From mboxrd@z Thu Jan 1 00:00:00 1970 From: Catonano Subject: downloading a tarball Date: Fri, 24 Mar 2017 13:06:33 +0100 Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a114431f225f926054b78d3b9 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:47775) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crNzJ-0002iu-3C for help-guix@gnu.org; Fri, 24 Mar 2017 08:06:38 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crNzI-00019M-5R for help-guix@gnu.org; Fri, 24 Mar 2017 08:06:37 -0400 Received: from mail-wm0-x22a.google.com ([2a00:1450:400c:c09::22a]:35057) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1crNzH-00019D-VK for help-guix@gnu.org; Fri, 24 Mar 2017 08:06:36 -0400 Received: by mail-wm0-x22a.google.com with SMTP id u132so11306567wmg.0 for ; Fri, 24 Mar 2017 05:06:35 -0700 (PDT) List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: help-guix --001a114431f225f926054b78d3b9 Content-Type: text/plain; charset=UTF-8 This https://sourceforge.net/projects/libxls/files/ I attempted to build the package several times but every time the hash results to be wrong. I correct it and then it's wrong again For example, I get @ build-failed /gnu/store/dcaqrf007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar.gz.drv - 1 output path `/gnu/store/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.tar.gz' should have sha256 hash `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv6ra3i5raid', instead has `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks' so I change it to 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks and then I get @ build-failed /gnu/store/vsl7yz0nyklv0705jb5py015jkz3r6dg-libxsl-1.4.0.tar.gz.drv - 1 output path `/gnu/store/wjyja461cr7kvvryp6v21q3iagf5rd8m-libxsl-1.4.0.tar.gz' should have sha256 hash `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks', instead has `0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32' So now it's not 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks anymore. It's 0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32 I'm doing this with a master checkout. What am I missing ? --001a114431f225f926054b78d3b9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I attempted to build the package several times but every time = the hash results to be wrong.

I correct it and then it's w= rong again

For example, I get

@ build-failed /gnu/store/dcaqr= f007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar.gz.drv - 1 output path `/gnu/s= tore/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.tar.gz' should have = sha256 hash `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv6ra3i5raid', ins= tead has `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks'

=
so I change it to
1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr= 5rkawmqmks

and then I get

@ build-faile= d /gnu/store/vsl7yz0nyklv0705jb5py015jkz3r6dg-libxsl-1.4.0.tar.gz.drv - 1 o= utput path `/gnu/store/wjyja461cr7kvvryp6v21q3iagf5rd8m-libxsl-1.4.0.tar.gz= ' should have sha256 hash `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5r= kawmqmks', instead has `0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psy= rbf32'

So now it's not 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1= hwmrr5rkawmqmks anymore. It's
0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pm= kpwcq7psyrbf32

