Subject: Re: bug#33603: Invalid hash for NSS-Certs

From: Ludovic Courtès <[email-masked]>
Date: Fri, 11 Jan 2019 09:19:09 +0100

[email-masked] skribis:

> [email-masked] (Ludovic Courtès) writes:
>
>> Hi Brett,
>>
>> Brett Gilio <[email-masked]> skribis:
>>
>>> Generation 10	Dec 03 2018 11:42:41	(current)
>>>   guix 4f03aa2
>>>     repository URL: https://git.savannah.gnu.org/git/guix.git
>>>     branch: master
>>>     commit: 4f03aa23e805bd653de774e1d74ed2f50826899b
>>>
>>> downloading from https://mirror.hydra.gnu.org/guix/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39...
>>>  nss-certs-3.39  145KiB               417KiB/s 00:00 [##################] 100.0%
>>>
>>> sha256 hash mismatch for /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39:
>>>   expected hash: 101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
>>>   actual hash:   08ziz714diyfq2klxy1nc0nhr5wa2vd356n9vizlq913a7an9a9s
>>> substitution of /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39 failed
>>
>> The problem seems to be gone because I’m seeing the right hash here:
>>
>> $ wget -q -O - https://mirror.hydra.gnu.org/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39 |gunzip -c |guix hash -
>> 101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
>> $ wget -q -O - https://mirror.hydra.gnu.org/xbj4fhad0lnz0ziflwi90gyqbls8ains.narinfo |grep Hash
>> NarHash: sha256:101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
>
> I got the failure while trying to reconfigure:
>
> downloading from https://mirror.hydra.gnu.org/guix/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39...
>  nss-certs-3.39  145KiB                                                      608KiB/s 00:00 [##################] 100.0%
>
> sha256 hash mismatch for /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39:
>   expected hash: 101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla
>   actual hash:   08ziz714diyfq2klxy1nc0nhr5wa2vd356n9vizlq913a7an9a9s
> substitution of
>   /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39 failed

The wget commands above still give me the correct result, with hash
101v69xp1qzw9v6pgmbhw7gfdaic8vvs4v5l567lx7f2mjp25rla.

Are you running Guix on a foreign distro?  If so, could it be that
guix-daemon is effectively running in the C locale?

Thanks,
Ludo’.