| Summary: | autogenerated Manifest files have wrong digest for sys-apps/busybox ebuilds | ||
|---|---|---|---|
| Product: | Gentoo Infrastructure | Reporter: | Lagu <felipematas> |
| Component: | Git | Assignee: | Gentoo Infrastructure <infra-bugs> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | normal | CC: | alex, ansla80, ap, bkohler, fkrogh, gef.kornflakes, gentoo, gentoo, iskatu, kripton, mail, peter_sliepenbeek, xaviermiller, zoltan |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: |
emerge --info
Manifest for comment 21 busybox manifest still failing busybox fail |
||
|
Description
Lagu
2015-11-13 20:13:10 UTC
Created attachment 416872 [details]
emerge --info
Same here. And now another version of the ebuild fails: !!! Digest verification failed: !!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8577 !!! Expected: 8579 Hmm, I just wonder why emerge fails for the checksum of an ebuild, that is not going to be merged in the failing version...? Security reasons I guess. This is the same as bug 565694, one user there is reporting it's recently fixed... can you guys try this in another hour or so (sync & try again) and we can either close the bug as fixed or reopen that other one? Thanks mm, i think we use this https://bugs.gentoo.org/show_bug.cgi?id=565694 for the 9999 ebuild, and this bug report for the 1.24.1. and i'm interested in this comment. (In reply to Andreas Prieß from comment #3) > And now another version of the ebuild fails: > > !!! Digest verification failed: > !!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild > !!! Reason: Filesize does not match recorded size > !!! Got: 8577 > !!! Expected: 8579 > > Hmm, I just wonder why emerge fails for the checksum of an ebuild, that is > not going to be merged in the failing version...? Security reasons I guess. It's the same issue. The manifest for the ebuild files is actually generated when the tree is exported from git to rsync mirrors, something is going wrong with that (automated) process. There is no human hand involved in that part, so it's not just that the maintainer forgot to update the manifest. I have tried to reproduce this on an up to date rsync tree and the issue seems solved from what I can see. Does anyone have a tree equal to or newer than.. #cat /usr/portage/metadata/timestamp.chk Fri, 13 Nov 2015 22:00:01 +0000 # ..which still has the problem? *** Bug 565722 has been marked as a duplicate of this bug. *** mm, the other post say its fixed but i still have the error (emaint sync -A)... I also still have the issue, also removed busybox from the tree and tried resyning but did not help.
# emerge -auDN system
These are the packages that would be merged, in order:
Calculating dependencies... done!
[ebuild R ] sys-apps/busybox-1.23.1-r1 USE="-pam*"
Would you like to merge these packages? [Yes/No] y
>>> Verifying ebuild manifests
!!! Digest verification failed:
!!! /usr/portage/sys-apps/busybox/busybox-9999.ebuild
!!! Reason: Filesize does not match recorded size
!!! Got: 8493
!!! Expected: 8580
ironman ~ # cat /usr/portage/metadata/timestamp.chk
Sat, 14 Nov 2015 08:00:01 +0000
still has pb sys-apps/busybox-1.23.1-r1::gentoo !!! Digest verification failed: !!! /portage/sys-apps/busybox/busybox-9999.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8493 !!! Expected: 8580 cat /portage/metadata/timestamp.chk Sat, 14 Nov 2015 07:45:01 +0000 Or, there IS something fishy going on. busybox would be a prime target to compromise. I can confirm this problem...I've also tried deleting my whole portage tree, doing emerge-webrsync, and emerge --sync, and it is still telling me digest verification is failing.. Still happening here, just ran emerge --sync about 3 minutes ago. !!! Digest verification failed: !!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8577 !!! Expected: 8579 duplicate of https://bugs.gentoo.org/show_bug.cgi?id=565694 ? livecd / # emerge =sys-apps/busybox-1.23.2
* IMPORTANT: 15 news items need reading for repository 'gentoo'.
* Use eselect news read to view new items.
Calculating dependencies... done!
