Bug 930364 – app-text/highlight-4.9 - Unsigned distfiles found

• Status: CONFIRMED
• Product: Gentoo Linux

[Description Toralf Förster 2024-04-21 08:58:12 UTC]

 * FEATURES:   network-sandbox preserve-libs sandbox test userpriv usersandbox
 * Using lua5.1 to build
>>> Unpacking source...
 * The following distfiles lack detached signatures:
 *   highlight-test-suite-a3479468672cdbc570a17ae84e047fe8f0b88798.tar.bz2
 * ERROR: app-text/highlight-4.9::gentoo failed (unpack phase):
 *   Unsigned distfiles found
 * 
 * Call stack:

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 23.0_desktop_plasma_test-20240419-193003

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-14 *
clang/llvm (if any):
clang version 17.0.6
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/lib/llvm/17/bin
Configuration file: /etc/clang/x86_64-pc-linux-gnu-clang.cfg
/usr/lib/llvm/17
17.0.6
Python 3.11.8
Available Rust versions:
  [1]   rust-bin-1.77.1 *
php cli (if any):
go version go1.22.2 linux/amd64

  HEAD of ::gentoo
commit 544454347f42b30a3f6b11ac18de5a9a962b521f
Author: Repository mirror & CI <[e-mail]>
Date:   Sun Apr 21 00:49:20 2024 +0000

    2024-04-21 00:49:19 UTC

emerge -qpvO app-text/highlight
[ebuild  N    ] app-text/highlight-4.9  USE="gui verify-sig -examples -test" LUA_SINGLE_TARGET="lua5-1 -lua5-3 -lua5-4 -luajit"

[Comment 1 Toralf Förster 2024-04-21 08:58:13 UTC]

Created attachment 891251 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2024-04-21 08:58:13 UTC]

Created attachment 891252 [details]
app-text:highlight-4.9:20240421-030721.log

[Comment 3 Toralf Förster 2024-04-21 08:58:15 UTC]

Created attachment 891253 [details]
emerge-history.txt

[Comment 4 Toralf Förster 2024-04-21 08:58:16 UTC]

Created attachment 891254 [details]
environment

[Comment 5 Toralf Förster 2024-04-21 08:58:17 UTC]

Created attachment 891255 [details]
etc.clang.tar.xz

[Comment 6 Toralf Förster 2024-04-21 08:58:18 UTC]

Created attachment 891256 [details]
etc.portage.tar.xz

[Comment 7 Toralf Förster 2024-04-21 08:58:19 UTC]

Created attachment 891257 [details]
logs.tar.xz

[Comment 8 Toralf Förster 2024-04-21 08:58:20 UTC]

Created attachment 891258 [details]
qlist-info.txt

[Comment 9 Florian Schmaus 2024-04-21 09:30:24 UTC]

Huh? I see

DIST highlight-test-suite-a3479468672cdbc570a17ae84e047fe8f0b88798.tar.bz2 33310 BLAKE2B a06f2503fc571f5978f648fdc677f58f3fdfa759f9b5cf31a85d03589bbbfd2b56c7055517c59292369653503047af63d9c3bfbbe541a50bd2ea2adede28f60c SHA512 9583fe0af315e0dd1e37e137adf5c97a83832885a5a8a12b91790d7d7b0758c03fd76c02fbda368a2481eaec98f7b010a530bc31da98337d6fa7201aadb023ce

in the Manifest file. It was added by 321559cd73ab ("app-text/highlight: wire up tests")

[Comment 10 Florian Schmaus 2024-04-21 10:14:45 UTC]

As pointed out by sam, this is about verify-sig and not the Manifest. And indeed, the test-suite tar is missing a signature while one is expected by verify-sig.