[gentoo-user] Portage verification fails on games-action

[gentoo-user] Portage verification fails on games-action

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1314 bytes --]

Hi all,

Since portage-2.3.40 I have been getting verification failure for games-action 
on one PC only, which is sync'ed against my local mirror.  I've deleted /usr/
portage/games-action on the PC with this problem and resync'ed afresh with the 
local mirror, but it still fails like so:

# eix-sync
 * Running emerge --sync
>>> Syncing repository 'gentoo' into '/usr/portage'...
 * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
 * Refreshing keys from keyserver ...                                 [ ok ]
>>> Starting rsync with rsync://10.10.10.2/gentoo-portage...
[snip ...]

sent 27.82K bytes  received 4.21M bytes  1.21M bytes/sec
total size is 213.02M  speedup is 50.32          
 * Manifest timestamp: 2018-06-06 06:38:40 UTC   
 * Valid OpenPGP signature found:                
 * - primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
 * - subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
 * - timestamp: 2018-06-06 06:38:40 UTC          
 * Verifying /usr/portage ...!!! Manifest verification failed:
Manifest mismatch for games-arcade/Manifest.gz   
  __exists__: expected: True, have: False        
q: Updating ebuild cache in /usr/portage ...     
q: Finished 36924 entries in 0.300559 seconds         *

Why is this happening on one box only and how should I fix it?

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[hitachi303]

Am 06.06.2018 um 10:23 schrieb Mick:
> Hi all,
> 
> Since portage-2.3.40 I have been getting verification failure for games-action 
> on one PC only, which is sync'ed against my local mirror.  I've deleted /usr/
> portage/games-action on the PC with this problem and resync'ed afresh with the 
> local mirror, but it still fails like so:
> 
> # eix-sync
>  * Running emerge --sync
>>>> Syncing repository 'gentoo' into '/usr/portage'...
>  * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
>  * Refreshing keys from keyserver ...                                 [ ok ]
>>>> Starting rsync with rsync://10.10.10.2/gentoo-portage...
> [snip ...]
> 
> sent 27.82K bytes  received 4.21M bytes  1.21M bytes/sec
> total size is 213.02M  speedup is 50.32          
>  * Manifest timestamp: 2018-06-06 06:38:40 UTC   
>  * Valid OpenPGP signature found:                
>  * - primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
>  * - subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
>  * - timestamp: 2018-06-06 06:38:40 UTC          
>  * Verifying /usr/portage ...!!! Manifest verification failed:
> Manifest mismatch for games-arcade/Manifest.gz   
>   __exists__: expected: True, have: False        
> q: Updating ebuild cache in /usr/portage ...     
> q: Finished 36924 entries in 0.300559 seconds         *
> 
> Why is this happening on one box only and how should I fix it?

Hi,

Here is what I tryed:
"If you wish to disable it, you can disable the 'rsync-verify' USE flag
on sys-apps/portage
or set 'sync-rsync-verify-metamanifest = no' in your repos.conf."
The second option didn't work for me. Anyway I only did this because I
trust my own local mirror. I am sure there is a better way to do this.

Regards

Re: [gentoo-user] Portage verification fails on games-action

[Mick]

[-- Attachment #1: Type: text/plain, Size: 2259 bytes --]

On Wednesday, 6 June 2018 09:58:34 BST hitachi303 wrote:
> Am 06.06.2018 um 10:23 schrieb Mick:
> > Hi all,
> > 
> > Since portage-2.3.40 I have been getting verification failure for
> > games-action on one PC only, which is sync'ed against my local mirror. 
> > I've deleted /usr/ portage/games-action on the PC with this problem and
> > resync'ed afresh with the local mirror, but it still fails like so:
> > 
> > # eix-sync
> > 
> >  * Running emerge --sync
> >  
> >>>> Syncing repository 'gentoo' into '/usr/portage'...
> >  
> >  * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
> >  * Refreshing keys from keyserver ...                                 [ ok
> >  ]
> >  
> >>>> Starting rsync with rsync://10.10.10.2/gentoo-portage...
> > 
> > [snip ...]
> > 
> > sent 27.82K bytes  received 4.21M bytes  1.21M bytes/sec
> > total size is 213.02M  speedup is 50.32
> > 
> >  * Manifest timestamp: 2018-06-06 06:38:40 UTC
> >  * Valid OpenPGP signature found:
> >  * - primary key: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
> >  * - subkey: E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
> >  * - timestamp: 2018-06-06 06:38:40 UTC
> > 
> >  * Verifying /usr/portage ...!!! Manifest verification failed:
> > Manifest mismatch for games-arcade/Manifest.gz
> > 
> >   __exists__: expected: True, have: False
> > 
> > q: Updating ebuild cache in /usr/portage ...
> > q: Finished 36924 entries in 0.300559 seconds         *
> > 
> > Why is this happening on one box only and how should I fix it?
> 
> Hi,
> 
> Here is what I tryed:
> "If you wish to disable it, you can disable the 'rsync-verify' USE flag
> on sys-apps/portage
> or set 'sync-rsync-verify-metamanifest = no' in your repos.conf."
> The second option didn't work for me. Anyway I only did this because I
> trust my own local mirror. I am sure there is a better way to do this.
> 
> Regards

Thanks hitachi303,

The lack of checksum verification and some had argued also a comparison 
between two different mirrors, is an identified security weakness of Gentoo 
since its early days.  I remember a mirror had been compromised in the early 
2000s and people had to rebuild their systems.

I would rather not disable portage verification, but fix what's wrong with one 
PC.
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Neil Bothwick]

[-- Attachment #1: Type: text/plain, Size: 565 bytes --]

On Wed, 06 Jun 2018 10:33:19 +0100, Mick wrote:

> I would rather not disable portage verification, but fix what's wrong
> with one PC.

