[MacPorts] #69395: codeberg projects (star smake cl-nodgui cdrtools): checksum mismatch (was: cdrtools @3.02-2023-09-28_1 checksum mismatch)

Sun Feb 25 07:53:13 UTC 2024

#69395: codeberg projects (star smake cl-nodgui cdrtools): checksum mismatch
--------------------------------------------+----------------------
  Reporter:  mrkapqa                        |      Owner:  RobK88
      Type:  defect                         |     Status:  assigned
  Priority:  Normal                         |  Milestone:
 Component:  ports                          |    Version:  2.9.1
Resolution:                                 |   Keywords:
      Port:  star smake cl-nodgui cdrtools  |
--------------------------------------------+----------------------
Changes (by ryandesign):

 * cc: ryandesign, catap (added)
 * port:  cdrtools => star smake cl-nodgui cdrtools

Comment:

 Analyzing the file currently available from codeberg and the one we
 mirrored in November, the .tar.gz files differ but the .tar files inside
 are identical, so their contents are identical too.

 gzip files can store the original filename and its timestamp which can
 lead to gzip files generated at different times differing despite
 identical contents, but that's not the case here. These .tar.gz files
 store no original filename or timestamp.

 I recompressed the .tar file with various compression levels and
 discovered that the checksums of the file we mirrored in November match
 those produced by Apple gzip on macOS 12.7.2 when using compression level
 6 (the default) while the checksums of the file available from codeberg
 now match those produced by GNU gzip when using compression level 6. So I
 suspect that sometime between November and now, codeberg changed their
 servers from using BSD gzip to using GNU gzip. This could affect every
 port that uses automatically-generated tarballs from codeberg. Checking…