I'm doing this with a master checkout.=

What am I missing ?
--001a114431f225f926054b78d3b9-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ben Woodcroft Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 22:26:53 +1000 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:52274) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crOK1-0007ae-0B for help-guix@gnu.org; Fri, 24 Mar 2017 08:28:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crOJ8-0000UO-I1 for help-guix@gnu.org; Fri, 24 Mar 2017 08:28:00 -0400 Received: from mailhub1.soe.uq.edu.au ([130.102.132.208]:56832 helo=newmailhub.uq.edu.au) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crOJ7-0000Tk-TD for help-guix@gnu.org; Fri, 24 Mar 2017 08:27:06 -0400 In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Catonano , help-guix Hi, On 24/03/17 22:06, Catonano wrote: > This > https://sourceforge.net/projects/libxls/files/ > > I attempted to build the package several times but every time the hash > results to be wrong. > > I correct it and then it's wrong again > > For example, I get > > @ build-failed > /gnu/store/dcaqrf007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar.gz.drv - > 1 output path > `/gnu/store/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.tar.gz' > should have sha256 hash > `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv6ra3i5raid', instead has > `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks' I think the mistake is that you are not taking the hash of the downloaded file, that is on the previous line. For instance from this example output path `/gnu/store/7mfyynbzzi15265z92bdb00j7lxfa70y-libxls-1.4.0.zip' should have sha256 hash `0py8hsspvwjlckg2xi7jcpj0frrp2qbmsy9x55fx0knnwbhdg5d2', instead has `1g8ds7wbhsa4hdcn77xc2c0l3vvz5bx2hx9ng9c9n7aii92ymfnk' @ build-failed /gnu/store/cv5nmjcwja91151zmxh9g956if0bl2xl-libxls-1.4.0.zip.drv - 1 output path `/gnu/store/7mfyynbzzi15265z92bdb00j7lxfa70y-libxls-1.4.0.zip' should have sha256 hash `0py8hsspvwjlckg2xi7jcpj0frrp2qbmsy9x55fx0knnwbhdg5d2', instead has `1g8ds7wbhsa4hdcn77xc2c0l3vvz5bx2hx9ng9c9n7aii92ymfnk' The correct hash is 0py8hsspvwjlckg2xi7jcpj0frrp2qbmsy9x55fx0knnwbhdg5d2. HTH - speaking from experience making the same mistake here.. ben From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ricardo Wurmus Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 13:50:36 +0100 Message-ID: <87o9wqbzz7.fsf@elephly.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57369) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crOg3-0004Xv-Ne for help-guix@gnu.org; Fri, 24 Mar 2017 08:50:49 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crOg0-0000lh-HE for help-guix@gnu.org; Fri, 24 Mar 2017 08:50:47 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21055) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1crOg0-0000kQ-9Z for help-guix@gnu.org; Fri, 24 Mar 2017 08:50:44 -0400 In-reply-to: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Catonano Cc: help-guix Catonano writes: > This > https://sourceforge.net/projects/libxls/files/ > > I attempted to build the package several times but every time the hash > results to be wrong. > > I correct it and then it's wrong again > > For example, I get > > @ build-failed > /gnu/store/dcaqrf007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar.gz.drv - 1 > output path > `/gnu/store/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.tar.gz' should > have sha256 hash `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv6ra3i5raid', > instead has `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks' > > so I change it to > 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks > > and then I get > > @ build-failed > /gnu/store/vsl7yz0nyklv0705jb5py015jkz3r6dg-libxsl-1.4.0.tar.gz.drv - 1 > output path > `/gnu/store/wjyja461cr7kvvryp6v21q3iagf5rd8m-libxsl-1.4.0.tar.gz' should > have sha256 hash `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks', > instead has `0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32' > > So now it's not 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks > anymore. It's > 0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32 > > I'm doing this with a master checkout. > > What am I missing ? Have you confirmed that the file you get is actually a tarball? Sometimes you might get an HTML page and Guix reports the hash for that. In general it is better to download the tarball manually and then use =E2=80=9Cguix hash=E2=80=9D on the result after confirming that the tarball= is in fact okay (e.g. by validating signatures or inspecting it). -- Ricardo GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC https://elephly.net From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tobias Geerinckx-Rice Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 14:14:20 +0100 Message-ID: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="FeO5At79VSpSXervNqqlAWTUdFKCpimUi" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34364) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crP2C-0002rz-LQ for help-guix@gnu.org; Fri, 24 Mar 2017 09:13:41 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crP25-00011F-Ux for help-guix@gnu.org; Fri, 24 Mar 2017 09:13:38 -0400 Received: from relay9-d.mail.gandi.net ([217.70.183.199]:34574) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1crP25-00010I-KL for help-guix@gnu.org; Fri, 24 Mar 2017 09:13:33 -0400 In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: b.woodcroft@uq.edu.au, help-guix@gnu.org This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --FeO5At79VSpSXervNqqlAWTUdFKCpimUi Content-Type: