Package Details: megasync 5.10.1.0-1

Git Clone URL: https://aur.archlinux.org/megasync.git (read-only, click to copy)
Package Base: megasync
Description: Official MEGA desktop application for syncing with MEGA Cloud Drive
Upstream URL: https://github.com/meganz/MEGAsync/
Licenses: LicenseRef-Mega-Limited-Code-License
Submitter: son_link
Maintainer: dbermond
Last Packager: dbermond
Votes: 380
Popularity: 0.68
First Submitted: 2014-09-01 18:12 (UTC)
Last Updated: 2025-04-03 17:02 (UTC)

Sources (5)

Latest Comments

« First ‹ Previous 1 .. 41 42 43 44 45 46 47 48 49 50 51 .. 53 Next › Last »

MadCat_X commented on 2015-05-06 17:31 (UTC)

It's not just Arch, Fedora repository is broken (again) too. I have no idea what level of incompetence this takes but as far as I can tell they keep signing their packages with a wrong key. The funniest part is that sometimes they get it right, sometimes I have to skip the signature check to get the update. I reported this a while back and although they acknowledged the problem it doesn't look like they have done much about it. FWIW, if anybody wants the latest update, here's my PKGBUILD that uses the Fedora binaries instead of Debian ones. http://pastebin.com/t4f2C20U

a172 commented on 2015-05-05 21:59 (UTC)

Update on MEGA's Arch repos. It is severely busted. 1) The packages provided are actually empty. 2) The Arch_Extra folder does not have the public key available, although, it does seem to be present in other folders. 3) There is a version mismatch between the database and the actual files. There is a public key for the Debian 7/8 repos, but the signatures are not for the actual packages we are downloading. It is for the 'Release' text file which contains the checksums for the 'Packages' files, which contains the descriptions (including checksums) of the files in the repo. Since the public key is coming from the same source as the signatures, there PGP is only acting as a super complicated checksum. Of another checksum. Of the original checksum. All from the same source. So PGP is useless here. It does look like we can pull the checksum dynamically via shell script magic, though. This is a bit of an ugly example (the | grep | tail | cut could probably be done with a single sed/awk), but it does work (I only tested x86_64). http://sprunge.us/HBOV tl;dr The MEGA Arch repo is busted. Don't use any part of it. The files (and therefore the checksums) look like they change a lot, even without a version bump. We can do an ugly workaround by pulling the checksum dynamically from the debian repo provided. EDIT: Merged my wall of comments into 1 comment with only the relevant info. Also, I will keep on MEGA to try and fix their Arch repo, although I don't expect anything to change.

hkn3000 commented on 2015-05-04 20:15 (UTC)

I'm also getting a checksum error on 2.0.0-3 on x86_64. I couldn't build during today.

a172 commented on 2015-05-04 13:19 (UTC)

I'm still getting a checksum error on 2.0.0-3 on x86_64. $ md5sum megasync*.deb a96197054f4c4a9fbc74185704a34c94 megasync_2.0.0_amd64.deb <-- Downloaded from URL in 2.0.0-3 PKGBUILD a96197054f4c4a9fbc74185704a34c94 megasync-Debian_7.0_amd64.deb <-- Downloaded manually from website This is different from what @padman posted in the PKGBUILD. I suspect that mega is pushing minor updates to the client without bumping the version. I don't know of a good way to fix this. A work around would be to put 'SKIP' in the PKGBUILD checksum. Another alternative would be to use PGP signatures, but it doesn't look like MEGA provides any for the Debian files. There does, however, seem to be a custom Arch repo available from MEGA, which has signatures. Unfortunately, I've been unable to locate the public key they use, so there is no way to verify the signatures. Link to MEGA's Arch repos: https://mega.nz/linux/MEGAsync/Arch_Extra/x86_64/ https://mega.nz/linux/MEGAsync/Arch_Extra/i686/

sarri-on commented on 2015-05-02 13:17 (UTC)

megasync 2.0.0-2 has some problem with the checksums. Solution: 1) Download only the PKGBUILD file. yaourt -G megasync 2) Instalar ignoring integrity checksum cd /tmp/yaourt-tmp-username/megasync makepkg -i --skipinteg PKGBUILD

padman commented on 2015-04-29 18:53 (UTC)

The PKGBUILD needs to be updated. md5sum has change. here is the updated PKGBUILD => http://pastebin.com/wTCm6QfZ

« First ‹ Previous 1 .. 41 42 43 44 45 46 47 48 49 50 51 .. 53 Next › Last »