Bug 44383

Summary:	Possibly bad digest entries for 'ltsp-core-4.0'
Product:	Gentoo Linux	Reporter:	Andy Romeril <aromeril>
Component:	Current packages	Assignee:	Heinrich Wendel (RETIRED) <lanius>
Status:	RESOLVED INVALID
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Andy Romeril 2004-03-11 11:54:34 UTC

When I attempt to update 'net-misc/ltsp-core-4.0', I get problems fetching the files 'ltsp-getltscfg-0.02-0-i386.tgz' and 'ltsp-pci_scan-0.02-0-i386.tgz'. The digest for the ebuild indicates different checksums and file sizes than what is available from both the ltsp main site (http://www.ltsp.org/) and several of the US download mirrors.

I get the following values for the files:

old: MD5 431b3afe8c6e62004387dcc846c43918 ltsp-getltscfg-0.02-0-i386.tgz 13752
new: MD5 bb3bd081883d97ea6dc0957e8104c2c4 ltsp-getltscfg-0.02-0-i386.tgz 13607

old: MD5 d5134a153c710fe6cd73178a67ba5974 ltsp-pci_scan-0.02-0-i386.tgz 2614
new: MD5 4735103a372cf791cb9840c77b7a415f ltsp-pci_scan-0.02-0-i386.tgz 2463

After modifying the digest with the "new" values, everything fetches OK.

Reproducible: Always
Steps to Reproduce:
1. emerge -f ltsp-core
2. get errors attempting to resume download - "file is already complete"
3. check project homepage and learn that sizes don't match digest for ebuild
4. fetch files manually, generate MD5 sums and update digest.
5. emerge -f ltsp-core -- now works OK

Comment 1 Heinrich Wendel (RETIRED) gentoo-dev

2004-03-14 04:02:11 UTC

it seems that they updated the files, but not the version number, i'll include the new files in a new version later, for now the old files are still on gentoo mirrors.

Comment 2 Andy Romeril 2004-03-14 12:38:13 UTC

While we are obviously unable to prevent another project from slipstreaming updates, I'm afraid I do not agree with your solution. If all mirrors specified in make.conf are unavailable (as was the case for me), then you will end up fetching the new files from the ltsp.org site or one of its mirrors, which will cause the problem I reported.

I feel that the current ebuild should be replaced with a new version and the old one removed along with a purge of the files replaced by the slipstream update from all Gentoo mirrors.

My 2 cents.

Comment 3 Heinrich Wendel (RETIRED) gentoo-dev

2004-03-15 02:10:51 UTC

we have our mirrors to workaround such situations, there are alot of packages that doesn't exist upstream anymore but on our mirrors, so you have to use our mirrors.