GNU bug report logs - #46265
Hash mismatch in the source of package cunit

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 46265 in the body.
You can then email your comments to 46265 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Zhu Zihao <all_but_last <at> 163.com>
To: bug-guix <at> gnu.org
Subject: Hash mismatch in the source of package cunit
Date: Wed, 03 Feb 2021 10:23:42 +0800

[Message part 1 (text/plain, inline)]

building /gnu/store/qgri8w2rw585wc9npnbb2nd9qvj6szzs-CUnit-2.1-3.tar.bz2.drv...

Starting download of /gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2
From http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2...
following redirection to `https://downloads.sourceforge.net/#!/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2'...
downloading from http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2 ...
 CUnit-2.1-3.tar.bz2  746B            2.4MiB/s 00:00 [##################] 100.0%
sha256 hash mismatch for /gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2:
  expected hash: 057j82da9vv4li4z5ri3227ybd18nzyq81f6gsvhifs5z0vr3cpm
  actual hash:   1vc97w0kvchxzlf0v7nn1fzx7pi0ih29cdqd6r7rg1y6parqa6i5
hash mismatch for store item '/gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2'
build of /gnu/store/qgri8w2rw585wc9npnbb2nd9qvj6szzs-CUnit-2.1-3.tar.bz2.drv failed
View build log at '/var/log/guix/drvs/qg/ri8w2rw585wc9npnbb2nd9qvj6szzs-CUnit-2.1-3.tar.bz2.drv.bz2'.

-- 
Retrieve my PGP public key:

  gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F

Zihao

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 46265 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Zhu Zihao <all_but_last <at> 163.com>
Cc: 46265 <at> debbugs.gnu.org
Subject: Re: bug#46265: Hash mismatch in the source of package cunit
Date: Tue, 2 Feb 2021 22:25:50 -0500

On Wed, Feb 03, 2021 at 10:23:42AM +0800, Zhu Zihao wrote:
> 
> building /gnu/store/qgri8w2rw585wc9npnbb2nd9qvj6szzs-CUnit-2.1-3.tar.bz2.drv...
> 
> Starting download of /gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2
> From http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2...
> following redirection to `https://downloads.sourceforge.net/#!/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2'...
> downloading from http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2 ...
>  CUnit-2.1-3.tar.bz2  746B            2.4MiB/s 00:00 [##################] 100.0%
> sha256 hash mismatch for /gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2:
>   expected hash: 057j82da9vv4li4z5ri3227ybd18nzyq81f6gsvhifs5z0vr3cpm
>   actual hash:   1vc97w0kvchxzlf0v7nn1fzx7pi0ih29cdqd6r7rg1y6parqa6i5

Since it is downloaded over HTTP (unauthenticated), it could be
anything. 746 bytes is really small.

Maybe we can change the Sourceforge URLs used by Guix to avoid
redirecting to an HTTP URL.

From here, it works okay:

------
$ guix download http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2

Starting download of /tmp/guix-file.29mS0e
From http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2...
following redirection to `https://managedway.dl.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2'...
 …-3.tar.bz2  502KiB                                                                                                                                  2.4MiB/s 00:00 [##################] 100.0%
/gnu/store/vzq31539zql9s23708sbcrwb51lpwjf7-CUnit-2.1-3.tar.bz2
057j82da9vv4li4z5ri3227ybd18nzyq81f6gsvhifs5z0vr3cpm
------

If you want, you could save the downloaded file for inspection:

$ guix download -o cunit.tar.bz2 http://downloads.sourceforge.net/project/cunit/CUnit/2.1-3/CUnit-2.1-3.tar.bz2

Message #13 received at 46265-done <at> debbugs.gnu.org (full text, mbox):

From: Zhu Zihao <all_but_last <at> 163.com>
To: Leo Famulari <leo <at> famulari.name>
Cc: 46265-done <at> debbugs.gnu.org
Subject: Re: bug#46265: Hash mismatch in the source of package cunit
Date: Wed, 03 Feb 2021 12:22:22 +0800

[Message part 1 (text/plain, inline)]

Oh, it's probably my network issue, sorry for disturbing you.
-- 
Retrieve my PGP public key:

  gpg --recv-keys D47A9C8B2AE3905B563D9135BE42B352A9F6821F

Zihao

[signature.asc (application/pgp-signature, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.