Bad source tarballs for ipython-5.8.0 on some mirrors

[E. Madison Bray]

Several of the mirrors appear to be hosting a bad version of
ipython-5.8.0.tar.gz that does not match the expected checksum in the
Sage build tree:

$ cat build/pkgs/ipython/checksums.ini
tarball=ipython-VERSION.tar.gz
sha1=987b66cc662db8bd2ae96eee2f2237266d0c92dc
md5=7014b8824981eef2cb893ea5398d6b8d
cksum=226069384
$ wget http://www-ftp.lip6.fr/pub/math/sagemath/spkg/upstream/ipython/ipython-5.8.0.tar.gz
$ sha1sum ipython-5.8.0.tar.gz
3ac43b6a6f40ef5c30cff2137e16f210ef4a6ec0 ipython-5.8.0.tar.gz
$ md5sum ipython-5.8.0.tar.gz
dec482b42b285aaf5430e2aabf54bff1 ipython-5.8.0.tar.gz

I haven't checked any other packages but it makes me wonder. Anyone
have any idea?

[Harald Schilly]

That's definitely weird. 

The master is files.sagemath.org, and it's website says 

ipython-5.8.0.tar.gz torrent 4.75 MB 2018-09-29 15:52

MD5: 7014b8824981eef2cb893ea5398d6b8d

and sha1: 987b66cc662db8bd2ae96eee2f2237266d0c92dc

So, that's correct. Must be the faul of that mirror. My contact email from 2011 is ftpm...@lip6.fr … anyone motivated to contact them? I'll disable the mirror for now, though. 

-- harald

--

---
You received this message because you are subscribed to the Google Groups "sagemath-admins" group.
To unsubscribe from this group and stop receiving emails from it, send an email to sagemath-admi...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Samuel Lelièvre]

I just wrote to the maintainers of the SageMath download mirror
at LIP6, Paris.

[Eric Gourgoulhon]

Hi,

It turns out that 3 package source tarballs have incorrect checksums on  www-ftp.lip6.fr:

ipython_genutils-0.2.0.tar.gz
jinja2-2.10.tar.gz

ipython-5.8.0.tar.gz

Copying to SAGE_ROOT/upstream tarballs downloaded from another mirror (mirror.koddos.net) for these three ones (only) lead to a successful build of Sage 8.6.

NB: diff says that the tarballs from www-ftp.lip6.fr and mirror.koddos.net are indeed different; they have exactly the same size though.

Eric.

[Eric Gourgoulhon]

Le vendredi 18 janvier 2019 16:23:23 UTC+1, Samuel Lelievre a écrit :

I just wrote to the maintainers of the SageMath download mirror
at LIP6, Paris.

Btw, I've noticed that LIP6 does no longer appear (nor any French mirror...)  in the list of mirrors for binaries:

http://www.sagemath.org/download.html

I think it was in the list some time ago...

Eric.

[Samuel Lelievre]

Fri 2019-01-18 17:00:50 UTC+1, Eric Gourgoulhon:

>
> Btw, I've noticed that LIP6 does no longer appear (nor any French mirror...)
> in the list of mirrors for binaries:
> http://www.sagemath.org/download.html
> I think it was in the list some time ago...

Yes, Harald just removed the LIP6 mirror from the list
of SageMath download mirrors, see his earlier post:

https://groups.google.com/d/msg/sage-devel/IzXQdegW9vk/0t0tycrRCgAJ

Hopefully the LIP6 mirror maintainers can fix this.

There is no other French mirror. I noticed that the

"mirrorservice" mirror is often the fastest from France,

(even faster than the LIP6 one).

Samuel