[MacPorts] #54839: Checksum mismatches for generated tarballs from GitHub
MacPorts
noreply at macports.org
Sat Jul 30 12:29:22 UTC 2022
#54839: Checksum mismatches for generated tarballs from GitHub
-------------------------------------------------+-------------------------
Reporter: raimue | Owner: (none)
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Resolution: | Keywords:
Port: DepreciateForLedger GTDtoCSV Gyoto |
HermesApp Io LedgerScheduler LucenePlusPlus |
MongoHub OpenCoarrays QLStephen ShiftIt apbs |
box2d cgminer chapel cot csvToLedger cusp |
elixir expense.txt faust-devel faust2-devel |
fbthrift hub jake just kops libcdata |
libcdatetime libcerror libcfile libclocale |
libcnotify libcsplit libcthreads libewf |
litecoin lua-cgilua lua-rings lua-wsapi lua- |
xavante mogenerator mongo-cxx-driver mongrel2 |
mosesdecoder myrepos ocaml-async-core pear- |
TCPDF phoenix povray qoauth racer rekall |
scm_breeze subsurface tDOM teleport tidyp |
time.txt tpkg uzbl webkit-sharp xmlroff zorba |
-------------------------------------------------+-------------------------
Description changed by mascguy:
Old description:
> Apparently, GitHub upgraded their software and changed the way git
> tarballs are generated due to a
> [https://github.com/git/git/commit/22f0dcd9634a818a0c83f23ea1a48f2d620c0546
> bugfix in upstream git]. The produced tarballs will differ from those
> that have been generated before.
>
> The checksums of the following ports have changed due to this (ran
> against [ffdb5922289aca17f166d14e3e91ecbe52278c10/macports-ports]):
>
> ||= Port =||= Maintainer =||
> || ALPSCore || galexv at umich.edu ||
> || apbs || howarth.at.macports at gmail.com,openmaintainer
> ||
> || box2d || stromnov at macports.org,openmaintainer ||
> || certbot || mps at macports.org Schamschula,openmaintainer
> ||
> || cgminer || ||
> || chapel || takeshi at macports.org,openmaintainer ||
> || cjdns || l2dy at macports.org l2dy,openmaintainer ||
> || coffee-script || ryandesign at macports.org,openmaintainer ||
> || cot || glenn at e-dad.net ||
> || csvToLedger || ben at wbpsystems.com ||
> || cusp || sean at macports.org,openmaintainer ||
> || DepreciateForLedger || ben at wbpsystems.com ||
> || docker || ||
> || docker-machine || ||
> || elixir || me at milmazz.uno milmazz ||
> || expense.txt || ben at wbpsystems.com ||
> || faust-devel || ryandesign at macports.org,aggraef at gmail.com ||
> || faust2-devel || ryandesign at macports.org,aggraef at gmail.com ||
> || fbthrift || sean at macports.org,openmaintainer ||
> || fbthrift || sean at macports.org,openmaintainer ||
> || git-lfs || raimue at macports.org raimue,openmaintainer ||
> || gst-plugins-cairovis || aronnax at macports.org lpsinger ||
> || GTDtoCSV || ben at wbpsystems.com ||
> || Gyoto || thibaut at macports.org,openmaintainer ||
> || HermesApp || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || htcondor || aronnax at macports.org lpsinger ||
> || hub || lists at eitanadler.com ||
> || ifeffit || joe.fowler at nist.gov,openmaintainer ||
> || Io || ||
> || iTerm2 || emer at emer.net ||
> || jake || ryandesign at macports.org,openmaintainer ||
> || just || casey at rodarmor.com ||
> || keybase || sean at macports.org,openmaintainer ||
> || keybinder || ryandesign at macports.org,openmaintainer ||
> || keybinder-3.0 || ryandesign at macports.org,openmaintainer ||
> || kops || pebrc,openmaintainer ||
> || LedgerScheduler || ben at wbpsystems.com ||
> || libcdata || ||
> || libcdatetime || ||
> || libcerror || ||
> || libcfile || ||
> || libclocale || ||
> || libcnotify || ||
> || libcsplit || ||
> || libcthreads || ||
> || libewf || ||
> || libgit2 || juanrgar at macports.org,devans at macports.org
> dbevans ||
> || libiodbc || snc at macports.org,openmaintainer ||
> || libphonenumber-cpp || devans at macports.org dbevans,openmaintainer ||
> || litecoin || mk at macports.org,openmaintainer ||
> || lua-cgilua || ||
> || lua-rings || ||
> || lua-wsapi || ||
> || lua-xavante || ||