 {{{
 % port file all|sort -u|xargs grep 'codeberg\.setup'
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/archivers/star/Portfile:codeberg.setup
 schilytools schilytools 2023-09-28
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/audio/soundtouch/Portfile:codeberg.setup
 soundtouch soundtouch 2.3.2
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/devel
 /mz-cmaketools/Portfile:codeberg.setup      emzeat mz-cmaketools
 c3852c301586c53fed76d9201b8cb62377597650
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/devel/smake/Portfile:codeberg.setup
 schilytools schilytools 2023-09-28
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/lisp
 /cl-nodgui/Portfile:codeberg.setup      cage nodgui
 96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/net/newsraft/Portfile:codeberg.setup
 newsraft newsraft 0.23 newsraft-
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/net/snac/Portfile:codeberg.setup
 grunfink snac2 2.47
 /opt/local/var/macports/sources/rsync.macports.org/macports/release/tarballs/ports/sysutils/cdrtools/Portfile:codeberg.setup
 schilytools schilytools 2023-09-28
 % sudo port clean --all star soundtouch mz-cmaketools smake cl-nodgui
 newsraft snac cdrtools
 Password:
 --->  Cleaning star
 --->  Cleaning soundtouch
 --->  Cleaning mz-cmaketools
 --->  Cleaning smake
 --->  Cleaning cl-nodgui
 --->  Cleaning newsraft
 --->  Cleaning snac
 --->  Cleaning cdrtools
 % sudo port fetch --no-mirrors star soundtouch mz-cmaketools smake cl-
 nodgui newsraft snac cdrtools
 --->  Fetching distfiles for star
 --->  Attempting to fetch 2023-09-28.tar.gz from
 https://codeberg.org/schilytools/schilytools/archive
 --->  Fetching distfiles for soundtouch
 --->  Attempting to fetch 2.3.2.tar.gz from
 https://codeberg.org/soundtouch/soundtouch/archive
 --->  Fetching distfiles for mz-cmaketools
 --->  Attempting to fetch c3852c301586c53fed76d9201b8cb62377597650.tar.gz
 from https://codeberg.org/emzeat/mz-cmaketools/archive
 --->  Fetching distfiles for smake
 --->  Attempting to fetch 2023-09-28.tar.gz from
 https://codeberg.org/schilytools/schilytools/archive/
 --->  Fetching distfiles for cl-nodgui
 --->  Attempting to fetch 96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a.tar.gz
 from https://codeberg.org/cage/nodgui/archive
 --->  Fetching distfiles for newsraft
 --->  Attempting to fetch newsraft-0.23.tar.gz from
 https://codeberg.org/newsraft/newsraft/archive
 --->  Fetching distfiles for snac
 --->  Attempting to fetch 2.47.tar.gz from
 https://codeberg.org/grunfink/snac2/archive
 --->  Fetching distfiles for cdrtools
 --->  Attempting to fetch 2023-09-28.tar.gz from
 https://codeberg.org/schilytools/schilytools/archive
 % sudo port -p checksum star soundtouch mz-cmaketools smake cl-nodgui
 newsraft snac cdrtools
 --->  Verifying checksums for star
 Error: Checksum (rmd160) mismatch for 2023-09-28.tar.gz
 Error: Checksum (sha256) mismatch for 2023-09-28.tar.gz
 Error: Checksum (size) mismatch for 2023-09-28.tar.gz
 Error: Failed to checksum star: Unable to verify file checksums
 Error: See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_archivers_star/star/main.log
 for details.
 Error: Follow https://guide.macports.org/#project.tickets if you believe
 there is a bug.
 Error: Processing of port star failed
 --->  Verifying checksums for soundtouch
 --->  Verifying checksums for mz-cmaketools
 --->  Verifying checksums for smake
 Error: Checksum (rmd160) mismatch for 2023-09-28.tar.gz
 Error: Checksum (sha256) mismatch for 2023-09-28.tar.gz
 Error: Checksum (size) mismatch for 2023-09-28.tar.gz
 Error: Failed to checksum smake: Unable to verify file checksums
 Error: See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_devel_smake/smake/main.log
 for details.
 Error: Follow https://guide.macports.org/#project.tickets if you believe
 there is a bug.
 Error: Processing of port smake failed
 --->  Verifying checksums for cl-nodgui
 Error: Checksum (rmd160) mismatch for
 96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a.tar.gz
 Error: Checksum (sha256) mismatch for
 96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a.tar.gz
 Error: Checksum (size) mismatch for
 96af1af4a0205ea6f7f0af8b6d9da5f180b39d2a.tar.gz
 Error: Failed to checksum cl-nodgui: Unable to verify file checksums
 Error: See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports
 .org_macports_release_tarballs_ports_lisp_cl-nodgui/cl-nodgui/main.log for
 details.
 Error: Follow https://guide.macports.org/#project.tickets if you believe
 there is a bug.
 Error: Processing of port cl-nodgui failed
 --->  Verifying checksums for newsraft
 --->  Verifying checksums for snac
 --->  Verifying checksums for cdrtools
 Error: Checksum (rmd160) mismatch for 2023-09-28.tar.gz
 Error: Checksum (sha256) mismatch for 2023-09-28.tar.gz
 Error: Checksum (size) mismatch for 2023-09-28.tar.gz
 Error: Failed to checksum cdrtools: Unable to verify file checksums
 Error: See
 /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_sysutils_cdrtools/cdrtools/main.log
 for details.
 Error: Follow https://guide.macports.org/#project.tickets if you believe
 there is a bug.
 Error: Processing of port cdrtools failed
 %
 }}}

 I am not sure why soundtouch, mz-cmaketools, newsraft, and snac appear to
 be unaffected. I hope it is not the case that some of codeberg's servers
 use GNU gzip and others use BSD gzip and that they are part of a single
 server pool. If that's what's happening, then we don't know which file
 we'll get when we fetch which would make codeberg an unsuitable choice for
 master_sites. We probably have to contact codeberg to find out what's
 going on.

-- 
Ticket URL: <https://trac.macports.org/ticket/69395#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS