Ludovic Courtès <[email protected]> writes:

> Hi Tomas,
>
> Tomas Volf via Bug reports for GNU Guix <[email protected]> skribis:
>
>> --8<---------------cut here---------------start------------->8---
>> $ guix time-machine --no-substitutes -q 
>> --commit=ce9929fadfcdb1426eec4ea228aaf68db7fd2db3 -- build --no-substitutes 
>> -Se '(@ (gnu packages boost) boost-1.83)'
>> The following derivations will be built:
>>   
>> /gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv
>>   /gnu/store/pbri41ibhi0bl8jr1rgk6sgajn3jw2al-boost_1_83_0.tar.bz2.drv
>>   /gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv
>> building 
>> /gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv...
>>
>> Starting download of 
>> /gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch
>> From 
>> https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch...
>> following redirection to 
>> `https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch/'...
>> downloading from 
>> https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch ...
>>  0001-unordered-fix-copy-assign.patch  581B                                  
>>                                                                         
>> 1.7MiB/s 00:00 ▕██████████████████▏ 100.0%
>> sha256 hash mismatch for 
>> /gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch:
>>   expected hash: 09j61m5xh7099k5na9i43x5rra51znf7vm2nyh89yqpizcll9q66
>>   actual hash:   0l520lqh2vxdlyzvpki6hy2ylqimag8v18n2sdbmliifxiiha4gl
>> hash mismatch for store item 
>> '/gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch'
>> build of 
>> /gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv
>>  failed
>> View build log at 
>> '/var/log/guix/drvs/1x/dv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv.gz'.
>> cannot build derivation 
>> `/gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv': 1 
>> dependencies couldn't be built
>> guix build: error: build of 
>> `/gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv' failed
>> --8<---------------cut here---------------end--------------->8---
>>
>> This prevents me from reconfiguring my system to address recent CVEs
>> found in guix-daemon.
>
> This was fixed a while back:
>
>   https://codeberg.org/guix/guix/issues/7615
>
> However commit 13697bc8179439c1b11304d621e7247e943e4a03 is in the
> ‘misc-world-rebuild’ branch by @cnx (Cc’d), which is not merged yet
> AIUI.

Might be worth cherry-picking given the need for --no-substitutes right
now.

> Workaround:
>
>   wget -O boost-0001-unordered-fix-copy-assign.patch \
>     
> https://ci.guix.gnu.org/file/boost-0001-unordered-fix-copy-assign.patch/sha256/09j61m5xh7099k5na9i43x5rra51znf7vm2nyh89yqpizcll9q6
>   guix download file://$PWD/boost-0001-unordered-fix-copy-assign.patch

Oh, this is neat, I did not know I can use guix download for this.  The
URL above gives 500, but I acquired the correct patch file from the
upstream git.

Though for some reason I do not think it actually works:

--8<---------------cut here---------------start------------->8---
$ guix download file:///tmp/boost-0001-unordered-fix-copy-assign.patch 
/gnu/store/hc23zxpvz11927ggv9lhb26kcfb19nbw-boost-0001-unordered-fix-copy-assign.patch
0l520lqh2vxdlyzvpki6hy2ylqimag8v18n2sdbmliifxiiha4gl
--8<---------------cut here---------------end--------------->8---

The hash seems correct.  But the -S still does not work:

--8<---------------cut here---------------start------------->8---
$ guix time-machine --no-substitutes -q 
--commit=ce9929fadfcdb1426eec4ea228aaf68db7fd2db3 -- build --no-substitutes -Se 
'(@ (gnu packages boost) boost-1.83)'
The following derivations will be built:
  
/gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv
  /gnu/store/pbri41ibhi0bl8jr1rgk6sgajn3jw2al-boost_1_83_0.tar.bz2.drv
  /gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv
building 
/gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv...

Starting download of 
/gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch
>From 
>https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch...
following redirection to 
`https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch/'...
downloading from 
https://www.boost.org/patches/1_83_0/0001-unordered-fix-copy-assign.patch ...
 0001-unordered-fix-copy-assign.patch  581B                                     
                                                                     1.9MiB/s 
00:00 ▕██████████████████▏ 100.0%
sha256 hash mismatch for 
/gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch:
  expected hash: 09j61m5xh7099k5na9i43x5rra51znf7vm2nyh89yqpizcll9q66
  actual hash:   0l520lqh2vxdlyzvpki6hy2ylqimag8v18n2sdbmliifxiiha4gl
hash mismatch for store item 
'/gnu/store/chzch29xi2gzdxbzk77sb432klkddra1-boost-0001-unordered-fix-copy-assign.patch'
build of 
/gnu/store/1xdv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv
 failed
View build log at 
'/var/log/guix/drvs/1x/dv0hapnbxaf8bixykkd5blyfv1bvcm-boost-0001-unordered-fix-copy-assign.patch.drv.gz'.
cannot build derivation 
`/gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv': 1 
dependencies couldn't be built
guix build: error: build of 
`/gnu/store/fcsphfy5jyxj69s5lnszlxc50lz2vnq7-boost_1_83_0.tar.zst.drv' failed
--8<---------------cut here---------------end--------------->8---

But the hash that is expected matches what the guix-download returned
(0l520lqh2vxdlyzvpki6hy2ylqimag8v18n2sdbmliifxiiha4gl), so this feel
close, but something is still missing.

Tomas

-- 
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.



Reply via email to