py-pikepdf: checksum fails

[nxexcelsior]

Attempting to install img2pdf, checksum for py-pikepdf fails:

:debug:checksum Calculated (size) is 0
:error:checksum Checksum (size) mismatch for pikepdf-5.3.0.tar.gz
:info:checksum Portfile checksum: pikepdf-5.3.0.tar.gz size 2369563
:info:checksum Distfile checksum: pikepdf-5.3.0.tar.gz size 0
:info:checksum The correct checksum line may be:
:info:checksum checksums           rmd160  9c1185a5c5e9fc54612808977ee8f548b2258d31 \
:info:checksum                     sha256  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 \
:info:checksum                     size    0
:error:checksum Failed to checksum py310-pikepdf: Unable to verify file checksums

Attaching main.log

[mascguy (Christopher Nielsen)]

I'm unable to reproduce locally:

$ sudo port fetch --no-mirror py310-pikepdf
--->  Fetching distfiles for py310-pikepdf
--->  Attempting to fetch pikepdf-5.3.0.tar.gz from https://files.pythonhosted.org/packages/source/p/pikepdf

$ sudo port -v checksum py310-pikepdf
--->  Verifying checksums for py310-pikepdf
--->  Checksumming pikepdf-5.3.0.tar.gz

[mascguy (Christopher Nielsen)]

Also, given that the fetched distfile was zero bytes in length, you might want to retry.

[jmroot (Joshua Root)]

Yes, almost certainly some form of MisbehavingServers. It's important to show which server you got the file from when reporting checksum mismatches, in case it's one specific mirror that's broken.

[cooljeanius (Eric Gallager)]

Slightly different checksum error for py37-pikepdf:

--->  Checksumming pikepdf-7.0.0.tar.gz
DEBUG: Calculated (rmd160) is d3ff3c0d7c3a7e538ed2e391b89fff6f08da6cc4
Error: Checksum (rmd160) mismatch for pikepdf-7.0.0.tar.gz
Portfile checksum: pikepdf-7.0.0.tar.gz rmd160 79294c2dceb2a0774d8c0579bfa52b0ede7fe68b
Distfile checksum: pikepdf-7.0.0.tar.gz rmd160 d3ff3c0d7c3a7e538ed2e391b89fff6f08da6cc4
DEBUG: Calculated (sha256) is 8c7dd98d011a6c321ea2b70defafc522a8b5c9a565a1c36e69e947193fbfca6e
Error: Checksum (sha256) mismatch for pikepdf-7.0.0.tar.gz
Portfile checksum: pikepdf-7.0.0.tar.gz sha256 9872117bc835cdab8732998c03b0f9334556865ed10bf99bf17df90345493c34
Distfile checksum: pikepdf-7.0.0.tar.gz sha256 8c7dd98d011a6c321ea2b70defafc522a8b5c9a565a1c36e69e947193fbfca6e
DEBUG: Calculated (size) is 2899981
Error: Checksum (size) mismatch for pikepdf-7.0.0.tar.gz
Portfile checksum: pikepdf-7.0.0.tar.gz size 2906113
Distfile checksum: pikepdf-7.0.0.tar.gz size 2899981
The correct checksum line may be:
checksums           rmd160  d3ff3c0d7c3a7e538ed2e391b89fff6f08da6cc4 \
                    sha256  8c7dd98d011a6c321ea2b70defafc522a8b5c9a565a1c36e69e947193fbfca6e \
                    size    2899981
Error: Failed to checksum py37-pikepdf: Unable to verify file checksums

(the py38, py39, and py310 versions all worked fine for me, though)

[Schamschula (Marius Schamschula)]

Why are you trying to build py37-pikepdf @7.0.0_0?

py37-pikepdf is no longer supported upstream. Hence, it is pinned to version 6.2.9.

I would prefer to remove it altogether, but py37-cairocffi and py37-cairosvg still depend on it.

[cooljeanius (Eric Gallager)]

Replying to Schamschula:

Why are you trying to build py37-pikepdf @7.0.0_0?

py37-pikepdf is no longer supported upstream. Hence, it is pinned to version 6.2.9.

Because I had it installed from when it was still supported, and apparently there was an upgrade...

[ryandesign (Ryan Carsten Schmidt)]

Replying to Schamschula:

Why are you trying to build py37-pikepdf @7.0.0_0?

The port version is 6.2.9_1 but it tries to download a newer distfile.

