[package] cfitsio/4.2.0: SHA256 has changed

[baptisteesteban]

Description

Hi,

I have a simple conanfile.txt that only contains a requirement on cfitsio/4.2.0. When I perform a conan install . --build=* the sha256 does not match the one specified in the conandata.yml. This issue is very recent as everything worked well 24 hours ago.

Kind regards.

Package and Environment Details

• Package Name/Version: cfitsio/4.2.0
• Operating System+version: Linux Debian 11
• Compiler+version: GCC 10.2.1
• Conan version: conan 2.8.1
• Python version: Python 3.10.0

Conan profile

Host profile:
[settings]
arch=x86_64
build_type=Release
compiler=gcc
compiler.cppstd=gnu14
compiler.libcxx=libstdc++11
compiler.version=10
os=Linux

Build profile:
[settings]
arch=x86_64
build_type=Release
compiler=gcc
compiler.cppstd=gnu14
compiler.libcxx=libstdc++11
compiler.version=10
os=Linux

Steps to reproduce

conan install . --build=*

Logs

Click to expand log

======== Input profiles ========
Profile host:
[settings]
arch=x86_64
build_type=Release
compiler=gcc
compiler.cppstd=gnu14
compiler.libcxx=libstdc++11
compiler.version=10
os=Linux

Profile build:
[settings]
arch=x86_64
build_type=Release
compiler=gcc
compiler.cppstd=gnu14
compiler.libcxx=libstdc++11
compiler.version=10
os=Linux


======== Computing dependency graph ========
Graph root
    conanfile.txt: /workspace/conanfile.txt
Requirements
    cfitsio/4.2.0#699456cf7a5ad898f9744b25827e075e - Cache
    zlib/1.3.1#f52e03ae3d251dec704634230cd806a2 - Cache
Resolved version ranges
    zlib/[>=1.2.11 <2]: zlib/1.3.1

======== Computing necessary packages ========
zlib/1.3.1: Forced build from source
cfitsio/4.2.0: Forced build from source
Requirements
    cfitsio/4.2.0#699456cf7a5ad898f9744b25827e075e:2cdb606a3124ccdfe4b62eeb84fae75b5f65ecfe - Build
    zlib/1.3.1#f52e03ae3d251dec704634230cd806a2:3f0cbc1394cb3fd9f3473d67001da1a496fb5b26 - Build

======== Installing packages ========
zlib/1.3.1: Sources downloaded from 'conancenter'
zlib/1.3.1: Calling source() in /root/.conan2/p/zlib41bd3946e7341/s/src
zlib/1.3.1: Unzipping zlib-1.3.1.tar.gz to /root/.conan2/p/zlib41bd3946e7341/s/src

-------- Installing package zlib/1.3.1 (1 of 2) --------
zlib/1.3.1: Building from source
zlib/1.3.1: Package zlib/1.3.1:3f0cbc1394cb3fd9f3473d67001da1a496fb5b26
zlib/1.3.1: Copying sources to build folder
zlib/1.3.1: Building your package in /root/.conan2/p/b/zlib2559add2eb939/b
zlib/1.3.1: Calling generate()
zlib/1.3.1: Generators folder: /root/.conan2/p/b/zlib2559add2eb939/b/build/Release/generators
zlib/1.3.1: CMakeToolchain generated: conan_toolchain.cmake
zlib/1.3.1: CMakeToolchain generated: /root/.conan2/p/b/zlib2559add2eb939/b/build/Release/generators/CMakePresets.json
zlib/1.3.1: CMakeToolchain generated: /root/.conan2/p/b/zlib2559add2eb939/b/src/CMakeUserPresets.json
zlib/1.3.1: Generating aggregated env files
zlib/1.3.1: Generated aggregated env files: ['conanbuild.sh', 'conanrun.sh']
zlib/1.3.1: Calling build()
zlib/1.3.1: Apply patch (conan): separate static/shared builds, disable debug suffix
zlib/1.3.1: Running CMake.configure()
zlib/1.3.1: RUN: cmake -G "Unix Makefiles" -DCMAKE_TOOLCHAIN_FILE="generators/conan_toolchain.cmake" -DCMAKE_INSTALL_PREFIX="/root/.conan2/p/b/zlib2559add2eb939/p" -DCMAKE_POLICY_DEFAULT_CMP0091="NEW" -DCMAKE_BUILD_TYPE="Release" "/root/.conan2/p/b/zlib2559add2eb939/b/src"
-- Using Conan toolchain: /root/.conan2/p/b/zlib2559add2eb939/b/build/Release/generators/conan_toolchain.cmake
-- Conan toolchain: Setting CMAKE_POSITION_INDEPENDENT_CODE=ON (options.fPIC)
-- Conan toolchain: Defining architecture flag: -m64
-- Conan toolchain: Setting BUILD_SHARED_LIBS = OFF
-- The C compiler identification is GNU 10.2.1
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Check for working C compiler: /usr/bin/cc - skipped
-- Detecting C compile features
-- Detecting C compile features - done
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of off64_t
-- Check size of off64_t - done
-- Looking for fseeko
-- Looking for fseeko - found
-- Looking for unistd.h
-- Looking for unistd.h - found
-- Renaming
--     /root/.conan2/p/b/zlib2559add2eb939/b/src/zconf.h
-- to 'zconf.h.included' because this file is included with zlib
-- but CMake generates it automatically in the build directory.
-- Configuring done
-- Generating done
-- Build files have been written to: /root/.conan2/p/b/zlib2559add2eb939/b/build/Release

