Re: nss-certs: hash mismatch on berlin

[Björn Höfling]

Hi Ludo,

On Thu, 25 Jul 2019 19:10:11 +0200
Ludovic Courtès <address@hidden> wrote:

> Hello,
> 
> Björn Höfling <address@hidden> skribis:
> 
> > Hi Ludo,
> > Hi Guix,
> >
> > while trying to build a new installer-image, I encountered:
> >
> >  nss-certs-3.44.1
> > 150KiB
> > 4.0MiB/s 00:00 [##################] 100.0%
> >
> > sha256 hash mismatch
> > for /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1:
> > expected hash: 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
> > actual hash:   1awgljvsvc141350xyjjnb15hk66qpcpzwz0hrly11yfbw6wn7cv
> > substitution
> > of /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> > failed  
> 
> Like Ricardo, I get the correct hash everywhere:
> 
> --8<---------------cut here---------------start------------->8---
> $ wget -qO -
> http://berlin.guix.gnu.org/32hy1jqkam201l7c4wg3bhxz4x5l5jy0.narinfo |
> grep Hash NarHash:
> sha256:0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad $ wget
> -qO -
> http://berlin.guix.gnu.org/nar/lzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> | lzip -d | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad $ wget -qO -
> http://berlin.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> | gunzip | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad $ wget -qO -
> http://ci.guix.gnu.org/nar/lzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> | lzip -d | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad $ wget -qO -
> http://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> | gunzip | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
> --8<---------------cut here---------------end--------------->8---
> 
> Could you run these commands locally and see what you get?
> 
> Could it be lack of disk space or a transient networking issue on
> your side?
> 
> Thanks,
> Ludo’.

This is strange and I have no clue what's going wrong here: All your
commands above work as expected.

Yes, I'm running out of disk space, but everything else works and the
nss-package isn't the biggest one. Currently 8 GiB left.

I built it locally, that worked. Now deleting it:

$ guix gc -D /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1

Then trying to fetch it:

~/guix/wt/nonfree [env]$ ./pre-inst-env  guix build nss-certs
0.2 MB will be downloaded:
   /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
substituting /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
downloading from 
https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
 nss-certs-3.44.1  150KiB                                                       
                           1.0MiB/s 00:00 [##################] 100.0%

sha256 hash mismatch for 
/gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1:
  expected hash: 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
  actual hash:   1awgljvsvc141350xyjjnb15hk66qpcpzwz0hrly11yfbw6wn7cv
substitution of /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1 
failed
guix build: error: some substitutes for the outputs of derivation 
`/gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv' failed 
(usually happens due to networking issues); try `--fallback' to build 
derivation from source 

This is on dd9c137b2c759f906d57b14fccff091994f274e8

Manually downloading seams to find the right hash:

$ wget -qO - 
https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
 |  gunzip | guix hash -
0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad

$ ls /gnu/store/*nss-certs-3.44.1* -d
/gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1       
/gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv
/gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1.lock  
/gnu/store/fpv0xrrr47g879agkmchzzamw1p46i46-nss-certs-3.44.1-guile-builder

I blamed that something about locales is wrong on berlin. Could it be
the case that on my side something with locales is wrong? In the build
daemon? I'm on Ubunutu+Guix, that might cause also some trouble? How
can I verify/check my locale-configs?

Thanks,

Björn

pgpEPFZW23L5C.pgp
Description: OpenPGP digital signature