Re: hash mismatch on permanently moved URL

[Ludovic Courtès]

Hi Giovanni,

Giovanni Biscuolo <g@xelera.eu> skribis:

> yesterday I installed a new Guix System (on iron) using the installer
> (latest stable
> https://ftp.gnu.org/gnu/guix/guix-system-install-1.1.0.x86_64-linux.iso.xz
> on USB)
>
> The installation is fine but when I try to guix pull I get this:
>
>
> ~$ sudo -i guix pull
> Updating channel 'guix' from Git repository at 
> 'https://git.savannah.gnu.org/git/guix.git'...
> Building from this channel:
>   guix      https://git.savannah.gnu.org/git/guix.git   b919d40
> building 
> /gnu/store/f99dg2cqqlskh5q07l9dw5la7l5s28lq-libgcrypt-1.8.4.tar.bz2.drv...
> downloading from 
> https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.4.tar.bz2...
> building /gnu/store/4582v7day5c4v9qaidlkwmd6kllks2y4-icu4c-64_2-src.tgz.drv...
> downloading from 
> http://download.icu-project.org/files/icu4c/64.2/icu4c-64_2-src.tgz...
> |sha256 hash mismatch for 
> /gnu/store/0zh5mvhgcx0198k7j6p5pgrc5krgxyqj-icu4c-64_2-src.tgz:
>   expected hash: 0v0xsf14xwlj125y9fd8lrhsaych4d8liv8gr746zng6g225szb2
>   actual hash:   1qfbm2kh7hzd8752rky9dzis8qhgkhs6dkq71k8zar8y74nz7265
> hash mismatch for store item 
> '/gnu/store/0zh5mvhgcx0198k7j6p5pgrc5krgxyqj-icu4c-64_2-src.tgz'
> build of /gnu/store/4582v7day5c4v9qaidlkwmd6kllks2y4-icu4c-64_2-src.tgz.drv 
> failed

I looked into this.  Following
<http://data.guix.gnu.org/repository/1/branch/master/package/icu4c> I
found a revision around the one you were using and then reproduced the
issue using:

  guix time-machine --commit=897f303d2fa61497a931cf5fcb43349eb5f44c14 -- \
    build -S icu4c@62.1 --check

(In the meantime, I had to fix <https://issues.guix.gnu.org/42519>…)

The core issue is that the web server returns 200 instead of 404:

--8<---------------cut here---------------start------------->8---
$ wget --debug -O /tmp/tgz 
http://site.icu-project.org/download/#/icu4c/62.1/icu4c-62_1-src.tgz
Setting --output-document (outputdocument) to /tmp/tgz
Setting --output-document (outputdocument) to /tmp/tgz
DEBUG output created by Wget 1.20.3 on linux-gnu.

Reading HSTS entries from /home/ludo/.wget-hsts
URI encoding = 'UTF-8'
--2020-07-24 17:14:24--  http://site.icu-project.org/download/
Ni solvigas site.icu-project.org (site.icu-project.org)... 
2a00:1450:4007:810::2013, 216.58.213.147
Caching site.icu-project.org => 2a00:1450:4007:810::2013 216.58.213.147
Konektado al site.icu-project.org 
(site.icu-project.org)|2a00:1450:4007:810::2013|:80... konektita.
Created socket 4.
Releasing 0x00000000016bf6a0 (new refcount 1).

---request begin---
GET /download/ HTTP/1.1
User-Agent: Wget/1.20.3 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: site.icu-project.org
Connection: Keep-Alive

---request end---
HTTP peto sendita, ni atendas respondon...
---response begin---
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-Robots-Tag: noarchive
Last-Modified: Wed, 22 Jul 2020 18:34:34 GMT
Expires: Fri, 24 Jul 2020 15:14:24 GMT
Date: Fri, 24 Jul 2020 15:14:24 GMT
Cache-Control: private, max-age=5
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Accept-Ranges: none
Vary: Accept-Encoding
Transfer-Encoding: chunked

---response end---
200 OK
Registered socket 4 for persistent reuse.
URI content encoding = 'utf-8'
Grando: nespecifita [text/html]
Ni konservas al: '/tmp/tgz'

/tmp/tgz                                             [ <=>                      
                                                                                
 ]  44.43K  --.-KB/s    en 0.04s

2020-07-24 17:14:24 (1006 KB/s) - '/tmp/tgz' konservita [45498]

$ file /tmp/tgz
/tmp/tgz: HTML document, UTF-8 Unicode text, with very long lines
--8<---------------cut here---------------end--------------->8---

Someone™ should contact the icu-project.org admins.

The other issue is <https://issues.guix.gnu.org/28659>, which still
deserves a fix.

Anyway, the file is available at
<https://ci.guix.gnu.org/file/icu4c-62_1-src.tgz/sha256/18ssgnwzzpm1g1fvbm9h1fvryiwxvvn5wc3fdakdsl33cs6qdn9x>.

Thanks,
Ludo’.