Nixpkgs: google-chrome-stable has an invalid sha256 hash

[nkaretnikov]

Issue description

While running nixos-rebuild switch --upgrade:

[...]
curl: (22) The requested URL returned error: 404 Not Found

trying http://mirror.pcbeta.com/google/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_49.0.2623.87-1_amd64.deb
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404 Not Found

trying http://repo.fdzh.org/chrome/deb/pool/main/g/google-chrome-stable/google-chrome-stable_49.0.2623.87-1_amd64.deb
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   185  100   185    0     0    261      0 --:--:-- --:--:-- --:--:--   262
100   161  100   161    0     0     76      0  0:00:02  0:00:02 --:--:--   133
100 5880k  100 5880k    0     0   887k      0  0:00:06  0:00:06 --:--:-- 1570k
output path ‘/nix/store/w21wkbwp951xjfs4bhc8lx0kszhrq6ks-google-chrome-stable_49.0.2623.87-1_amd64.deb’ should have sha256 hash ‘1k6nhccdqzzzicwi07nldqfsdlic65i2xfyb7dbasbbg9zl3s9yw’, instead has ‘1hhrxx0qgmircanmnpwsqpwl7y04qz98nj7h3bsk1ib5jrwx9w1m’
building path(s) ‘/nix/store/04kp3dg9qh38im6q8ygdkygsp02q42j8-chfn.pam’

Is this a malicious or broken mirror? Should it be removed?

[puffnfresh]

Just got the same thing and I think with the same mirror.

[joachifm]

Something is amiss, the download is way smaller than it ought to be. Upstream .deb is ~50MB

The archive served by the mirror appears to be corrupted:

dpkg-deb (subprocess): cannot copy archive member from 'google-chrome-stable_49.0.2623.87-1_amd64.deb' to decompressor pipe: unexpected end of file or stream
dpkg-deb (subprocess): decompressing archive member: lzma error: unexpected end of input
tar: Unexpected EOF in archive
tar: Error is not recoverable: exiting now
dpkg-deb: error: subprocess tar returned error exit status 2

[colemickens]

That mirror is regularly excruciatingly slow for me. I used to have it patched out.

[vcunat]

/cc maintainer @msteen.

[msteen]

The source of Google Chrome is defined by the Chromium package, which was already using it to extract its plugins from. So as far as I know, the source of this issues lies with the deb mirrors as defined in update.nix of the Chromium package.

[vcunat]

So, /cc @aszlig as well, I guess.

[msteen]

It is unfortunate that Google does not keep the two previous versions around, but instead drops the previous version as soon as a new version arises. I tried to find other mirrors, but so far I have only found one that does not keep the same directory structure as the rest:
http://www.ubuntuupdates.org/pm/google-chrome-stable

[yamafaktory]

Hi, I am facing the same issue. Is there any workaround?

[vcunat]

This should be long resolved / outdated.