GNU bug report logs

#28659 Content-addressed mirror is not used upon invalid hash

PackageSource(s)Maintainer(s)
guix PTS Buildd Popcon
Full log

Message #66 received at 28659@debbugs.gnu.org (full text, mbox, reply):

Received: (at 28659) by debbugs.gnu.org; 5 Oct 2017 04:53:06 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Oct 05 00:53:06 2017
Received: from localhost ([127.0.0.1]:49571 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1dzy9i-0001QR-I1
	for submit@debbugs.gnu.org; Thu, 05 Oct 2017 00:53:06 -0400
Received: from mail-it0-f50.google.com ([209.85.214.50]:52385)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <maxim.cournoyer@gmail.com>) id 1dzy9h-0001Pw-87
 for 28659@debbugs.gnu.org; Thu, 05 Oct 2017 00:53:05 -0400
Received: by mail-it0-f50.google.com with SMTP id c195so18389020itb.1
 for <28659@debbugs.gnu.org>; Wed, 04 Oct 2017 21:53:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=from:to:cc:subject:references:date:in-reply-to:message-id
 :user-agent:mime-version;
 bh=hvUFkCjLbnLe93mYKR/ztF4cQ2wG8nzW4x7GPafWPWk=;
 b=WowSqE7JT4m7w0z+EuBMkP9M0BfQAdvc50InFMrTy40H7dljf+1zzicTLgAdribSLB
 AvZGBe4EYxZlbexa5L2WpC3Dt75qUieHS/NZkyGC7crtlRUV9wPy+mBju71ptw0batJt
 RRCT6FRgJbEzH44lfNX1B0Cb9K2pAkY4xBKiAoVN/rsuaP81zpxp46PzEUaCHps5tbLX
 Usih5EexOvRxSSpzCat8i0T0d5LnLgoi3vKhQK3J+dKIJXxJafYL8Z+wUch8si2K2zXP
 bnxBZiHXF/7OGbg0fdVu+uJ/7lwyixRD6nbI0c54wRGbsbQMgxVqC0m9gMDZ18agu6g4
 eQXw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to
 :message-id:user-agent:mime-version;
 bh=hvUFkCjLbnLe93mYKR/ztF4cQ2wG8nzW4x7GPafWPWk=;
 b=cWeHcYeTC638hNfSYliCylYZjxWJEDytbBQnYjvT0xB6ReEeu05Mf8JHV0aO7ApPXe
 uzmUMf1omPZeQPco1ztET14twPQ/dILZpjC+7ume6Bs9R/Kw8rt/+YuxZvNL6XEn7rkW
 4/LPxGnm0tf3DCVFYpzsMQ2MYojIUAi26iWT2aONsx1RjU6ZieXgkp+Gg+XgRNIIsyvs
 vBDwW2D/uZUjc70csAjyb9QiKMT+Ws4EX/zTMzZuVudFLXNHgEsN1RQNUIViOpEawBBf
 hxxDJ0vC3xdMXO34PkexQU1z9z3s380a2gMw7rcnVLUP3814lPMmocYxnpdlqf3IXgT9
 vQpw==
X-Gm-Message-State: AMCzsaU+rNw3P6EQZFFqfWgKQyx9AZhq1VFvHY0xYjvCGmZ7+gmih2AV
 i9O5/TpurCZu75QSg8ZHGpOlsTZ9
X-Google-Smtp-Source: AOwi7QDwYNdKULZq2WK3osVqDWs3Hwc4A7/PE6CejmVixOxbSJRgtv/BRzb8rZFpnxVPZByTwDIbFw==
X-Received: by 10.36.205.194 with SMTP id l185mr10550587itg.24.1507179179278; 
 Wed, 04 Oct 2017 21:52:59 -0700 (PDT)
Received: from apteryx (104-222-112-128.cpe.teksavvy.com. [104.222.112.128])
 by smtp.gmail.com with ESMTPSA id o80sm7987910ioi.73.2017.10.04.21.52.58
 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256);
 Wed, 04 Oct 2017 21:52:58 -0700 (PDT)
From: Maxim Cournoyer <maxim.cournoyer@gmail.com>
To: Leo Famulari <leo@famulari.name>
Subject: Re: bug#28659: v0.13: guix pull fails;
 libgit2-0.26.0 and 0.25.1 content hashes fail
References: <877ewf18d4.fsf@gnu.org> <87wp4e8yk5.fsf@gnu.org>
 <20171001204237.GA11804@jasmine.lan> <87vajxoavx.fsf@gnu.org>
 <20171002181929.GA10773@jasmine.lan> <87infx2mmt.fsf@gmail.com>
 <20171003142449.GB23431@jasmine.lan> <874lrfee45.fsf@gmail.com>
 <20171004165413.GA4596@jasmine.lan> <87r2uih3lx.fsf@gmail.com>
Date: Thu, 05 Oct 2017 00:52:57 -0400
In-Reply-To: <87r2uih3lx.fsf@gmail.com> (Maxim Cournoyer's message of "Wed, 04
 Oct 2017 19:53:30 -0400")
Message-ID: <87h8vegpqu.fsf@gmail.com>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/25.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: -0.2 (/)
X-Debbugs-Envelope-To: 28659
Cc: 28659@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -0.2 (/)

