Opened 3 months ago

Closed 3 weeks ago

#73235 closed defect (fixed)

cmake @3.31.7: checksum mismatch because download is HTML file

Reported by: ryandesign (Ryan Carsten Schmidt) Owned by: michaelld (Michael Dickens)
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: mascguy (Christopher Nielsen), tva-inverso (Thomas Vandahl), szhorvat (Szabolcs Horvát), Dave-Allured (Dave Allured), lcvisser (Ludo Visser)
Port: cmake, cmake-devel

Description

The cmake port failes to fetch the right file:

% sudo port fetch --no-mirrors cmake
--->  Fetching distfiles for cmake
--->  Attempting to fetch cmake-3.31.7.tar.bz2 from https://gitlab.kitware.com/cmake/cmake/-/archive/v3.31.7
% sudo port che  cmake              
--->  Verifying checksums for cmake
Error: Checksum (rmd160) mismatch for cmake-3.31.7.tar.bz2
Error: Checksum (sha256) mismatch for cmake-3.31.7.tar.bz2
Error: Checksum (size) mismatch for cmake-3.31.7.tar.bz2
***
The non-matching file appears to be HTML. See this page for possible reasons
for the checksum mismatch:
<https://trac.macports.org/wiki/MisbehavingServers>
***
The file has been moved to: /opt/local/var/macports/distfiles/cmake/cmake-3.31.7.tar.bz2.html
Error: Failed to checksum cmake: Unable to verify file checksums
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_devel_cmake/cmake/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port cmake failed

This is because, as explained here,

On Friday, Kitware enabled Anubis to filter out traffic from AI scrapers that was making gitlab.kitware.com unusable.

The ideal fix is to update the cmake port to a newer version while switching to the release distfile.

Change History (9)

comment:1 Changed 3 months ago by ryandesign (Ryan Carsten Schmidt)

Port: cmake-devel added

A slightly different solution will be needed for cmake-devel. Downloading from the github mirror instead of gitlab is one possibility.

comment:2 Changed 3 months ago by ryandesign (Ryan Carsten Schmidt)

I used the contact form on the Kitware web site to ask them to investigate the feasibility of removing anubis protection from the file download URLs.

comment:3 Changed 3 months ago by tva-inverso (Thomas Vandahl)

I resolved my case by blacklisting gitlab.kitware.com in macports.conf

comment:4 Changed 3 months ago by szhorvat (Szabolcs Horvát)

Cc: szhorvat added

comment:5 Changed 3 months ago by szhorvat (Szabolcs Horvát)

I came to the issue tracker to request an update of cmake-devel to 4.2.0, as I wasn't able to do it myself due to this issue.

I'm looking forward to the update, as I rely on MacPorts to test my software with newer tooling.

comment:6 Changed 3 months ago by Dave-Allured (Dave Allured)

Cc: Dave-Allured added

comment:7 Changed 4 weeks ago by Dave-Allured (Dave Allured)

@szhorvat cmake-devel is now updated to 4.2.1. Please test and report any problems. Thanks.

I am looking at next addressing the requests in #73236 for cmake-devel.

comment:8 Changed 4 weeks ago by lcvisser (Ludo Visser)

Cc: lcvisser added

comment:9 Changed 3 weeks ago by jmroot (Joshua Root)

Resolution: fixed
Status: assignedclosed
Note: See TracTickets for help on using tickets.