Opened 5 years ago

Closed 5 years ago

#16284 closed defect (fixed)

add automatic recovery from "Package hash for noscript_security_suite-2.6.9.22-sm+fn+fx.xpi differs from our locally stored sha256!" to make prep

Reported by: krichter Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: tbb-gitian
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

running make -j1 TORSOCKS= NUM_PROCS=16 in gitian/ with 30895033d3dc497cf38bfafdcf4aae323327d15f fails with

noscript_security_suite-2.6.9.22-sm+fn+fx.xpi: FAILED
sha256sum: WARNING: 1 computed checksum did NOT match
Package hash for noscript_security_suite-2.6.9.22-sm+fn+fx.xpi differs from our locally stored sha256!
make: *** [prep] Error 1

See attached build log for details. It'd be nice to add an auto-recovery routine to Makefile.

FYI find .. -name '*noscript*' returns no result, but I'd prefer a generic solution over a workaround (as this is not a support request).

Child Tickets

Attachments (1)

tor_browser_bundle_build_failure.log (14.5 KB) - added by krichter 5 years ago.

Download all attachments as: .zip

Change History (3)

Changed 5 years ago by krichter

comment:1 Changed 5 years ago by gk

Keywords: tbb-gitian added

The problem is that Mozilla just grabbed all the old NoScript versions (you get the same issue with nightly builds which has still 2.6.9.21 as dependency), signed them leaving the old version number in place. Thus, all our NoScript sha256sums are mismatching now. I think the best "solution" to this is moving on and tagging a new release with updated sha256sums. I plan to do that tomorrow.

comment:2 Changed 5 years ago by gk

Resolution: fixed
Status: newclosed

This is working again although I fear building older versions (< 4.5.2) is broken now. :(

Note: See TracTickets for help on using tickets.