I've modified the script to sort the packages it prints:
--8<---------------cut here---------------start------------->8---
-    (for-each (lambda (p)
-		(format #t "~a~%" (package-name p)))
-	      packages)))
+    (for-each (lambda (name)
+		(format #t "~a~%" name))
+	      (sort (map package-name packages) string<?))))
--8<---------------cut here---------------end--------------->8---

and compared it to the list here: https://github.com/Homebrew/homebrew-core/issues/18044

If we can trust the Homebrew list to be extensive, it seems we got
lucky; there's only one affected package that we share which is
yaml-cpp. Here's how it fails on our side:

--8<---------------cut here---------------start------------->8---
guix build -S --no-substitutes yaml-cpp
The following derivation will be built:
   /gnu/store/mlap8jmadirnbii6sppb6vj9x56s8azw-yaml-cpp-0.5.3.tar.gz.drv
@ build-started /gnu/store/mlap8jmadirnbii6sppb6vj9x56s8azw-yaml-cpp-0.5.3.tar.gz.drv - x86_64-linux /var/log/guix/drvs/ml//ap8jmadirnbii6sppb6vj9x56s8azw-yaml-cpp-0.5.3.tar.gz.drv.bz2

Starting download of /gnu/store/qwflwafrzjbr2b7dy4nv18nxykghhmnk-yaml-cpp-0.5.3.tar.gz
From https://github.com/jbeder/yaml-cpp/archive/yaml-cpp-0.5.3.tar.gz...
following redirection to `https://codeload.github.com/jbeder/yaml-cpp/tar.gz/yaml-cpp-0.5.3'...
 ...p-0.5.3                                  1.7MiB/s 00:01 | 1.9MiB transferred
sha256 hash mismatch for output path `/gnu/store/qwflwafrzjbr2b7dy4nv18nxykghhmnk-yaml-cpp-0.5.3.tar.gz'
  expected: 1vk6pjh0f5k6jwk2sszb9z5169whmiha9ainbdpa1arxlkq7v3b6
  actual:   1ck7jk0wjfigrf4cgcjqsir4yp1s6vamhhxhpsgfvs46pgm5pk6y
@ build-failed /gnu/store/mlap8jmadirnbii6sppb6vj9x56s8azw-yaml-cpp-0.5.3.tar.gz.drv - 1 sha256 hash mismatch for output path `/gnu/store/qwflwafrzjbr2b7dy4nv18nxykghhmnk-yaml-cpp-0.5.3.tar.gz'
  expected: 1vk6pjh0f5k6jwk2sszb9z5169whmiha9ainbdpa1arxlkq7v3b6
  actual:   1ck7jk0wjfigrf4cgcjqsir4yp1s6vamhhxhpsgfvs46pgm5pk6y
guix build: error: build failed: build of
`/gnu/store/mlap8jmadirnbii6sppb6vj9x56s8azw-yaml-cpp-0.5.3.tar.gz.drv'
failed
--8<---------------cut here---------------end--------------->8---

Maxim

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Mon Sep 8 01:24:41 2025; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.