I ran a --sync on my macbook this morning:

[febe:~/Gentoo-10.10/usr/portage] fabian% cd scripts/rsync-generation
[febe:portage/scripts/rsync-generation] fabian% clang -o hashgen
-fopenmp -Wall -Werror -O3 -pipe -lssl -lcrypto -lb2 -lz `gpgme-config
--libs` hashgen.c
[febe:portage/scripts/rsync-generation] fabian% time ./hashgen hashverify
$EPREFIX/usr/portage
verifying /Users/fabian/Gentoo-10.10/usr/portage...
RSA key fingerprint 0204 A8AB D003 E57A 9558  850D BA08 091E C631 7B3C
good signature made 2018-03-01 06:58:17 UTC by
Gentoo Prefix Portage Snapshot Signing Key (Automated Signing Key)
scripts/Manifest.gz: stray file not in Manifest: hashgen
net-misc/srf-ip-conn-srv/Manifest: stray file not in Manifest:
srf-ip-conn-srv.pid
manifest verification failed
7.561u 18.643s 0:24.97 104.9%   0+0k 4+14143io 0pf+0w
[febe:portage/scripts/rsync-generation] fabian%

(both stray files are known issues at the moment, hashgen obviously I
just compiled in the tree, the .pid file is most probably a mistakenly
added file to git that should get resolved soon after some consensus is
reached)

If you could at least reproduce this, then we'd be on the same page.

