GNU bug report logs - #30436
bigloo@4.3b hash mismatch

Previous Next

Package: guix;

Reported by: Amirouche Boubekki <amirouche <at> hypermove.net>

Date: Mon, 12 Feb 2018 16:44:02 UTC

Severity: minor

Done: Kei Kebreau <kkebreau <at> posteo.net>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 30436 in the body.
You can then email your comments to 30436 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Mon, 12 Feb 2018 16:44:02 GMT) Full text and rfc822 format available.
Acknowledgement sent to Amirouche Boubekki <amirouche <at> hypermove.net>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Mon, 12 Feb 2018 16:44:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Amirouche Boubekki <amirouche <at> hypermove.net>
To: bug-guix <at> gnu.org
Subject: bigloo <at> 4.3b hash mismatch
Date: Mon, 12 Feb 2018 17:43:35 +0100

Trying to install bigloo <at> 4.3b leads to a hash mismatch.

This was reproduced by several people.
Information forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Mon, 12 Feb 2018 17:01:02 GMT) Full text and rfc822 format available.

Message #8 received at 30436 <at> debbugs.gnu.org (full text, mbox):

From: Leo Famulari <leo <at> famulari.name>
To: Amirouche Boubekki <amirouche <at> hypermove.net>
Cc: 30436 <at> debbugs.gnu.org
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Mon, 12 Feb 2018 11:59:58 -0500

[Message part 1 (text/plain, inline)]
On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
> Trying to install bigloo <at> 4.3b leads to a hash mismatch.
> 
> This was reproduced by several people.

Can you copy and paste the error message here?

[signature.asc (application/pgp-signature, inline)]
Information forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Mon, 12 Feb 2018 17:29:02 GMT) Full text and rfc822 format available.

Message #11 received at 30436 <at> debbugs.gnu.org (full text, mbox):

From: Amirouche Boubekki <amirouche <at> hypermove.net>
To: Leo Famulari <leo <at> famulari.name>
Cc: 30436 <at> debbugs.gnu.org
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Mon, 12 Feb 2018 18:28:30 +0100

On 2018-02-12 17:59, Leo Famulari wrote:
> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>> Trying to install bigloo <at> 4.3b leads to a hash mismatch.
>> 
>> This was reproduced by several people.
> 
> Can you copy and paste the error message here?
$ guix package -i bigloo <at> 4.3b
substitute: mise à jour de la liste des substituts depuis 
« https://mirror.hydra.gnu.org »... 100.0%
guile: warning: failed to install locale
warning: failed to install locale: Invalid argument

Starting download of 
/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
 ...3b.tar.gz  35.4MiB              192KiB/s 03:09 
[####################] 100.0%
output path 
`/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should 
have sha256 hash `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', 
instead has `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
cannot build derivation 
`/gnu/store/yz2if1m4wy2axhzx5883msq458r78p6d-bigloo4.3b.tar.xz.drv': 1 
dependencies couldn't be built
cannot build derivation 
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv': 1 
dependencies couldn't be built
guix package: error: build failed: build of 
`/gnu/store/ybclnrrl5dk24g4yhngi9ccf0ki6ra2m-bigloo-4.3b.drv' failed
Information forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Wed, 14 Feb 2018 14:13:01 GMT) Full text and rfc822 format available.

Message #14 received at 30436 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Amirouche Boubekki <amirouche <at> hypermove.net>,
 Kei Kebreau <kkebreau <at> posteo.net>
Cc: 30436 <at> debbugs.gnu.org, Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Wed, 14 Feb 2018 15:12:07 +0100

Amirouche Boubekki <amirouche <at> hypermove.net> skribis:

> On 2018-02-12 17:59, Leo Famulari wrote:
>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>> Trying to install bigloo <at> 4.3b leads to a hash mismatch.
>>>
>>> This was reproduced by several people.
>>
>> Can you copy and paste the error message here?
> $ guix package -i bigloo <at> 4.3b
> substitute: mise à jour de la liste des substituts depuis
> « https://mirror.hydra.gnu.org »... 100.0%
> guile: warning: failed to install locale
> warning: failed to install locale: Invalid argument
>
> Starting download of
> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
>  ...3b.tar.gz  35.4MiB              192KiB/s 03:09
> [####################] 100.0%
> output path
> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
> have sha256 hash
> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'

The original tarball should be available at:

  https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07

… but it’s not.

