Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 585096 - games-rpg/runescape-launcher-2.2.2: invalid checksums
Summary: games-rpg/runescape-launcher-2.2.2: invalid checksums
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Games (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: Jack Coulter
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-06-05 10:52 UTC by fuse809
Modified: 2016-10-25 07:50 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Manifest (Manifest,1.49 KB, text/plain)
2016-06-14 10:11 UTC, Jack Coulter
Details

Note You need to log in before you can comment on or make changes to this bug.
Description fuse809 2016-06-05 10:52:11 UTC
games-rpg/runescape-launcher-2.2.2 has invalid checksums in its manifest, which is giving the output:

Calculating dependencies... done!

>>> Verifying ebuild manifests

>>> Emerging (1 of 1) games-rpg/runescape-launcher-2.2.2::gentoo
openpty failed: 'out of pty devices'
>>> Downloading 'http://content.runescape.com/downloads/ubuntu/pool/non-free/r/runescape-launcher/runescape-launcher_2.2.2_amd64.deb'
--2016-06-05 20:49:32--  http://content.runescape.com/downloads/ubuntu/pool/non-free/r/runescape-launcher/runescape-launcher_2.2.2_amd64.deb
Resolving content.runescape.com... 91.235.140.195, 91.235.140.194
Connecting to content.runescape.com|91.235.140.195|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2072196 (2.0M) [application/octet-stream]
Saving to: ‘/usr/portage/distfiles/runescape-launcher_2.2.2_amd64.deb’

     0K .......... .......... .......... .......... ..........  2% 72.3K 27s
    50K .......... .......... .......... .......... ..........  4%  146K 20s
   100K .......... .......... .......... .......... ..........  7% 3.28M 13s
   150K .......... .......... .......... .......... ..........  9% 3.13M 10s
   200K .......... .......... .......... .......... .......... 12%  154K 10s
   250K .......... .......... .......... .......... .......... 14%  149K 10s
   300K .......... .......... .......... .......... .......... 17% 3.35M 8s
   350K .......... .......... .......... .......... .......... 19% 1.82M 7s
   400K .......... .......... .......... .......... .......... 22%  144K 7s
   450K .......... .......... .......... .......... .......... 24% 4.84M 6s
   500K .......... .......... .......... .......... .......... 27% 2.73M 6s
   550K .......... .......... .......... .......... .......... 29%  155K 6s
   600K .......... .......... .......... .......... .......... 32%  169K 6s
   650K .......... .......... .......... .......... .......... 34%  883K 5s
   700K .......... .......... .......... .......... .......... 37% 1.28M 5s
   750K .......... .......... .......... .......... .......... 39%  168K 5s
   800K .......... .......... .......... .......... .......... 42% 3.35M 4s
   850K .......... .......... .......... .......... .......... 44%  941K 4s
   900K .......... .......... .......... .......... .......... 46%  172K 4s
   950K .......... .......... .......... .......... .......... 49% 1.03M 4s
  1000K .......... .......... .......... .......... .......... 51%  213K 4s
  1050K .......... .......... .......... .......... .......... 54%  781K 3s
  1100K .......... .......... .......... .......... .......... 56%  909K 3s
  1150K .......... .......... .......... .......... .......... 59%  218K 3s
  1200K .......... .......... .......... .......... .......... 61%  685K 3s
  1250K .......... .......... .......... .......... .......... 64%  945K 2s
  1300K .......... .......... .......... .......... .......... 66%  227K 2s
  1350K .......... .......... .......... .......... .......... 69%  660K 2s
  1400K .......... .......... .......... .......... .......... 71%  886K 2s
  1450K .......... .......... .......... .......... .......... 74%  207K 2s
  1500K .......... .......... .......... .......... .......... 76%  992K 2s
  1550K .......... .......... .......... .......... .......... 79%  915K 1s
  1600K .......... .......... .......... .......... .......... 81%  196K 1s
  1650K .......... .......... .......... .......... .......... 84%  598K 1s
  1700K .......... .......... .......... .......... .......... 86%  953K 1s
  1750K .......... .......... .......... .......... .......... 88%  197K 1s
  1800K .......... .......... .......... .......... .......... 91%  570K 1s
  1850K .......... .......... .......... .......... .......... 93%  299K 0s
  1900K .......... .......... .......... .......... .......... 96%  538K 0s
  1950K .......... .......... .......... .......... .......... 98%  555K 0s
  2000K .......... .......... ...                             100% 1.80M=6.1s

2016-06-05 20:49:39 (334 KB/s) - ‘/usr/portage/distfiles/runescape-launcher_2.2.2_amd64.deb’ saved [2072196/2072196]

