Re: nss-certs: hash mismatch on berlin

[Ludovic Courtès]

Hello,

Björn Höfling <address@hidden> skribis:

> ~/guix/wt/nonfree [env]$ ./pre-inst-env  guix build nss-certs
> 0.2 MB will be downloaded:
>    /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
> substituting /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
> downloading from 
> https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1...
>  nss-certs-3.44.1  150KiB                                                     
>                              1.0MiB/s 00:00 [##################] 100.0%
>
> sha256 hash mismatch for 
> /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1:
>   expected hash: 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
>   actual hash:   1awgljvsvc141350xyjjnb15hk66qpcpzwz0hrly11yfbw6wn7cv
> substitution of /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1 
> failed
> guix build: error: some substitutes for the outputs of derivation 
> `/gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv' failed 
> (usually happens due to networking issues); try `--fallback' to build 
> derivation from source 
>
> This is on dd9c137b2c759f906d57b14fccff091994f274e8
>
> Manually downloading seams to find the right hash:
>
> $ wget -qO - 
> https://ci.guix.gnu.org/nar/gzip/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1
>  |  gunzip | guix hash -
> 0vbkb5mcwzbz4lm1c1319pail61785sd3lj6526vl5hdnp1rxyad
>
> $ ls /gnu/store/*nss-certs-3.44.1* -d
> /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1       
> /gnu/store/br6w1qmw2b98c6fa45gy0ljqdzjw70vr-nss-certs-3.44.1.drv
> /gnu/store/32hy1jqkam201l7c4wg3bhxz4x5l5jy0-nss-certs-3.44.1.lock  
> /gnu/store/fpv0xrrr47g879agkmchzzamw1p46i46-nss-certs-3.44.1-guile-builder
>
> I blamed that something about locales is wrong on berlin. Could it be
> the case that on my side something with locales is wrong? In the build
> daemon? I'm on Ubunutu+Guix, that might cause also some trouble? How
> can I verify/check my locale-configs?

If your guix-daemon is not running under a UTF-8 locale, then nss-certs
may end up being unpacked with incorrect file names (though I thought
that was supposed to be treated as an error, oh well.)

You can find the PID of guix-daemon, and then do something like:

  cat /proc/PID/environ | xargs -0 echo

and look at the value of GUIX_LOCPATH and LC_ALL there.  Both should be
valid.

Thanks,
Ludo’.