Pip finds hash mismatch for package during installation
Bug #1708707 reported by
Clark Boylan
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack-Gate |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
Occasionally when doing a pip install it will error because the has reported by pypi does not match the hash as calculated locally after download. This bug is for tracking purposes so that we can follow these problems more easily and hopefully eventually track them down.
To post a comment you must log in.
Here's an example [1]
--- mirror. ord.rax. openstack. org/pypi/ packages/ d0/60/35ed2bb39 2a7845ba316a66e a1f6cc2f3acaf95 e7905deca17d464 30452b/ protobuf- 3.3.0-cp27- cp27mu- manylinux1_ x86_64. whl#md5= fa09b90d290bb63 aa075e4a5a79650 01 (from -c /opt/stack/ new/requirement s/upper- constraints. txt (line 330)): aa075e4a5a79650 01 2ad0cd793447be7 80
2017-08-09 03:31:00.821 | protobuf===3.3.0 from http://
2017-08-09 03:31:00.821 | Expected md5 fa09b90d290bb63
2017-08-09 03:31:00.821 | Got c7a6afd624e1c30
---
The download happened before that
--- new/requirement s/upper- constraints. txt (line 330)) mirror. ord.rax. openstack. org/pypi/ packages/ d0/60/35ed2bb39 2a7845ba316a66e a1f6cc2f3acaf95 e7905deca17d464 30452b/ protobuf- 3.3.0-cp27- cp27mu- manylinux1_ x86_64. whl (5.7MB)
2017-08-09 03:30:58.365 | Collecting protobuf===3.3.0 (from -c /opt/stack/
2017-08-09 03:30:58.524 | Downloading http://
---
going to the mirror logs, we have the following (removed everything after the pip UA string, which is very long). this test is 2001:4801: 7828:104: be76:4eff: fe10:22e3
--- 7828:104: be76:4eff: fe10:284c - - [09/Aug/ 2017:03: 30:58 +0000] "GET /pypi/simple/ protobuf/ HTTP/1.1" 200 5872 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:03: 30:58 +0000] "GET /pypi/simple/ protobuf/ HTTP/1.1" 200 5872 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:284c - - [09/Aug/ 2017:03: 30:58 +0000] "GET /wheel/ ubuntu- 16.04-x86_ 64/protobuf/ HTTP/1.1" 200 763 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:03: 30:58 +0000] "GET /wheel/ ubuntu- 16.04-x86_ 64/protobuf/ HTTP/1.1" 200 763 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:284c - - [09/Aug/ 2017:03: 30:58 +0000] "GET /pypi/packages/ d0/60/35ed2bb39 2a7845ba316a66e a1f6cc2f3acaf95 e7905deca17d464 30452b/ protobuf- 3.3.0-cp27- cp27mu- manylinux1_ x86_64. whl HTTP/1.1" 200 5724653 "-" "pip/9.0.1 ...
2001:4801:
2001:4801:
2001:4801:
2001:4801:
2001:4801:
---
Werid ... two addresses at the same time, only one seems to actually download. here's the entire logs for that IP available
--- /var/log/ apache2# cat mirror. ord.rax. openstack. org_access. log.1 | grep 'fe10:22e3' | grep protobuf 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:03: 30:58 +0000] "GET /pypi/simple/ protobuf/ HTTP/1.1" 200 5872 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:03: 30:58 +0000] "GET /wheel/ ubuntu- 16.04-x86_ 64/protobuf/ HTTP/1.1" 200 763 "-" "pip/9.0.1 ... 7828:101: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:04: 11:34 +0000] "GET /pypi/simple/ protobuf/ HTTP/1.1" 200 5872 "-" "pip/9.0.1 ... 7828:101: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:04: 11:35 +0000] "GET /wheel/ ubuntu- 16.04-x86_ 64/protobuf/ HTTP/1.1" 200 763 "-" "pip/9.0.1 ... 7828:101: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:04: 11:36 +0000] "GET /pypi/packages/ d0/60/35ed2bb39 2a7845ba316a66e a1f6cc2f3acaf95 e7905deca17d464 30452b/ protobuf- 3.3.0-cp27- cp27mu- manylinux1_ x86_64. whl HTTP/1.1" 200 5724653 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:06: 28:44 +0000] "GET /pypi/simple/ protobuf/ HTTP/1.1" 200 5872 "-" "pip/9.0.1 ... 7828:104: be76:4eff: fe10:22e3 - - [09/Aug/ 2017:06: 28:44 +0000] "GE...
root@mirror:
2001:4801:
2001:4801:
2001:4801:
2001:4801:
2001:4801:
2001:4801:
2001:4801: