Hi,

Victor Veilblight via Bug reports for GNU Guix <[email protected]>
writes:

> On current Guix master (2a53bb66807bd874bb974e2089968dcbde3c8aa0),
> guix build llama-cpp fails because the downloaded UI release asset no
> longer matches the recorded hash.
>
> The following derivations will be built:
>   /gnu/store/scawzp2hmjmh3j4d2y69km7x7q320gss-ui.tar.gz.drv
>   /gnu/store/bp12iak7c0wh78w3ygi10spcwnhfkp6n-llama-cpp-0.0.0-9561.drv
>
> building /gnu/store/scawzp2hmjmh3j4d2y69km7x7q320gss-ui.tar.gz.drv...
> |sha256 hash mismatch for 
> /gnu/store/h9jjzggvdlsby40y9rcqfhmxqqk6wsd3-ui.tar.gz:
>   expected hash: 1rqgq5nfw0wbym3gz2ivhrpl69b4fpl6my6nnnr1cbdd6x1mvz44
>   actual hash:   0pkjyr2qgln9rpibhysy012hasj5wrkwl3zlbryv3dblzaziqmbg
> hash mismatch for store item 
> '/gnu/store/h9jjzggvdlsby40y9rcqfhmxqqk6wsd3-ui.tar.gz'
> build of /gnu/store/scawzp2hmjmh3j4d2y69km7x7q320gss-ui.tar.gz.drv failed
> View build log at 
> '/var/log/guix/drvs/sc/awzp2hmjmh3j4d2y69km7x7q320gss-ui.tar.gz.drv.gz'.
> cannot build derivation
> `/gnu/store/bp12iak7c0wh78w3ygi10spcwnhfkp6n-llama-cpp-0.0.0-9561.drv':
> 1 dependencies couldn't be built
> guix home: error: build of 
> `/gnu/store/bp12iak7c0wh78w3ygi10spcwnhfkp6n-llama-cpp-0.0.0-9561.drv' failed
>
> The URL is:
> https://github.com/ggml-org/llama.cpp/releases/download/b9561/llama-b9561-ui.tar.gz
>
> guix download computes the same "actual" hash, suggesting the upstream
> GitHub release asset has been replaced.

Would you be able to diff the old and new source tarball, just to make
sure nothing nefarious was slipped in?

-- 
Thanks,
Maxim



Reply via email to