[MacPorts] #54839: Checksum mismatches for generated tarballs from GitHub

Discussion:

MacPorts

2017-09-14 15:08:24 UTC

#54839: Checksum mismatches for generated tarballs from GitHub
-------------------------+-------------------------------------------------
Reporter: raimue | Owner:
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version:
Keywords: | Port: ALPSCore DepreciateForLedger
| GTDtoCSV Gyoto HermesApp Io LedgerScheduler
| LucenePlusPlus MongoHub OpenCoarrays QLStephen
| ShiftIt apbs box2d certbot cgminer chapel cjdns
| coffee-script cot csvToLedger cusp docker
| docker-machine elixir expense.txt faust-devel
| faust2-devel fbthrift git-lfs gst-plugins-
| cairovis htcondor hub iTerm2 ifeffit jake just
| keybase keybinder keybinder-3.0 kops libcdata
| libcdatetime libcerror libcfile libclocale
| libcnotify libcsplit libcthreads libewf libgit2
| libiodbc libphonenumber-cpp litecoin lua-cgilua
| lua-rings lua-wsapi lua-xavante mame meson
| mogenerator mongo-cxx-driver mongo-tools
| mongrel2 mosesdecoder myrepos mythtv-core.25
| mythtv-core.26 nu2 ocaml-async-core pear-TCPDF
| pficommon phoenix phpsh povray qgis qoauth
| racer rclone rekall root5 scm_breeze subsurface
| syncthing-0.14 synergy tDOM tbb teleport
| texworks tidyp time.txt todotxt tpkg uzbl
| webkit-sharp xctool xmlroff zorba
-------------------------+-------------------------------------------------
Apparently, GitHub upgraded their software and changed the way git
tarballs are generated due to a
[https://github.com/git/git/commit/22f0dcd9634a818a0c83f23ea1a48f2d620c0546
bugfix in upstream git]. The produced tarballs will differ from those that
have been generated before.

The checksums of the following ports have changed due to this (ran against
[ffdb5922289aca17f166d14e3e91ecbe52278c10/macports-ports]):

