texlive-lang-italian was stealth-updated

[Lev-GitHub]

The "texlive-lang-italian" package which is part of the tex live full installation doesn't seem to exist in any of the mirror sites. Here's the error/log output:

~$ sudo port install texlive +full +icu-doc
Password:
--->  Computing dependencies for texlive
The following dependencies will be installed:  texlive-lang-italian
Continue? [Y/n]: 
--->  Fetching archive for texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653_0.darwin_18.noarch.tbz2 from http://packages.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653_0.darwin_18.noarch.tbz2 from http://ywg.ca.packages.macports.org/mirror/macports/packages/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653_0.darwin_18.noarch.tbz2 from http://mse.uk.packages.macports.org/texlive-lang-italian
--->  Fetching distfiles for texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://ykf.ca.distfiles.macports.org/MacPorts/mpdistfiles/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from https://www.ambulatoryclam.net/texlive/
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from https://giraffe.cs.washington.edu/texlive/
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://ywg.ca.distfiles.macports.org/mirror/macports/distfiles/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://mse.uk.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://ema.uk.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://cph.dk.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://fra.de.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://nue.de.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://fco.it.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://kmq.jp.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://cjj.kr.distfiles.macports.org/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://aarnet.au.distfiles.macports.org/pub/macports/distfiles/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://pek.cn.distfiles.macports.org/macports/distfiles/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://jog.id.distfiles.macports.org/macports/distfiles/texlive-lang-italian
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from https://alpaca.cs.washington.edu/texlive/
--->  Attempting to fetch texlive-lang-italian-58653-run.tar.xz from http://atl.us.distfiles.macports.org/texlive-lang-italian
Error: Failed to fetch texlive-lang-italian: The requested URL returned error: 404 Not Found
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_tex_texlive-lang-italian/texlive-lang-italian/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port texlive failed

[jmroot (Joshua Root)]

I just tried this, and the files successfully fetched from https://www.ambulatoryclam.net/texlive/.

[jmroot (Joshua Root)]

The built archive is also present at https://packages.macports.org/texlive-lang-italian/.

[drkp (Dan Ports)]

As far as I know -- since I run them :-) -- 2/3 of the master_sites for these ports should be okay (alpaca.cs.washington.edu had a hard drive failure a couple days ago).

It does look like most of the distfiles mirrors did not pick up this update and I am not sure why that is.

[ryandesign (Ryan Carsten Schmidt)]

The files are on the non-*distfiles.macports.org servers, so you should have been able to get them from any of those. If you attach the main.log file, maybe it will help us diagnose why that didn't work.

As for the *distfiles.macports.org servers, the files did not get mirrored back on August 12 but I couldn't figure out why. I moved the archives aside on the server and ​forced a new build and ​mirroring completed successfully this time. That should sync out to the public servers within an hour. It's possible that whatever problem prevented mirroring texlive-lang-italian in August also prevented mirroring other texlive ports, or any other ports really. If you see any other files missing, let me know.

[ryandesign (Ryan Carsten Schmidt)]

Looks like after August 12 the next update for these ports was April 15, and curiously for texlive-lang-italian ​only the distfile checksums were changed. Assuming the checksums had been correct back in August, then the new checksums in April would have been wrong. When the checksums in the port don't match the checksums of the mirrored file, MacPorts buildbot marks the mirroring task as failed and deletes the distfile. Today, mirroring succeeded with those checksums. This suggests that maybe a stealth update of these files occurred on the upstream servers? Checking the files on the upstream servers now, they were indeed modified in April:

$ curl -IL https://www.ambulatoryclam.net/texlive/texlive-lang-italian-58653-doc.tar.xz
HTTP/1.1 200 OK
Date: Wed, 04 May 2022 06:49:26 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 20:46:35 GMT
ETag: "a16520-5dc7b28145a64"
Accept-Ranges: bytes
Content-Length: 10577184
Content-Type: application/x-xz

$ curl -IL https://www.ambulatoryclam.net/texlive/texlive-lang-italian-58653-run.tar.xz
HTTP/1.1 200 OK
Date: Wed, 04 May 2022 06:51:20 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 20:46:35 GMT
ETag: "a2e870-5dc7b2815d164"
Accept-Ranges: bytes
Content-Length: 10676336
Content-Type: application/x-xz

$ curl -IL https://www.ambulatoryclam.net/texlive/texlive-lang-italian-58653-src.tar.xz
HTTP/1.1 200 OK
Date: Wed, 04 May 2022 06:51:50 GMT
Server: Apache
Last-Modified: Tue, 12 Apr 2022 20:46:35 GMT
ETag: "1821c-5dc7b2815d164"
Accept-Ranges: bytes
Content-Length: 98844
Content-Type: application/x-xz

[ryandesign (Ryan Carsten Schmidt)]

If I had to guess, I'd say whoever uploaded the texlive 2022 version of texlive-lang-italian used the wrong version in the filename and overwrote the texlive 2021 version of the file in the process. 58xxx looks more like a texlive 2021 version number. 2022 version numbers of other texlive packages are in the 62xxx range.

[Lev-GitHub]

main.log

[ryandesign (Ryan Carsten Schmidt)]

:debug:fetch Fetching distfile failed: SSL certificate problem: certificate has expired

See ProblemHotlist#letsencrypt for more on this problem.

[Lev-GitHub]

The port seems to be updating now. I just successfully updated the "texlive-lang-italian" port a few minutes ago. Thank you for all the interested parties.

[drkp (Dan Ports)]

Ah, that was my mistake! It looks like none of the TeX packages in texlive-lang-italian were updated between 2022 and 2021 so I regenerated a new tarball with the same version number without noticing.

I usually check explicitly for that but I've obviously gotten complacent because this is the first time it has happened in ~10 years.

[Schamschula (Marius Schamschula)]

Looks like another stealth update (texlive-lang-italian-58653-run.tar.xz and texlive-lang-italian-58653-doc.tar.xz checksums have changed).

[Lev-GitHub]

Same problem appeared recently.

[Lev-GitHub]

Replying to Lev-GitHub:

Same problem appeared recently.

The problem persists to the date. I'm thinking that there needs to be a better fix than fixing this every time an update comes up. And, this port seems to be the only one that's having such a problem.

[Lev-GitHub]

The problem still exists. Even though the initial problem is handled manually, it seems like the same issue (checksum mismatch) comes up every time there's an update (stealth or not). And, this issue doesn't come up with any other TeX language packages. The maintainer should look into why it happens to this package repeatedly and maybe find another permanent solution.