Re: [Astlinux-devel] trouble with build - sha1 checksums don't match

[Lonnie A. <li...@lo...>]

Hi Bill,

> On May 25, 2019, at 1:28 PM, Bill Lewis <wr...@gm...> wrote:
> 
> 
> Thank you, Lonnie, for those changes.
> 
> Now that I've gotten farther, I find that these are similarly affected:
> 
> https://www.fossil-scm.org/fossil/uv/fossil-src-2.5.tar.gz

Yea, Fossil removed many of their older versions, I'll do the same build fix there ... we can look at updating the fossil version at some point as well.


> http://www.ch-werner.de/sqliteodbc/sqliteodbc-0.9996.tar.gz

This was a temporary problem, the www.ch-werner.de server is fixed so it now works.

# curl -sS http://www.ch-werner.de/sqliteodbc/sqliteodbc-0.9996.tar.gz | sha1sum 
505aa746d40cd381591a18046d90c209ccfc2c7a  -

# curl https://s3.amazonaws.com/files.astlinux-project/sqliteodbc-0.9996.tar.gz.sha1
505aa746d40cd381591a18046d90c209ccfc2c7a  dl/sqliteodbc-0.9996.tar.gz


Thanks for testing a clean build (empty dl/ directory) ... David Kerr tested this not long ago, so some of these must have just cropped-up.

