[opensuse-buildservice] Bug with "osc service localrun download_files"?
All, I got an automatic rejection on a package I submitted yesterday. It says the *.tgz file in may package is different from what's online. I just re-pulled the *.tgz file and it has the same md5 hash as the file in the project. Is there something wrong with the source checker? The below is cut and pasted straight from a real terminal session and the commands are in order. I'm confused. ===
cd security/ # move into my local security repo project osc co log2timeline # check out a fresh copy of the package in question cd log2timeline
osc service localrun download_files log2timeline_0.61.tgz /home/gaf/obs/security/log2timeline/log2timeline_0.61.tgz differ: byte 5, line 1 /home/gaf/obs/security/log2timeline
# note that it fails with a virgin copy of the package from OBS
mv log2timeline_0.61.tgz log2timeline_0.61-old.tgz wget http://log2timeline.net/files/log2timeline_0.61.tgz md5sum *.tgz e89eaca27324aa7b0de52c09d35ec592 log2timeline_0.61-old.tgz e89eaca27324aa7b0de52c09d35ec592 log2timeline_0.61.tgz
# I should now have a identical copy, but freshly downloaded from the original source
osc service localrun download_files /home/gaf/obs/security/log2timeline
# But now it works???????? # I did NOT change the specfile between the failure and the success. I only downloaded a fresh copy of the tarball. It has the same md5 hash, so the original version wasn't corrupt. === Thanks for suggestions, Greg -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am 31.01.2012 17:31, schrieb Greg Freemyer:
/home/gaf/obs/security/log2timeline
# But now it works????????
# I did NOT change the specfile between the failure and the success. I only downloaded a fresh copy of the tarball. It has the same md5 hash, so the original version wasn't corrupt.
Please don't use URLs in the Source line if it's so fragile to download the correct sources. It's more secure if you verify manually that the md5 is the one on the web site - btw, 0.62 is the latest version. Greetings, Stephan -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On Tue, Jan 31, 2012 at 12:31 PM, Stephan Kulow
Am 31.01.2012 17:31, schrieb Greg Freemyer:
/home/gaf/obs/security/log2timeline
# But now it works????????
# I did NOT change the specfile between the failure and the success. I only downloaded a fresh copy of the tarball. It has the same md5 hash, so the original version wasn't corrupt.
Please don't use URLs in the Source line if it's so fragile to download the correct sources. It's more secure if you verify manually that the md5 is the one on the web site - btw, 0.62 is the latest version.
Greetings, Stephan
Thanks, I did not realize the 2 different functionalities of "Source:". As to v0.62, I have it in my home repo, but it's buggy. It's not very different from v0.61 so I'm waiting for the bug fix release. Greg -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am Dienstag, 31. Januar 2012, 18:31:03 schrieb Stephan Kulow:
Am 31.01.2012 17:31, schrieb Greg Freemyer:
/home/gaf/obs/security/log2timeline
# But now it works????????
# I did NOT change the specfile between the failure and the success. I only downloaded a fresh copy of the tarball. It has the same md5 hash, so the original version wasn't corrupt.
Please don't use URLs in the Source line if it's so fragile to download the correct sources. It's more secure if you verify manually that the md5 is the one on the web site - btw, 0.62 is the latest version.
The future plan is that we cache the downloaded files on our server and handle temporary errors better in that situation.
Greetings, Stephan -- Adrian Schroeter SUSE Linux Products GmbH email: adrian@suse.de
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
On 01.02.2012 09:57, Adrian Schröter wrote:
Am Dienstag, 31. Januar 2012, 18:31:03 schrieb Stephan Kulow:
Am 31.01.2012 17:31, schrieb Greg Freemyer:
/home/gaf/obs/security/log2timeline
# But now it works????????
# I did NOT change the specfile between the failure and the success. I only downloaded a fresh copy of the tarball. It has the same md5 hash, so the original version wasn't corrupt.
Please don't use URLs in the Source line if it's so fragile to download the correct sources. It's more secure if you verify manually that the md5 is the one on the web site - btw, 0.62 is the latest version.
The future plan is that we cache the downloaded files on our server and handle temporary errors better in that situation.
That does not help at all for people running the service locally. Greetings, Stephan -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (3)
-
Adrian Schröter -
Greg Freemyer -
Stephan Kulow