Can you give this another try now? Many Manifests were not in sync, I'm trying to see if that is persistent or not, but I got a clean run here now.
Fabian On 20-02-2018 20:25:33 +0100, Michael Weiser wrote: > Hi Fabian, > > On Fri, Feb 02, 2018 at 09:06:34PM +0100, Fabian Groffen wrote: > > > > does it make sense to look into using gemato for repo verification or is > > > there a reason this cannot work currently? > > > It should, but I didn't get around to it. > > I finally got around to trying gemato on my Mac. It sets off fine but > immediately fails on sys-apps/Manifest.gz: > > $ gemato verify -K /Users/michael/b/pubring.gpg /usr/local/gentoo/usr/portage/ > INFO:root:Refreshing keys from keyserver... > INFO:root:Keys refreshed. > INFO:root:Manifest timestamp: 2018-02-19 17:28:21 UTC > INFO:root:Valid OpenPGP signature found: > INFO:root:- primary key: 0204A8ABD003E57A9558850DBA08091EC6317B3C > INFO:root:- subkey: 0204A8ABD003E57A9558850DBA08091EC6317B3C > INFO:root:- timestamp: 2018-02-19 17:28:21 UTC > INFO:root:Verifying /usr/local/gentoo/usr/portage/... > ERROR:root:Manifest mismatch for sys-apps/Manifest.gz > BLAKE2B: expected: > 304895d779741fedeaac05df18857d5b0c1afa23220e6e578bd7ddca53f6d4781751881f13c59c361f3a225c7c8290cfa2ae278c779ad4c68a938b9336ebc999, > have: > e2260c115b7886ac16e74a8c981f3830650c018aa2d1566947b7eee2463eb8c56a5d5be3d30f324b239b3f9899b1781fe6f11c3bfb482bebb8df48e09e15ef43 > SHA512: expected: > 0985d753fcb39735651606c30dbe9335d6d82569ca0e6ac766f268f5fd8d3df40e9f2664c145c752bb9c7c09a06f7766bc9fdb42a37809e62ea6462743bde2c6, > have: > 9d60081f638b5678780c21f698f0ee56cd4fa4dfe3d89a6c38403a37bd6cd782181fe0368af597d316f110e82c61cc8770346007a2a63dad90b7bac555c277eb > > I can reproduce the discrepancy with sha512sum and b2sum. > > Is it possible that prefix's tree isn't fully rehashed and resigned > after changes? > > > Instead I want to use my own > > C-based tool, but I also didn't get around to getting it ready. > > Is it available somewhere to try out? > -- > Thanks, Michael > -- Fabian Groffen Gentoo on a different level
signature.asc
Description: PGP signature
