[MacPorts] #54839: Checksum mismatches for generated tarballs from GitHub

MacPorts noreply at macports.org
Wed Sep 27 13:02:50 UTC 2017


#54839: Checksum mismatches for generated tarballs from GitHub
-------------------------------------------------+-------------------------
  Reporter:  raimue                              |      Owner:
      Type:  defect                              |     Status:  new
  Priority:  Normal                              |  Milestone:
 Component:  ports                               |    Version:
Resolution:                                      |   Keywords:
      Port:  ALPSCore DepreciateForLedger        |
  GTDtoCSV Gyoto HermesApp Io LedgerScheduler    |
  LucenePlusPlus MongoHub OpenCoarrays           |
  QLStephen ShiftIt apbs box2d cgminer chapel    |
  coffee-script cot csvToLedger cusp docker      |
  docker-machine elixir expense.txt faust-devel  |
  faust2-devel fbthrift gst-plugins-cairovis     |
  htcondor hub jake just keybase keybinder       |
  keybinder-3.0 kops libcdata libcdatetime       |
  libcerror libcfile libclocale libcnotify       |
  libcsplit libcthreads libewf libgit2           |
  libphonenumber-cpp litecoin lua-cgilua lua-    |
  rings lua-wsapi lua-xavante mame meson         |
  mogenerator mongo-cxx-driver mongo-tools       |
  mongrel2 mosesdecoder myrepos mythtv-core.25   |
  mythtv-core.26 nu2 ocaml-async-core pear-      |
  TCPDF pficommon phoenix phpsh povray qgis      |
  qoauth racer rclone rekall root5 scm_breeze    |
  subsurface synergy tDOM tbb teleport texworks  |
  tidyp time.txt tpkg uzbl webkit-sharp xctool   |
  xmlroff zorba                                  |
-------------------------------------------------+-------------------------

Old description:

