rav1e @0.6.3: Checksum mismatch

[amadeus24]

Running macOS 13.2 Ventura and I has updated macports today on a arm MacBook.
During update I got the message:

Error: Checksum (rmd160) mismatch for rav1e-0.6.3.tar.gz
Error: Checksum (sha256) mismatch for rav1e-0.6.3.tar.gz
Error: Checksum (size) mismatch for rav1e-0.6.3.tar.gz
Error: Failed to checksum rav1e: Unable to verify file checksums

Had a look at:
​https://packages.macports.org/rav1e
​https://fra.de.packages.macports.org/rav1e
​https://nue.de.packages.macports.org/rav1e
But there was no "rav1e-0.6.3_0.darwin_22.arm64.tbz2"

[ryandesign (Ryan Carsten Schmidt)]

No packages are available for any port for darwin_22.arm64 yet. See #66637. That should not be a problem. When a package is not available, MacPorts builds from source. That's what's failing on your system because the rav1e-0.6.3.tar.gz distfile you downloaded has different checksums than we expected. Where did your rav1e-0.6.3.tar.gz distfile come from? If your log doesn't show and you don't remember, sudo port clean --all rav1e and try again, and attach the main.log if it still fails.

We've been getting a lot of checksum mismatch bugs reported lately but we haven't been able to reproduce them. (I cannot reproduce this problem with rav1e.) We need to know where the bad files are coming from (which a clean log should show) to be able to proceed with a fix.

[amadeus24]

main.log

[amadeus24]

Thanks for this very quick answer. Did what you suggest, but achieving same result. rav1e-0.6.3.tar.gz was downloaded from ​https://codeload.github.com/xiph/rav1e/legacy.tar.gz/v0.6.3?dummy=

[MarcusCalhoun-Lopez (Marcus Calhoun-Lopez)]

I am not sure why these files are different.
As a temporary workaround, you could try
sudo port clean --all rav1e && sudo port install rav1e master_sites=macports_distfiles

[ryandesign (Ryan Carsten Schmidt)]

Replying to ryandesign:

(I cannot reproduce this problem with rav1e.)

I could not reproduce it 9 hours ago, but I can now; either I tested incorrectly 9 hours ago or something changed on GitHub since then. (Maybe some cached file expired on the GitHub server so now I'm seeing the new one.) The two gz files differ but the tar files inside are identical, as are of course their contents.

[amadeus24]

Thanks! sudo port clean --all rav1e && sudo port install rav1e master_sites=macports_distfiles did the trick. Thanks a lot!

[amadeus24]

Also downloaded the *.gz files, unpack them and packaging them again. One of the downloaded *tar.gz unpacked keep the same size after unpacking and packing again, the other one changed its size after unpacking it and packing it again. Little bit strange. Sorry, but I can't recall which one I have downloaded from which source. Unpacked, both tar-files had same size and same cksum.

[ryandesign (Ryan Carsten Schmidt)]

Replying to amadeus24:

Also downloaded the *.gz files, unpack them and packaging them again. One of the downloaded *tar.gz unpacked keep the same size after unpacking and packing again, the other one changed its size after unpacking it and packing it again. Little bit strange. Sorry, but I can't recall which one I have downloaded from which source. Unpacked, both tar-files had same size and same cksum.

What command did you use to to recompress? I'm wondering specifically about what flags you supplied to indicate the compression level (such as, in the case of gz, the -9 flag), as well as the version of the compression tool and how it was installed.

[amadeus24]

Didn't use any flag, simply /usr/bin/gzip.

[ryandesign (Ryan Carsten Schmidt)]

This appears to have been ​a problem on GitHub that was resolved:

January 30 18:35 UTC (lasting 7 hours)

We upgraded our production Git binary with a recent version from upstream. The updates included a change to use an internal implementation of gzip when generating archives. This resulted in subtle changes to the contents of the “Download Source” links served by GitHub, leading to checksum mismatches. No content was changed.

After becoming aware of the impact to many communities, we rolled back the compression change to restore the previous behavior.

Similar to the above, we are still investigating the contributing factors of this incident, and will provide a more thorough update in next month’s report.

[ryandesign (Ryan Carsten Schmidt)]

In fact the problem is that we updated rav1e to 0.6.3 during the timeframe that GitHub was using the incorrect compression method. Now that GitHub has fixed their servers to use the old compression method, users who happen to download this distfile from GitHub will get a checksum mismatch while those who download from our mirror won't.

Setting master_sites macports_distfiles in the port until the next version of rav1e is released is probably the simplest solution here.

[ryandesign (Ryan Carsten Schmidt)]

Has duplicate #66870.

[adamaviv (Adam J. Aviv)]

Replying to amadeus24:

Thanks! sudo port clean --all rav1e && sudo port install rav1e master_sites=macports_distfiles did the trick. Thanks a lot!

Can confirm that this worked for me too.

[MarcusCalhoun-Lopez (Marcus Calhoun-Lopez)]

In 000ad4c01ff4b720ef4da04738cb73a27febcab2/macports-ports (master):

rav1e: temporarily fetch from macports_distfiles

Fixes #66805

[MarcusCalhoun-Lopez (Marcus Calhoun-Lopez)]

Has duplicate #66902.

[MarcusCalhoun-Lopez (Marcus Calhoun-Lopez)]

Has duplicate #66972.