​https://build.macports.org/builders/ports-13_arm64-builder/builds/1253/steps/install-port/logs/stdio

--->  Verifying checksums for py37-pikepdf
DEBUG: Executing org.macports.checksum (py37-pikepdf)
--->  Checksumming pikepdf-7.1.1.tar.gz
DEBUG: Calculated (rmd160) is 3fa54bd9c0ea7300382067f9050e5361a02e82d6
Error: Checksum (rmd160) mismatch for pikepdf-7.1.1.tar.gz
Portfile checksum: pikepdf-7.1.1.tar.gz rmd160 79294c2dceb2a0774d8c0579bfa52b0ede7fe68b
Distfile checksum: pikepdf-7.1.1.tar.gz rmd160 3fa54bd9c0ea7300382067f9050e5361a02e82d6
DEBUG: Calculated (sha256) is d888d013afc028598515a5e995861aab87a5070fe311b53a66da891ae22794e2
Error: Checksum (sha256) mismatch for pikepdf-7.1.1.tar.gz
Portfile checksum: pikepdf-7.1.1.tar.gz sha256 9872117bc835cdab8732998c03b0f9334556865ed10bf99bf17df90345493c34
Distfile checksum: pikepdf-7.1.1.tar.gz sha256 d888d013afc028598515a5e995861aab87a5070fe311b53a66da891ae22794e2
Portfile checksum: pikepdf-7.1.1.tar.gz size 2906113
Distfile checksum: pikepdf-7.1.1.tar.gz size 2901248
DEBUG: Calculated (size) is 2901248
Error: Checksum (size) mismatch for pikepdf-7.1.1.tar.gz
The correct checksum line may be:
checksums           rmd160  3fa54bd9c0ea7300382067f9050e5361a02e82d6 \
                    sha256  d888d013afc028598515a5e995861aab87a5070fe311b53a66da891ae22794e2 \
                    size    2901248
Error: Failed to checksum py37-pikepdf: Unable to verify file checksums

I think you need to call github.setup again in the py37 section, not just change version.

[ryandesign (Ryan Carsten Schmidt)]

In 84ad029b33aa19b706559295f623e9504a6f7813/macports-ports (master):

py37-pikepdf: Fix distfile

Closes: #65481

[ryandesign (Ryan Carsten Schmidt)]

There is still a checksum mismatch:

​https://build.macports.org/builders/ports-12_arm64-builder/builds/86197/steps/install-port/logs/stdio

--->  pikepdf-6.2.9.tar.gz does not exist in /opt/local/var/macports/distfiles/py-pikepdf
--->  Attempting to fetch pikepdf-6.2.9.tar.gz from https://codeload.github.com/pikepdf/pikepdf/legacy.tar.gz/v6.2.9?dummy=

--->  Verifying checksums for py37-pikepdf
DEBUG: Executing org.macports.checksum (py37-pikepdf)
--->  Checksumming pikepdf-6.2.9.tar.gz
DEBUG: Calculated (rmd160) is 038686b84614d58392cd8d90581fe1094d38118e
Error: Checksum (rmd160) mismatch for pikepdf-6.2.9.tar.gz
Portfile checksum: pikepdf-6.2.9.tar.gz rmd160 79294c2dceb2a0774d8c0579bfa52b0ede7fe68b
Distfile checksum: pikepdf-6.2.9.tar.gz rmd160 038686b84614d58392cd8d90581fe1094d38118e
DEBUG: Calculated (sha256) is e11b9bf95cfd5fe2574cc30c5fc091940c65779582227ebb56bbfa51943c1744
Error: Checksum (sha256) mismatch for pikepdf-6.2.9.tar.gz
Portfile checksum: pikepdf-6.2.9.tar.gz sha256 9872117bc835cdab8732998c03b0f9334556865ed10bf99bf17df90345493c34
Distfile checksum: pikepdf-6.2.9.tar.gz sha256 e11b9bf95cfd5fe2574cc30c5fc091940c65779582227ebb56bbfa51943c1744
DEBUG: Calculated (size) is 2906108
Error: Checksum (size) mismatch for pikepdf-6.2.9.tar.gz
Portfile checksum: pikepdf-6.2.9.tar.gz size 2906113
Distfile checksum: pikepdf-6.2.9.tar.gz size 2906108
The correct checksum line may be:
checksums           rmd160  038686b84614d58392cd8d90581fe1094d38118e \
                    sha256  e11b9bf95cfd5fe2574cc30c5fc091940c65779582227ebb56bbfa51943c1744 \
                    size    2906108
Error: Failed to checksum py37-pikepdf: Unable to verify file checksums

Looks like there has been some sort of stealth update. The difference between the tarball we originally mirrored and the one being served from GitHub now is:

pikepdf-pikepdf-88a1566/.git_archival.txt

@@ -1 +1 @@
 node: d70fdd4168e28e72b4b0b2f34841b5363458931d
 node-date: 2023-01-25T16:23:29-08:00
 describe-name: v6.2.9
-ref-names: HEAD -> master, tag: v6.2.9
+ref-names: tag: v6.2.9