Lonnie


> 
> Bill
> 
> On 5/25/2019 11:35 AM, Lonnie Abelbeck wrote:
>> Hi Bill,
>> Thanks for the report.
>> Yes, upstream download repo's can change and make our safety check trigger.  Only new clean installs from source does the "changed" upstream download get noticed since previous local dl/ versions are OK.
>> For libelf-0.8.12.tar.gz:
>> --
>> # curl -LI http://www.mr511.de/software/libelf-0.8.12.tar.gz
>> HTTP/1.1 302 Moved Temporarily
>> Server: nginx
>> Date: Sat, 25 May 2019 14:44:18 GMT
>> Content-Type: text/html
>> Content-Length: 154
>> Connection: keep-alive
>> Location: http://leere.seite
>> curl: (6) Could not resolve host: leere.seite (empty.page in German)
>> --
>> so the upstream URL no longer works.
>> But, libelf was only needed for Asterisk in the past, and it does not look like it is needed anymore ... I'll look into cleaning up that requirement.
>> I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
>> https://github.com/astlinux-project/astlinux/commit/b5b5f091b04a49f420b8d30762e7ace43990b83e
>> For jpegsrc.v9c.tar.gz:
>> --
>> # curl -LI http://www.ijg.org/files/jpegsrc.v9c.tar.gz
>> HTTP/1.1 200 OK
>> Date: Sat, 25 May 2019 14:59:59 GMT
>> Content-Type: application/x-gzip
>> Content-Length: 1028134
>> Last-Modified: Tue, 27 Mar 2018 14:37:34 GMT
>> # curl -LI https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz
>> HTTP/1.1 200 OK
>> Last-Modified: Sat, 27 Jan 2018 20:50:57 GMT
>> Content-Type: application/x-gzip
>> Content-Length: 1028200
>> So upstream is newer and 66 bytes smaller.
>> Performing a diff, the upstream removed a ".directory" file, everything else is the same.
>> I'll fix this by switching to our https://s3.amazonaws.com/files.astlinux-project URL for now.
>> https://github.com/astlinux-project/astlinux/commit/ebf06efcb1880cf3ab13ed4d4833e032cbf5c624
>> Thanks again for the report.
>> Lonnie
>>> On May 25, 2019, at 9:24 AM, Bill Lewis <wr...@gm...> wrote:
>>> 
>>> I've checked out the latest from https://github.com/astlinux-project/astlinux
>>> 
>>> When I do the build, I run into a few problem with the sha1 checksums
>>> not matching.  For example: jpegsrc.v9c.tar.gz and libelf-0.8.12.tar.gz
>>> 
>>> The file http://www.ijg.org/files/jpegsrc.v9c.tar.gz has sh1sum
>>> 2ce111c8c0ac828a44b13ad28c265e954a342d07
>>> 
>>> The contents of https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 are
>>> 
>>> cd40526843a44c69bf88b6cc462a3e0359f69d27
>>> 
>>> Any ideas what's up?
>>> 
>>> Thanks,
>>> Bill
>>> 
>>> 
>>> SVN revision info:
>>> bill@debian-60GB:~/astlinux$ svn info
>>> Path: .
>>> Working Copy Root Path: /home/bill/astlinux
>>> URL: https://github.com/astlinux-project/astlinux.git
>>> Relative URL: ^/
>>> Repository Root: https://github.com/astlinux-project/astlinux.git
>>> Repository UUID: 67a1e38b-c451-6360-d8b2-ce57b7db7bff
>>> Revision: 4202
>>> Node Kind: directory
>>> Schedule: normal
>>> Last Changed Author: lonnie.abelbeck
>>> Last Changed Rev: 4202
>>> Last Changed Date: 2019-05-19 11:24:36 -0400 (Sun, 19 May 2019)
>>> 
>>> 
>>> Output from the build:
>>> 
>>>>>> jpeg 9c Downloading
>>> --2019-05-24 08:01:41--  http://www.ijg.org/files/jpegsrc.v9c.tar.gz
>>> Resolving www.ijg.org (www.ijg.org)... 104.24.122.172, 104.24.123.172, 2606:4700:30::6818:7bac, ...
>>> Connecting to www.ijg.org (www.ijg.org)|104.24.122.172|:80... connected.
>>> HTTP request sent, awaiting response... 200 OK
>>> Length: 1028134 (1004K) [application/x-gzip]
>>> Saving to: ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’
>>> 
>>> /home/bill/astlinux/tru 100%[=================================>]   1004K  5.32MB/s   in 0.2s
>>> 
>>> 2019-05-24 08:01:41 (5.32 MB/s) - ‘/home/bill/astlinux/trunk/dl/jpegsrc.v9c.tar.gz’ saved [1028134/1028134]
>>> 
>>> 2019-05-24 08:01:41 URL:https://s3.amazonaws.com/files.astlinux-project/jpegsrc.v9c.tar.gz.sha1 [64/64] -> "dl/jpegsrc.v9c.tar.gz.sha1" [1]
>>> jpegsrc.v9c.tar.gz failed verification - exiting
>>> ##
>>> ## Maintainer upload command: ./scripts/upload-dl-pair dl/jpegsrc.v9c.tar.gz
>>> ##
>>> package/Makefile.package.in:232: recipe for target '/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded' failed
>>> make: *** [/home/bill/astlinux/trunk/output/build/jpeg-9c/.stamp_downloaded] Error 1
>>> 
>>> ---
>>> 
>>>>>> libelf 0.8.12 Downloading
>>> --2019-05-25 10:19:41--  http://www.mr511.de/software//libelf-0.8.12.tar.gz
>>> Resolving www.mr511.de (www.mr511.de)... 80.67.16.8, 2a00:1158:0:100::14
>>> Connecting to www.mr511.de (www.mr511.de)|80.67.16.8|:80... connected.
>>> HTTP request sent, awaiting response... 302 Moved Temporarily
>>> Location: http://leere.seite [following]
>>> --2019-05-25 10:19:42--  http://leere.seite/
>>> Resolving leere.seite (leere.seite)... 92.242.140.21
>>> Connecting to leere.seite (leere.seite)|92.242.140.21|:80... connected.
>>> HTTP request sent, awaiting response... 200 OK
>>> Length: unspecified [text/html]
>>> Saving to: ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’
>>> 
>>> /home/bill/astlinux/tru     [ <=>                              ]     872  --.-KB/s   in 0s
>>> 
>>> 2019-05-25 10:19:42 (105 MB/s) - ‘/home/bill/astlinux/trunk/dl/libelf-0.8.12.tar.gz’ saved [872]
>>> 
>>> 2019-05-25 10:19:42 URL:https://s3.amazonaws.com/files.astlinux-project/libelf-0.8.12.tar.gz.sha1 [66/66] -> "dl/libelf-0.8.12.tar.gz.sha1" [1]
>>> libelf-0.8.12.tar.gz failed verification - exiting
> 
>