[Building Sakai] Checksum errors with maven 2.2.1
David Horwitz
david.horwitz at uct.ac.za
Wed Mar 14 08:26:16 PDT 2012
Some examples generated by building samigo trunk with the -U switch
[INFO] snapshot org.sakaiproject:kernel:1.4.0-SNAPSHOT: checking for
updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'4b93292fbeb60cb114001294d4bb6e3815bd94cb'; remote =
'd7303b820c8f1c9d8d000914192d94eec196afe3' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'4b93292fbeb60cb114001294d4bb6e3815bd94cb'; remote =
'd7303b820c8f1c9d8d000914192d94eec196afe3' - IGNORING
[INFO] snapshot
org.sakaiproject.entitybroker:entitybroker-api:1.6-SNAPSHOT: checking
for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.entitybroker:entitybroker-api:1.6-SNAPSHOT: checking
for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - IGNORING
[INFO] snapshot
org.sakaiproject.entitybroker:entitybroker-api:1.6-SNAPSHOT: checking
for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.entitybroker:entitybroker-api:1.6-SNAPSHOT: checking
for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'7138e9c8bf5e6f10d9481073bd179770708ae39c'; remote =
'd51fee98f1fb817d8471e67c4ac2239e9a72ee1d' - IGNORING
[INFO] snapshot org.sakaiproject:entitybroker:1.6-SNAPSHOT: checking for
updates from sakai-maven2-snapshots
[INFO] snapshot org.sakaiproject:entitybroker:1.6-SNAPSHOT: checking for
updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'9cc54f4b0b11b522268d322f004fd766377361c3'; remote =
'ec519aaab6a96b1fcf1a189329d4a88c29c53f55' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'9cc54f4b0b11b522268d322f004fd766377361c3'; remote =
'ec519aaab6a96b1fcf1a189329d4a88c29c53f55' - IGNORING
[INFO] Deleting directory
/home/dhorwitz/tmp/sam-trunk/samigo-hibernate/target
[INFO] snapshot org.sakaiproject.kernel:sakai-kernel-api:1.4.0-SNAPSHOT:
checking for updates from sakai-maven2-snapshots
[INFO] snapshot org.sakaiproject.kernel:sakai-kernel-api:1.4.0-SNAPSHOT:
checking for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'13d536ebecf9da3429898405d2857bc3333374af'; remote =
'c725eb4b9182cdfb9aed6cb9abfacd7e6805c79f' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'13d536ebecf9da3429898405d2857bc3333374af'; remote =
'c725eb4b9182cdfb9aed6cb9abfacd7e6805c79f' - IGNORING
[INFO] snapshot
org.sakaiproject.kernel:sakai-component-manager:1.4.0-SNAPSHOT: checking
for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.kernel:sakai-component-manager:1.4.0-SNAPSHOT: checking
for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'a775549ef39cd38c409a2bd68f2798218f7da590'; remote =
'43c2de4344e43807a0f497e2c4fb00e1f7c0b415' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'a775549ef39cd38c409a2bd68f2798218f7da590'; remote =
'43c2de4344e43807a0f497e2c4fb00e1f7c0b415' - IGNORING
[INFO] snapshot
org.sakaiproject.kernel:sakai-kernel-util:1.4.0-SNAPSHOT: checking for
updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.kernel:sakai-kernel-util:1.4.0-SNAPSHOT: checking for
updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'4c6948d850f784a302ae820d1041d850d304df5a'; remote =
'9833d34e91bc01ef2b76e907f0a6441d2a47353b' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'4c6948d850f784a302ae820d1041d850d304df5a'; remote =
'9833d34e91bc01ef2b76e907f0a6441d2a47353b' - IGNORING
[INFO] snapshot
org.sakaiproject.calendar:sakai-calendar-api:2.10-SNAPSHOT: checking for
updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.calendar:sakai-calendar-api:2.10-SNAPSHOT: checking for
updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'43c549546c83bdc8cf3a6833afd16fa47cf96d43'; remote =
