From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id wETJNm0mvWHxUAEAgWs5BA (envelope-from ) for ; Sat, 18 Dec 2021 01:08:13 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id mKRjMm0mvWFebgAAbx9fmQ (envelope-from ) for ; Sat, 18 Dec 2021 00:08:13 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8C53D2F059 for ; Sat, 18 Dec 2021 01:08:13 +0100 (CET) Received: from localhost ([::1]:44544 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1myNGm-0003R7-Nb for larch@yhetil.org; Fri, 17 Dec 2021 19:08:12 -0500 Received: from eggs.gnu.org ([209.51.188.92]:57468) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1myNGc-0003Qy-7k for bug-guix@gnu.org; Fri, 17 Dec 2021 19:08:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:57574) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1myNGb-0003mj-VT for bug-guix@gnu.org; Fri, 17 Dec 2021 19:08:01 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1myNGb-0005Qe-Qn for bug-guix@gnu.org; Fri, 17 Dec 2021 19:08:01 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#52591: downloading from software archives as default even if version is wrong Resent-From: raingloom Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sat, 18 Dec 2021 00:08:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 52591 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Andy Tai Received: via spool by 52591-submit@debbugs.gnu.org id=B52591.163978606020838 (code B ref 52591); Sat, 18 Dec 2021 00:08:01 +0000 Received: (at 52591) by debbugs.gnu.org; 18 Dec 2021 00:07:40 +0000 Received: from localhost ([127.0.0.1]:40887 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1myNGG-0005Q1-6B for submit@debbugs.gnu.org; Fri, 17 Dec 2021 19:07:40 -0500 Received: from mx1.riseup.net ([198.252.153.129]:56280) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1myNGE-0005Pm-5p for 52591@debbugs.gnu.org; Fri, 17 Dec 2021 19:07:38 -0500 Received: from fews1.riseup.net (fews1-pn.riseup.net [10.0.1.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "mail.riseup.net", Issuer "R3" (not verified)) by mx1.riseup.net (Postfix) with ESMTPS id 4JG5l83mvZzF4g4; Fri, 17 Dec 2021 16:07:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1639786052; bh=P0M6kGUOcdetJVsFapu6r3Wf5MTlGxBlSksz2Iew+kI=; h=Date:From:To:Cc:Subject:In-Reply-To:References:From; b=H5enJ722xC2ElEh1NFki8eTWOACzhxhr03N7fZvQq/jqmZts1Ju6JMdp03gStd1sO ctsMdfSh0g8VW/O3mMQSfwX+HpVRib9Ktp54stZXUu6zaFmAvjitWSKqLpPYBYLT+i FUdbEOKdm6Vsc1VWtL7WdA0inw27VQMG7uQAkqm4= X-Riseup-User-ID: B0B75079DA845DB645EB0C6BDF23F05F59C2AC388D01A93329ADD8ECCEC4925F Received: from [127.0.0.1] (localhost [127.0.0.1]) by fews1.riseup.net (Postfix) with ESMTPSA id 4JG5l7484zz5vtb; Fri, 17 Dec 2021 16:07:31 -0800 (PST) Date: Sat, 18 Dec 2021 01:07:23 +0100 From: raingloom Message-ID: <20211218010723.53203615@riseup.net> In-Reply-To: References: MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 52591@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1639786093; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=eQgFlhOtWNKxkjI0AAsgDgfVwg776JRsAxpcX73xyXY=; b=GYhcycU12FQPdyZ6WN0iJ773N4qM48XnvnwSXPVk9Dtwbf9qCJR3tepO31NBScUYTJgfQQ viOZ0gs5RVMuFNq/oMOTW/WzWdWYSEjwPjlppIsPiKBYbJoiXZokPtsVjXic5c7mIZNxIJ PGc0j3YtF5ttj22xbsLubG81nQnJfr1cZm+TFz7UG8f2KOBE62nS2dN/Xd3KuKUbgO3Xzg NIqubI1Hzzf2yqhIOMa4rfA6CE6jV51ev7iqfMwPI3tlWsjzUZG/fYuB/KF1Hk9agAYgAH S7z7z+PtXv51jXYODa0yE5ATW9qWMHQpH544auG0X7Su1TUGS3PTMvZhQ6Yq7g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1639786093; a=rsa-sha256; cv=none; b=d/gcvQ3D5XnnKt/PO6yJbrIH7Qnv8jmWObGYigQ7j4+CuDOCBvZaIGC63M2Fj6yrqH//p4 p9XIEEJF/TogMdFhvO2ud1wTnSpo+WnB9L4/xqYfXfoVHewo9KFipfIOtgotY6fWqktxkj 17mS37qwIY2GDaUZ9U2Gvo5o7cAMxmIA8SxkmaAE2Ti1VaiQovgyDW/7E+rdugihqLBWTd v4GRH+vOpmfoGU59K5+XWSTwXhQebS7HIJr5mGQwEKq2elasfaXWHMkyzS6owuEKUcyxQV vb6Tte1K9GYwB1PrM0du1m+fD5Luzp4mnlEX1CfQWA0csJuuWH5Nbsrwm09cFA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=H5enJ722; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -3.40 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=riseup.net