v27.2 guix build fails with hash mismatch

Sjors commented at 11:54 pm on November 10, 2024: member

Is there an existing issue for this?

I have searched the existing issues

Current behaviour

0git checkout v27.2
1./contrib/guix/guix-build
2...

This fails for gnutls-3.8.1.tar.xz.drv, so I run that one specifically:

 0$ guix build --cores=1 /gnu/store/b0cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv
 1The following derivation will be built:
 2  /gnu/store/b0cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv
 3building /gnu/store/b0cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv...
 4
 5Starting download of /gnu/store/rfq2b86kacgk0aslndpawk8gq912n9xj-gnutls-3.8.1.tar.xz
 6From http://artfiles.org/gnupg.org/gnutls/v3.8/gnutls-3.8.1.tar.xz...
 7download failed "http://artfiles.org/gnupg.org/gnutls/v3.8/gnutls-3.8.1.tar.xz" 404 "Not Found"
 8
 9Starting download of /gnu/store/rfq2b86kacgk0aslndpawk8gq912n9xj-gnutls-3.8.1.tar.xz
10From http://www.crysys.hu/gnutls/v3.8/gnutls-3.8.1.tar.xz...
11following redirection to `https://www.crysys.hu/gnutls/v3.8/gnutls-3.8.1.tar.xz'...
12downloading from http://www.crysys.hu/gnutls/v3.8/gnutls-3.8.1.tar.xz ...
13 gnutls-3.8.1.tar.xz  2KiB                                                                                        5.7MiB/s 00:00 ▕██████████████████▏ 100.0%
14sha256 hash mismatch for /gnu/store/rfq2b86kacgk0aslndpawk8gq912n9xj-gnutls-3.8.1.tar.xz:
15  expected hash: 1742jiigwsfhx7nj5rz7dwqr8d46npsph6b68j7siar0mqarx2xs
16  actual hash:   1jp7wmciqz9cmxvcqfn8lf2c0p8w6xp9xjrvk1z9lq0faswk2102
17hash mismatch for store item '/gnu/store/rfq2b86kacgk0aslndpawk8gq912n9xj-gnutls-3.8.1.tar.xz'
18build of /gnu/store/b0cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv failed
19View build log at '/var/log/guix/drvs/b0/cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv.gz'.
20guix build: error: build of `/gnu/store/b0cvv1d3kz4ilf14iz5b9iq4dafxcv4a-gnutls-3.8.1.tar.xz.drv' failed

Strange since there are quite a few v27.2 signatures: https://github.com/bitcoin-core/guix.sigs/tree/main/27.2

So if it’s an upstream issue, it must be very recent.

I have substitutes disabled.

Expected behaviour

Guix build to succeed.

Steps to reproduce

…

Relevant log output

No response

How did you obtain Bitcoin Core

Compiled from source

What version of Bitcoin Core are you using?

v27.2

Operating system and version

Ubuntu 24.10 (x86_64)

Machine specifications

No response

maflcko added the label Upstream on Nov 11, 2024

maflcko added the label Build system on Nov 11, 2024

maflcko commented at 7:12 am on November 11, 2024: member

sha256 hash mismatch for /gnu/store/rfq2b86kacgk0aslndpawk8gq912n9xj-gnutls-3.8.1.tar.xz: expected hash: 1742jiigwsfhx7nj5rz7dwqr8d46npsph6b68j7siar0mqarx2xs actual hash: 1jp7wmciqz9cmxvcqfn8lf2c0p8w6xp9xjrvk1z9lq0faswk2102

I’d say this is an upstream issue (of guix and gnutls). It would be good to notify either, or both. Also, it would be good to preserve the file, and compare it with the previous one.

fanquake commented at 12:23 pm on November 11, 2024: member

gnutls-3.8.1.tar.xz 2KiB

I’m guessing you got redirected to a bad mirror (or one what has since removed this file etc), and have downloaded a 404 page. The actual tarball should be 6mb. What happens if you retry until you hit a different mirror?

Strange since there are quite a few v27.2 signatures: https://github.com/bitcoin-core/guix.sigs/tree/main/27.2

Those builders could have had this package built & saved on disk from when 27.0 was released in April.

Sjors commented at 11:30 am on November 12, 2024: member

I ended up working around the issue by downloading the file elsewhere:

0guix download https://www.gnupg.org/ftp/gcrypt/gnutls/v3.8/gnutls-3.8.1.tar.xz

After that guix build is happy.

My guess is that .xy files have been purged from the internet left and right. Not sure if this is worth filing an upstream issue.

Sjors commented at 5:04 pm on November 12, 2024: member

I was able to do a complete guix build for v27.2: https://github.com/bitcoin-core/guix.sigs/pull/1433

Sjors closed this on Nov 12, 2024

Sjors commented at 5:38 pm on November 19, 2024: member

Noticed while setting up an new guix environment for #31323 that I needed a few more (starting at 1.4.0 installed on Ubuntu in a VM):

0guix download https://www.gnupg.org/ftp/gcrypt/gnutls/v3.7/gnutls-3.7.2.tar.xz
1guix download https://gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-1.8.8.tar.bz2
2guix download https://gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-1.42.tar.bz2

(will add more here if needed, still building)

Sjors commented at 5:52 pm on November 19, 2024: member

This could be a problem… I can’t find net-tools-1.60-0.479bb4a.zip.drv anywhere on the internet, so I had to copy it from my other guix machine instead.

So the problem may not be limited to backport releases like v27.2

v27.2 guix build fails with hash mismatch #31266