'd0dbc1315bf11aa9f1cb4ac20832dc622bcb6bea' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'43c549546c83bdc8cf3a6833afd16fa47cf96d43'; remote =
'd0dbc1315bf11aa9f1cb4ac20832dc622bcb6bea' - IGNORING
[INFO] snapshot org.sakaiproject.calendar:calendar:2.10-SNAPSHOT:
checking for updates from sakai-maven2-snapshots
[INFO] snapshot org.sakaiproject.calendar:calendar:2.10-SNAPSHOT:
checking for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'3d10ba6626b79e514d71d815f80bf37d7486a889'; remote =
'ec990c9af951035f687df25155183bc194386d02' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'3d10ba6626b79e514d71d815f80bf37d7486a889'; remote =
'ec990c9af951035f687df25155183bc194386d02' - IGNORING
[INFO] snapshot
org.sakaiproject.edu-services.gradebook:gradebook-service-api:1.3-SNAPSHOT:
checking for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.edu-services.gradebook:gradebook-service-api:1.3-SNAPSHOT:
checking for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'721befb6e88110cfeec5012420a6e4ae308bc429'; remote =
'cfc5d6aa044f17867d362d1dd2280f9b3dd74fac' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'721befb6e88110cfeec5012420a6e4ae308bc429'; remote =
'cfc5d6aa044f17867d362d1dd2280f9b3dd74fac' - IGNORING
[INFO] snapshot org.sakaiproject.edu-services:edu-services:1.3-SNAPSHOT:
checking for updates from sakai-maven2-snapshots
[INFO] snapshot org.sakaiproject.edu-services:edu-services:1.3-SNAPSHOT:
checking for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'5459d38ba3c8ba76d09f5b58300fe21d0c9148cc'; remote =
'af041a7f3997a85334a348b323d4501992633d4f' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'5459d38ba3c8ba76d09f5b58300fe21d0c9148cc'; remote =
'af041a7f3997a85334a348b323d4501992633d4f' - IGNORING
[INFO] snapshot
org.sakaiproject.edu-services.sections:sections-api:1.3-SNAPSHOT:
checking for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.edu-services.sections:sections-api:1.3-SNAPSHOT:
checking for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'f0ab01f6362ca009dc92e14369670047ced8aa78'; remote =
'0f5bead22e78d2be5943e57996eaec603699d1bc' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'f0ab01f6362ca009dc92e14369670047ced8aa78'; remote =
'0f5bead22e78d2be5943e57996eaec603699d1bc' - IGNORING
[INFO] snapshot
org.sakaiproject.edu-services.sections:sections:1.3-SNAPSHOT: checking
for updates from sakai-maven2-snapshots
[INFO] snapshot
org.sakaiproject.edu-services.sections:sections:1.3-SNAPSHOT: checking
for updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'c56ca064262d7917622da96d4c3438fd56d0603c'; remote =
'50329276b80b4eea72f6b156bb435b854f1afb85' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'c56ca064262d7917622da96d4c3438fd56d0603c'; remote =
'50329276b80b4eea72f6b156bb435b854f1afb85' - IGNORING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'a8ddd43c8a8dabaea95ebf58d67650c524387752'; remote =
'9cd1cb698d65de9f7a2755992272f4f60810072a' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'a8ddd43c8a8dabaea95ebf58d67650c524387752'; remote =
'9cd1cb698d65de9f7a2755992272f4f60810072a' - IGNORING
[INFO] snapshot org.sakaiproject.jsf:jsf:2.10-SNAPSHOT: checking for
updates from sakai-maven2-snapshots
[INFO] snapshot org.sakaiproject.jsf:jsf:2.10-SNAPSHOT: checking for
updates from sonatype-nexus-snapshots
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'f254bc116842b6390c68c08876cadd6d2ba89962'; remote =
'f1abd25a5b2e21fe814a66211d1fc4294750ac1b' - RETRYING
[WARNING] *** CHECKSUM FAILED - Checksum failed on download: local =
'f254bc116842b6390c68c08876cadd6d2ba89962'; remote =
'f1abd25a5b2e21fe814a66211d1fc4294750ac1b' - IGNORING
On 03/14/2012 04:53 PM, Matthew Jones wrote:
> More inline!