> || LucenePlusPlus || ||
> || mame || ||
> || meson || ||
> || mogenerator || ||
> || mongo-cxx-driver || ryandesign at macports.org,openmaintainer ||
> || mongo-tools || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || MongoHub || ryandesign at macports.org,openmaintainer ||
> || mongrel2 || ||
> || mosesdecoder || ||
> || myrepos || gjasny at googlemail.com,openmaintainer ||
> || mythtv-core.25 || ctreleaven at macports.org,openmaintainer ||
> || mythtv-core.26 || ctreleaven at macports.org,openmaintainer ||
> || nu2 || ||
> || ocaml-async-core || ||
> || OpenCoarrays || fanfarillo.gcc at gmail.com ||
> || pear-TCPDF || ||
> || pficommon || ||
> || phoenix || g5pw at macports.org,openmaintainer ||
> || phpsh || ||
> || povray || ||
> || QGIS || vince at macports.org ||
> || QLStephen || ||
> || qoauth || ||
> || racer || sean at macports.org,openmaintainer ||
> || rekall || ||
> || root5 || jonesc at macports.org cjones051073 ||
> || scm_breeze || g5pw at macports.org,openmaintainer ||
> || ShiftIt || ||
> || subsurface || ||
> || syncthing-0.14 || leonardo at schenkel.net,openmaintainer ||
> || synergy || ||
> || tDOM || neumann at wu.ac.at ||
> || tbb || sean at mehta.io ||
> || teleport || graemelawes at gmail.com gclawes,openmaintainer
> ||
> || texworks || mojca at macports.org,openmaintainer ||
> || tidyp || ||
> || time.txt || ben at wbpsystems.com ||
> || todotxt || snc at macports.org,openmaintainer ||
> || tpkg || jheiss at aput.net,openmaintainer ||
> || uzbl || ryandesign at macports.org
> ryandesign,openmaintainer ||
> || webkit-sharp || ryandesign at macports.org,openmaintainer ||
> || xctool || sean at macports.org,openmaintainer ||
> || xmlroff || ||
> || zorba || ||
>
> I do not know if GitHub actually invalidated the generated tarballs from
> their download caches, so the following might not be conclusive and
> checksums that are deemed correct might be subject to change in the
> future.
>
> To track the progress, please do not edit above table as-is but remove
> fixed ports from the `port` field in this ticket.
>
> See also this similar report for Homebrew: https://github.com/Homebrew
> /homebrew-core/issues/18044
>
> For reference, above list was generated with these commands:
> {{{
> $ grep -l -R '^github\.setup' . | xargs -I{} sh -c 'basename $(dirname
> {})' | while read port; do sudo port clean --all \; fetch --no-mirrors \
> checksum || echo $port > github-failed.txt; done
> $ while read port; do port info --line --name --maintainer $port; done <
> <(sort -f github-failed.txt) | awk -F$'\t' '{printf "|| %-40s || %s
> ||\n", $2, $1}'
> }}}
New description:
Apparently, GitHub upgraded their software and changed the way git
tarballs are generated due to a
[https://github.com/git/git/commit/22f0dcd9634a818a0c83f23ea1a48f2d620c0546
bugfix in upstream git]. The produced tarballs will differ from those that
have been generated before.
The checksums of the following ports have changed due to this (ran against
[ffdb5922289aca17f166d14e3e91ecbe52278c10/macports-ports]):
||= Port =||= Maintainer =||
|| ALPSCore || galexv at umich.edu ||
|| apbs || howarth.at.macports at gmail.com,openmaintainer
||
|| box2d || stromnov at macports.org,openmaintainer ||
|| certbot || mps at macports.org,openmaintainer ||
|| cgminer || ||
|| chapel || takeshi at macports.org,openmaintainer ||
|| cjdns || l2dy at macports.org,openmaintainer ||
|| coffee-script || ryandesign at macports.org,openmaintainer ||
|| cot || glenn at e-dad.net ||
|| csvToLedger || ben at wbpsystems.com ||
|| cusp || sean at macports.org,openmaintainer ||
|| DepreciateForLedger || ben at wbpsystems.com ||
|| docker || ||
|| docker-machine || ||
|| elixir || me at milmazz.uno milmazz ||
|| expense.txt || ben at wbpsystems.com ||
|| faust-devel || ryandesign at macports.org,aggraef at gmail.com ||
|| faust2-devel || ryandesign at macports.org,aggraef at gmail.com ||
|| fbthrift || sean at macports.org,openmaintainer ||
|| fbthrift || sean at macports.org,openmaintainer ||
