Hash mismatch during install
- Dominant language
- Python
- Stars
- 25
- Forks
- 19
- PR merge metrics
- No merged PRs in 30d
Description
**Describe the bug**
During install on Raspberry Pi an error occurs:
```
Collecting ordered-set==4.1.0
Downloading https://www.piwheels.org/simple/ordered-set/ordered_set-4.1.0-py3-none-any.whl (7.6 kB)
Collecting packaging==21.3
Downloading https://www.piwheels.org/simple/packaging/packaging-21.3-py3-none-any.whl (40 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 40.8/40.8 kB 246.0 kB/s eta 0:00:00
ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, please update the hashes. Otherwise, examine the package contents carefully; someone may have tampered with them.
packaging==21.3 from https://www.piwheels.org/simple/packaging/packaging-21.3-py3-none-any.whl#sha256=36bb3108f8e33f88e52e7985b4068e2585b67e5b7b3a0fa2817f9852bc39d2ef (from -r requirements.txt (line 498)):
Expected sha256 dd47c42927d89ab911e606518907cc2d3a1f38bbd026385970643f9c5b8ecfeb
Expected or ef103e05f519cdc783ae24ea4e2e0f508a9c99b2d4969652eed6a2e1ea5bd522
Got 36bb3108f8e33f88e52e7985b4068e2585b67e5b7b3a0fa2817f9852bc39d2ef
```
**To Reproduce**
`git clone https://github.com/fusion44/blitz_api.git`
`cd blitz_api`
`make install`
**Expected behavior**
Installation succeeds.
**Desktop (please complete the following information):**
- OS: Debian GNU/Linux 11 (bullseye)
- LN implementation: -
- Platform: Raspberry Pi 4 Model B Rev 1.4
**Additional context**
Reference issue: #161
The same error occurs when trying to build RaspiBlitz v1.8 SD card image (rootzoll/raspiblitz#3536).
When calling
`make install-dev`
no errors occur.
Checking hash manually:
`wget https://www.piwheels.org/simple/packaging/packaging-21.3-py3-none-any.whl `
`pip hash packaging-21.3-py3-none-any.whl`
results in:
```
packaging-21.3-py3-none-any.whl:
--hash=sha256:36bb3108f8e33f88e52e7985b4068e2585b67e5b7b3a0fa2817f9852bc39d2ef
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with requirements.txt line 498 and the Makefile install and install-dev targets. Compare the recorded packaging==21.3 hashes with the hash reported by piwheels, then run make install on the documented Raspberry Pi environment. Done means installation succeeds without a requirements-hash error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- build-system
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100