[Vm-dev] missing dependency ftp://.../libpng-1.6.29.tar.gz
Fabio Niephaus
lists at fniephaus.com
Sun Dec 23 13:13:22 UTC 2018
On Sun, 23 Dec 2018 at 1:47 pm, Ben Coman <btc at openinworld.com> wrote:
>
>
>
> On Sat, 22 Dec 2018 at 21:09, Ben Coman <btc at openinworld.com> wrote:
>
>> It funny when the system seems to fight back.
>> Just as I think I resolve my freetype build issues,
>> my Windows build started failing as follows...
>> > wget -q --no-check-certificate -O
>> ../../.thirdparty-cache/libpng-1.6.29.tar.gz
>> ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng16/libpng-1.6.29.tar.gz
>> > make: *** [../third-party/Makefile.libpng:19:
>> ../../.thirdparty-cache/libpng-1.6.29.tar.gz] Error 8
>>
>> What I see at ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng16/
>> is...
>> Name Size Date Modified
>> libpng-1.6.34-LICENSE.txt 4.9 kB 29/09/2017, 08:00:00
>> libpng-1.6.34-README.txt 96 3B 29/09/2017, 08:00:00
>> libpng-1.6.34.tar.gz 1.4 MB 29/09/2017, 08:00:00
>> libpng-1.6.34.tar.gz.asc 819 B 29/09/2017, 08:00:00
>> libpng-1.6.34.tar.xz 975 kB 29/09/2017, 08:00:00
>> libpng-1.6.34.tar.xz.asc 819 B 29/09/2017, 08:00:00
>> lpng1634.7z 734 kB 29/09/2017, 08:00:00
>> lpng1634.7z.asc 819 B 29/09/2017, 08:00:00
>> lpng1634.zip 1.3 MB 29/09/2017, 08:00:00
>> lpng1634.zip.asc 819 B 29/09/2017, 08:00:00
>>
>> So did version 1.6.29 exist yesterday but not today?
>> or am I going crazy?
>>
>
> Not to reduce the significance of the point I raise, but just sharing that
> I discovered that I had built
> from an old branch, so the server for this missing tar.gz file had already
> been corrected 11 months ago.
>
I think the problem here is that we link against external files that are
not under our control. Although URLs are not suppose to change or become
unavailable, they break way too often. I think the best way for us going
forward would be to maintain a mirror for such dependencies.
Fabio
> cheers -ben
>
>
>> Anyway, should our builds avoid referencing external resources not under
>> our control? Or would it be be better to copy the required tar files to a
>> server our community controls, (either files.opensmalltalk.org or
>> file.pharo.org)?
>>
>> Plus btw our makefiles should verify sha1 checksums of these downloaded
>> files via a field in the third-party/*spec files.
>>
>> cheers -ben
>>
>>
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/vm-dev/attachments/20181223/f8eb44e7/attachment.html>
More information about the Vm-dev
mailing list