DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 656533858D21
Message-ID: <78835005-a205-4115-8c74-503fb5c49777@SystematicSW.ab.ca>
Date: Thu, 24 Oct 2024 07:39:12 -0600
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Installer freezes in windows-2022 GitHub Action
Content-Language: en-CA
To: cygwin@cygwin.com
References: <CAGen01ickv9cenzeT3SkV9buugEh5CSGW-JWKkWfHUQUsCoVxg@mail.gmail.com>
 <52556213-2914-449d-a719-e1a0826f6ba1@dronecode.org.uk>
 <CAGen01iESMAAzWL+hdp2nNpCBHiD0fhsuK-Fhw6yyFDSzV388A@mail.gmail.com>
 <CAGen01gf91LXQrLp32DWbVFkAHn2A92WqjQOmwRm3LMtoZR2Nw@mail.gmail.com>
 <d98dc0e8-d6be-47c6-af8f-fae93fd04bbf@SystematicSW.ab.ca>
 <fb6e5f94-cf39-4a7a-981c-9a6e33b2ef96@dronecode.org.uk>
Autocrypt: addr=Brian.Inglis@Shaw.ca; keydata=
 xjMEXopx9BYJKwYBBAHaRw8BAQdAPq8FIaW+Bz7xnfyJ1gHQyf2EZo5sAwSPy/bRAcLeWl/N
 I0JyaWFuIEluZ2xpcyA8QnJpYW4uSW5nbGlzQFNoYXcuY2E+wpYEExYIAD4WIQTG63sbl+cr
 2nyOuZiKvQKcH1E27wUCXopx9AIbAwUJCWYBgAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAK
 CRCKvQKcH1E276DmAP91Bt8kfJhKHYb9b2sao2fxwJFsl1GlRi516WKI0OkphQEA+ULITsPs
 blfzSq+GgI7q4LPfRfTLy4Oo3gorlnhnfgnOOAReinH0EgorBgEEAZdVAQUBAQdAepgIsLwm
 GQicfoIBaB9xHp63MQJqVCPbgPzESTg7EEwDAQgHwn0EGBYIACYWIQTG63sbl+cr2nyOuZiK
 vQKcH1E27wUCXopx9AIbDAUJCWYBgAAKCRCKvQKcH1E27+zoAP4u2ivMQBAqaMeLOilqRWgy
 nV2ATImz1p2v1H5P4kBiDwD3caPK1cxU5lijzuSDCjgtIpgF/avHbjA32fxJdIRwAA==
Organization: Systematic Software
In-Reply-To: <fb6e5f94-cf39-4a7a-981c-9a6e33b2ef96@dronecode.org.uk>
Precedence: list
From: Brian Inglis via Cygwin <cygwin@cygwin.com>
Reply-To: cygwin@cygwin.com
Cc: Brian Inglis <Brian.Inglis@SystematicSW.ab.ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces~archive-cygwin=delorie.com@cygwin.com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie.com@cygwin.com>
Content-Transfer-Encoding: 8bit

On 2024-10-23 07:28, Jon Turney via Cygwin wrote:
> On 21/10/2024 18:02, Brian Inglis via Cygwin wrote:
>> On 2024-10-21 02:56, Michele Locati via Cygwin wrote:
>> Unfortunately sha512.sum checksum files are no longer reliable, unless they 
>> have a later time stamp than the other downloads, as they are updated 
>> asynchronously.
> 
> I assume you're basing this on my reply in [1].
> 
> But that's not relevant here, because these files aren't part of the main 
> /var/ftp/ area on sourceware, they are only served via the website.
> 
> The checksums in https://cygwin.com/setup/sha512.sum are updated when a new 
> version of setup is uploaded, or at least, very shortly thereafter (see [2]).
> 
> The checksums in https://cygwin.com/sha512.sum are updated when the links are 
> rotated to point to a new setup version.
> 
> [1] https://cygwin.com/pipermail/cygwin-apps/2024-July/043849.html
> [2] https://cygwin.com/cgit/cygwin-apps/setup/tree/Makefile.am#n376

I am basing this on that reply, and my experiences with data file checksums, 
which have been unreliable, as upstreams may be updated while we are 
downloading, and few directory updates seem to sync after checksum updates.

Not worried about setup-x86_64.{exe,sig} sha512.sum master updates, as wget/2 -N 
takes care of those, but I have two data use cases:

- master setup.ini updates
- mirror setup.ini updates

where I have downgraded sha512.sum checks to warnings not errors, for package 
upload checks and announce prereqs, and setup run prereqs, as the latter often 
indicates that Cygwin Setup may have a problem while upstream mirror updates are 
happening.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retirer     but when there is no more to cut
                                 -- Antoine de Saint-Exupéry


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple