You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@nuttx.apache.org by Brennan Ashton <ba...@brennanashton.com> on 2023/01/02 06:12:31 UTC

Re: CI Documentation is failing

Please see this PR for a fix and the root cause.
https://github.com/apache/nuttx/pull/8018

On Fri, Dec 30, 2022 at 11:53 AM Alan C. Assis <ac...@gmail.com> wrote:
>
> Thank you very much Brennan!
>
> BR,
>
> Alan
>
> On 12/30/22, Brennan Ashton <ba...@brennanashton.com> wrote:
> > Alan, I mentioned this earlier in another issue. I believe I know what the
> > issue is and am fixing it this week.  There are a couple things that need
> > to be fixed. Juts give me a little bit as it is the holidays.
> >
> > --Brennan
> >
> > On Fri, Dec 30, 2022, 10:58 AM Alan C. Assis <ac...@gmail.com> wrote:
> >
> >> Dear busy NuttXers,
> >>
> >> As you probably knows the CI is failing, it is reporting that the HASH
> >> is not matching.
> >>
> >> I don't know if someone changed the packet version and forgot to
> >> update the hash or if the files were infected.
> >>
> >> For those who really care about this project, please helps to fix it
> >> (then we all could have a Happy New Year) :
> >>
> >> Installing initially failed dependencies...
> >> [pipenv.exceptions.InstallError]: Collecting alabaster==0.7.12
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> alabaster-0.7.12-py2.py3-none-any.whl (14 kB)
> >> [pipenv.exceptions.InstallError]: Collecting babel==2.11.0
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> Babel-2.11.0-py3-none-any.whl (9.5 MB)
> >> [pipenv.exceptions.InstallError]: Collecting certifi==2022.12.7
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> certifi-2022.12.7-py3-none-any.whl (155 kB)
> >> [pipenv.exceptions.InstallError]: Collecting charset-normalizer==2.1.1
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> charset_normalizer-2.1.1-py3-none-any.whl (39 kB)
> >> [pipenv.exceptions.InstallError]: Collecting colorama==0.4.6
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> colorama-0.4.6-py2.py3-none-any.whl (25 kB)
> >> [pipenv.exceptions.InstallError]: Collecting docutils==0.17.1
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> docutils-0.17.1-py2.py3-none-any.whl (575 kB)
> >> [pipenv.exceptions.InstallError]: Collecting idna==3.4
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> idna-3.4-py3-none-any.whl (61 kB)
> >> [pipenv.exceptions.InstallError]: Collecting imagesize==1.4.1
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> imagesize-1.4.1-py2.py3-none-any.whl (8.8 kB)
> >> [pipenv.exceptions.InstallError]: Collecting jinja2==3.0.3
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> Jinja2-3.0.3-py3-none-any.whl (133 kB)
> >> [pipenv.exceptions.InstallError]: Collecting livereload==2.6.3
> >> [pipenv.exceptions.InstallError]:   Using cached
> >> livereload-2.6.3-py2.py3-none-any.whl (24 kB)
> >> [pipenv.exceptions.InstallError]: ERROR: THESE PACKAGES DO NOT MATCH
> >> THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package
> >> versions, please update the hashes. Otherwise, examine the package
> >> contents carefully; someone may have tampered with them.
> >> [pipenv.exceptions.InstallError]:     livereload==2.6.3 from
> >>
> >> https://files.pythonhosted.org/packages/e3/05/ed67ccf462fff0b559e6ea7b3e3fcb20dec9d57bf90b5c5e72a6f316183e/livereload-2.6.3-py2.py3-none-any.whl
> >> (from -r
> >> /tmp/pipenv-j3h3kvjk-requirements/pipenv-rawfvfm0-hashed-reqs.txt
> >> (line 10)):
> >> [pipenv.exceptions.InstallError]:         Expected sha256
> >> 776f2f865e59fde56490a56bcc6773b6917366bce0c267c60ee8aaf1a0959869
> >> [pipenv.exceptions.InstallError]:              Got
> >> ad4ac6f53b2d62bb6ce1a5e6e96f1f00976a32348afedcb4b6d68df2a1d346e4
> >>
> >> BR,
> >>
> >> Alan
> >>
> >

Re: CI Documentation is failing

Posted by "Alan C. Assis" <ac...@gmail.com>.
On 1/2/23, Brennan Ashton <ba...@brennanashton.com> wrote:
> On Mon, Jan 2, 2023, 4:46 AM Alan C. Assis <ac...@gmail.com> wrote:
>
>> Thank you very much Brennan,
>>
>> I was afraid to change the hash because I wasn't sure that the file
>> wasn't corrupted/infected.
>>
>> How did you check it was a legit hash change?
>>
>
> In the PR I linked to the relevant upstream issue. It was not an incorrect
> hash (note both still exist in the Pipenv.lock) it is that for the same
> version a whl was uploaded to pypi (which we prefer) and that was not
> listed.
>

Right, understood! Thank you!

Re: CI Documentation is failing

Posted by Brennan Ashton <ba...@brennanashton.com>.
On Mon, Jan 2, 2023, 4:46 AM Alan C. Assis <ac...@gmail.com> wrote:

> Thank you very much Brennan,
>
> I was afraid to change the hash because I wasn't sure that the file
> wasn't corrupted/infected.
>
> How did you check it was a legit hash change?
>

In the PR I linked to the relevant upstream issue. It was not an incorrect
hash (note both still exist in the Pipenv.lock) it is that for the same
version a whl was uploaded to pypi (which we prefer) and that was not
listed.

--Brennan

>

Re: CI Documentation is failing

Posted by "Alan C. Assis" <ac...@gmail.com>.
Thank you very much Brennan,

I was afraid to change the hash because I wasn't sure that the file
wasn't corrupted/infected.

How did you check it was a legit hash change?

BR,

Alan

On 1/2/23, Brennan Ashton <ba...@brennanashton.com> wrote:
> Please see this PR for a fix and the root cause.
> https://github.com/apache/nuttx/pull/8018
>
> On Fri, Dec 30, 2022 at 11:53 AM Alan C. Assis <ac...@gmail.com> wrote:
>>
>> Thank you very much Brennan!
>>
>> BR,
>>
>> Alan
>>
>> On 12/30/22, Brennan Ashton <ba...@brennanashton.com> wrote:
>> > Alan, I mentioned this earlier in another issue. I believe I know what
>> > the
>> > issue is and am fixing it this week.  There are a couple things that
>> > need
>> > to be fixed. Juts give me a little bit as it is the holidays.
>> >
>> > --Brennan
>> >
>> > On Fri, Dec 30, 2022, 10:58 AM Alan C. Assis <ac...@gmail.com> wrote:
>> >
>> >> Dear busy NuttXers,
>> >>
>> >> As you probably knows the CI is failing, it is reporting that the HASH
>> >> is not matching.
>> >>
>> >> I don't know if someone changed the packet version and forgot to
>> >> update the hash or if the files were infected.
>> >>
>> >> For those who really care about this project, please helps to fix it
>> >> (then we all could have a Happy New Year) :
>> >>
>> >> Installing initially failed dependencies...
>> >> [pipenv.exceptions.InstallError]: Collecting alabaster==0.7.12
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> alabaster-0.7.12-py2.py3-none-any.whl (14 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting babel==2.11.0
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> Babel-2.11.0-py3-none-any.whl (9.5 MB)
>> >> [pipenv.exceptions.InstallError]: Collecting certifi==2022.12.7
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> certifi-2022.12.7-py3-none-any.whl (155 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting charset-normalizer==2.1.1
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> charset_normalizer-2.1.1-py3-none-any.whl (39 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting colorama==0.4.6
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> colorama-0.4.6-py2.py3-none-any.whl (25 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting docutils==0.17.1
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> docutils-0.17.1-py2.py3-none-any.whl (575 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting idna==3.4
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> idna-3.4-py3-none-any.whl (61 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting imagesize==1.4.1
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> imagesize-1.4.1-py2.py3-none-any.whl (8.8 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting jinja2==3.0.3
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> Jinja2-3.0.3-py3-none-any.whl (133 kB)
>> >> [pipenv.exceptions.InstallError]: Collecting livereload==2.6.3
>> >> [pipenv.exceptions.InstallError]:   Using cached
>> >> livereload-2.6.3-py2.py3-none-any.whl (24 kB)
>> >> [pipenv.exceptions.InstallError]: ERROR: THESE PACKAGES DO NOT MATCH
>> >> THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package
>> >> versions, please update the hashes. Otherwise, examine the package
>> >> contents carefully; someone may have tampered with them.
>> >> [pipenv.exceptions.InstallError]:     livereload==2.6.3 from
>> >>
>> >> https://files.pythonhosted.org/packages/e3/05/ed67ccf462fff0b559e6ea7b3e3fcb20dec9d57bf90b5c5e72a6f316183e/livereload-2.6.3-py2.py3-none-any.whl
>> >> (from -r
>> >> /tmp/pipenv-j3h3kvjk-requirements/pipenv-rawfvfm0-hashed-reqs.txt
>> >> (line 10)):
>> >> [pipenv.exceptions.InstallError]:         Expected sha256
>> >> 776f2f865e59fde56490a56bcc6773b6917366bce0c267c60ee8aaf1a0959869
>> >> [pipenv.exceptions.InstallError]:              Got
>> >> ad4ac6f53b2d62bb6ce1a5e6e96f1f00976a32348afedcb4b6d68df2a1d346e4
>> >>
>> >> BR,
>> >>
>> >> Alan
>> >>
>> >
>