> Apparently, GitHub upgraded their software and changed the way git
> tarballs are generated due to a
> [https://github.com/git/git/commit/22f0dcd9634a818a0c83f23ea1a48f2d620c0546
> bugfix in upstream git]. The produced tarballs will differ from those
> that have been generated before.
>
> The checksums of the following ports have changed due to this (ran
> against [ffdb5922289aca17f166d14e3e91ecbe52278c10/macports-ports]):
>
> ||= Port =||= Maintainer =||
> || ALPSCore              || galexv at umich.edu ||
> || apbs                  || howarth.at.macports at gmail.com,openmaintainer
> ||
> || box2d                 || stromnov at macports.org,openmaintainer ||
> || certbot               || mps at macports.org Schamschula,openmaintainer
> ||
> || cgminer               ||  ||
> || chapel                || takeshi at macports.org,openmaintainer ||
> || cjdns                 || l2dy at macports.org l2dy,openmaintainer ||
> || coffee-script         || ryandesign at macports.org,openmaintainer ||
> || cot                   || glenn at e-dad.net ||
> || csvToLedger           || ben at wbpsystems.com ||
> || cusp                  || sean at macports.org,openmaintainer ||
> || DepreciateForLedger   || ben at wbpsystems.com ||
> || docker                ||  ||
> || docker-machine        ||  ||
> || elixir                || me at milmazz.uno milmazz ||
> || expense.txt           || ben at wbpsystems.com ||
> || faust-devel           || ryandesign at macports.org,aggraef at gmail.com ||
> || faust2-devel          || ryandesign at macports.org,aggraef at gmail.com ||
> || fbthrift              || sean at macports.org,openmaintainer ||
> || fbthrift              || sean at macports.org,openmaintainer ||
> || git-lfs               || raimue at macports.org raimue,openmaintainer ||
> || gst-plugins-cairovis  || aronnax at macports.org lpsinger ||
> || GTDtoCSV              || ben at wbpsystems.com ||
> || Gyoto                 || thibaut at macports.org,openmaintainer ||
> || HermesApp             || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || htcondor              || aronnax at macports.org lpsinger ||
> || hub                   || lists at eitanadler.com ||
> || ifeffit               || joe.fowler at nist.gov,openmaintainer ||
> || Io                    ||  ||
> || iTerm2                || emer at emer.net ||
> || jake                  || ryandesign at macports.org,openmaintainer ||
> || just                  || casey at rodarmor.com ||
> || keybase               || sean at macports.org,openmaintainer ||
> || keybinder             || ryandesign at macports.org,openmaintainer ||
> || keybinder-3.0         || ryandesign at macports.org,openmaintainer ||
> || kops                  || pebrc,openmaintainer ||
> || LedgerScheduler       || ben at wbpsystems.com ||
> || libcdata              ||  ||
> || libcdatetime          ||  ||
> || libcerror             ||  ||
> || libcfile              ||  ||
> || libclocale            ||  ||
> || libcnotify            ||  ||
> || libcsplit             ||  ||
> || libcthreads           ||  ||
> || libewf                ||  ||
> || libgit2               || juanrgar at macports.org,devans at macports.org
> dbevans ||
> || libiodbc              || snc at macports.org,openmaintainer ||
> || libphonenumber-cpp    || devans at macports.org dbevans,openmaintainer ||
> || litecoin              || mk at macports.org,openmaintainer ||
> || lua-cgilua            ||  ||
> || lua-rings             ||  ||
> || lua-wsapi             ||  ||
> || lua-xavante           ||  ||
> || LucenePlusPlus        ||  ||
> || mame                  ||  ||
> || meson                 ||  ||
> || mogenerator           ||  ||
> || mongo-cxx-driver      || ryandesign at macports.org,openmaintainer ||
> || mongo-tools           || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || MongoHub              || ryandesign at macports.org,openmaintainer ||
> || mongrel2              ||  ||
> || mosesdecoder          ||  ||
> || myrepos               || gjasny at googlemail.com,openmaintainer ||
> || mythtv-core.25        || ctreleaven at macports.org,openmaintainer ||
> || mythtv-core.26        || ctreleaven at macports.org,openmaintainer ||
> || nu2                   ||  ||
> || ocaml-async-core      ||  ||
> || OpenCoarrays          || fanfarillo.gcc at gmail.com ||
> || pear-TCPDF            ||  ||
> || pficommon             ||  ||
> || phoenix               || g5pw at macports.org,openmaintainer ||
> || phpsh                 ||  ||
> || povray                ||  ||
> || QGIS                  || vince at macports.org ||
> || QLStephen             ||  ||
> || qoauth                ||  ||
> || racer                 || sean at macports.org,openmaintainer ||
> || rclone                || eborisch at macports.org,openmaintainer ||
> || rekall                ||  ||
> || root5                 || jonesc at macports.org cjones051073 ||
> || scm_breeze            || g5pw at macports.org,openmaintainer ||
> || ShiftIt               ||  ||
> || subsurface            ||  ||
> || syncthing-0.14        || leonardo at schenkel.net,openmaintainer ||
> || synergy               ||  ||
> || tbb                   || sean at mehta.io ||
> || tDOM                  || neumann at wu.ac.at ||
> || teleport              || graemelawes at gmail.com gclawes,openmaintainer
> ||
> || texworks              || mojca at macports.org,openmaintainer ||
> || tidyp                 ||  ||
> || time.txt              || ben at wbpsystems.com ||
> || todotxt               || snc at macports.org,openmaintainer ||
> || tpkg                  || jheiss at aput.net,openmaintainer ||
> || uzbl                  || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || webkit-sharp          || ryandesign at macports.org,openmaintainer ||
> || xctool                || sean at macports.org,openmaintainer ||
> || xmlroff               ||  ||
> || zorba                 ||  ||
>
> I do not know if GitHub actually invalidated the generated tarballs from
> their download caches, so the following might not be conclusive and
> checksums that are deemed correct might be subject to change in the
> future.
>
> To track the progress, please do not edit above table as-is but remove
> fixed ports from the `port` field in this ticket.
>
> See also this similar report for Homebrew: https://github.com/Homebrew
> /homebrew-core/issues/18044
>
> For reference, above list was generated with these commands:
> {{{
> $ grep -l -R '^github\.setup' . | xargs -I{} sh -c 'basename $(dirname
> {})' | while read port; do sudo port clean --all \; fetch --no-mirrors \
> checksum || echo $port > github-failed.txt; done
> $ while read port; do port info --line --name --maintainer $port; done <
> <(sort -f github-failed.txt) | awk -F$'\t' '{printf "|| %-40s || %s
> ||\n", $2, $1}'
> }}}

