libqb: checksum mismatch

[barracuda156]

--->  Fetching distfiles for libqb
--->  libqb-2.0.8.tar.gz does not exist in /opt/local/var/macports/distfiles/libqb
--->  Attempting to fetch libqb-2.0.8.tar.gz from https://github.com/ClusterLabs/libqb/archive/v2.0.8
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100  233k    0  233k    0     0   201k      0 --:--:--  0:00:01 --:--:--  201k
--->  Verifying checksums for libqb
--->  Checksumming libqb-2.0.8.tar.gz
Error: Checksum (rmd160) mismatch for libqb-2.0.8.tar.gz
Portfile checksum: libqb-2.0.8.tar.gz rmd160 eb698d03d6e13e7071b77b715a1a6d65ebd9d695
Distfile checksum: libqb-2.0.8.tar.gz rmd160 d352ab5eb095ac3983d82f0450fcf51c17cd1b26
Error: Checksum (sha256) mismatch for libqb-2.0.8.tar.gz
Portfile checksum: libqb-2.0.8.tar.gz sha256 c062048245c191b3585b43a93a39f9001c52bb60c2051867773a6f80b548dfbc
Distfile checksum: libqb-2.0.8.tar.gz sha256 e05aec8d59e8148f4bfb833ed077bf0a032363ce7bf7cdbec22586e1b7db4963
Error: Checksum (size) mismatch for libqb-2.0.8.tar.gz
Portfile checksum: libqb-2.0.8.tar.gz size 239568
Distfile checksum: libqb-2.0.8.tar.gz size 239558
The correct checksum line may be:
checksums           rmd160  d352ab5eb095ac3983d82f0450fcf51c17cd1b26 \
                    sha256  e05aec8d59e8148f4bfb833ed077bf0a032363ce7bf7cdbec22586e1b7db4963 \
                    size    239558
Error: Failed to checksum libqb: Unable to verify file checksums

[ryandesign (Ryan Carsten Schmidt)]

The difference between the file we mirrored and the one on GitHub now is:

libqb-2.0.8/configure.ac

@@ -6 +6 @@
 dnl inject zero as a "patch" component of the version if missing in tag;
 dnl care to bump "X.Y.Z-yank" template below upon each release very desirable
 AC_INIT([libqb],
-        m4_esyscmd([build-aux/git-version-gen $(echo '002171bbc??HEAD -> main, tag: v2.0.8'\
+        m4_esyscmd([build-aux/git-version-gen $(echo '002171bbc??tag: v2.0.8'\
                     | sed -ne 's/^[$]Format:[^$]*[$]$/.tarball-version/p;tend'\
                           -e 's/.*tag: v\([^, ][^, ]*\).*/\1-yank/;tv'\
                           -e 's/^\([[:xdigit:]][[:xdigit:]]*\).*/1.9.0-yank\1/'\

In the repository, line 9 of configure.ac contains:

	m4_esyscmd([build-aux/git-version-gen $(echo '$Format:%h??%D$'\

That placeholder is evidently replaced by git when git archive is run with information about what refs point to this commit. When the archive was made, HEAD/main pointed to it, in addition to the v2.0.8 tag; now that HEAD has advanced, only v2.0.8 points to it.

This is another demonstration of why automatically generated tarballs should not be used. This project provides manually-created release tarballs so we should be using those instead.

[ryandesign (Ryan Carsten Schmidt)]

​https://github.com/macports/macports-ports/pull/25312

[ryandesign (Ryan Carsten Schmidt)]

In 326786fe5c1936ce299ab22c3eb38032d2f89876/macports-ports (master):

libqb: Use release tarball

Closes: #70535