From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id EOFdFdhYxGLWswAAbAwnHQ (envelope-from ) for ; Tue, 05 Jul 2022 17:29:28 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id iEpkFNhYxGL2VQEAG6o9tA (envelope-from ) for ; Tue, 05 Jul 2022 17:29:28 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id BBE35E751 for ; Tue, 5 Jul 2022 17:29:27 +0200 (CEST) Received: from localhost ([::1]:33530 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1o8kUQ-0003Hi-Nl for larch@yhetil.org; Tue, 05 Jul 2022 11:29:26 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:47636) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1o8kU2-0003FR-VN for bug-guix@gnu.org; Tue, 05 Jul 2022 11:29:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:57399) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1o8kU2-0005rV-KO for bug-guix@gnu.org; Tue, 05 Jul 2022 11:29:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1o8kU2-0008M6-Gw for bug-guix@gnu.org; Tue, 05 Jul 2022 11:29:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#47474: fossil: hash mismatch Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 05 Jul 2022 15:29:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 47474 X-GNU-PR-Package: guix X-GNU-PR-Keywords: easy To: Jack Hill Cc: 47474@debbugs.gnu.org, phodina , zimoun Received: via spool by 47474-submit@debbugs.gnu.org id=B47474.165703488632046 (code B ref 47474); Tue, 05 Jul 2022 15:29:02 +0000 Received: (at 47474) by debbugs.gnu.org; 5 Jul 2022 15:28:06 +0000 Received: from localhost ([127.0.0.1]:51296 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o8kT5-0008Kk-8a for submit@debbugs.gnu.org; Tue, 05 Jul 2022 11:28:05 -0400 Received: from mail2-relais-roc.national.inria.fr ([192.134.164.83]:61057) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1o8kSp-0008K2-E6 for 47474@debbugs.gnu.org; Tue, 05 Jul 2022 11:28:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inria.fr; s=dc; h=from:to:cc:subject:references:date:in-reply-to: message-id:mime-version:content-transfer-encoding; bh=HL7VMREMLt434r4HubCY/1t+1L3HgF1VGYFaHVOZ5xM=; b=KZX3z5mzU6KwUxX0E5+9o21WvkQyvEP/0Pnppu8CBC1NYNyoDIJdx9LX aO8S2fRh9K00QZIOApxizqBv77W73UAFcWE0cGYoSye2WtBIph+Nwh2ME icND/fSYvdFOddYsXb11oRQmrtOFjAFZSrTHTHQ+Uh0FauDXaQUTeG9SN 0=; X-IronPort-AV: E=Sophos;i="5.92,247,1650924000"; d="scan'208";a="44360775" Received: from unknown (HELO ribbon) ([193.50.110.235]) by mail2-relais-roc.national.inria.fr with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 05 Jul 2022 17:27:41 +0200 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= References: <86tugmsy7v.fsf@gmail.com> Date: Tue, 05 Jul 2022 17:27:40 +0200 In-Reply-To: (Jack Hill's message of "Tue, 5 Jul 2022 10:55:03 -0400 (EDT)") Message-ID: <87edyz4m1f.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1657034968; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:resent-cc: resent-from:resent-sender:resent-message-id:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=HL7VMREMLt434r4HubCY/1t+1L3HgF1VGYFaHVOZ5xM=; b=eGI9EqQtCr4t5ApEE6BQXeh9kC8h4ygsADxHkuCfmTK3F/hzVlz/ZvWxFuVdM1VqRhM3ay nY91CJYN1GssEaZAueeRFY0kcYrtDIA45kV5IZpNoUNFua3lExe7awelXWznoiYXtgPn/F YLT7z5tDX/gSlHTmudezE7qmiO3HK5Z9RtWO3BLeveCnUc6cHrMFZ/zFitJYsECmUDNBnD +wWKpjIK0y5WMARTjQROroKAtmtl9XtZH7VrqwVYHqQOa6OVpi03tUPsvSidy1SGNkJXEJ Fv8LW8irM/ZGdNlm5y+mu3k9hdq7hleX4MeQWqMXImaEF0B4H/dpaJs5mF5K7g== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1657034968; a=rsa-sha256; cv=none; b=DZqbIB1Wa8km6Ab4oK24uBRXlBL42Jg84LgwvXPq8rmLBI9aWYma3qRZKmT2Ywva15VDoz /IKi1zeSNa5F1Xf29BtpioxZ7cfT6RNYlSwmgvpCuJ7qRiq9I97G5Vq4DPPQlqSEo4KwJ9 VMpLzcg6hEypMo4/XWJLxbGrqN9R0L7oLjXShG3qheSoX6snZzd0+6yvcuT/kcNkV5ZvXO s2rVozPS9VZnbPhFICEWg9DjGHoHzq9ikMVFeASmUJwoEy6QEMhZjctvUaLm9PYtAqqNQs