Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 950098 - dev-lang/rust-1.86.0_beta20250218[verify-sig] build failure "Unsigned distfiles found"
Summary: dev-lang/rust-1.86.0_beta20250218[verify-sig] build failure "Unsigned distfil...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Rust Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-02-22 09:25 UTC by John Turner
Modified: 2025-02-22 22:08 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (build.log,2.65 KB, application/zip)
2025-02-22 09:26 UTC, John Turner
Details

Note You need to log in before you can comment on or make changes to this bug.
Description John Turner 2025-02-22 09:25:47 UTC
rust 1.86.0 fails to emerge with an error "die "Unsigned distfiles found"".

Reproducible: Always

Steps to Reproduce:
1.emerge dev-lang/rust:1.86.0
2.
3.
Actual Results:  
Fails to build.

Expected Results:  
Build succeeds.
Comment 1 John Turner 2025-02-22 09:26:13 UTC
Created attachment 919659 [details]
build.log
Comment 2 John Turner 2025-02-22 09:28:11 UTC
I probably should have put the full version in the bug title: dev-lang/rust-1.86.0_beta20250218
Comment 3 Zhixu Liu 2025-02-22 11:40:54 UTC Comment hidden (obsolete)
Comment 4 Zhixu Liu 2025-02-22 11:53:02 UTC
(In reply to Zhixu Liu from comment #3)
> I can't reproduce this, but with a different error:
> 
> >>> Source configured.

please ignore, I thought I've enabled USE="verify-sig", but apparentaly it's not true, sorry for the confusion.

I've reproduced this after enable USE="verify-sig".
Comment 5 Zhixu Liu 2025-02-22 12:00:31 UTC
maybe the patch should be put in ${FILESDIR} instead of ${DISTDIR}?
Comment 6 Alfred Wingate 2025-02-22 12:07:21 UTC
(In reply to Zhixu Liu from comment #5)
> maybe the patch should be put in ${FILESDIR} instead of ${DISTDIR}?

The other solution is to explicitly write out the verify-sig commands instead of relying on verify-sig_src_unpack. Would make sense as there is only one upstream archive getting fetched.
Comment 7 Larry the Git Cow gentoo-dev 2025-02-22 22:08:11 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=63523556dbd35468f27415b1a9d6f9a3b4015685

commit 63523556dbd35468f27415b1a9d6f9a3b4015685
Author:     Matt Jolly <kangie@gentoo.org>
AuthorDate: 2025-02-22 22:04:19 +0000
Commit:     Matt Jolly <kangie@gentoo.org>
CommitDate: 2025-02-22 22:07:07 +0000

    dev-lang/rust: add manual verify-sig handling to 1.86.0_beta20250218
    
    As we fetch a patch from GitHub we can't verify that and instead we
    need to not use the default 'verify everything' logic.
    
    Closes: https://bugs.gentoo.org/950098
    Signed-off-by: Matt Jolly <kangie@gentoo.org>

 dev-lang/rust/rust-1.86.0_beta20250218.ebuild | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)