Re: [Astlinux-devel] trouble with build - sha1 checksums don't match

[Bill L. <wr...@gm...>]

Thank you, Lonnie, for those changes.

Now that I've gotten farther, I find that these are similarly affected:

https://www.fossil-scm.org/fossil/uv/fossil-src-2.5.tar.gz

http://www.ch-werner.de/sqliteodbc/sqliteodbc-0.9996.tar.gz

Bill

On 5/25/2019 11:35 AM, Lonnie Abelbeck wrote:
> Hi Bill,
> 
> Thanks for the report.
> 
> Yes, upstream download repo's can change and make our safety check trigger.  Only new clean installs from source does the "changed" upstream download get noticed since previous local dl/ versions are OK.
> 
> For libelf-0.8.12.tar.gz:
> --
> # curl -LI http://www.mr511.de/software/libelf-0.8.12.tar.gz
> HTTP/1.1 302 Moved Temporarily
> Server: nginx
> Date: Sat, 25 May 2019 14:44:18 GMT
> Content-Type: text/html
> Content-Length: 154
> Connection: keep-alive
> Location: http://leere.seite
> 
> curl: (6) Could not resolve host: leere.seite (empty.page in German)
> --
> so the upstream URL no longer works.
> 
> But, libelf was only needed for Asterisk in the past, and it does not look like it is needed anymore ... I'll look into cleaning up that requirement.
> 
> I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
> https://github.com/astlinux-project/astlinux/commit/b5b5f091b04a49f420b8d30762e7ace43990b83e
> 
> 
> For jpegsrc.v9c.tar.gz:
> --
> # curl -LI http://www.ijg.org/files/jpegsrc.v9c.tar.gz
> HTTP/1.1 200 OK
> Date: Sat, 25 May 2019 14:59:59 GMT
> Content-Type: application/x-gzip
> Content-Length: 1028134
> Last-Modified: Tue, 27 Mar 2018 14:37:34 GMT
> 
> # curl -LI https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz
> HTTP/1.1 200 OK
> Last-Modified: Sat, 27 Jan 2018 20:50:57 GMT
> Content-Type: application/x-gzip
> Content-Length: 1028200
> 
> So upstream is newer and 66 bytes smaller.
> 
> Performing a diff, the upstream removed a ".directory" file, everything else is the same.
> 
> I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
> https://github.com/astlinux-project/astlinux/commit/ebf06efcb1880cf3ab13ed4d4833e032cbf5c624
> 
> Thanks again for the report.
> 
> Lonnie
> 
> 
> 
>> On May 25, 2019, at 9:24 AM, Bill Lewis <wr...@gm...> wrote:
>>
>> I've checked out the latest from https://github.com/astlinux-project/astlinux
>>
>> When I do the build, I run into a few problem with the sha1 checksums
>> not matching.  For example: jpegsrc.v9c.tar.gz and libelf-0.8.12.tar.gz
>>
>> The file http://www.ijg.org/files/jpegsrc.v9c.tar.gz has sh1sum
>> 2ce111c8c0ac828a44b13ad28c265e954a342d07
>>
>> The contents of https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 are
>>
>> cd40526843a44c69bf88b6cc462a3e0359f69d27
>>
>> Any ideas what's up?
>>
>> Thanks,
>> Bill
>>
>>
>> SVN revision info:
>> bill@debian-60GB:~/astlinux$ svn info
>> Path: .
>> Working Copy Root Path: /home/bill/astlinux
>> URL: https://github.com/astlinux-project/astlinux.git
>> Relative URL: ^/
>> Repository Root: https://github.com/astlinux-project/astlinux.git
>> Repository UUID: 67a1e38b-c451-6360-d8b2-ce57b7db7bff
>> Revision: 4202
>> Node Kind: directory
>> Schedule: normal
>> Last Changed Author: lonnie.abelbeck
>> Last Changed Rev: 4202
>> Last Changed Date: 2019-05-19 11:24:36 -0400 (Sun, 19 May 2019)
>>
>>
>> Output from the build:
>>
>>>>> jpeg 9c Downloading
>> --2019-05-24 08:01:41--  http://www.ijg.org/files/jpegsrc.v9c.tar.gz
>> Resolving www.ijg.org (www.ijg.org)... 104.24.122.172, 104.24.123.172, 2606:4700:30::6818:7bac, ...
>> Connecting to www.ijg.org (www.ijg.org)|104.24.122.172|:80... connected.
>> HTTP request sent, awaiting response... 200 OK
>> Length: 1028134 (1004K) [application/x-gzip]
>> Saving to: ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’
>>
>> /home/bill/astlinux/tru 100%[=================================>]   1004K  5.32MB/s   in 0.2s
>>
>> 2019-05-24 08:01:41 (5.32 MB/s) - ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’ saved [1028134/1028134]
>>
>> 2019-05-24 08:01:41 URL:https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 [64/64] -> "dl/jpegsrc.v9c.tar.gz.sha1" [1]
>> jpegsrc.v9c.tar.gz failed verification - exiting
>> ##
>> ## Maintainer upload command: ./scripts/upload-dl-pair dl/jpegsrc.v9c.tar.gz
>> ##
>> package/Makefile.package.in:232: recipe for target '/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded' failed
>> make: *** [/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded] Error 1
>>
>> ---
>>
>>>>> libelf 0.8.12 Downloading
>> --2019-05-25 10:19:41--  http://www.mr511.de/software//libelf-0.8.12.tar.gz
>> Resolving www.mr511.de (www.mr511.de)... 80.67.16.8, 2a00:1158:0:100::14
>> Connecting to www.mr511.de (www.mr511.de)|80.67.16.8|:80... connected.
>> HTTP request sent, awaiting response... 302 Moved Temporarily
>> Location: http://leere.seite [following]
>> --2019-05-25 10:19:42--  http://leere.seite/
>> Resolving leere.seite (leere.seite)... 92.242.140.21
>> Connecting to leere.seite (leere.seite)|92.242.140.21|:80... connected.
>> HTTP request sent, awaiting response... 200 OK
>> Length: unspecified [text/html]
>> Saving to: ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’
>>
>> /home/bill/astlinux/tru     [ <=>                              ]     872  --.-KB/s   in 0s
>>
>> 2019-05-25 10:19:42 (105 MB/s) - ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’ saved [872]
>>
>> 2019-05-25 10:19:42 URL:https://s3.amazonaws.com/files.astlinux-project/libelf-0.8.12.tar.gz.sha1 [66/66] -> "dl/libelf-0.8.12.tar.gz.sha1" [1]
>> libelf-0.8.12.tar.gz failed verification - exiting