Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 567102 - lxqt-base/*: Manifest not updated, missing metadata.xml
Summary: lxqt-base/*: Manifest not updated, missing metadata.xml
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: All Linux
: Normal critical (vote)
Assignee: Patrice Clement
URL: https://archives.gentoo.org/gentoo-de...
Whiteboard:
Keywords:
: 567100 (view as bug list)
Depends on:
Blocks:
 
Reported: 2015-11-29 13:01 UTC by Priit Laes (IRC: plaes)
Modified: 2015-12-10 16:38 UTC (History)
4 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Priit Laes (IRC: plaes) 2015-11-29 13:01:47 UTC
When trying to upgrade lxqt-meta, I'm running into following issue:

>>> Emerging (1 of 19) lxqt-base/liblxqt-0.10.0::gentoo
 * Fetching files in the background.
 * To view fetch progress, run in another terminal:
 * tail -f /var/log/emerge-fetch.log
!!! Fetched file: liblxqt-0.10.0.tar.xz VERIFY FAILED!
!!! Reason: Insufficient data for checksum verification
!!! Got:
!!! Expected: MD5 RMD160 SHA1 SHA256 SHA512 WHIRLPOOL
 * Fetch failed for 'lxqt-base/liblxqt-0.10.0', Log file:
 *  '/var/tmp/portage/lxqt-base/liblxqt-0.10.0/temp/build.log'


It seems that Manifest is missing newer tarball info.
Comment 1 Alex Legler (RETIRED) archtester gentoo-dev Security 2015-11-29 13:35:28 UTC
*** Bug 567100 has been marked as a duplicate of this bug. ***
Comment 3 Priit Laes (IRC: plaes) 2015-11-29 14:01:54 UTC
Another package: lxqt-base/lxqt-globalkeys-0.10.0
Comment 4 Ulrich Müller gentoo-dev 2015-11-29 14:12:55 UTC
Repoman in the lxqt-base category reports:

  digest.missing [fatal]        15
   /repo/gentoo/lxqt-base/libsysstat::libsysstat-0.3.1.tar.xz
   /repo/gentoo/lxqt-base/lxqt-about::lxqt-about-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-admin::lxqt-admin-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-common::lxqt-common-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-config::lxqt-config-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-globalkeys::lxqt-globalkeys-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-notificationd::lxqt-notificationd-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-openssh-askpass::lxqt-openssh-askpass-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-panel::lxqt-panel-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-policykit::lxqt-policykit-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-powermanagement::lxqt-powermanagement-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-qtplugin::lxqt-qtplugin-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-runner::lxqt-runner-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-session::lxqt-session-0.10.0.tar.xz
   /repo/gentoo/lxqt-base/lxqt-sudo::lxqt-sudo-0.10.0.tar.xz
  metadata.missing [fatal]      1
   lxqt-base/lxqt-sudo/metadata.xml

Please be more careful when committing.
Comment 5 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2015-11-29 14:21:56 UTC
I'd say revert it all.
Comment 6 Ulrich Müller gentoo-dev 2015-11-29 14:25:00 UTC
Updated Manifest files and added a minimal metadata.xml for this package:

(In reply to Ulrich Müller from comment #4)
>   metadata.missing [fatal]      1
>    lxqt-base/lxqt-sudo/metadata.xml

Leaving this bug open; the lxqt team should update above metadata.
Comment 7 Michael Palimaka (kensington) gentoo-dev 2015-11-29 14:33:03 UTC
Someone (not lxqt team) randomly merged a github PR without even basic inspection of the contents.
Comment 8 Priit Laes (IRC: plaes) 2015-11-29 14:59:26 UTC
Another package (not inside lxqt-base):
  * x11-misc/pcmanfm-qt-0.10.0
Comment 9 Ulrich Müller gentoo-dev 2015-11-29 15:24:12 UTC
(In reply to Priit Laes (IRC: plaes) from comment #3)
> Another package: lxqt-base/lxqt-globalkeys-0.10.0

Fixed. (And BTW, I have verified the PGP signatures from https://downloads.lxqt.org/lxqt/0.10.0/ for all distfiles that I added to Manifest files.)


(In reply to Michael Palimaka (kensington) from comment #7)
> Someone (not lxqt team) randomly merged a github PR without even basic
> inspection of the contents.

In fact, two bad merge commits (both originating from github pull requests):
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f2034292b6921f6fd728b7b66c15e380131c708a
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=67efffaf060745a45680f01ab26a158fafe91a5e

The latter one was fixed independently by amynka.
Comment 10 Patrice Clement gentoo-dev 2015-12-10 16:38:35 UTC
Problem has been worked out since. Sorry for merging a PR I shouldn't have merged in the first place. I will be more careful next time. Closing this bug.