From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-dev+bounces-100828-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (2048 bits))
	(No client certificate requested)
	by finch.gentoo.org (Postfix) with ESMTPS id 1083C158013
	for <garchives@archives.gentoo.org>; Mon, 11 Dec 2023 10:56:47 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 97FD32BC01D;
	Mon, 11 Dec 2023 10:56:42 +0000 (UTC)
Received: from smtp.gentoo.org (woodpecker.gentoo.org [140.211.166.183])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 4E1702BC017
	for <gentoo-dev@lists.gentoo.org>; Mon, 11 Dec 2023 10:56:42 +0000 (UTC)
User-agent: mu4e 1.10.8; emacs 30.0.50
From: Arsen =?utf-8?Q?Arsenovi=C4=87?= <arsen@gentoo.org>
To: gentoo-dev <gentoo-dev@lists.gentoo.org>, Daniel =?utf-8?Q?Ekl=C3=B6f?=
 <daniel@ekloef.se>
Subject: [gentoo-dev] heads up: codeberg changed gzip impls (?) for
 ${REPO}/archive/${TAG}.tar.gz files
Date: Mon, 11 Dec 2023 11:47:17 +0100
Organization: Gentoo
Message-ID: <86h6kpaty4.fsf@gentoo.org>
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-to: gentoo-dev@lists.gentoo.org
X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
	micalg=pgp-sha512; protocol="application/pgp-signature"
X-Archives-Salt: 7a3355c8-0b0d-48bb-aa86-b993cf6daa96
X-Archives-Hash: 6d143f99cbce3d83328c82fa8be765cd

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

hi,

it seems that codeberg has changed how they produce their archives on
URLs like <https://codeberg.org/dnkl/foot/archive/${tag}.tar.gz> leading
to digest failures like <https://bugs.gentoo.org/919135>, as implied by
the following checks:

  ~$ diff <(<dls/foot-1.16.2.tar.gz gzip -d) <(</var/cache/distfiles/foot-1=
.16.2.tar.gz gzip -d)
  ~$ diff <(<dls/foot-1.16.2.tar.gz cat) <(</var/cache/distfiles/foot-1.16.=
2.tar.gz cat)
  Binary files /dev/fd/63 and /dev/fd/62 differ

the above shows that compressed content differs while decompressed
content remains identical.

(dls/foot-1.16.2.tar.gz is downloaded from the master distfiles mirror,
/var/cache/distfiles/foot-1.16.2.tar.gz is fetched from codeberg at
around two in the morning last night)

you might want to regenerate manifests for projects fetching from
/archive/ urls on codeberg.

Daniel, thank you for working on foot.  may I ask that you attach 'meson
dist'-generated files to releases?  you could also use that opportunity
to hash or sign them, if you so desire.

in either case, thank you again.

have a lovely day, all!
=2D-=20
Arsen Arsenovi=C4=87

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iOcEARYKAI8WIQT+4rPRE/wAoxYtYGFSwpQwHqLEkwUCZXbq418UgAAAAAAuAChp
c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0RkVF
MkIzRDExM0ZDMDBBMzE2MkQ2MDYxNTJDMjk0MzAxRUEyQzQ5MxEcYXJzZW5AZ2Vu
dG9vLm9yZwAKCRBSwpQwHqLEk8+9AQCVEzY0k6ZUh5qFZvkta7SNtaFmLEH7lXL3
1qDiLUdU6wEA1fGy3CEQ/XxxM5E9FrqIyqQ+JZOY565QxKZM2VLSYwY=
=H7Mp
-----END PGP SIGNATURE-----
--=-=-=--