|| git-lfs || raimue at macports.org,openmaintainer ||
|| gst-plugins-cairovis || aronnax at macports.org lpsinger ||
|| GTDtoCSV || ben at wbpsystems.com ||
|| Gyoto || thibaut at macports.org,openmaintainer ||
|| HermesApp || ryandesign at macports.org openmaintainer ||
|| htcondor || aronnax at macports.org lpsinger ||
|| hub || lists at eitanadler.com ||
|| ifeffit || joe.fowler at nist.gov,openmaintainer ||
|| Io || ||
|| iTerm2 || emer at emer.net ||
|| jake || ryandesign at macports.org,openmaintainer ||
|| just || casey at rodarmor.com ||
|| keybase || sean at macports.org,openmaintainer ||
|| keybinder || ryandesign at macports.org,openmaintainer ||
|| keybinder-3.0 || ryandesign at macports.org,openmaintainer ||
|| kops || pebrc,openmaintainer ||
|| LedgerScheduler || ben at wbpsystems.com ||
|| libcdata || ||
|| libcdatetime || ||
|| libcerror || ||
|| libcfile || ||
|| libclocale || ||
|| libcnotify || ||
|| libcsplit || ||
|| libcthreads || ||
|| libewf || ||
|| libgit2 || juanrgar at macports.org,devans at macports.org ||
|| libiodbc || snc at macports.org,openmaintainer ||
|| libphonenumber-cpp || devans at macports.org,openmaintainer ||
|| litecoin || mk at macports.org,openmaintainer ||
|| lua-cgilua || ||
|| lua-rings || ||
|| lua-wsapi || ||
|| lua-xavante || ||
|| LucenePlusPlus || ||
|| mame || mascguy at macports.org,openmaintainer ||
|| meson || ||
|| mogenerator || ||
|| mongo-cxx-driver || ryandesign at macports.org,openmaintainer ||
|| mongo-tools || ryandesign at macports.org,openmaintainer ||
|| MongoHub || ryandesign at macports.org,openmaintainer ||
|| mongrel2 || ||
|| mosesdecoder || ||
|| myrepos || gjasny at googlemail.com,openmaintainer ||
|| mythtv-core.25 || ctreleaven at macports.org,openmaintainer ||
|| mythtv-core.26 || ctreleaven at macports.org,openmaintainer ||
|| nu2 || ||
|| ocaml-async-core || ||
|| OpenCoarrays || fanfarillo.gcc at gmail.com ||
|| pear-TCPDF || ||
|| pficommon || ||
|| phoenix || g5pw at macports.org,openmaintainer ||
|| phpsh || ||
|| povray || ||
|| QGIS || vince at macports.org ||
|| QLStephen || ||
|| qoauth || ||
|| racer || sean at macports.org,openmaintainer ||
|| rekall || ||
|| root5 || jonesc at macports.org ||
|| scm_breeze || g5pw at macports.org,openmaintainer ||
|| ShiftIt || ||
|| subsurface || ||
|| syncthing-0.14 || leonardo at schenkel.net,openmaintainer ||
|| synergy || ||
|| tDOM || neumann at wu.ac.at ||
|| tbb || sean at mehta.io ||
|| teleport || graemelawes at gmail.com,openmaintainer ||
|| texworks || mojca at macports.org,openmaintainer ||
|| tidyp || ||
|| time.txt || ben at wbpsystems.com ||
|| todotxt || snc at macports.org,openmaintainer ||
|| tpkg || jheiss at aput.net,openmaintainer ||
|| uzbl || ryandesign at macports.org,openmaintainer ||
|| webkit-sharp || ryandesign at macports.org,openmaintainer ||
|| xctool || sean at macports.org,openmaintainer ||
|| xmlroff || ||
|| zorba || ||
I do not know if GitHub actually invalidated the generated tarballs from
their download caches, so the following might not be conclusive and
checksums that are deemed correct might be subject to change in the
future.
To track the progress, please do not edit above table as-is but remove
fixed ports from the `port` field in this ticket.
See also this similar report for Homebrew: https://github.com/Homebrew
/homebrew-core/issues/18044
For reference, above list was generated with these commands:
{{{
$ grep -l -R '^github\.setup' . | xargs -I{} sh -c 'basename $(dirname
{})' | while read port; do sudo port clean --all \; fetch --no-mirrors \
checksum || echo $port > github-failed.txt; done
$ while read port; do port info --line --name --maintainer $port; done <
<(sort -f github-failed.txt) | awk -F$'\t' '{printf "|| %-40s || %s ||\n",
$2, $1}'
}}}
--
--
Ticket URL: <https://trac.macports.org/ticket/54839#comment:81>
MacPorts <https://www.macports.org/>
Ports system for macOS
More information about the macports-tickets
mailing list