header.s=squak header.b=H5enJ722; dmarc=fail reason="SPF not aligned (relaxed)" header.from=riseup.net (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 8C53D2F059 X-Spam-Score: -3.40 X-Migadu-Scanner: scn0.migadu.com X-TUID: ERDMI476Rozu On Fri, 17 Dec 2021 15:40:45 -0800 Andy Tai wrote: > I was trying to update a package. I updated the package definition: > > ---patch-- > diff --git a/gnu/packages/mono.scm b/gnu/packages/mono.scm > index 6a7afbafbf..9eeb46ef16 100644 > --- a/gnu/packages/mono.scm > +++ b/gnu/packages/mono.scm > @@ -38,7 +38,7 @@ (define-module (gnu packages mono) > (define-public mono > (package > (name "mono") > - (version "4.4.1.0") > + (version "4.8.1") > (source (origin > (method url-fetch) > (uri (string-append > --end of patch-- > > which at this time shall fail as I have not updated the hash > checksum. If I do > > ./pre-inst-env guix build -k -K mono > > that actually succeeded but it shall have failed. > > This log fragment show what happened: > > ----log fragment-- > The following derivations will be built: > /gnu/store/cdqqdalqwl3m9bhnfyb0v6nfkzvfj0x1-mono-4.8.1.drv > /gnu/store/qs8jgc33jpwwmzq7ppdiv49qll6q32sl-mono-4.8.1.tar.xz.drv > /gnu/store/6aih7gpx3p1dpsbdhkri7mk3qqnqkk9x-mono-4.8.1.tar.bz2.drv > building > /gnu/store/6aih7gpx3p1dpsbdhkri7mk3qqnqkk9x-mono-4.8.1.tar.bz2.drv... > > Starting download of > /gnu/store/l6309vrm95cwpmcwgjj5xgdddp6vfly5-mono-4.8.1.tar.bz2 > From > http://download.mono-project.com/sources/mono/mono-4.8.1.tar.bz2... > following redirection to > `https://download.mono-project.com/sources/mono/mono-4.8.1.tar.bz2'... > download failed > "https://download.mono-project.com/sources/mono/mono-4.8.1.tar.bz2" > 404 "Not Found" > > Starting download of > /gnu/store/l6309vrm95cwpmcwgjj5xgdddp6vfly5-mono-4.8.1.tar.bz2 > From > https://ci.guix.gnu.org/file/mono-4.8.1.tar.bz2/sha256/0jibyvyv2jy8dq5ij0j00iq3v74r0y90dcjc3dkspc > fbnn37cphn... download failed > "https://ci.guix.gnu.org/file/mono-4.8.1.tar.bz2/sha256/0jibyvyv2jy8dq5ij0j00iq3v74r0y > 90dcjc3dkspcfbnn37cphn" 404 "Not Found" > > Starting download of > /gnu/store/l6309vrm95cwpmcwgjj5xgdddp6vfly5-mono-4.8.1.tar.bz2 > From > https://tarballs.nixos.org/sha256/0jibyvyv2jy8dq5ij0j00iq3v74r0y90dcjc3dkspcfbnn37cphn... > download failed > "https://tarballs.nixos.org/sha256/0jibyvyv2jy8dq5ij0j00iq3v74r0y90dcjc3dkspcfbnn37cph > n" 404 "Not Found" > > Starting download of > /gnu/store/l6309vrm95cwpmcwgjj5xgdddp6vfly5-mono-4.8.1.tar.bz2 > From > https://archive.softwareheritage.org/api/1/content/sha256:165e7686b5cbb1ab671b4cb2069207999c3d700 > 44002190b6ec84bb1fdf62b4a/raw/... downloading from > https://archive.softwareheritage.org/api/1/content/sha256:165e7686b5cbb1ab671b4cb2069 > 207999c3d70044002190b6ec84bb1fdf62b4a/raw/ ... > ............ > successfully built > /gnu/store/6aih7gpx3p1dpsbdhkri7mk3qqnqkk9x-mono-4.8.1.tar.bz2.drv > building > /gnu/store/qs8jgc33jpwwmzq7ppdiv49qll6q32sl-mono-4.8.1.tar.xz.drv... > mono-4.4.1/ mono-4.4.1/test-driver > mono-4.4.1/support/ > mono-4.4.1/support/syslog.c > mono-4.4.1/support/supportw.h > .... > > --end of log fratgment-- > > > as seen above, somehow the old version was downloaded from a cached > copy at softwareheritage archives, and it proceeds to build. This > should not proceed but fail for wrong checksum. > > > This is somewhat unfortunate, but also kind of expected behaviour. Fixed output derivations don't have version information as far as I know and part of the usefulness of cryptographic checksums on them is that they can be downloaded from anywhere, even when their original servers go down. There isn't really any practical way I can see for testing if the checksum is correct when the URL is wrong. How should Guix know what file it should download? I think the best workflow is to `use guix refresh -u` instead of manually updating the package, but sadly that doesn't always work, although I think the git based updater was merged recently, which should improve your chances of success.