bsdmake @24_1 checksum mismatch

[feinbein1968]

Hi there, I get an error when installing bsdmake via port, it seems to me the right version is not yet in the repositories. Thanks Christian

/opt/local/bin/port install bsdmake
--->  Fetching archive for bsdmake
--->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://fra.de.packages.macports.org/bsdmake
--->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://nue.de.packages.macports.org/bsdmake
--->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://packages.macports.org/bsdmake
--->  Verifying checksums for bsdmake
Error: Checksum (rmd160) mismatch for bsdmake-24.tar.gz
Error: Checksum (sha256) mismatch for bsdmake-24.tar.gz
Error: Failed to checksum bsdmake: Unable to verify file checksums
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_devel_bsdmake/bsdmake/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port bsdmake failed

[jmroot (Joshua Root)]

The output you've shown starts with the distfile already downloaded. Which mirror was it downloaded from? wiki:FAQ#checksums

[jmroot (Joshua Root)]

Looks like opensource.apple.com is redirecting to github, which gives a different tarball with identical contents to the one we previously mirrored except for the directory name.

[feinbein1968]

I dont understand your question, sorry I am new to macports. I got to this point when trying to install xymon-client on a OSX-Ventura. The steps so far where:

wget https://github.com/macports/macports-base/releases/download/v2.8.0/MacPorts-2.8.0-13-Ventura.pkg
installer -pkg ~/Downloads/MacPorts-2.5.4-10.14-Mojave.pkg -target /
/opt/local/bin/port -v selfupdate
/opt/local/bin/port install xymon-client

The error I get when trying with xymon-client is the same, when I do:

/opt/local/bin/port install bsdmake

In the log it says

:info:archivefetch --->  bsdmake-24_1.darwin_22.x86_64.tbz2 doesn't seem to exist in /opt/local/var/macports/incoming/verified
:msg:archivefetch --->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://fra.de.packages.macports.org/bsdmake
:debug:archivefetch Fetching archive failed: The requested URL returned error: 404
:msg:archivefetch --->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://nue.de.packages.macports.org/bsdmake
:debug:archivefetch Fetching archive failed: The requested URL returned error: 404
:msg:archivefetch --->  Attempting to fetch bsdmake-24_1.darwin_22.x86_64.tbz2 from https://packages.macports.org/bsdmake

And this is correct, there is no file named 'bsdmake-24_1.darwin_22.x86_64.tbz2' at any of those 3 URLs above. The 'newest' version of the same file (by size) is bsdmake-24_1.darwin_21.x86_64.tbz2 I will also attach the full log. Thanks for helping anyway.

[rieder (Steven Rieder)]

same issue here

[chrisd-mso]

I'm having the same problem on an ARM64

[chrisd-mso]

diff file

[vallon (Justin)]

The bsdmake.diff file is reversed, but I would not just accept the new file. The portfile has been working for 10 years.

[rieder (Steven Rieder)]

Shouldn't the solution be to add a file bsdmake-24_1.darwin_22.arm64.tbz2 to the package servers? for x86_64 it exists, but for arm64 (my architecture), it is missing.

[vallon (Justin)]

The original problem seems to be installing binaries. The source checksums fail (as well):

• Portfile lists master_sites ​http://opensource.apple.com/tarballs/${name}
• port log shows :notice:fetch ---> Attempting to fetch bsdmake-24.tar.gz from ​http://opensource.apple.com/tarballs/bsdmake
• wget of that does some redirects:
  • original ​http://opensource.apple.com/tarballs/bsdmake/bsdmake-24.tar.gz
  • to https ​https://opensource.apple.com/tarballs/bsdmake/bsdmake-24.tar.gz
  • to github ​https://github.com/apple-oss-distributions/bsdmake/archive/refs/tags/bsdmake-24.tar.gz
  • to codeload.github ​https://codeload.github.com/apple-oss-distributions/bsdmake/tar.gz/refs/tags/bsdmake-24

$ sha256sum bsdmake-24.tar.gz
096f333f94193215931a9fab86b9bca0713fbd22ec465bf55510067b53940e62  bsdmake-24.tar.gz
$ port cat bsdmake | grep sha256
sha256  82a948b80c2abfc61c4aa5c1da775986418a8e8eb3dd896288cfadf2e19c4985

edit: formatting

[vallon (Justin)]

Internet archive to the rescue: ​http://web.archive.org/web/20210124223828/http://opensource.apple.com/tarballs/bsdmake/bsdmake-24.tar.gz

$ wget http://web.archive.org/web/20210124223828/http://opensource.apple.com/tarballs/bsdmake/bsdmake-24.tar.gz
...
$ sha256sum bsdmake-24.tar.gz 
82a948b80c2abfc61c4aa5c1da775986418a8e8eb3dd896288cfadf2e19c4985  bsdmake-24.tar.gz

That matches the Portfile.

The contents are identical, but the top-level directory name is different (old bsdmake-24 new bsdmake-bsdmake-24). The github format is $reponame-$tagname, and the tag in the git repo is "bsdmake-24":

$ sha256sum archive/bsdmake-24.tar.gz github/bsdmake-24.tar.gz 
82a948b80c2abfc61c4aa5c1da775986418a8e8eb3dd896288cfadf2e19c4985  archive/bsdmake-24.tar.gz
096f333f94193215931a9fab86b9bca0713fbd22ec465bf55510067b53940e62  github/bsdmake-24.tar.gz
$ tar -C archive -xzf archive/bsdmake-24.tar.gz
$ tar -C github -xzf github/bsdmake-24.tar.gz 
$ ls archive github
archive:
bsdmake-24  bsdmake-24.tar.gz

github:
bsdmake-24.tar.gz  bsdmake-bsdmake-24
$ diff -Nur archive/bsdmake-24 github/bsdmake-bsdmake-24
(no diffs)
$ 

Created ​https://github.com/macports/macports-ports/pull/16992

[vallon (Justin)]

PR failed. It fetched ​https://distfiles.macports.org/bsdmake/bsdmake-24.tar.gz. That file matches the internet archive, but does not match the master-site.

[vallon (Justin)]

Added dist_subdir hack for stealth update. PR is green.

[System Administrator <root@…>]

In 89d92116dff67a155a57729fa8f0cc7d723805d9/macports-ports (master):

bsdmake: Update checksums after Apple redirect to github

Apple's redirect to github gives a different top-level dir in tar; no
diffs. stealth upgrade.

Fixes: #66404

[feinbein1968]

Thanks a lot for helping me out. This fixed my problem.