>
> On Wed, Mar 14, 2012 at 10:27 AM, David Horwitz
> <david.horwitz at uct.ac.za <mailto:david.horwitz at uct.ac.za>> wrote:
>
> On 03/14/2012 04:14 PM, Matthew Jones wrote:
>> FYI: These checksum errors have been around since 2009
>>
>> https://jira.sakaiproject.org/browse/SAK-17441
>
>
> The errors I'm seeing are on current snapshots and weren't giving
> errors till recently
>
>
> Can you give me more examples of specific checksum errors? Matthew
> Buckett gave me a couple last week, but sonatype has already removed
> his examples so I can't verify anymore. It only generally seems to
> only keep the most recent snapshot and periodically cleans up old
> ones. I can try to wipe out all the snapshots there, redeploy and see
> if that helps.
>
>> Some of these were actual regressions with Maven deploying
>> artifacts, specifically 2.2.0 where files were uploaded twice and
>> they produced incorrect checksums on the server
>> http://jira.codehaus.org/browse/MNG-4235
>>
>> They had interesting workarounds for it that we never used. I
>> think it's possible that some of the new artifacts deployed to
>> sonatype were using this old version of maven. I know I had an
>> option checked under the deploy (which was the default) which
>> said "Assign unique versions to snapshots", but then in the
>> description it says "To the best of my knowledge, this is almost
>> never a useful option especially for CI servers like
>> Jenkins.". So I have been going through and trying to clean that
>> up as well, but it's lower priority to getting the next release
>> out. This might have also confused maven 2?
>>
> The unique version won't match as far as I know, certainly not in
> maven 2. It looks quite different to a standard maven version.
>
>
> I'm not sure then, it's hard to debug this as I haven't seen it. It
> would require someone to manually verify if the client or the server
> has the wrong checksum.
>
> All of the new snapshots (for trunk) are getting deployed via webdav
> to nexus at
> https://oss.sonatype.org/content/repositories/snapshots/org/sakaiproject/
> All of the old snapshots were getting deployed via scpexe to
> http://source.sakaiproject.org/maven2-snapshots/org/sakaiproject/
>
> Soon all of 2.9 and 2.10 will be on sonatype. The b03 kernel is the
> only *released* artifact. All of those checksums are viable here:
> https://search.maven.org/#browse%7C-1103303294
>
> I don't think that the server is *wrong* anymore because there is an
> option in nexus to verify and repair incorrect checksums. I can't tell
> what could be going on though. I agree that it should be able to
> figure out the correct version(s) though from
> the maven-metadata.xml files.
>
>> Noah added a checksum ignore to the master a few months ago.
>> It's*possible* that this 'ignore' policy is an option only
>> available in Maven 3, which is why it's working better in Maven
>> 3? I'm not sure otherwise unless the client has some regression?
>>
> Please can we not go the ingnore checksum route if at all
> possible? I makes maven proxing near impossible and builds for
> those of use behind proxies near impossible too (as a proxy error
> message can get saved. We will get lots of hard to verify errors
> about invalid artifacts. This is asside from making build times
> much longer.
>
> We should aim to be stricter about checksums not more lax.
>
>
> I agree, but this would require someone to either do some work into
> figuring out where/what the problem is and how we can fix it. And for
> the short term this is not going to be entirely me. ;) And it didn't
> (from the ticket) appear to be anyone else in the past or recently.
> For our released artifacts for sure it should be completely strict,
> and that checksum ignore shouldn't be in there. I'm not even sure why
> it's verifying/downloading snapshot artifacts during a full build
> anyway for the sakai tools.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20120314/b6913030/attachment.html
More information about the sakai-dev
mailing list