde-frameworks due to mismatching > hashes for libgit2: >=20 > @ build-failed > /gnu/store/mgh4yjxkxfyqmc7c61vwq4vs8v837602-libgit2-0.26.0.tar.gz.drv - > 1 sha256 hash mismatch for output path > `/gnu/store/53lj4z9cavl7n27r89zjnvyd8fk854kj-libgit2-0.26.0.tar.gz' > =A0 expected: 1fdk9yhwvl1w1z71ykzcvgh4nsf8scxcbclz5anh98zpplmhmisa > =A0 actual:=A0=A0 1b3figbhp5l83vd37vq6j2narrq4yl9pfw6mw0px0dzb1hz3jqka >=20 > I tried downgrading to v0.25.1 (by reverting 58dce7bf), but that failed > with the same error: >=20 > @ build-failed > /gnu/store/h8vrairp09vg239d9vpli12661vrv9d3-libgit2-0.25.1.tar.gz.drv - > 1 sha256 hash mismatch for output path > `/gnu/store/c3npgqn9ag2ypi9bda1g779wwwlcqqrf-libgit2-0.25.1.tar.gz' > =A0 expected: 1cdwcw38frc1wf28x5ppddazv9hywc718j92f3xa3ybzzycyds3s > =A0 actual:=A0=A0 0ywcxw1mwd56c8qc14hbx31bf198gxck3nja3laxyglv7l57qp26 The auto-generated GitHub snapshots, which is what we use for libgit2, are not created deterministically: https://bugs.gnu.org/28659 https://github.com/libgit2/libgit2/issues/4343 For now, the workaround is to get the tarball from a substitute server. --R+My9LyyhiUvIEro Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlnaYykACgkQJkb6MLrK fwgYUxAA0tqm+bG/YzvyzM5atbGV3aPQTljqD2HjWSfrkksfSS0hp4ySjkYgE4xi lxB85fBYSJ9rdkkiT3OTWVFb4UVpEUMh1eyUCr1zJ9RljewH9G+X/SiNj9TZGWbN 9e0PsexvJYmnq6qLBOXQr45HiOBV654ZPJtLMv4VsG2H9U6aYWEo5OcqiEWn+Sad owYbfBhQxzJ3tBpFrCvp47ve1cdclZzzrG9wFAdgSr46qgObLPT1Zj9nPrZZTEFc GmFyqSWtDhEulm5A4/8/pV3IViL5gqIIFswdUPQD4OMYPIPRycYoUq4MGMC4Pd3D ixJ2v2NDq5aE4CcM3vezD0byVGEEjGAZUul8GGLlGdH9LwvUcIHTvy5Jz5eezFlg 0Ae8dBOtt3M/JpGQsYGc5RDNbDdHiNWgc8b98Pp+3Wv2MowQiTVraAqeYJTa1/4Q WXB+sEcAQ8RF4gHFpkwOCabiG8ui730CZfNr3HYESCyD4PEGUw+PZoNrgseD0090 QD+5Xvcye8Ig5JMeYyMrR7Y/sL32teWvV3W6e0fj7ejOMeryFbCzMPhpVYMSftHE F+2fMARZCdJ75B5xjCreZu8JncQnio/1ePXcBBza56VmIfMD1TIF1aaeNc1la6Pf g8jZuzq0b0oRRd2B+heUnOY2u4WS+1z07M680Gwro1d2nsvE7Kw= =2gw1 -----END PGP SIGNATURE----- --R+My9LyyhiUvIEro--