||= Port =||= Maintainer =||
|| ALPSCore || ***@umich.edu ||
|| apbs || ***@gmail.com,openmaintainer
||
|| box2d || ***@macports.org,openmaintainer ||
|| certbot || ***@macports.org Schamschula,openmaintainer ||
|| cgminer || ||
|| chapel || ***@macports.org,openmaintainer ||
|| cjdns || ***@macports.org l2dy,openmaintainer ||
|| coffee-script || ***@macports.org,openmaintainer ||
|| cot || ***@e-dad.net ||
|| csvToLedger || ***@wbpsystems.com ||
|| cusp || ***@macports.org,openmaintainer ||
|| DepreciateForLedger || ***@wbpsystems.com ||
|| docker || ||
|| docker-machine || ||
|| elixir || ***@milmazz.uno milmazz ||
|| expense.txt || ***@wbpsystems.com ||
|| faust-devel || ***@macports.org,***@gmail.com ||
|| faust2-devel || ***@macports.org,***@gmail.com ||
|| fbthrift || ***@macports.org,openmaintainer ||
|| fbthrift || ***@macports.org,openmaintainer ||
|| git-lfs || ***@macports.org raimue,openmaintainer ||
|| gst-plugins-cairovis || ***@macports.org lpsinger ||
|| GTDtoCSV || ***@wbpsystems.com ||
|| Gyoto || ***@macports.org,openmaintainer ||
|| HermesApp || ***@macports.org
ryandesign,openmaintainer ||
|| htcondor || ***@macports.org lpsinger ||
|| hub || ***@eitanadler.com ||
|| ifeffit || ***@nist.gov,openmaintainer ||
|| Io || ||
|| iTerm2 || ***@emer.net ||
|| jake || ***@macports.org,openmaintainer ||
|| just || ***@rodarmor.com ||
|| keybase || ***@macports.org,openmaintainer ||
|| keybinder || ***@macports.org,openmaintainer ||
|| keybinder-3.0 || ***@macports.org,openmaintainer ||
|| kops || pebrc,openmaintainer ||
|| LedgerScheduler || ***@wbpsystems.com ||
|| libcdata || ||
|| libcdatetime || ||
|| libcerror || ||
|| libcfile || ||
|| libclocale || ||
|| libcnotify || ||
|| libcsplit || ||
|| libcthreads || ||
|| libewf || ||
|| libgit2 || ***@macports.org,***@macports.org
dbevans ||
|| libiodbc || ***@macports.org,openmaintainer ||
|| libphonenumber-cpp || ***@macports.org dbevans,openmaintainer ||
|| litecoin || ***@macports.org,openmaintainer ||
|| lua-cgilua || ||
|| lua-rings || ||
|| lua-wsapi || ||
|| lua-xavante || ||
|| LucenePlusPlus || ||
|| mame || ||
|| meson || ||
|| mogenerator || ||
|| mongo-cxx-driver || ***@macports.org,openmaintainer ||
|| mongo-tools || ***@macports.org
ryandesign,openmaintainer ||
|| MongoHub || ***@macports.org,openmaintainer ||
|| mongrel2 || ||
|| mosesdecoder || ||
|| myrepos || ***@googlemail.com,openmaintainer ||
|| mythtv-core.25 || ***@macports.org,openmaintainer ||
|| mythtv-core.26 || ***@macports.org,openmaintainer ||
|| nu2 || ||
|| ocaml-async-core || ||
|| OpenCoarrays || ***@gmail.com ||
|| pear-TCPDF || ||
|| pficommon || ||
|| phoenix || ***@macports.org,openmaintainer ||
|| phpsh || ||
|| povray || ||
|| QGIS || ***@macports.org ||
|| QLStephen || ||
|| qoauth || ||
|| racer || ***@macports.org,openmaintainer ||
|| rclone || ***@macports.org,openmaintainer ||
|| rekall || ||
|| root5 || ***@macports.org cjones051073 ||
|| scm_breeze || ***@macports.org,openmaintainer ||
|| ShiftIt || ||
|| subsurface || ||
|| syncthing-0.14 || ***@schenkel.net,openmaintainer ||
|| synergy || ||
|| tbb || ***@mehta.io ||
|| tDOM || ***@wu.ac.at ||
|| teleport || ***@gmail.com gclawes,openmaintainer
||
|| texworks || ***@macports.org,openmaintainer ||
|| tidyp || ||
|| time.txt || ***@wbpsystems.com ||
|| todotxt || ***@macports.org,openmaintainer ||
|| tpkg || ***@aput.net,openmaintainer ||
|| uzbl || ***@macports.org
ryandesign,openmaintainer ||
|| webkit-sharp || ***@macports.org,openmaintainer ||
|| xctool || ***@macports.org,openmaintainer ||
|| xmlroff || ||
|| zorba || ||

I do not know if GitHub actually invalidated the generated tarballs from
their download caches, so the following might not be conclusive and
checksums that are deemed correct might be subject to change in the
future.

To track the progress, please do not edit above table as-is but remove
fixed ports from the `port` field in this ticket.

See also this similar report for Homebrew: https://github.com/Homebrew
/homebrew-core/issues/18044

For reference, above list was generated with these commands:
{{{
$ grep -l -R '^github\.setup' . | xargs -I{} sh -c 'basename $(dirname
{})' | while read port; do sudo port clean --all \; fetch --no-mirrors \
checksum || echo $port > github-failed.txt; done
$ while read port; do port info --line --name --maintainer $port; done <
<(sort -f github-failed.txt) | awk -F$'\t' '{printf "|| %-40s || %s ||\n",
$2, $1}'
}}}

--
Ticket URL: <https://trac.macports.org/ticket/54839>
MacPorts <https://www.macports.org/>
Ports system for macOS

MacPorts

2017-09-14 15:10:43 UTC