Re: [Astlinux-devel] trouble with build - sha1 checksums don't match

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi Bill,

Thanks for the report.

Yes, upstream download repo's can change and make our safety check trigger.  Only new clean installs from source does the "changed" upstream download get noticed since previous local dl/ versions are OK.

For libelf-0.8.12.tar.gz:
--
# curl -LI http://www.mr511.de/software/libelf-0.8.12.tar.gz
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 25 May 2019 14:44:18 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: http://leere.seite

curl: (6) Could not resolve host: leere.seite (empty.page in German)
--
so the upstream URL no longer works.

But, libelf was only needed for Asterisk in the past, and it does not look like it is needed anymore ... I'll look into cleaning up that requirement.

I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
https://github.com/astlinux-project/astlinux/commit/b5b5f091b04a49f420b8d30762e7ace43990b83e

For jpegsrc.v9c.tar.gz:
--
# curl -LI http://www.ijg.org/files/jpegsrc.v9c.tar.gz
HTTP/1.1 200 OK
Date: Sat, 25 May 2019 14:59:59 GMT
Content-Type: application/x-gzip
Content-Length: 1028134
Last-Modified: Tue, 27 Mar 2018 14:37:34 GMT

# curl -LI https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz
HTTP/1.1 200 OK
Last-Modified: Sat, 27 Jan 2018 20:50:57 GMT
Content-Type: application/x-gzip
Content-Length: 1028200

So upstream is newer and 66 bytes smaller.

Performing a diff, the upstream removed a ".directory" file, everything else is the same.

I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
https://github.com/astlinux-project/astlinux/commit/ebf06efcb1880cf3ab13ed4d4833e032cbf5c624

Thanks again for the report.

Lonnie

> On May 25, 2019, at 9:24 AM, Bill Lewis <wr...@gm...> wrote:
> 
> I've checked out the latest from https://github.com/astlinux-project/astlinux
> 
> When I do the build, I run into a few problem with the sha1 checksums
> not matching.  For example: jpegsrc.v9c.tar.gz and libelf-0.8.12.tar.gz
> 
> The file http://www.ijg.org/files/jpegsrc.v9c.tar.gz has sh1sum
> 2ce111c8c0ac828a44b13ad28c265e954a342d07
> 
> The contents of https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 are
> 
> cd40526843a44c69bf88b6cc462a3e0359f69d27
> 
> Any ideas what's up?
> 
> Thanks,
> Bill
> 
> 
> SVN revision info:
> bill@debian-60GB:~/astlinux$ svn info
> Path: .
> Working Copy Root Path: /home/bill/astlinux
> URL: https://github.com/astlinux-project/astlinux.git
> Relative URL: ^/
> Repository Root: https://github.com/astlinux-project/astlinux.git
> Repository UUID: 67a1e38b-c451-6360-d8b2-ce57b7db7bff
> Revision: 4202
> Node Kind: directory
> Schedule: normal
> Last Changed Author: lonnie.abelbeck
> Last Changed Rev: 4202
> Last Changed Date: 2019-05-19 11:24:36 -0400 (Sun, 19 May 2019)
> 
> 
> Output from the build:
> 
> >>> jpeg 9c Downloading
> --2019-05-24 08:01:41--  http://www.ijg.org/files/jpegsrc.v9c.tar.gz
> Resolving www.ijg.org (www.ijg.org)... 104.24.122.172, 104.24.123.172, 2606:4700:30::6818:7bac, ...
> Connecting to www.ijg.org (www.ijg.org)|104.24.122.172|:80... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: 1028134 (1004K) [application/x-gzip]
> Saving to: ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’
> 
> /home/bill/astlinux/tru 100%[=================================>]   1004K  5.32MB/s   in 0.2s
> 
> 2019-05-24 08:01:41 (5.32 MB/s) - ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’ saved [1028134/1028134]
> 
> 2019-05-24 08:01:41 URL:https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 [64/64] -> "dl/jpegsrc.v9c.tar.gz.sha1" [1]
> jpegsrc.v9c.tar.gz failed verification - exiting
> ##
> ## Maintainer upload command: ./scripts/upload-dl-pair dl/jpegsrc.v9c.tar.gz
> ##
> package/Makefile.package.in:232: recipe for target '/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded' failed
> make: *** [/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded] Error 1
> 
> ---
> 
> >>> libelf 0.8.12 Downloading
> --2019-05-25 10:19:41--  http://www.mr511.de/software//libelf-0.8.12.tar.gz
> Resolving www.mr511.de (www.mr511.de)... 80.67.16.8, 2a00:1158:0:100::14
> Connecting to www.mr511.de (www.mr511.de)|80.67.16.8|:80... connected.
> HTTP request sent, awaiting response... 302 Moved Temporarily
> Location: http://leere.seite [following]
> --2019-05-25 10:19:42--  http://leere.seite/
> Resolving leere.seite (leere.seite)... 92.242.140.21
> Connecting to leere.seite (leere.seite)|92.242.140.21|:80... connected.
> HTTP request sent, awaiting response... 200 OK
> Length: unspecified [text/html]
> Saving to: ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’
> 
> /home/bill/astlinux/tru     [ <=>                              ]     872  --.-KB/s   in 0s
> 
> 2019-05-25 10:19:42 (105 MB/s) - ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’ saved [872]
> 
> 2019-05-25 10:19:42 URL:https://s3.amazonaws.com/files.astlinux-project/libelf-0.8.12.tar.gz.sha1 [66/66] -> "dl/libelf-0.8.12.tar.gz.sha1" [1]
> libelf-0.8.12.tar.gz failed verification - exiting
> 
> 
> 
> _______________________________________________
> Astlinux-devel mailing list
> Ast...@li...
> https://lists.sourceforge.net/lists/listinfo/astlinux-devel