multipart/mixed; boundary="8OMxpNFGXDNHI5KmXjSmLCnnOKxeEJpN1"; protected-headers="v1" From: Tobias Geerinckx-Rice To: b.woodcroft@uq.edu.au, help-guix@gnu.org Message-ID: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> Subject: Re: downloading a tarball References: In-Reply-To: --8OMxpNFGXDNHI5KmXjSmLCnnOKxeEJpN1 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ben (can I trust you now?), On 24/03/17 13:26, Ben Woodcroft wrote: > The correct hash is 0py8hsspvwjlckg2xi7jcpj0frrp2qbmsy9x55fx0knnwbhdg5d= 2. I'm afraid it's the other way round. ;-) > `/gnu/store/7mfyynbzzi15265z92bdb00j7lxfa70y-libxls-1.4.0.zip' should > have sha256 hash `0py8hsspvwjlckg2xi7jcpj0frrp2qbmsy9x55fx0knnwbhdg5d2'= , > instead has `1g8ds7wbhsa4hdcn77xc2c0l3vvz5bx2hx9ng9c9n7aii92ymfnk' The first hash is what's expected, the second is what was actually received. What's =E2=80=98correct=E2=80=99 is of course not always clear.= =E2=80=98guix hash=E2=80=99 on my manually downloaded copy returns 1g8ds7wbhsa4hdcn77xc2c0l3vvz5bx2hx9ng9c9n7aii92ymfnk. I did no further checking. > HTH - speaking from experience making the same mistake here.. I suspect most people have. The message isn't as clear as it could be. It doesn't help that IIRC Nix and Guix differ(ed) in which hash they place first. So much fun when dual-'ixing. I considered changing the wording of this a long time ago to say something more like =E2=80=98expecting ..., got ...=E2=80=99. Like most p= eople, I just got used to it. Perhaps I should have sent that patch anyway. Kind regards, T G-R --8OMxpNFGXDNHI5KmXjSmLCnnOKxeEJpN1-- --FeO5At79VSpSXervNqqlAWTUdFKCpimUi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEqBAEBCgAUBQJY1RutDRxtZUB0b2JpYXMuZ3IACgkQkczbm0hUG5kpIAf/fmWe qo+76iCTJ5ZLBCbj3IbyGr4q8TPP37uqU5VRkXpVLzUMrMnj7Sp5rk4uzl7VIjxI FO44oTwXFg4tyTM4jeldTBYUwIhUbCQ8VYLyv6PoF4T2AgTYr2Tq60t3SUyvPp0z CE9JWn3F80ts8Pktls8tV2MpU3car1eb3i87l3hBQoXejEGizfCR+GTQkn1idmLD X0+1+Ryx6jBgEpP1OZDjtxiFrCWTrDzJgoaSzTcf9Olhq2kxLk4CjcBIV3yPPY5q 4OxOBV2fl6vY6n9HaFiiQe8FrkeIIDd45T10f5PzaRrXKsCbIneaUJVBOZC/cgTr 1N0z8NOPJ4t8XYi0SA== =OL8q -----END PGP SIGNATURE----- --FeO5At79VSpSXervNqqlAWTUdFKCpimUi-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Catonano Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 14:16:46 +0100 Message-ID: References: <87o9wqbzz7.fsf@elephly.net> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=f403045f4d0849af1c054b79cea3 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:35113) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crP5J-0003KA-DS for help-guix@gnu.org; Fri, 24 Mar 2017 09:16:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crP5F-000356-1A for help-guix@gnu.org; Fri, 24 Mar 2017 09:16:53 -0400 Received: from mail-wr0-x22f.google.com ([2a00:1450:400c:c0c::22f]:33644) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1crP5E-00033r-NT for help-guix@gnu.org; Fri, 24 Mar 2017 09:16:48 -0400 Received: by mail-wr0-x22f.google.com with SMTP id y90so1563100wrb.0 for ; Fri, 24 Mar 2017 06:16:48 -0700 (PDT) In-Reply-To: <87o9wqbzz7.fsf@elephly.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Ricardo Wurmus Cc: help-guix --f403045f4d0849af1c054b79cea3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable 2017-03-24 13:50 GMT+01:00 Ricardo Wurmus : > > Catonano writes: > > > This > > https://sourceforge.net/projects/libxls/files/ > > > > I attempted to build the package several times but every time the hash > > results to be wrong. > > > > I correct it and then it's wrong again > > > > For example, I get > > > > @ build-failed > > /gnu/store/dcaqrf007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar.gz.drv - 1 > > output path > > `/gnu/store/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.tar.gz' shoul= d > > have sha256 hash `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv6ra3i5raid'= , > > instead has `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks' > > > > so I change it to > > 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks > > > > and then I get > > > > @ build-failed > > /gnu/store/vsl7yz0nyklv0705jb5py015jkz3r6dg-libxsl-1.4.0.tar.gz.drv - 1 > > output path > > `/gnu/store/wjyja461cr7kvvryp6v21q3iagf5rd8m-libxsl-1.4.0.tar.gz' shoul= d > > have sha256 hash `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks'= , > > instead has `0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32' > > > > So now it's not 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks > > anymore. It's > > 0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32 > > > > I'm doing this with a master checkout. > > > > What am I missing ? > > Have you confirmed that the file you get is actually a tarball? > Sometimes you might get an HTML page and Guix reports the hash for that. > You nailed it I catted /gnu/store/w1wf5d44awk0almrdrbhs8442cnzmw2b-libxsl-1.4.0.zip which is the downloaded tarball and it contains html ! How can this be ? I'm using (uri (string-append "mirror://sourceforge/libxsl/libxsl-" version ".zip")) The url used by icecat is https://netassist.dl.sourceforge.net/project/libxls/libxls-1.4.0.zip and the result is a sound tarball How does it happen that the mirror based url leads to an html page ? > > In general it is better to download the tarball manually and then use > =E2=80=9Cguix hash=E2=80=9D on the result after confirming that the tarba= ll is in fact > okay (e.g. by validating signatures or inspecting it). > I did ! This was my first step, I inspected it ! And I hashed it But then this whirl of hashes began Thanks --f403045f4d0849af1c054b79cea3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