Kei, could you check if you still have the tarball with this hash and
how it differs from the current one?

Unfortunately Bigloo’s maintainer tends to overwrite files in place so
it’s likely that the file was modified after Kei committed the upgrade.

Thanks,
Ludo’.
Information forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Fri, 16 Feb 2018 02:24:01 GMT) Full text and rfc822 format available.

Message #17 received at 30436 <at> debbugs.gnu.org (full text, mbox):

From: Kei Kebreau <kkebreau <at> posteo.net>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 30436 <at> debbugs.gnu.org, Amirouche Boubekki <amirouche <at> hypermove.net>,
 Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Thu, 15 Feb 2018 21:22:44 -0500

[Message part 1 (text/plain, inline)]
ludo <at> gnu.org (Ludovic Courtès) writes:

> Amirouche Boubekki <amirouche <at> hypermove.net> skribis:
>
>> On 2018-02-12 17:59, Leo Famulari wrote:
>>> On Mon, Feb 12, 2018 at 05:43:35PM +0100, Amirouche Boubekki wrote:
>>>> Trying to install bigloo <at> 4.3b leads to a hash mismatch.
>>>>
>>>> This was reproduced by several people.
>>>
>>> Can you copy and paste the error message here?
>> $ guix package -i bigloo <at> 4.3b
>> substitute: mise à jour de la liste des substituts depuis
>> « https://mirror.hydra.gnu.org »... 100.0%
>> guile: warning: failed to install locale
>> warning: failed to install locale: Invalid argument
>>
>> Starting download of
>> /gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz
>> From ftp://ftp-sop.inria.fr/indes/fp/Bigloo/bigloo4.3b.tar.gz...
>>  ...3b.tar.gz  35.4MiB              192KiB/s 03:09
>> [####################] 100.0%
>> output path
>> `/gnu/store/zjpxaz1k3g4dwn26xaic7m1n7i3zfqyr-bigloo4.3b.tar.gz' should
>> have sha256 hash
>> `1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07', instead has
>> `1x7xdgsls277zlf6gcaxs2cj62xj6yvb0qxh0ddmxfamvxba0cf4'
>
> The original tarball should be available at:
>
>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>
> … but it’s not.
>
> Kei, could you check if you still have the tarball with this hash and
> how it differs from the current one?
>
> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
> it’s likely that the file was modified after Kei committed the upgrade.
>
> Thanks,
> Ludo’.

I do have the "original" tarball, but I don't know how I can transfer it
to you for inspection (if that is even necessary). However, I have
attached changelog differences between the two source trees. I'd send
the full diffoscope report, but its size is about 127 megabytes! The
difference seems to be a string of miscellaneous fixes and changes.


[bigloo_changelog_diff.txt (text/plain, attachment)]
[signature.asc (application/pgp-signature, inline)]
Information forwarded to bug-guix <at> gnu.org:
bug#30436; Package guix. (Fri, 16 Feb 2018 09:01:01 GMT) Full text and rfc822 format available.

Message #20 received at 30436 <at> debbugs.gnu.org (full text, mbox):

From: ludo <at> gnu.org (Ludovic Courtès)
To: Kei Kebreau <kkebreau <at> posteo.net>
Cc: 30436 <at> debbugs.gnu.org, Amirouche Boubekki <amirouche <at> hypermove.net>,
 Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Fri, 16 Feb 2018 09:59:58 +0100

Hello Kei,

Kei Kebreau <kkebreau <at> posteo.net> skribis:

> ludo <at> gnu.org (Ludovic Courtès) writes:

[...]

