[Bug 259722] net-mgmt/prometheus2: containerd distinfo wrong?

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 12 Nov 2021 09:56:38 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259722

--- Comment #3 from David O'Rourke <dor.bsd@xm0.uk> ---
(In reply to dave from comment #2)

Hi,

Sorry for not replying promptly here. You should be able to replace the sha256
sum in the distinfo file with the correct checksum for the containerd tar.gz
and have it compile correctly.

I read a bit more on this issue, apparently this isn't containerd's fault but a
general problem with GitHub archives, which are generated on the fly (and
possibly cached for a while). containerd encounters this issue since one of the
dependencies includes some "dynamic" content which is replaced when `git
archive` is run.

It looks like there may have been a brief time where Git(Hub?) changed how some
of that dynamic content was generated (specifically, how some `git archive`
shasums were handled) which had the knock-on effect of changing the shasums of
the tar.gz archives. Most repositories don't make use of these `git archive`
features, so most are safe from this issue.

Hopefully this doesn't happen again, it's not great that a bunch of ports using
GitHub archive URLs can be broken like this :(

-David

-- 
You are receiving this mail because:
You are the assignee for the bug.