[Vm-dev] missing dependency ftp://.../libpng-1.6.29.tar.gz

Fabio Niephaus lists at fniephaus.com
Sun Dec 23 13:13:22 UTC 2018


On Sun, 23 Dec 2018 at 1:47 pm, Ben Coman <btc at openinworld.com> wrote:

>
>
>
> On Sat, 22 Dec 2018 at 21:09, Ben Coman <btc at openinworld.com> wrote:
>
>> It funny when the system seems to fight back.
>> Just as I think I resolve my freetype build issues,
>> my Windows build started failing as follows...
>> > wget -q --no-check-certificate  -O
>> ../../.thirdparty-cache/libpng-1.6.29.tar.gz
>> ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng16/libpng-1.6.29.tar.gz
>> > make: *** [../third-party/Makefile.libpng:19:
>> ../../.thirdparty-cache/libpng-1.6.29.tar.gz] Error 8
>>
>> What I see at ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng16/
>> is...
>> Name                           Size   Date Modified
>> libpng-1.6.34-LICENSE.txt    4.9 kB   29/09/2017, 08:00:00
>> libpng-1.6.34-README.txt      96 3B   29/09/2017, 08:00:00
>> libpng-1.6.34.tar.gz         1.4 MB   29/09/2017, 08:00:00
>> libpng-1.6.34.tar.gz.asc      819 B   29/09/2017, 08:00:00
>> libpng-1.6.34.tar.xz         975 kB   29/09/2017, 08:00:00
>> libpng-1.6.34.tar.xz.asc      819 B   29/09/2017, 08:00:00
>> lpng1634.7z                  734 kB   29/09/2017, 08:00:00
>> lpng1634.7z.asc               819 B   29/09/2017, 08:00:00
>> lpng1634.zip                 1.3 MB   29/09/2017, 08:00:00
>> lpng1634.zip.asc              819 B   29/09/2017, 08:00:00
>>
>> So did version 1.6.29 exist yesterday but not today?
>> or am I going crazy?
>>
>
> Not to reduce the significance of the point I raise, but just sharing that
> I discovered that I had built
> from an old branch, so the server for this missing tar.gz file had already
> been corrected 11 months ago.
>

I think the problem here is that we link against external files that are
not under our control. Although URLs are not suppose to change or become
unavailable, they break way too often. I think the best way for us going
forward would be to maintain a mirror for such dependencies.

Fabio


> cheers -ben
>
>
>> Anyway, should our builds avoid referencing external resources not under
>> our control?  Or would it be be better to copy the required tar files to a
>> server our community controls, (either files.opensmalltalk.org or
>> file.pharo.org)?
>>
>> Plus btw our makefiles should verify sha1 checksums of these downloaded
>> files via a field in the third-party/*spec files.
>>
>> cheers -ben
>>
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/vm-dev/attachments/20181223/f8eb44e7/attachment.html>


More information about the Vm-dev mailing list