wU+1BlT6Af5BcYoKb1EoDV0udmAwwMepvqP+k6+lDFYHBl0WtGw3JbI9eSEgKw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=inria.fr header.s=dc header.b=KZX3z5mz; dmarc=fail reason="SPF not aligned (relaxed)" header.from=inria.fr (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: 6.75 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=inria.fr header.s=dc header.b=KZX3z5mz; dmarc=fail reason="SPF not aligned (relaxed)" header.from=inria.fr (policy=none); spf=pass (aspmx1.migadu.com: domain of "bug-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="bug-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: BBE35E751 X-Spam-Score: 6.75 X-Migadu-Scanner: scn0.migadu.com X-TUID: Xa1biQss0mW8 Hi! Jack Hill skribis: > I'm also curious to know to fill in the archive for old versions. I > guess the first step would be to preserve the tarballs with the > original hashes. Does anyone have them? I notice that this happened > again with 2.17: > > downloading from https://www.fossil-scm.org/home/tarball/f48180f2ff316965= 1a725396d4f7d667c99a92873b9c3df7eee2f144be7a0721/fossil-src-2.17.tar.gz ... > fossil-src-2.17.tar.gz 6.0MiB = 4.0MiB/s 00:02 [##################] 100.0% > sha256 hash mismatch for /gnu/store/i695w5hp8vkgvkx40rs8p647mas0ldah-foss= il-src-2.17.tar.gz: > expected hash: 1gvx6xzrw1a8snlq9qmr6099r44ifghg0h0fw4jazqmmyxriqzsw > actual hash: 18q5rc1d9d2zvrvsas5h419dv525ig9lyqswrx7bcl38zbjxics4 I got a substitute for the tarball: --8<---------------cut here---------------start------------->8--- $ guix build "/gnu/store/svcwny2aw005mgyz7fsnm8m7v612q9d4-fossil-src-2.17.t= ar.gz.drv" 6.3 MB will be downloaded: /gnu/store/i695w5hp8vkgvkx40rs8p647mas0ldah-fossil-src-2.17.tar.gz substituting /gnu/store/i695w5hp8vkgvkx40rs8p647mas0ldah-fossil-src-2.17.ta= r.gz... downloading from https://ci.guix.gnu.org/nar/i695w5hp8vkgvkx40rs8p647mas0ld= ah-fossil-src-2.17.tar.gz ... fossil-src-2.17.tar.gz 6.0MiB = 16.3MiB/s 00:00 [##################] 100.0% /gnu/store/i695w5hp8vkgvkx40rs8p647mas0ldah-fossil-src-2.17.tar.gz $ guix hash $(guix build "/gnu/store/svcwny2aw005mgyz7fsnm8m7v612q9d4-fossi= l-src-2.17.tar.gz.drv") 1gvx6xzrw1a8snlq9qmr6099r44ifghg0h0fw4jazqmmyxriqzsw --8<---------------cut here---------------end--------------->8--- Alternatively, we can get it via the content-addressed endpoint: --8<---------------cut here---------------start------------->8--- $ wget -qO- https://ci.guix.gnu.org/file/fossil-src-2.17.tar.gz/sha256/1gvx= 6xzrw1a8snlq9qmr6099r44ifghg0h0fw4jazqmmyxriqzsw |guix hash - 1gvx6xzrw1a8snlq9qmr6099r44ifghg0h0fw4jazqmmyxriqzsw --8<---------------cut here---------------end--------------->8--- Last, Disarchive tarball metadata is available: --8<---------------cut here---------------start------------->8--- $ wget -qO- https://disarchive.guix.gnu.org/sha256/$(guix hash -f hex $(gui= x build "/gnu/store/svcwny2aw005mgyz7fsnm8m7v612q9d4-fossil-src-2.17.tar.gz= .drv")) |head (disarchive (version 0) (gzip-member (name "fossil-src-2.17.tar.gz") (digest (sha256 "5c7f1c73f7b5e2af24e10e40f0e07391909c1230b9e284a9d548059e7f377dbf")) (header (mtime 1633790590) (extra-flags 2) $ wget -qO- https://disarchive.guix.gnu.org/sha256/$(guix hash -f hex $(gui= x build "/gnu/store/svcwny2aw005mgyz7fsnm8m7v612q9d4-fossil-src-2.17.tar.gz= .drv")) |grep swhid (swhid "swh:1:dir:1d10cd5c9e0afaf7c95fa87cd50d4b6b1= 3e6c6c9")) --8<---------------cut here---------------end--------------->8--- =E2=80=A6 and tarball content is in Software Heritage: https://archive.softwareheritage.org/browse/directory/1d10cd5c9e0afaf7c95= fa87cd50d4b6b13e6c6c9/ So we=E2=80=99re doing OK: it=E2=80=99s definitely archived and won=E2=80= =99t ever vanish! :-) Ludo=E2=80=99.