New description:

 Apparently, GitHub upgraded their software and changed the way git
 tarballs are generated due to a
 [https://github.com/git/git/commit/22f0dcd9634a818a0c83f23ea1a48f2d620c0546
 bugfix in upstream git]. The produced tarballs will differ from those that
 have been generated before.

 The checksums of the following ports have changed due to this (ran against
 [ffdb5922289aca17f166d14e3e91ecbe52278c10/macports-ports]):

 ||= Port =||= Maintainer =||
 || ALPSCore              || galexv at umich.edu ||
 || apbs                  || howarth.at.macports at gmail.com,openmaintainer
 ||
 || box2d                 || stromnov at macports.org,openmaintainer ||
 || certbot               || mps at macports.org Schamschula,openmaintainer ||
 || cgminer               ||  ||
 || chapel                || takeshi at macports.org,openmaintainer ||
 || cjdns                 || l2dy at macports.org l2dy,openmaintainer ||
 || coffee-script         || ryandesign at macports.org,openmaintainer ||
 || cot                   || glenn at e-dad.net ||
 || csvToLedger           || ben at wbpsystems.com ||
 || cusp                  || sean at macports.org,openmaintainer ||
 || DepreciateForLedger   || ben at wbpsystems.com ||
 || docker                ||  ||
 || docker-machine        ||  ||
 || elixir                || me at milmazz.uno milmazz ||
 || expense.txt           || ben at wbpsystems.com ||
 || faust-devel           || ryandesign at macports.org,aggraef at gmail.com ||
 || faust2-devel          || ryandesign at macports.org,aggraef at gmail.com ||
 || fbthrift              || sean at macports.org,openmaintainer ||
 || fbthrift              || sean at macports.org,openmaintainer ||
 || git-lfs               || raimue at macports.org raimue,openmaintainer ||
 || gst-plugins-cairovis  || aronnax at macports.org lpsinger ||
 || GTDtoCSV              || ben at wbpsystems.com ||
 || Gyoto                 || thibaut at macports.org,openmaintainer ||
 || HermesApp             || ryandesign at macports.org
 ryandesign,openmaintainer ||
 || htcondor              || aronnax at macports.org lpsinger ||
 || hub                   || lists at eitanadler.com ||
 || ifeffit               || joe.fowler at nist.gov,openmaintainer ||
 || Io                    ||  ||
 || iTerm2                || emer at emer.net ||
 || jake                  || ryandesign at macports.org,openmaintainer ||
 || just                  || casey at rodarmor.com ||
 || keybase               || sean at macports.org,openmaintainer ||
 || keybinder             || ryandesign at macports.org,openmaintainer ||
 || keybinder-3.0         || ryandesign at macports.org,openmaintainer ||
 || kops                  || pebrc,openmaintainer ||
 || LedgerScheduler       || ben at wbpsystems.com ||
 || libcdata              ||  ||
 || libcdatetime          ||  ||
 || libcerror             ||  ||
 || libcfile              ||  ||
 || libclocale            ||  ||
 || libcnotify            ||  ||
 || libcsplit             ||  ||
 || libcthreads           ||  ||
 || libewf                ||  ||
 || libgit2               || juanrgar at macports.org,devans at macports.org
 dbevans ||
 || libiodbc              || snc at macports.org,openmaintainer ||
 || libphonenumber-cpp    || devans at macports.org dbevans,openmaintainer ||
 || litecoin              || mk at macports.org,openmaintainer ||
 || lua-cgilua            ||  ||
 || lua-rings             ||  ||
