Concerning problems with updates from mirror.ctan

Henri Menke henri at henrimenke.de
Wed Apr 21 10:02:07 CEST 2021


Dear Norbert,

I can reproduce this pretty reliably. Please find the output of tlmgr -v
below.

Cheers, Henri


$ tlmgr update --self --all -v
D:appending to package log file: /opt/texlive/2021/texmf-var/web2c/tlmgr.log
D:appending to command log file: /opt/texlive/2021/texmf-var/web2c/tlmgr-commands.log
D:tlmgr:main: ::tldownload_server not defined
D:setup_programs: preferring system versions
D:program curl found in path
D:program wget found in path
D:program lz4 not usable from path
D:(unix) trying to set up lz4, default /opt/texlive/2021/tlpkg/installer/lz4/lz4.x86_64-linux, arg --version
D: Using shipped /opt/texlive/2021/tlpkg/installer/lz4/lz4.x86_64-linux for lz4 (tested).
D:program gzip found in path
D:program xz found in path
D:Using checksum method digest::sha
D:Testing for gpg in gpg
D: ... gpg ok! [gpg --version >/dev/null 2>&1]
D:setup_gpg: using additional keyring /opt/texlive/2021/tlpkg/gpg/repository-keys.gpg
D:gpg command line: gpg --homedir "/opt/texlive/2021/tlpkg/gpg" --keyring repository-keys.gpg --no-secmem-warning --no-permission-warning --lock-never 
D:will verify cryptographic signatures
D:TLPDB.pm: trying to initialize from https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb
D:trying to download https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.xz to /tmp/GUqgOeKKrj/o_MdPFbRGP
D:TLUtils::_download_file_program: curl https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.xz /tmp/GUqgOeKKrj/o_MdPFbRGP
D:downloading https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.xz using curl --user-agent texlive/curl --retry 4 --retry-delay 5 --fail --location --connect-timeout 30 --silent --output
D:download of https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.xz succeeded
D:TLUtils::download_file: downloading using curl succeeded
D:decompressing /tmp/GUqgOeKKrj/o_MdPFbRGP to /tmp/GUqgOeKKrj/BM2S6Cjt9H
D:TLUtils::system_pipe: calling "xz" -dcf < "/tmp/GUqgOeKKrj/o_MdPFbRGP" > "/tmp/GUqgOeKKrj/BM2S6Cjt9H"
D:TLUtils::system_pipe: removing /tmp/GUqgOeKKrj/o_MdPFbRGP
D:found the uncompressed xz file
D:TLUtils::_download_file_program: curl https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512 /tmp/GUqgOeKKrj/QA0ryXvLy_
D:downloading https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512 using curl --user-agent texlive/curl --retry 4 --retry-delay 5 --fail --location --connect-timeout 30 --silent --output
D:download of https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512 succeeded
D:TLUtils::download_file: downloading using curl succeeded
D:TLUtils::_download_file_program: curl https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc /tmp/GUqgOeKKrj/ZGwbJxdYQG
D:downloading https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc using curl --user-agent texlive/curl --retry 4 --retry-delay 5 --fail --location --connect-timeout 30 --silent --output
D:download of https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc succeeded
D:TLUtils::download_file: downloading using curl succeeded
D:STATUS OUTPUT
[GNUPG:] NEWSIG
[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
[GNUPG:] SIG_ID q99ilPt8HyXJgh9xx7WTHqHd1PU 2021-04-20 1618962782
[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
[GNUPG:] GOODSIG 4CE1877E19438C70 TeX Live Distribution <tex-live at tug.org>
[GNUPG:] VALIDSIG D8F2F86057A857E42A88106A4CE1877E19438C70 2021-04-20 1618962782 0 4 0 1 10 01 C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC
[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
[GNUPG:] TRUST_ULTIMATE 0 pgp
[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23D:verification succeeded, output:
gpg: Signature made Wed 21 Apr 2021 01:53:02 AM CEST
gpg:                using RSA key 4CE1877E19438C70
gpg: Good signature from "TeX Live Distribution <tex-live at tug.org>" [ultimate]

D:cryptographic signature of https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512 verified
D:verify_checksum: found remote digest
  4123b1e267c06f4ab6c063e805b7adc36a837b83b9a34c923532da253f306c57da58f7f15351d785b69a165232d14fc5542703144b298a14ef0961f35140322b
from
  /tmp/GUqgOeKKrj/QA0ryXvLy_
for
  /tmp/GUqgOeKKrj/BM2S6Cjt9H
and
  https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512
D:tlchecksum(/tmp/GUqgOeKKrj/BM2S6Cjt9H): ===cd5d0eaf243fdc121cadbe0d9c31cdf25b88a77d1c9147b14de794e1dbdb33b78d3636d1d7f87107c1b58519f69fe6a577cdafda1dc5f6309c8134c2d53520eb===
D:verify_checksum: local_digest = cd5d0eaf243fdc121cadbe0d9c31cdf25b88a77d1c9147b14de794e1dbdb33b78d3636d1d7f87107c1b58519f69fe6a577cdafda1dc5f6309c8134c2d53520eb

/opt/texlive/current/bin/x86_64-linux/tlmgr: checksum error when downloading /tmp/GUqgOeKKrj/BM2S6Cjt9H from https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb: digest disagree
$ tlmgr repository list
List of repositories (with tags if set):
	https://mirror.ctan.org/systems/texlive/tlnet (main)
	https://contrib.texlive.info/current (tlcontrib)

On 21/04/21, 16:05, Norbert Preining wrote:
> On Wed, 21 Apr 2021, Denis Bitouzé wrote:
> >   │ ╰─➤  tlmgr update --self --all
> >   │ tlmgr: package repository https://texlive.mycozy.space/systems/texlive/tlnet (verified)
> >   │ tlmgr: saving backups to /usr/local/texlive/2021/tlpkg/backups
> >   │ tlmgr: no self-updates for tlmgr available
> 
> This mirror seems not to be up to date, you should have gotten an update
> of texlive.infra (--self)
> 
> >   │ ╰─➤  tlmgr option repository https://mirror.ctan.org/systems/texlive/tlnet
> >   │ tlmgr: setting default package repository to https://mirror.ctan.org/systems/texlive/tlnet
> >   │ tlmgr: updating /usr/local/texlive/2021/tlpkg/texlive.tlpdb
> >   │ ╭─root at drums-bis /home/bitouze  
> >   │ ╰─➤  tlmgr update --self --all                                            
> >   │ 
> >   │ /usr/local/bin//tlmgr: signature verification error of /tmp/Y2oU7swhv9/fvUIXqwKAV from https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb: cryptographic signature verification of
> >   │   /tmp/Y2oU7swhv9/1kg2BhKnwY
> >   │ against
> >   │   https://mirror.ctan.org/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc
> >   │ failed. Output was:
> 
> This again is strange, because even with the old code this shouldn't
> happen.
> 
> If you can reproduce this, please send output with 
> 	-v
> added. Thanks.
> 
> Norbert
> 
> --
> PREINING Norbert                              https://www.preining.info
> Fujitsu Research  +  IFMGA Guide  +  TU Wien  +  TeX Live  + Debian Dev
> GPG: 0x860CDC13   fp: F7D8 A928 26E3 16A1 9FA0 ACF0 6CAC A448 860C DC13


More information about the tex-live mailing list.