2017-03-24 13:50 GMT+01:00 Ricardo Wurmus <rekado@elephly.net>= :

Catonano <catonano@gmail.com&g= t; writes:

> This
> https://sourceforge.net/projects/libxls/file= s/
>
> I attempted to build the package several times but every time the hash=
> results to be wrong.
>
> I correct it and then it's wrong again
>
> For example, I get
>
> @ build-failed
> /gnu/store/dcaqrf007jxyi0jzlsakr3j7faxm122f-libxsl-1.4.0.tar= .gz.drv - 1
> output path
> `/gnu/store/v6i85v3myb09nbsacq9ghx6yd0spcr67-libxsl-1.4.0.ta= r.gz' should
> have sha256 hash `1574bcyagix5fkbs0yi2npi59y1zck23y2aia52vdv= 6ra3i5raid',
> instead has `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkaw= mqmks'
>
> so I change it to
> 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rkawmqmks
>
> and then I get
>
> @ build-failed
> /gnu/store/vsl7yz0nyklv0705jb5py015jkz3r6dg-libxsl-1.4.0.tar= .gz.drv - 1
> output path
> `/gnu/store/wjyja461cr7kvvryp6v21q3iagf5rd8m-libxsl-1.4.0.ta= r.gz' should
> have sha256 hash `1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr= 5rkawmqmks',
> instead has `0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psy= rbf32'
>
> So now it's not 1zmsb0w6qh4vx7n7r3yijc5p4fwljyk5apzi1hwmrr5rk= awmqmks
> anymore. It's
> 0fyd8h4i46qw3xii3pfa12k9k9ndmj59b552pmkpwcq7psyrbf32
>
> I'm doing this with a master checkout.
>
> What am I missing ?

Have you confirmed that the file you get is actually a tarball?=
Sometimes you might get an HTML page and Guix reports the hash for that.

You nailed it

I catted

/gnu/store/w1wf5d44awk0almrdrbhs8442cnzmw2b-libxsl= -1.4.0.zip

which is the downloaded tarball and it contains html !

How can this be ? I&= #39;m using

(uri (string-append "mirror://sourceforge/libxsl/li= bxsl-"
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 version ".zip&q= uot;))

The url used by icecat is
https://netassist.dl.sourc= eforge.net/project/libxls/libxls-1.4.0.zip

and the re= sult is a sound tarball

How d= oes it happen that the mirror based url leads to an html page ?
=C2=A0

In general it is better to download the tarball manually and then use
=E2=80=9Cguix hash=E2=80=9D on the result after confirming that the tarball= is in fact
okay (e.g. by validating signatures or inspecting it).