If you are running multiple Gentoo PCs on the same network, it would make
sense to use one as a portage mirror, then you only need verification on
that PC. Not that this fixes your problem, I'd start by looking at
differences in make.conf between the systems, are they using the same
mirrors? Are there any differences in RSYNC* settings?


-- 
Neil Bothwick

Caution, an incorrigible punster - don't incorrige.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Mick]

[-- Attachment #1: Type: text/plain, Size: 1444 bytes --]

On Wednesday, 6 June 2018 13:18:18 BST Neil Bothwick wrote:
> On Wed, 06 Jun 2018 10:33:19 +0100, Mick wrote:
> > I would rather not disable portage verification, but fix what's wrong
> > with one PC.
> 
> If you are running multiple Gentoo PCs on the same network, it would make
> sense to use one as a portage mirror, then you only need verification on
> that PC. Not that this fixes your problem, I'd start by looking at
> differences in make.conf between the systems, are they using the same
> mirrors? Are there any differences in RSYNC* settings?

Thanks Neil, when on my LAN I use one PC as a local mirror, when away I use 
public gentoo mirrors.  The verification is failing when sync'ing with either.

Your pointer for RSYNC* proved useful.  At some point in the past I must have 
decided rsync was taking an awful long time sync'ing the games directories.  
Since I don't emerge or play games I had added this entry in my make.conf:

$ grep RSYNC_ /etc/make.conf
PORTAGE_RSYNC_RETRIES="3"
PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes"

$ cat /etc/portage/rsync_excludes
games-*/*

Once I commented this option out the verification succeeded.  So ... this 
verification problem seems to be caused by my intentional exclusion of games 
from sync'ing.

Does this mean I won't be able to exclude games hereafter if I want to verify 
portage's contents, or is there a different approach required?

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Neil Bothwick]

[-- Attachment #1: Type: text/plain, Size: 1248 bytes --]

On Wed, 06 Jun 2018 16:38:52 +0100, Mick wrote:

> Your pointer for RSYNC* proved useful.  At some point in the past I
> must have decided rsync was taking an awful long time sync'ing the
> games directories. Since I don't emerge or play games I had added this
> entry in my make.conf:
> 
> $ grep RSYNC_ /etc/make.conf
> PORTAGE_RSYNC_RETRIES="3"
> PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes"
> 
> $ cat /etc/portage/rsync_excludes
> games-*/*

I wondered if it might be something like that.
 
> Once I commented this option out the verification succeeded.  So ...
> this verification problem seems to be caused by my intentional
> exclusion of games from sync'ing.
> 
> Does this mean I won't be able to exclude games hereafter if I want to
> verify portage's contents, or is there a different approach required?

As long as it only fails on verification of games-* I don't see a
problem, unless you are relying on a zero return code from emerge --sync.

Does gasmes-* still take a long time to sync? I wouldn't have thought
there would be a lot of changes in there compared with other sections,
such as kde-*.


-- 
Neil Bothwick

If you don't pay your exorcist, you get repossessed.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Mick]

[-- Attachment #1: Type: text/plain, Size: 655 bytes --]

On Thursday, 7 June 2018 22:05:27 BST Neil Bothwick wrote:
> As long as it only fails on verification of games-* I don't see a
> problem, unless you are relying on a zero return code from emerge --sync.

If it fails at games-* and stops the verification there, how will I know if 
subsequent directories are valid?


> Does gasmes-* still take a long time to sync? I wouldn't have thought
> there would be a lot of changes in there compared with other sections,
> such as kde-*.

Compared to the time penalty my old CPU suffers to undertake the portage 
verification, you are right, any games-* induced delay is now imperceptible.  
:-)

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Neil Bothwick]

[-- Attachment #1: Type: text/plain, Size: 469 bytes --]

On Thu, 07 Jun 2018 23:42:50 +0100, Mick wrote:

> > As long as it only fails on verification of games-* I don't see a
> > problem, unless you are relying on a zero return code from emerge
> > --sync.  
> 
> If it fails at games-* and stops the verification there, how will I
> know if subsequent directories are valid?

Ah, it bails at the first failure? That would be a problem.


-- 
Neil Bothwick

Profanity, The Language of Computer Professionals.

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: [gentoo-user] Portage verification fails on games-action

[Kai Peter]

On 2018-06-07 23:05, Neil Bothwick wrote:
> On Wed, 06 Jun 2018 16:38:52 +0100, Mick wrote:
> 
>> Your pointer for RSYNC* proved useful.  At some point in the past I
>> must have decided rsync was taking an awful long time sync'ing the
>> games directories. Since I don't emerge or play games I had added this
>> entry in my make.conf:
>> 
>> $ grep RSYNC_ /etc/make.conf
>> PORTAGE_RSYNC_RETRIES="3"
>> PORTAGE_RSYNC_EXTRA_OPTS="--exclude-from=/etc/portage/rsync_excludes"
>> 
>> $ cat /etc/portage/rsync_excludes
>> games-*/*
> 
> I wondered if it might be something like that.
> 
>> Once I commented this option out the verification succeeded.  So ...
>> this verification problem seems to be caused by my intentional
>> exclusion of games from sync'ing.
>> 
>> Does this mean I won't be able to exclude games hereafter if I want to
>> verify portage's contents, or is there a different approach required?
> 
> As long as it only fails on verification of games-* I don't see a
> problem, unless you are relying on a zero return code from emerge 
> --sync.
> 
> Does gasmes-* still take a long time to sync? I wouldn't have thought
> there would be a lot of changes in there compared with other sections,
> such as kde-*.

I got the same issue and it doesn't depend on games*. Verification fails 
at the first excluded category in the order listed in the metamanifest.

regards
Kai
-- 
Sent with eQmail-1.11 beta