[gentoo-mirrors] disk corruption in release/distfiles/experimental mirror system

[Robin H. Johnson]

Hi everybody,

We've potentially traced down some disk corruption to one of the
masterdistfiles.gentoo.org servers that we use to distribute distfiles/,
releases/ & experimental/ to mirrors. The Gentoo repo of ebuilds does
NOT go via these systems, and is unaffected.

It's NOT on the source box where we have the content, and we don't have
any direct access to these systems ourselves (despite the hostname).

We're waiting for all of the DIGESTS to be checked on that mirror now,
and then we'll potentially double-bump the timestamps to get mirrors to
update the files (first to a new current timestamp, followed by going
back to the original timestamp).

If you'd like to check your own mirrors, WITHOUT having to use rsync
--checksum, we're pushing out a helper script in the releases directory.
It'll be at releases/verify-digests.sh, or your can grab it from Git:
https://gitweb.gentoo.org/infra/mastermirror-scripts.git/tree/verify-digests.sh
It does run with ionice at idle priority, and can check everything or
just specific files as needed.

This was brought to our attention per bug 581924, bug 581638, amongst
others.

Known affected files to date are:
distfiles/chromium-50.0.2661.94.tar.xz
releases/amd64/autobuilds/20160428/install-amd64-minimal-20160428.iso
releases/amd64/autobuilds/20160602/install-amd64-minimal-20160602.iso
releases/x86/autobuilds/20160531/stage3-i686-20160531.tar.bz2

The first two have expired out of the system already due to being old,
but the other files are still present.

-- 
Robin Hugh Johnson
Gentoo Linux: Dev, Infra Lead, Foundation Trustee & Treasurer
E-Mail   : robbat2@g.o
GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136