I did ! This was my first step, I inspected it ! And I hash= ed it

But then this whirl of hashes began

<= div>Thanks
--f403045f4d0849af1c054b79cea3-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hartmut Goebel Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 15:33:14 +0100 Message-ID: <58D52E2A.3040203@goebel-consult.de> References: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:56881) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crQHK-00078d-Gz for help-guix@gnu.org; Fri, 24 Mar 2017 10:33:23 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crQHH-0000du-AV for help-guix@gnu.org; Fri, 24 Mar 2017 10:33:22 -0400 Received: from mail-out.m-online.net ([2001:a60:0:28:0:1:25:1]:53100) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1crQHH-0000bY-40 for help-guix@gnu.org; Fri, 24 Mar 2017 10:33:19 -0400 Received: from frontend01.mail.m-online.net (unknown [192.168.8.182]) by mail-out.m-online.net (Postfix) with ESMTP id 3vqQrW5Wmqz1qql5 for ; Fri, 24 Mar 2017 15:33:15 +0100 (CET) Received: from localhost (dynscan01.mnet-online.de [192.168.6.70]) by mail.m-online.net (Postfix) with ESMTP id 3vqQrW3dp4z3j37L for ; Fri, 24 Mar 2017 15:33:15 +0100 (CET) Received: from mail.mnet-online.de ([192.168.8.182]) by localhost (dynscan01.mail.m-online.net [192.168.6.70]) (amavisd-new, port 10024) with ESMTP id jrY6W7OWbAQy for ; Fri, 24 Mar 2017 15:33:14 +0100 (CET) Received: from hermia.goebel-consult.de (ppp-46-244-130-72.dynamic.mnet-online.de [46.244.130.72]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mail.mnet-online.de (Postfix) with ESMTPS for ; Fri, 24 Mar 2017 15:33:14 +0100 (CET) Received: from [192.168.110.2] (lenashee.goebel-consult.de [192.168.110.2]) by hermia.goebel-consult.de (Postfix) with ESMTP id 43BC860BA9 for ; Fri, 24 Mar 2017 16:35:25 +0100 (CET) In-Reply-To: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: help-guix@gnu.org Am 24.03.2017 um 14:14 schrieb Tobias Geerinckx-Rice: >> > HTH - speaking from experience making the same mistake here.. > I suspect most people have. The message isn't as clear as it could be. Either way round the message is hard to read: squezzed between many other message, no line-break and arguable wording. IMHO this should be improved to empower more people. -- +++hartmut | Hartmut Goebel | | | hartmut@goebel-consult.de | www.goebel-consult.de | From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: downloading a tarball Date: Fri, 24 Mar 2017 23:10:38 +0100 Message-ID: <87h92ixr4x.fsf@gnu.org> References: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> <58D52E2A.3040203@goebel-consult.de> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=-=-=" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:41858) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crXPw-0003su-8L for help-guix@gnu.org; Fri, 24 Mar 2017 18:10:45 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crXPt-0001lg-0O for help-guix@gnu.org; Fri, 24 Mar 2017 18:10:44 -0400 In-Reply-To: <58D52E2A.3040203@goebel-consult.de> (Hartmut Goebel's message of "Fri, 24 Mar 2017 15:33:14 +0100") List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Hartmut Goebel Cc: help-guix@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hartmut Goebel skribis: > Am 24.03.2017 um 14:14 schrieb Tobias Geerinckx-Rice: >>> > HTH - speaking from experience making the same mistake here.. >> I suspect most people have. The message isn't as clear as it could be. > > Either way round the message is hard to read: squezzed between many > other message, no line-break and arguable wording. IMHO this should be > improved to empower more people. Yeah I agree. What about this (patch below)? --8<---------------cut here---------------start------------->8--- @ build-started /gnu/store/0rn80kgcbc90hfl2vl54adci7675fwb7-idutils-4.6.tar= .xz.drv - x86_64-linux /var/log/guix/drvs/0r//n80kgcbc90hfl2vl54adci7675fwb= 7-idutils-4.6.tar.xz.drv.bz2 Starting download of /gnu/store/si0rm701sqmi3w69k2b2yzar4p99j66k-idutils-4.= 6.tar.xz >From http://ftpmirror.gnu.org/idutils/idutils-4.6.tar.xz... following redirection to `http://mirror.ibcp.fr/pub/gnu/idutils/idutils-4.6= .tar.xz'... idutils-4.6.tar.xz 978KiB 743KiB/s 00:01 [####################] 1= 00.0% sha256 hash mismatch for output path `/gnu/store/si0rm701sqmi3w69k2b2yzar4p= 99j66k-idutils-4.6.tar.xz' expected: 1hmai3422iaqnp34kkzxdnywl7n7pvlxp11vrw66ybxn9wxg90c2 actual: 1hmai3422iaqnp34kkzxdnywl7n7pvlxp11vrw66ybxn9wxg90c1 @ build-failed /gnu/store/0rn80kgcbc90hfl2vl54adci7675fwb7-idutils-4.6.tar.