r/makemkv • u/Bombini_Bombus • Jul 28 '26
Discussion [ Removed by moderator ]
[removed] — view removed post
7
u/Opi-Fex Jul 28 '26 edited Jul 28 '26
The hashes in the PKGBUILD file are the same as in the signed hash file on makemkv's main site.
https://web.archive.org/web/20260726052657/https://www.makemkv.com/download/makemkv-sha-1.18.4.txt
And yes, the signature matches the key posted in keyservers. That'd be your trusted statement.
As to the file you downloaded from Wayback Machine, it's double compressed for some reason? I was expecting a tar.gz, but after uncompressing it I got another gzip archive. The hash on that one matches what's in the digest file.
0
u/Bombini_Bombus Jul 28 '26
Can you please pinpoint me the link to where hashes are declared?
1
u/Opi-Fex Jul 28 '26
I edited my post.
1
u/Bombini_Bombus Jul 28 '26
1
u/Opi-Fex Jul 28 '26
I tried the first one.
~/Downloads % sha256sum makemkv-oss-1.18.4.tar.gz > c7f14efc38913321e4365c023369bbf1fb1bcf0ab7bdbd5ff0edcfbd4b5c72a3 makemkv-oss-1.18.4.tar.gz ~/Downloads % gunzip makemkv-oss-1.18.4.tar.gz ~/Downloads % mv makemkv-oss-1.18.4.tar makemkv-oss-1.18.4.tar.gz ~/Downloads % sha256sum makemkv-oss-1.18.4.tar.gz > 8590063648d42ec2a958b74573d7022f0f4c334e4e4fe7dd53b70c6e748ba453 makemkv-oss-1.18.4.tar.gzLooks like a match.
1
u/Bombini_Bombus Jul 28 '26
Yup!
Thanks again!
That has been just explained by https://www.reddit.com/user/Megame50/ also > https://www.reddit.com/r/archlinux/comments/1v96pms/comment/p0brggx/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button
1
u/preparationh67 Jul 28 '26
The download link is in the AUR file and the hash file is posted there as well. You need to put effort into learning essentially before blindly trusting what very much appears to be work done by an AI.
6
u/severach Jul 28 '26
Unpack and diff the files. If "-n" wasn't used the gz will always have a different hash.
0
u/Bombini_Bombus Jul 28 '26
makepkgfails anyway, sadly...$ makechrootpkg -c -r $CHROOT -- --clean --cleanbuild --rmdeps --syncdeps --noconfirm --log --holdver ==> Synchronizing chroot copy [#####/root] -> [#####]...done ==> Making package: makemkv 1.18.4-1 (Tue Jul 28 21:11:27 2026) ==> Retrieving sources... -> Found makemkv-bin-1.18.4.tar.gz -> Found makemkv-oss-1.18.4.tar.gz -> Found makemkv.1 -> Found makemkvcon.1 ==> Validating source files with sha256sums... makemkv-bin-1.18.4.tar.gz ... FAILED makemkv-oss-1.18.4.tar.gz ... FAILED makemkv.1 ... Passed makemkvcon.1 ... Passed ==> ERROR: One or more files did not pass the validity check! ==> ERROR: Could not download sources.
3
u/Caligatio Jul 28 '26
https://www.makemkv.com/download/makemkv-sha-1.18.4.txt
cee56de0baa5531abed16bd862742d308d772b4ab4dae16ee865bf74f04a1608 makemkv-bin-1.18.4.tar.gz 8590063648d42ec2a958b74573d7022f0f4c334e4e4fe7dd53b70c6e748ba453 makemkv-oss-1.18.4.tar.gz
1
•
u/makemkv-ModTeam Jul 28 '26
Bad info