!!! Fetched file: runescape-launcher_2.2.2_amd64.deb VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      2072196
!!! Expected: 2069098
Refetching... File renamed to '/usr/portage/distfiles/runescape-launcher_2.2.2_amd64.deb._checksum_failure_.s7krjk59'

!!! Couldn't download 'runescape-launcher_2.2.2_amd64.deb'. Aborting.
 * Fetch failed for 'games-rpg/runescape-launcher-2.2.2', Log file:
 *  '/var/tmp/portage/games-rpg/runescape-launcher-2.2.2/temp/build.log'

>>> Failed to emerge games-rpg/runescape-launcher-2.2.2, Log file:

>>>  '/var/tmp/portage/games-rpg/runescape-launcher-2.2.2/temp/build.log'

 * Messages for package games-rpg/runescape-launcher-2.2.2:

 * Fetch failed for 'games-rpg/runescape-launcher-2.2.2', Log file:
 *  '/var/tmp/portage/games-rpg/runescape-launcher-2.2.2/temp/build.log'

whenever I try to merge it.
Comment 1 Jonas Stein gentoo-dev 2016-06-05 13:18:48 UTC
# ebuild runescape-launcher-2.2.2.ebuild fetch

!!! Fetched file: runescape-launcher_2.2.2_amd64.deb VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      2072196
!!! Expected: 2069098
Comment 2 Jack Coulter 2016-06-06 00:00:27 UTC
Hmm. it looks like the upstream published has changed the deb without incrementing the version. What is the typical process to handle such a situation?
Comment 3 Jack Coulter 2016-06-06 00:01:08 UTC
s/published/publisher
Comment 4 Jonas Stein gentoo-dev 2016-06-06 09:28:00 UTC
I would contact the developer upstream. Explain very polite that we packed it for gentoo and changing the binary is problematic for packagers. This could prevent that you will have to do it again, if you are lucky.

Additionally try to find the differences and check, if the downloaded file is still clean: 
* gpg signature should be fine
* look for things that could harm the system. "If the size changed, is there a trojan horse included now?..."

You will have to rebuild the manifest after all checking; see also:

https://devmanual.gentoo.org/general-concepts/ebuild-revisions/index.html
https://devmanual.gentoo.org/ebuild-writing/file-format/index.html#file-naming-rules
https://devmanual.gentoo.org/ebuild-maintenance/index.html

You can get further help via gentoo irc chat.
Comment 5 Jack Coulter 2016-06-08 12:05:17 UTC
Thanks for the information Jonas, I will contact upstream about this.
Comment 6 Jack Coulter 2016-06-14 10:11:35 UTC
Created attachment 437500 [details]
Manifest

I've had a look at the current .deb on upstream's server, and seems the only changes are within the launcher binary itself.

Attached is a current manifest. I've not yet had any luck getting in touch with upstream over this issue, but I'll see if I can get in touch with them via other avenues.
Comment 7 stqn 2016-10-23 23:55:52 UTC
Hi, any luck getting this issue solved? It’s still impossible to install Runescape with the official ebuild.

!!! Fetched file: runescape-launcher_2.2.2_amd64.deb VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      2075536
!!! Expected: 2069098

The size changed again since the original bug report…
Comment 8 Patrice Clement gentoo-dev 2016-10-25 07:28:27 UTC
commit 24c93cfbf60e99253010f7ca85593f535b5b65fd (HEAD -> master, origin/master, origin/HEAD)
Author:     Patrice Clement <monsieurp@gentoo.org>
AuthorDate: Tue Oct 25 09:27:11 2016 +0200
Commit:     Patrice Clement <monsieurp@gentoo.org>
CommitDate: Tue Oct 25 09:27:53 2016 +0200

games-rpg/runescape-launcher: regenerate Manifest file.

Gentoo-Bug: https://bugs.gentoo.org/585096
Package-Manager: portage-2.3.0

games-rpg/runescape-launcher/Manifest | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Comment 9 Jack Coulter 2016-10-25 07:50:55 UTC
Thank you for updating the manifest, Patrice, my apologies for not getting back to this one sooner.

I attempted to contact Jagex (upstream publisher) requesting that they bump their version number when they change something, rather than replacing the existing deb, so as to aid packaging both for Gentoo and in general (I know the Arch folk are running into the same problem).

Unfortunately, I never received a reply to my initial direct message, nor to my follow-up post on the game's Reddit community (which is frequented by several Jagex staff).

With this in mind, and as we can't legally mirror their binaries, it seems that we've no alternative but to regenerate the manifest each time upstream alters the .deb on their server.