= xz.drv - 1 sha256 hash mismatch for output path `/gnu/store/si0rm701sqmi3w6= 9k2b2yzar4p99j66k-idutils-4.6.tar.xz' expected: 1hmai3422iaqnp34kkzxdnywl7n7pvlxp11vrw66ybxn9wxg90c2 actual: 1hmai3422iaqnp34kkzxdnywl7n7pvlxp11vrw66ybxn9wxg90c1 cannot build derivation `/gnu/store/kk172bqfx6ya7w62xm1vmr2c9iyq6cpy-idutil= s-4.6.tar.xz.drv': 1 dependencies couldn't be built guix build: error: build failed: build of `/gnu/store/kk172bqfx6ya7w62xm1vm= r2c9iyq6cpy-idutils-4.6.tar.xz.drv' failed --8<---------------cut here---------------end--------------->8--- (Here =E2=80=98guix build=E2=80=99 repeats the error message because of #:print-build-trace, which is #true in =E2=80=98guix build=E2=80=99.) Probably not optimal but hopefully an improvement. Thanks, Ludo=E2=80=99. --=-=-= Content-Type: text/x-patch Content-Disposition: inline diff --git a/nix/libstore/build.cc b/nix/libstore/build.cc index 9b7bb5391..a93095dd1 100644 --- a/nix/libstore/build.cc +++ b/nix/libstore/build.cc @@ -2449,8 +2449,11 @@ void DerivationGoal::registerOutputs() Hash h2 = recursive ? hashPath(ht, actualPath).first : hashFile(ht, actualPath); if (h != h2) throw BuildError( - format("output path `%1%' should have %2% hash `%3%', instead has `%4%'") - % path % i->second.hashAlgo % printHash16or32(h) % printHash16or32(h2)); + format("%1% hash mismatch for output path `%2%'\n" + " expected: %3%\n" + " actual: %4%") + % i->second.hashAlgo % path + % printHash16or32(h) % printHash16or32(h2)); } /* Get rid of all weird permissions. This also checks that @@ -3096,7 +3099,9 @@ void SubstitutionGoal::finished() Hash expectedHash = parseHash16or32(hashType, string(expectedHashStr, n + 1)); Hash actualHash = hashType == htSHA256 ? hash.first : hashPath(hashType, destPath).first; if (expectedHash != actualHash) - throw SubstError(format("hash mismatch in downloaded path `%1%': expected %2%, got %3%") + throw SubstError(format("hash mismatch in downloaded path `%1%'\n" + " expected: %2%\n" + " actual: %3%") % storePath % printHash(expectedHash) % printHash(actualHash)); } --=-=-=-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Catonano Subject: Re: downloading a tarball Date: Sat, 25 Mar 2017 09:47:05 +0100 Message-ID: References: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> <58D52E2A.3040203@goebel-consult.de> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary=001a114431f2a83fc0054b8a2780 Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:42468) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crhLp-0006nf-60 for help-guix@gnu.org; Sat, 25 Mar 2017 04:47:10 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crhLn-0007Lt-Vz for help-guix@gnu.org; Sat, 25 Mar 2017 04:47:09 -0400 Received: from mail-wm0-x233.google.com ([2a00:1450:400c:c09::233]:36321) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1crhLn-0007Lj-PE for help-guix@gnu.org; Sat, 25 Mar 2017 04:47:07 -0400 Received: by mail-wm0-x233.google.com with SMTP id n11so28125491wma.1 for ; Sat, 25 Mar 2017 01:47:07 -0700 (PDT) In-Reply-To: <58D52E2A.3040203@goebel-consult.de> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" Cc: help-guix --001a114431f2a83fc0054b8a2780 Content-Type: text/plain; charset=UTF-8 2017-03-24 15:33 GMT+01:00 Hartmut Goebel : > Am 24.03.2017 um 14:14 schrieb Tobias Geerinckx-Rice: > >> > HTH - speaking from experience making the same mistake here.. > > I suspect most people have. The message isn't as clear as it could be. > > Either way round the message is hard to read: squezzed between many > other message, no line-break and arguable wording. IMHO this should be > improved to empower more people. > I keep being unable to download this file Now it downloads it but it can't decompress it - no such file Here is my definition http://paste.lisp.org/display/342342#1 thanks for any hint > > -- > +++hartmut > > | Hartmut Goebel | | > | hartmut@goebel-consult.de | www.goebel-consult.de | > > > --001a114431f2a83fc0054b8a2780 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
2017-03-24 15:33 GMT+01:00 Hartmut Goebel <hartmu= t@goebel-consult.de>:
Am 24.03.= 2017 um 14:14 schrieb Tobias Geerinckx-Rice:
>> > HTH - speaking from experience making the same mistake here..=
> I suspect most people have. The message isn't as clear as it could= be.