>> The original tarball should be available at:
>>
>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>
>> … but it’s not.
>>
>> Kei, could you check if you still have the tarball with this hash and
>> how it differs from the current one?
>>
>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>> it’s likely that the file was modified after Kei committed the upgrade.
>>
>> Thanks,
>> Ludo’.
>
> I do have the "original" tarball, but I don't know how I can transfer it
> to you for inspection (if that is even necessary). However, I have
> attached changelog differences between the two source trees. I'd send
> the full diffoscope report, but its size is about 127 megabytes! The
> difference seems to be a string of miscellaneous fixes and changes.

Yeah, that’s what I expected.  :-/  Thanks for checking.

Could you update the hash to the current hash in the ‘bigloo’ package
definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
commit log so people can later see why we changed the hash.

Thank you!

Ludo’.
Severity set to 'minor' from 'normal' Request was from ludo <at> gnu.org (Ludovic Courtès) to control <at> debbugs.gnu.org. (Fri, 16 Feb 2018 10:20:01 GMT) Full text and rfc822 format available.
Reply sent to Kei Kebreau <kkebreau <at> posteo.net>:
You have taken responsibility. (Fri, 16 Feb 2018 19:51:01 GMT) Full text and rfc822 format available.
Notification sent to Amirouche Boubekki <amirouche <at> hypermove.net>:
bug acknowledged by developer. (Fri, 16 Feb 2018 19:51:02 GMT) Full text and rfc822 format available.

Message #27 received at 30436-done <at> debbugs.gnu.org (full text, mbox):

From: Kei Kebreau <kkebreau <at> posteo.net>
To: ludo <at> gnu.org (Ludovic Courtès)
Cc: 30436-done <at> debbugs.gnu.org, Amirouche Boubekki <amirouche <at> hypermove.net>,
 Leo Famulari <leo <at> famulari.name>
Subject: Re: bug#30436: bigloo <at> 4.3b hash mismatch
Date: Fri, 16 Feb 2018 14:50:20 -0500

[Message part 1 (text/plain, inline)]
ludo <at> gnu.org (Ludovic Courtès) writes:

> Hello Kei,
>
> Kei Kebreau <kkebreau <at> posteo.net> skribis:
>
>> ludo <at> gnu.org (Ludovic Courtès) writes:
>
> [...]
>
>>> The original tarball should be available at:
>>>
>>>   https://mirror.hydra.gnu.org/file/bigloo4.3b.tar.gz/sha256/1xpzxjlq5g8j3jrb908kfaaa0pkynk4rd083hzvb08amhy68sx07
>>>
>>> … but it’s not.
>>>
>>> Kei, could you check if you still have the tarball with this hash and
>>> how it differs from the current one?
>>>
>>> Unfortunately Bigloo’s maintainer tends to overwrite files in place so
>>> it’s likely that the file was modified after Kei committed the upgrade.
>>>
>>> Thanks,
>>> Ludo’.
>>
>> I do have the "original" tarball, but I don't know how I can transfer it
>> to you for inspection (if that is even necessary). However, I have
>> attached changelog differences between the two source trees. I'd send
>> the full diffoscope report, but its size is about 127 megabytes! The
>> difference seems to be a string of miscellaneous fixes and changes.
>
> Yeah, that’s what I expected.  :-/  Thanks for checking.
>
> Could you update the hash to the current hash in the ‘bigloo’ package
> definition?  Please add “Fixes <https://bugs.gnu.org/30436>.” to the
> commit log so people can later see why we changed the hash.
>
> Thank you!
>
> Ludo’.

Done! Thanks to all involved.

[signature.asc (application/pgp-signature, inline)]
bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Sat, 17 Mar 2018 11:24:05 GMT) Full text and rfc822 format available.
This bug report was last modified 6 years and 42 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.