Fabian


On 28-02-2018 19:50:34 +0100, Fabian Groffen wrote:
> Ok, the SphinxTrain you report, I had that too, and that was a bad sync.
> 
> So it seems I managed to break everyone's trees, and I need to bump
> mtime to get this fixed.
> 
> I'll see to incorporating your patch for Darwin.  I've just added more
> parallelism, and I believe hashverify is too fast to be correct (on a
> 6-core machine it does the tree in less than a second) at the moment,
> but I'm adding counters and shizzle to verify that it's actually doing
> something.
> 
> Fabian
> 
> 
> On 28-02-2018 19:38:58 +0100, Michael Weiser wrote:
> > Hi Fabian,
> > 
> > On Wed, Feb 28, 2018 at 04:58:34PM +0100, Fabian Groffen wrote:
> > 
> > > Can you give this another try now?  Many Manifests were not in sync, I'm
> > > trying to see if that is persistent or not, but I got a clean run here
> > > now.
> > 
> > I synced at about 19:05 CET from rsync2. gemato still fails:
> > 
> > ERROR:root:Manifest mismatch for app-pda/Manifest.gz
> >   BLAKE2B: expected: 
> > d8a3b53e76aff2866c747bf039ecad8961fad33c04c6f425f7ed826d8c4731c8baad5946747c131804b4e5c1f6c90bdbd49c0fa58f1921ed7f4c9e548fbc6631,
> >  have: 
> > 49cb3f4aa903adf238cb58f6590138b74f46277da12e0666da6983310663c25b659fa5d60658f8b6fd0285a9c6202bb521daa4d46e96b3469c764346794b4a59
> >   SHA512: expected: 
> > 429dde656d914b77698199a956b0b302fe96e55476022654384058840dbc1775ffae8d3a0f8953789ccefe1c47f6c1f9a26889858695c06b521dc965eaba8c13,
> >  have: 
> > c19984dab99d11b8b44b997dd275a5fac2d53c69420b1be27ef475b42241976d13eea0b24db5a7a510a2c60ebf1b43b943b5eb5b230dd313615886028744b6f8
> > 
> > And what's more: By accident I found that the Manifest of gentoo-keys
> > (of all the possible ebuilds) doesn't match the actual filesize:
> > 
> > !!! Digest verification failed:
> > !!! 
> > /usr/local/gentoo/usr/portage/app-crypt/gentoo-keys/gentoo-keys-201607021514-r2.ebuild
> > !!! Reason: Filesize does not match recorded size
> > !!! Got: 575
> > !!! Expected: 563
> > 
> > I also tried hashverify. It needed some minor darwin touches:
> > 
> > /usr/local/gentoo/usr/portage/scripts/rsync-generation/hashgen.c:102:24: 
> > error: no member named 'st_mtim' in 'struct stat'
> >         if (tv[1].tv_sec < s->st_mtim.tv_sec ||
> > 
> > st_mtim and st_atim are st_mtimespec and st_atimespec on darwin.
> > 
> > With that it compiles, verifies the GPG signature fine and then reports
> > hash mismatches like mad. I added a debug printf that shows the file
> > being processed and here's an example of what comes out:
> > 
> > RSA key fingerprint 0204 A8AB D003 E57A 9558  850D BA08 091E C631 7B3C
> > good signature made 2018-02-28 17:56:44 UTC by
> > Gentoo Prefix Portage Snapshot Signing Key (Automated Signing Key)
> > Processing /usr/local/gentoo/usr/portage//Manifest.files.gz
> > Processing /usr/local/gentoo/usr/portage//app-accessibility/Manifest.gz
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/SphinxTrain/Manifest
> > - BLAKE2B hash mismatch
> >               computed: 
> > 'ecf65f1f0f2cb75c2e8299819b14a9587869f7c3fb3ddbfe0dde6b4620cc4ecfedd3dfd62285f900c8f11f8b1ebcae68356a9e9371b0f20ed94eab50b3a09d59'
> >   recorded in manifest: 
> > 'e714ed5d44165ecc96e115f225e3fe1e63d45f12c59f1a96fcd2533b3cf39e7db3d329c71ca7445e16cff97b177d18520231f08303f65383fcb6c2f215c8113c'
> > - SHA512 hash mismatch
> >               computed: 
> > 'aa1a0a47856a8d05a6d94aa0622fd94ac528800f1d83d8909cc7372c05ad133689d02ea9851df41d25593bf3422c8c6ead83dd9ee286535856b6cd5699ef9514'
> >   recorded in manifest: 
> > 'a62a301c8d5486f4a29ad528ad2610cf681a9ec94769e2479403f302a256aad8f7f8773aa6a76f7aff10f490a1d100c21c2aa4fceffa214e6d1de3d544cf3f79'
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/accerciser/Manifest
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/accerciser/accerciser-3.22.0.ebuild
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/accerciser/metadata.xml
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/at-spi2-atk/Manifest
> > - BLAKE2B hash mismatch
> >               computed: 
> > '55b456c982be1452a9aec9cb5ba9cd0b406cb55d4ace6aba4b1387c2208fc6ddbaca3d14158d61d938dec3442d6b535a209198a080ee2585753461b3b2e36685'
> >   recorded in manifest: 
> > '4d9670351132d8f7716f841a1e7052e7517c0638e9f9a95a2f4a2de4d6af928994fc31f9aa796d33b3ae894c5f42c29a2eae4e69748f36203220e6d83bba5ed7'
> > - SHA512 hash mismatch
> >               computed: 
> > '368448746af5beec6778151629746488eb9ed6bd3f32cf032df662aeeec77b3e82e222adcde4c6ada3dea44e6ee8604b90bbaef17a2c7f9bbef9e7d4fbcf273a'
> >   recorded in manifest: 
> > 'bb2aa40d3871481a3c021d7ffb79c44ec0d350e1977cc29e946b06ad1a91a0f0a514324b4095f35250fbc4f95d5e12f7a0b526bcc3772a2ca6f23bddef26fe74'
> > Processing 
> > /usr/local/gentoo/usr/portage//app-accessibility/at-spi2-core/Manifest
> > - BLAKE2B hash mismatch
> >               computed: 
> > '47ca01b5215034b3166fa32f8f88837973aeb144806eb2e33c43a6aa495bc6337303f87289eb3ecc2838059702f8e89459560812f479106369d38f4851bdaf3f'
> >   recorded in manifest: 
> > '168fa7e833a3974820925cd84e68863ad64b3edc4b3b4ff9f78c59e1c6d49463c831493053756f039b5fc562a3ad2dfd37e29d26731510e3b8741c0ab6f5025c'
> > 
> > It seems most Manifests but not all and only Manifests are failing.
> > -- 
> > Michael
> > 
> 
> -- 
> Fabian Groffen
> Gentoo on a different level



-- 
Fabian Groffen
Gentoo on a different level

Attachment: signature.asc
Description: PGP signature

Reply via email to