 || lua-wsapi             ||  ||
 || lua-xavante           ||  ||
 || LucenePlusPlus        ||  ||
 || mame                  ||  ||
 || meson                 ||  ||
 || mogenerator           ||  ||
 || mongo-cxx-driver      || ryandesign at macports.org,openmaintainer ||
 || mongo-tools           || ryandesign at macports.org
 ryandesign,openmaintainer ||
 || MongoHub              || ryandesign at macports.org,openmaintainer ||
 || mongrel2              ||  ||
 || mosesdecoder          ||  ||
 || myrepos               || gjasny at googlemail.com,openmaintainer ||
 || mythtv-core.25        || ctreleaven at macports.org,openmaintainer ||
 || mythtv-core.26        || ctreleaven at macports.org,openmaintainer ||
 || nu2                   ||  ||
 || ocaml-async-core      ||  ||
 || OpenCoarrays          || fanfarillo.gcc at gmail.com ||
 || pear-TCPDF            ||  ||
 || pficommon             ||  ||
 || phoenix               || g5pw at macports.org,openmaintainer ||
 || phpsh                 ||  ||
 || povray                ||  ||
 || QGIS                  || vince at macports.org ||
 || QLStephen             ||  ||
 || qoauth                ||  ||
 || racer                 || sean at macports.org,openmaintainer ||
 || rclone                || eborisch at macports.org,openmaintainer ||
 || rekall                ||  ||
 || root5                 || jonesc at macports.org cjones051073 ||
 || scm_breeze            || g5pw at macports.org,openmaintainer ||
 || ShiftIt               ||  ||
 || subsurface            ||  ||
 || syncthing-0.14        || leonardo at schenkel.net,openmaintainer ||
 || synergy               ||  ||
 || tDOM                  || neumann at wu.ac.at ||
 || teleport              || graemelawes at gmail.com gclawes,openmaintainer
 ||
 || texworks              || mojca at macports.org,openmaintainer ||
 || tidyp                 ||  ||
 || time.txt              || ben at wbpsystems.com ||
 || todotxt               || snc at macports.org,openmaintainer ||
 || tpkg                  || jheiss at aput.net,openmaintainer ||
 || uzbl                  || ryandesign at macports.org
 ryandesign,openmaintainer ||
 || webkit-sharp          || ryandesign at macports.org,openmaintainer ||
 || xctool                || sean at macports.org,openmaintainer ||
 || xmlroff               ||  ||
 || zorba                 ||  ||

 I do not know if GitHub actually invalidated the generated tarballs from
 their download caches, so the following might not be conclusive and
 checksums that are deemed correct might be subject to change in the
 future.

 To track the progress, please do not edit above table as-is but remove
 fixed ports from the `port` field in this ticket.

 See also this similar report for Homebrew: https://github.com/Homebrew
 /homebrew-core/issues/18044

 For reference, above list was generated with these commands:
 {{{
 $ grep -l -R '^github\.setup' . | xargs -I{} sh -c 'basename $(dirname
 {})' | while read port; do sudo port clean --all \; fetch --no-mirrors \
 checksum || echo $port > github-failed.txt; done
 $ while read port; do port info --line --name --maintainer $port; done <
 <(sort -f github-failed.txt) | awk -F$'\t' '{printf "|| %-40s || %s ||\n",
 $2, $1}'
 }}}

--

Comment (by cjones051073):

 tbb fixed (also updated to 2017_U8).

--
Ticket URL: <https://trac.macports.org/ticket/54839#comment:28>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list