zlib/1.3.1: Running CMake.build()
zlib/1.3.1: RUN: cmake --build "/root/.conan2/p/b/zlib2559add2eb939/b/build/Release" -- -j8
Scanning dependencies of target zlib
[ 31%] Building C object CMakeFiles/zlib.dir/adler32.c.o
[ 37%] Building C object CMakeFiles/zlib.dir/compress.c.o
[ 37%] Building C object CMakeFiles/zlib.dir/crc32.c.o
[ 37%] Building C object CMakeFiles/zlib.dir/deflate.c.o
[ 43%] Building C object CMakeFiles/zlib.dir/gzread.c.o
[ 43%] Building C object CMakeFiles/zlib.dir/gzlib.c.o
[ 43%] Building C object CMakeFiles/zlib.dir/gzclose.c.o
[ 50%] Building C object CMakeFiles/zlib.dir/gzwrite.c.o
[ 56%] Building C object CMakeFiles/zlib.dir/inflate.c.o
[ 62%] Building C object CMakeFiles/zlib.dir/infback.c.o
[ 68%] Building C object CMakeFiles/zlib.dir/inftrees.c.o
[ 75%] Building C object CMakeFiles/zlib.dir/inffast.c.o
[ 81%] Building C object CMakeFiles/zlib.dir/uncompr.c.o
[ 87%] Building C object CMakeFiles/zlib.dir/trees.c.o
[ 93%] Building C object CMakeFiles/zlib.dir/zutil.c.o
[100%] Linking C static library libz.a
[100%] Built target zlib

zlib/1.3.1: Package '3f0cbc1394cb3fd9f3473d67001da1a496fb5b26' built
zlib/1.3.1: Build folder /root/.conan2/p/b/zlib2559add2eb939/b/build/Release
zlib/1.3.1: Generating the package
zlib/1.3.1: Packaging in folder /root/.conan2/p/b/zlib2559add2eb939/p
zlib/1.3.1: Calling package()
zlib/1.3.1: Running CMake.install()
zlib/1.3.1: RUN: cmake --install "/root/.conan2/p/b/zlib2559add2eb939/b/build/Release" --prefix "/root/.conan2/p/b/zlib2559add2eb939/p"
-- Install configuration: "Release"
-- Installing: /root/.conan2/p/b/zlib2559add2eb939/p/lib/libz.a
-- Installing: /root/.conan2/p/b/zlib2559add2eb939/p/include/zconf.h
-- Installing: /root/.conan2/p/b/zlib2559add2eb939/p/include/zlib.h

zlib/1.3.1: package(): Packaged 1 file: LICENSE
zlib/1.3.1: package(): Packaged 2 '.h' files: zlib.h, zconf.h
zlib/1.3.1: package(): Packaged 1 '.a' file: libz.a
zlib/1.3.1: Created package revision 25e7ce13d0e08f17ef9ea9f490521f2b
zlib/1.3.1: Package '3f0cbc1394cb3fd9f3473d67001da1a496fb5b26' created
zlib/1.3.1: Full package reference: zlib/1.3.1#f52e03ae3d251dec704634230cd806a2:3f0cbc1394cb3fd9f3473d67001da1a496fb5b26#25e7ce13d0e08f17ef9ea9f490521f2b
zlib/1.3.1: Package folder /root/.conan2/p/b/zlib2559add2eb939/p
cfitsio/4.2.0: Sources downloaded from 'conancenter'
cfitsio/4.2.0: Calling source() in /root/.conan2/p/cfitsec04615c83e9b/s/src
ERROR: cfitsio/4.2.0: Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for 'cfitsio-4.2.0.tar.gz' file. 
 Provided signature: ef9881973ecb9fe55732a4c1bb5ca96e63b624728f6319556939e0fe25f495e8  
 Computed signature: eba53d1b3f6e345632bb09a7b752ec7ced3d63ec5153a848380f3880c5d61889

[AbrilRBS]