Either way round the message is hard to read: squezzed between many<= br> other message, no line-break and arguable wording. IMHO this should be
improved to empower more people.

I keep= being unable to download this file

Now it downloads it b= ut it can't decompress it - no such file

thanks for any hint
<= /div>
=C2=A0

--
+++hartmut

| Hartmut Goebel=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 |=C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|
| hartmut@goebel-consult.de | www.goebel-consult.de |



--001a114431f2a83fc0054b8a2780-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ben Woodcroft Subject: Re: downloading a tarball Date: Sat, 25 Mar 2017 20:30:04 +1000 Message-ID: References: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> <58D52E2A.3040203@goebel-consult.de> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="------------FB7C488F9F27D359E050AB8E" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:58077) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crixi-0002FM-Bk for help-guix@gnu.org; Sat, 25 Mar 2017 06:30:23 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1crixf-000372-83 for help-guix@gnu.org; Sat, 25 Mar 2017 06:30:22 -0400 Received: from mailhub2.soe.uq.edu.au ([130.102.132.209]:42204 helo=newmailhub.uq.edu.au) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1crixe-00035m-LM for help-guix@gnu.org; Sat, 25 Mar 2017 06:30:19 -0400 In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: Catonano Cc: help-guix This is a multi-part message in MIME format. --------------FB7C488F9F27D359E050AB8E Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hi, On 25/03/17 18:47, Catonano wrote: > 2017-03-24 15:33 GMT+01:00 Hartmut Goebel >: > > Am 24.03.2017 um 14:14 schrieb Tobias Geerinckx-Rice: > >> > HTH - speaking from experience making the same mistake here.. > > I suspect most people have. The message isn't as clear as it > could be. > > Either way round the message is hard to read: squezzed between many > other message, no line-break and arguable wording. IMHO this should be > improved to empower more people. > > > I keep being unable to download this file > > Now it downloads it but it can't decompress it - no such file > > Here is my definition > http://paste.lisp.org/display/342342#1 Looks like a zipbomb, it unpacked for me using "(method url-fetch/zipbomb)" rather than "(method url-fetch)". ben --------------FB7C488F9F27D359E050AB8E Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit

Hi,


On 25/03/17 18:47, Catonano wrote:
2017-03-24 15:33 GMT+01:00 Hartmut Goebel <hartmut@goebel-consult.de>:
Am 24.03.2017 um 14:14 schrieb Tobias Geerinckx-Rice:
>> > HTH - speaking from experience making the same mistake here..
> I suspect most people have. The message isn't as clear as it could be.

Either way round the message is hard to read: squezzed between many
other message, no line-break and arguable wording. IMHO this should be
improved to empower more people.

I keep being unable to download this file

Now it downloads it but it can't decompress it - no such file


Looks like a zipbomb, it unpacked for me using "(method url-fetch/zipbomb)" rather than "(method url-fetch)".

ben
--------------FB7C488F9F27D359E050AB8E-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Hartmut Goebel Subject: Re: downloading a tarball Date: Sat, 25 Mar 2017 17:43:28 +0100 Message-ID: <9f213d20-ddd9-8aff-2ded-b86d9a784302@goebel-consult.de> References: <70f61b82-be0d-e493-6841-cb2d121f3051@tobias.gr> <58D52E2A.3040203@goebel-consult.de> <87h92ixr4x.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:53467) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cromv-0004Am-So for help-guix@gnu.org; Sat, 25 Mar 2017 12:43:39 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cromr-0003t3-Vt for help-guix@gnu.org; Sat, 25 Mar 2017 12:43:37 -0400 In-Reply-To: <87h92ixr4x.fsf@gnu.org> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: =?UTF-8?Q?Ludovic_Court=c3=a8s?= Cc: help-guix@gnu.org Am 24.03.2017 um 23:10 schrieb Ludovic Courtès: > What about this (patch below)? This is definitively an enhancement :-) Thanks! (I did not know, newlines are usable in log-messages. Good to know.) -- +++hartmut | Hartmut Goebel | | | hartmut@goebel-consult.de | www.goebel-consult.de |