From owner-freebsd-ports@FreeBSD.ORG Wed Jul 28 21:48:06 2010 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6127F1065673 for ; Wed, 28 Jul 2010 21:48:06 +0000 (UTC) (envelope-from andrew.w.nosenko@gmail.com) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id CF06B8FC15 for ; Wed, 28 Jul 2010 21:48:05 +0000 (UTC) Received: by wwa36 with SMTP id 36so917361wwa.31 for ; Wed, 28 Jul 2010 14:48:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=eoB4pzTqlIzwLTlV+aAvH5Wp0W8B75a4tABtAvwd8gA=; b=wrUL9sieYApYwHmGKutd7I9e0QD+kY/txjIEiY+ixLDQuKOe2JPJkgXp98DzOH6VFl O4yUTRU+kRUP3q5TIazMESdzVvnzKt+FSjWOp9mKZTAiCKvYzpjGNvQeEL53Z3tVQLfB f1A/t3QCGVl0jISSjezp8Lwi9+BbtXr6DtAEs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=Ma8oD1siF5fQCOyYx2D+4yFDMzj/HI0fMxWOygkmQwdm5ATlQDyFxeyMYCfWXFkUXd 51vXbw+SjS5Q7u8LmgQBjF5e+wjzHOXqJEGWoTtMncQeP3fuy79xcCT4CRVZwXuHhG/t I6u12SeCLYzpErEcJH6gSy0VqvuexBQnCyGbc= MIME-Version: 1.0 Received: by 10.216.188.81 with SMTP id z59mr6483002wem.106.1280352253049; Wed, 28 Jul 2010 14:24:13 -0700 (PDT) Received: by 10.216.67.66 with HTTP; Wed, 28 Jul 2010 14:24:12 -0700 (PDT) In-Reply-To: <4C504F25.8050607@bsdforen.de> References: <4c4fac09.Kkzz6V/G5TxaiQAZ%perryh@pluto.rain.com> <4C504F25.8050607@bsdforen.de> Date: Thu, 29 Jul 2010 00:24:12 +0300 Message-ID: From: "Andrew W. Nosenko" To: Dominic Fandrey Content-Type: text/plain; charset=ISO-8859-1 Cc: Marcin Wisnicki , freebsd-ports@freebsd.org Subject: Re: Strange contents on some ftp mirrors X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Jul 2010 21:48:06 -0000 On Wed, Jul 28, 2010 at 18:39, Dominic Fandrey wrote: > On 28/07/2010 15:15, Marcin Wisnicki wrote: >> On Tue, 27 Jul 2010 21:03:21 -0700, perryh wrote: >> >>> Marcin Wisnicki wrote: >>>> At this very moment, french package mirror has INDEX newer than in >>>> other mirrors: >>>> >>> ... >>>> >>>> yet it does not have those packages. >>>> >>>> How could something like this happen ? >>> >>> By being examined while a resync was in process: evidently the new INDEX >>> file had been transferred but that package file (and likely others) were >>> still in transit or perhaps not even started yet. Mirroring is not an >>> instantaneous process. >> >> Yeah that was it, but it is really, really bad. >> Mirroring must be atomic (mirror to temporary directory then rename). >> Otherwise there is a large window of time every couple of days when upgrading >> packages will at best fail or leave you with broken system. >> I did binary upgrade with pkg_upgrade yesterday and half of my system was linked >> against wrong libintl version :( > > The next version of pkg_upgrade will check every downloaded package > against the master server after completing the download. Excuse me? The ports check downloaded source tarball against SHA checksum. Just for nay case like downloading error or malicious inject. Did you try to say that binary package have no such safeguard? > I expect to release it at the end of September. -- Andrew W. Nosenko