Seems like the files have been re-uploaded with probably different compression levels. Using our backup source and fetching the old sources, I get this:

~/Downloads $ shasum -a 256 old.tar.gz 
ef9881973ecb9fe55732a4c1bb5ca96e63b624728f6319556939e0fe25f495e8  old.tar.gz
~/Downloads $ shasum -a 256 new.tar.gz 
eba53d1b3f6e345632bb09a7b752ec7ced3d63ec5153a848380f3880c5d61889  new.tar.gz
~/Downloads $ diff -q --no-dereference new/ old/
~/Downloads $ 

So the files are different, but their extracted contents are not (In fact, tar -tvjf .. does not report any differences between them either)

[AbrilRBS]

I can also confirm that this is a general issue for al released versions, not just the reported one

~/c/c/r/c/all (master|✔) $ conan source . --version=4.2.0
conanfile.py (cfitsio/4.2.0): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/4.2.0): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for 'ef9881973ecb9fe55732a4c1bb5ca96e63b624728f6319556939e0fe25f495e8' file. 
 Provided signature: ef9881973ecb9fe55732a4c1bb5ca96e63b624728f6319556939e0fe25f495e8  
 Computed signature: eba53d1b3f6e345632bb09a7b752ec7ced3d63ec5153a848380f3880c5d61889
~/c/c/r/c/all (master|✔) 4,7s $ conan source . --version=4.3.0
conanfile.py (cfitsio/4.3.0): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/4.3.0): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for '734ab0198714fe43eab94a67d6987085bde5573e6babde4d05799a8d04ebb04c' file. 
 Provided signature: 734ab0198714fe43eab94a67d6987085bde5573e6babde4d05799a8d04ebb04c  
 Computed signature: fdadc01d09cf9f54253802c5ec87eb10de51ce4130411415ae88c30940621b8b
~/c/c/r/c/all (master|✔) 5,7s $ conan source . --version=4.4.0
conanfile.py (cfitsio/4.4.0): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/4.4.0): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for 'c42bd609151c0b0d7c4f3578d425ae7aaa9afa4828cab35c0accea588e290c29' file. 
 Provided signature: c42bd609151c0b0d7c4f3578d425ae7aaa9afa4828cab35c0accea588e290c29  
 Computed signature: 95900cf95ae760839e7cb9678a7b2fad0858d6ac12234f934bd1cb6bfc246ba9
~/c/c/r/c/all (master|✔) 4,2s $ conan source . --version=4.1.0
conanfile.py (cfitsio/4.1.0): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/4.1.0): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for '748994dd1c819b88567e3539ea1f0ec2dd39fc0ed2884c033afa3da66efb5f4e' file. 
 Provided signature: 748994dd1c819b88567e3539ea1f0ec2dd39fc0ed2884c033afa3da66efb5f4e  
 Computed signature: b367c695d2831958e7166921c3b356d5dfa51b1ecee505b97416ba39d1b6c17a
~/c/c/r/c/all (master|✔) 6,7s $ conan source . --version=4.0.0
conanfile.py (cfitsio/4.0.0): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/4.0.0): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for '88735b69bb017ee92823b9e7ee14efeae2e57fb6c00503ed3aa2820e850a7b5e' file. 
 Provided signature: 88735b69bb017ee92823b9e7ee14efeae2e57fb6c00503ed3aa2820e850a7b5e  
 Computed signature: b2a8efba0b9f86d3e1bd619f662a476ec18112b4f27cc441cc680a4e3777425e
~/c/c/r/c/all (master|✔) 5,9s $ conan source . --version=3.490
conanfile.py (cfitsio/3.490): Calling source() in /Users/abril/coding/conan-center-index/recipes/cfitsio/all/src
ERROR: conanfile.py (cfitsio/3.490): Error in source() method, line 70
	get(self, **self.conan_data["sources"][self.version], strip_root=True)
	ConanException: sha256 signature failed for '8cc4beddd0ff389fb81bde9c181e0e3c419c15ec8a66df201ff4619a93715558' file. 
 Provided signature: 8cc4beddd0ff389fb81bde9c181e0e3c419c15ec8a66df201ff4619a93715558  
 Computed signature: 5b65a20d5c53494ec8f638267fca4a629836b7ac8dd0ef0266834eab270ed4b3

I'll submit both a PR to fix it, and an issue upstream to clarify, but for now if this is blocking you, feel free to make use of the backup source feature as shown in https://blog.conan.io/2023/10/03/backup-sources-feature.html. The current backup source remote is at https://c3i.jfrog.io/artifactory/conan-center-backup-sources/

[baptisteesteban]

Thanks a lot for your quick answer and your advice

[AbrilRBS]

cf HEASARC/cfitsio#31