>>> Verifying ebuild manifests
!!! Digest verification failed:
!!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild
!!! Reason: Filesize does not match recorded size
!!! Got: 8577
!!! Expected: 8579
Just tried too, still have the same problem. !!! Digest verification failed: !!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8577 !!! Expected: 8579 could be this? Bug 565574 - ChangeLogs are not included in Manifest (digest verification fails) base-system doesn't maintain the busybox package, but that is irrelevant here. Manifest files are automatically generated by infra scripts wrt ebuilds. please sync and re-confirm; I have added a further pass to validate all manifests in the tree before it goes out to the mirror fetch directory. If you do get the problem still: please attach/paste: 1. metadata/timestamp* 2. Manifest for the failing package 3. ls -lad on the failing directory 4. local checksums on the failing file P.S. You can run 'repoman manifest-check' at the toplevel $PORTDIR to check the entire tree locally, and see that everything is good. *** This bug has been marked as a duplicate of bug 565694 *** Still failing here: 1) Sun, 15 Nov 2015 13:45:01 +0000 2) see attachment 3) drwxr-xr-x 3 root root 4096 Nov 14 06:46 busybox/ 4) bafd909df6e48604f3b45978b03c2a130df9a111ebc9a21591d8356489018c09 busybox-1.21.0.ebuild e7ec5e23cf020fd23a0c9776300b0f0d5806f8805fe837ce23a82ee48264b179 busybox-1.23.1.ebuild a707b3617b5d29e272b61a086818dccf79c0c558bd8add293d3f07b3786e08f6 busybox-1.23.1-r1.ebuild 136860133f561919db31470600bf258e46f5b7ad41a278949f232936511ccad3 busybox-1.23.2.ebuild 31eaac028521cc6bd5f2b1e65cbc49a46d1e1bb1de5a0bcb52e5f110380ce66d busybox-1.24.1.ebuild c63a8a1e692e3db32065b7b6ea8a295815e7f18a8bc8d61467b317d2ba3ad8ce busybox-9999.ebuild Checksums match for busybox-1.21.0.ebuild and busybox-1.23.2.ebuild, but differ for all other. Created attachment 417016 [details] Manifest for comment 21 Created attachment 417038 [details]
busybox manifest still failing
This has been failing here all day. Attached is the responses to the questions above.
Created attachment 417048 [details]
busybox fail
(In reply to Robin Johnson from comment #20) still pb... repoman -p manifest-check RepoMan does a once-over of the neighborhood... !!! Digest verification failed: !!! /portage/sys-apps/busybox/busybox-1.24.1.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8577 !!! Expected: 8579 manifest.bad [fatal] 1 sys-apps/busybox/Manifest Please fix these important QA issues first. RepoMan sez: "Make your QA payment on time and you'll never see the likes of me." Sun, 15 Nov 2015 22:15:01 +0000 see attachment Attachment 417048 [details] I'm having the same problem. It's been going on for a few days now. !!! Digest verification failed: !!! /usr/portage/sys-apps/busybox/busybox-1.24.1.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8577 !!! Expected: 8579 timestamp.chk: Mon, 16 Nov 2015 08:00:01 +0000 ls -lad: drwxr-xr-x 3 portage portage 4096 Nov 16 08:12 . repoman results: RepoMan does a once-over of the neighborhood... !!! Digest verification failed: !!! /usr/portage/sys-apps/busybox/busybox-9999.ebuild !!! Reason: Filesize does not match recorded size !!! Got: 8493 !!! Expected: 8580 manifest.bad [fatal] 1 sys-apps/busybox/Manifest Please fix these important QA issues first. RepoMan sez: "Make your QA payment on time and you'll never see the likes of me." yes!
cat metadata/timestamp
Mon Nov 16 09:48:20 UTC 2015
repoman -p manifest-check
RepoMan does a once-over of the neighborhood...
Note: type "repoman full" for a complete listing.
RepoMan sez: "If everyone were like you, I'd be out of business!"
emerge -fvuND @world
These are the packages that would be fetched, in order:
Calculating dependencies... done!
[ebuild R ] sys-apps/busybox-1.23.1-r1::gentoo USE="ipv6 static syslog -debug -livecd -make-symlinks -math -mdev -pam* -savedconfig (-selinux) -sep-usr -systemd" 0 KiB
Total: 1 package (1 reinstall), Size of downloads: 0 KiB
>>> Fetching (1 of 1) sys-apps/busybox-1.23.1-r1::gentoo
* busybox-1.23.1.tar.bz2 SHA256 SHA512 WHIRLPOOL size ;-) ... [ ok ]
|
