1. Forum
  2. Usenet
  3. LINUX.GENTOO.DEV

  • [gentoo-dev] heads up: codeberg changed gzip impls (?) for ${REPO}/arch

    From Arsen =?utf-8?Q?Arsenovi=C4=87?=@21:1/5 to All on Mon Dec 11 12:00:02 2023
    hi,

    it seems that codeberg has changed how they produce their archives on
    URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
    to digest failures like <https://bugs.gentoo.org/919135>, as implied by
    the following checks:

    ~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d)
    ~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat)
    Binary files /dev/fd/63 and /dev/fd/62 differ

    the above shows that compressed content differs while decompressed
    content remains identical.

    (dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror, /var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
    around two in the morning last night)

    you might want to regenerate manifests for projects fetching from
    /archive/ urls on codeberg.

    Daniel, thank you for working on foot. may I ask that you attach 'meson dist'-generated files to releases? you could also use that opportunity
    to hash or sign them, if you so desire.

    in either case, thank you again.

    have a lovely day, all!
    --
    Arsen Arsenović

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iOcEARYKAI8WIQT+4rPRE/wAoxYtYGFSwpQwHqLEkwUCZXbq418UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0RkVF MkIzRDExM0ZDMDBBMzE2MkQ2MDYxNTJDMjk0MzAxRUEyQzQ5MxEcYXJzZW5AZ2Vu dG9vLm9yZwAKCRBSwpQwHqLEk8+9AQCVEzY0k6ZUh5qFZvkta7SNtaFmLEH7lXL3 1qDiLUdU6wEA1fGy3CEQ/XxxM5E9FrqIyqQ+JZOY565QxKZM2VLSYwY=H7Mp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Arsen =?utf-8?Q?Arsenovi=C4=87?=@21:1/5 to arsen@gentoo.org on Mon Dec 11 13:50:01 2023
    Arsen Arsenović <arsen@gentoo.org> writes:

    hi,

    it seems that codeberg has changed how they produce their archives on
    URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
    to digest failures like <https://bugs.gentoo.org/919135>, as implied by
    the following checks:

    ~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1.16.2.tar.gz gzip -d)
    ~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.2.tar.gz cat)
    Binary files /dev/fd/63 and /dev/fd/62 differ

    the above shows that compressed content differs while decompressed
    content remains identical.

    (dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror, /var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
    around two in the morning last night)

    you might want to regenerate manifests for projects fetching from
    /archive/ urls on codeberg.

    ps, also filed https://codeberg.org/Codeberg/Community/issues/1366 per
    ulms suggestion.
    --
    Arsen Arsenović

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iOcEARYKAI8WIQT+4rPRE/wAoxYtYGFSwpQwHqLEkwUCZXcFOV8UgAAAAAAuAChp c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0RkVF MkIzRDExM0ZDMDBBMzE2MkQ2MDYxNTJDMjk0MzAxRUEyQzQ5MxEcYXJzZW5AZ2Vu dG9vLm9yZwAKCRBSwpQwHqLEkyrNAQD9ilVvDpFKl6NJSOKtZVuY9GpO2OxWIIJ2 H5ZjesHOWQEA3wEmBQw9ebJXFy00wFCBqh3h/kMw+bCvFCm5QsazpwQ=olFv
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)