Re: nss-certs: hash mismatch on berlin

["Ludovic Courtès" <ludo@gnu.org>]

Hello,

Björn Höfling <bjoern.hoefling@bjoernhoefling.de> skribis:

> ~/guix/wt/nonfree [env]$ ./pre-inst-env  guix build nss-certs
> 0.2 MB will be downloaded:
>    /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> substituting /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
> downloading from https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
>  nss-certs-3.44.1  150KiB                                                                                  1.0MiB/s 00:00 [##################] 100.0%
>
> sha256 hash mismatch for /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1:
>   expected hash: 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
>   actual hash:   1awgljvsvc141350xyjjnb15hk66qpcpzwz0hrly11yfbw6wn7cv
> substitution of /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1 failed
> guix build: error: some substitutes for the outputs of derivation `/gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv' failed (usually happens due to networking issues); try `--fallback' to build derivation from source 
>
> This is on dd9c137b2c759f906d57b14fccff091994f274e8
>
> Manually downloading seams to find the right hash:
>
> $ wget -qO - https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1 |  gunzip | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
>
> $ ls /gnu/store/*nss-certs-3.44.1* -d
> /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1       /gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv
> /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1.lock  /gnu/store/fpv0xrrr47g879agkmchzzamw1p46i46-nss-certs-3.44.1-guile-builder
>
> I blamed that something about locales is wrong on berlin. Could it be
> the case that on my side something with locales is wrong? In the build
> daemon? I'm on Ubunutu+Guix, that might cause also some trouble? How
> can I verify/check my locale-configs?

If your guix-daemon is not running under a UTF-8 locale, then nss-certs
may end up being unpacked with incorrect file names (though I thought
that was supposed to be treated as an error, oh well.)

You can find the PID of guix-daemon, and then do something like:

  cat /proc/PID/environ | xargs -0 echo

and look at the value of GUIX_LOCPATH and LC_ALL there.  Both should be
valid.

Thanks,
Ludo’.